Windows Start menu Creator Tool

Creating start menus for Windows could be a complex task as it requires us to export and customize an XML-file to get it right. It get’s even more complex if we want to customize the taskbar as well.

This is where the Windows Start menu Creator Tool comes to play. The tool will help us export the XML from a reference device and will ease the customization process by a lot… it will even connect to Intune, upload the XML and create the policy for you, how awesome is that?! 😍

As shown in the before customization image just a few apps were added to the start menu and the recommendations section is taking a lot of space.

After using the tool to create a start menu and a taskbar we get a more user friendly experience and our apps are never far away.

Note! The recommendations section is removed by using a separate policy.

Prerequisites

We have some prerequisites to take care of.

  • The PowerShell module: MSAL.PS must be installed on the system running the tool.
  • Update 2023-08-17: As for now the tool requires you to register an app in Azure and add following permissions: DeviceManagementConfiguration.ReadWrite.All
  1. You will need either Global Administrator or Application Administrator to register the app in Azure
  2. Navigate to: https://portal.azure.com
  3. ClickAzure Active Directory
  4. ClickApp registrations
  5. ClickNew registration
  6. Name: I will use ‘Demo-Graph‘, but you may name the app differently (What about “Rock Enroll App”?)
  7. Supported account typesAccounts in this organizational directory only
  8. Redirect URI (Select a platform)Public client/native (mobile and desktop)
  9. Redirect URI (URL)https://login.microsoftonline.com/common/oauth2/nativeclient
  10. ClickRegister
  11. Save the Application (client) ID in notepad, we will need it later
  12. ClickAPI Permissions
  13. ClickMicrosoft Graph
  14. ClickDelegated permissions
  15. Search for and mark:
    • DeviceManagementConfiguration.ReadWrite.All
  16. ClickAdd permissions
  17. ClickGrant admin consent for
  18. ClickYes
  19. Make sure that the permissions have been granted accordingly. Note❗Below is just an illustration and all of these permissions are not needed at this point, see step 15 for the required permission.
  20. Now navigate to https://portal.azure.com/
  21. ClickAzure Active Directory
  22. Save the Tenant ID in notepad, we will need it later.
  • Lastly: Edit Config.txt with your tenant and client ID.

Support

No support for Windows 11 as for now. I will work on that!
Edit: Good news! support for Windows 11 has been added.

Windows 10OK
Windows 11OK

Download

Download the zip-file from my Github NicklasAhlberg/Windows-Startmenu-Creator-Tool (github.com) (look for the latest release to the right).

Prepare the reference machine

Let’s go ahead and manually configure a start menu on a reference machine. We will then run the tool to have the configuration exported as an XML-file, and upload it to Intune.

  1. Set up the wanted startmenu on a reference image (add the wanted apps to the startmenu manually).
  2. You do not need to configure the taskbar as the tool will take care of that.
  3. See gif (tool in action) for further instructions.

Run the tool

Note: You might need to exclude the tool from Attack Surface Reducation (ASR). The source code is available on my GitHub.

  1. Make sure all pre-reqs are fulfilled.
  2. Run the tool on the reference device.
  3. Click Connect to connect to your tenant.
  4. Add a Displayname (name of the policy).
  5. Add a Description (will be shown at the policy).
  6. Click: From reference machine checkbox.
  7. Optional: Add taskbar items. Check the Use Modern Apps checkbox to query the system for all installed modern apps.
  8. Optional: Click: Add taskbar item to add the selected app to the taskbar.
  9. Optional: Use the textbox to add the desktopApplication path if you want to add a desktopApplication to the taskbar.
  10. Optional: Check the custom taskbar combobox to check the items you have added.
  11. Click Create config profile.
  12. The policy has now been created in Intune.
  13. Navigate to Intune and assign the policy to a couple of test devices.
  14. For info: The XML-file is saved to C:\ for future reference. Open it in Notepad or in an XML-editor if you want to have a look.

    The Import XML button is used to import and upload an already existing XML to Intune.

Update: Added Windows 11 support

7 thoughts on “Windows Start menu Creator Tool

  1. How do you run the tool? I’ve downloaded the zip file, but I can’t do anything with the .psf file..

  2. Sorry this might be a dumb question. how do we run this tool? .psf? step 2. Run the tool on the reference device.

  3. how do you capture the taskbar with this tool. i have used it to do the start menu. but would love to be able to capture and deploy a config taskbar

    1. Hi,

      The taskbar is supported for both W10 and W11, which OS-version do you have challenges with?

      //Nicklas

Leave a Reply to Roy Cancel reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.