add ie and edge configs

Author: PowerShellCrack

AppOptimizeAndConfig.ps1

@@ -950,6 +950,8 @@ Write-Host "logging to file: $LogFilePath" -ForegroundColor Cyan
 [boolean]$EnableLyncStartup = $false
 [boolean]$RemoveAppxPackages = $false
 [boolean]$RemoveFODPackages = $false
+[boolean]$ForceIEHomepage = $false
+[boolean]$ForceEdgeHomepage = $false
 
 # When running in Tasksequence and configureation exists, use that instead
 If(Get-SMSTSENV){
@@ -965,6 +967,9 @@ If(Get-SMSTSENV){
     If($tsenv:CFG_EnableLyncStartup){[boolean]$EnableLyncStartup = [boolean]::Parse($tsenv.Value("CFG_EnableLyncStartup"))}
     If($tsenv:CFG_RemoveAppxPackages){[boolean]$RemoveAppxPackages = [boolean]::Parse($tsenv.Value("CFG_RemoveAppxPackages"))}
     If($tsenv:CFG_RemoveFODPackages){[boolean]$RemoveFODPackages = [boolean]::Parse($tsenv.Value("CFG_RemoveFODPackages"))}
+    If($tsenv:CFG_ForceIEHomepage){[boolean]$ForceIEHomepage = [boolean]::Parse($tsenv.Value("CFG_ForceIEHomepage"))}
+    If($tsenv:CFG_ForceEdgeHomepage){[boolean]$ForceEdgeHomepage = [boolean]::Parse($tsenv.Value("CFG_ForceEdgeHomepage"))}
+    If($tsenv:Homepage){$Homepage = $tsenv.Value("Homepage")}
 }
 
 # Ultimately disable the entire script. This is useful for testing and using one task sequences with many rules
@@ -1008,6 +1013,28 @@ If($EnableIESoftwareRender){
 Else{$stepCounter++}
 
 
+If($ForceIEHomepage -and $Homepage){
+    Set-UserSetting -Message "Setting Homepage For IE" -Path 'SOFTWARE\Microsoft\Internet Explorer\Main' -Name 'Start Page' -Type String -Value $Homepage -Force
+    Set-UserSetting -Message "Setting Default Page For IE" -Path 'SOFTWARE\Microsoft\Internet Explorer\Main' -Name 'Default_Page_URL' -Type String -Value $Homepage -Force
+    Set-UserSetting -Message "Enabling Continuous Browsing For IE" -Path 'SOFTWARE\Microsoft\Internet Explorer\ContinuousBrowsing' -Name 'Enabled' -Type DWord -Value 1 -Force
+    Set-UserSetting -Message "Disabling Default browser prompt For IE" -Path 'SOFTWARE\Microsoft\Internet Explorer\Main' -Name 'Check_Associations' -Type String -Value 'No' -Force
+    Set-UserSetting -Message "Enable new tab homepage For IE" -Path 'Software\Microsoft\Internet Explorer\TabbedBrowsing' -Name 'NewTabbedPageShow' -Type DWord -Value 1 -Force
+}
+Else{$stepCounter++}
+
+
+If($ForceEdgeHomepage -and $Homepage){
+    Set-UserSetting -Message "Setting Homepage For Edge" -Path 'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main' -Name 'HomeButtonPage' -Type String -Value $Homepage -Force
+    Set-UserSetting -Message "Enabling Home button For Edge" -Path 'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main' -Name 'HomeButtonEnabled' -Type DWord -Value 1 -Force
+    Set-UserSetting -Message "Disabling startpage lockdown For Edge" -Path 'SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings' -Name 'DisableLockdownOfStartPages' -Type DWord -Value 1 -Force -TryLGPO:$true
+    Set-UserSetting -Message "Enabling provisioned homepages For Edge" -Path 'SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings' -Name 'ProvisionedHomePages' -Type String -Value $Homepage -Force -TryLGPO:$true
+    Set-UserSetting -Message "Disabling First run For Edge" -Path 'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FirstRun' -Name 'LastFirstRunVersionDelivered' -Type DWord -Value 1 -Force
+    Set-UserSetting -Message "Disabling IE10 Tour Show For Edge" -Path 'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main' -Name 'IE10TourShown' -Type DWord -Value 1 -Force
+    Set-UserSetting -Message "Disabling Default browser prompt For Edge" -Path 'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main' -Name 'DisallowDefaultBrowserPrompt' -Type DWord -Value 1 -Force
+}
+Else{$stepCounter++}
+
+
 If ($DisableOfficeAnimation -and $OfficeInstalled){
     Set-UserSetting -Message "Disabling OST Cache mode for $OfficeTitle" -Path "SOFTWARE\Policies\Microsoft\Office\$OfficeVersion\Outlook\ost" -Name 'NoOST' -Type DWord -Value 2 -Force
     Set-UserSetting -Message "Disabling Exchange cache mode for $OfficeTitle" -Path "SOFTWARE\Policies\Microsoft\Office\$OfficeVersion\Outlook\cache mode" -Name 'Enable' -Type DWord -Value 0 -Force

CustomSettings.example.ini

@@ -5,8 +5,6 @@
 Priority=MacAddress,DefaultGateway,Make,Model,Default
 Properties=SavedJoinDomain,CaptureSection,Prefix,BgColor,TPMEnabled,TPMActivated,TPMOwned,CCTKPath,CCTKInstallerVersion,BIOSSettingsFile,NewBIOSPassword,BIOSPasswords(*),AssetTag,ForceUEFI,OSBootDiskOverrideWQL,EZTVURL,DVConfigFile,CFG_DisableConfigScript,CFG_UseLGPOForConfigs,LGPOPath,CFG_OptimizeForVDI,CFG_EnableVisualPerformance,CFG_InstallLogonScript,CFG_LogonScriptPath,CFG_EnableDarkTheme,CFG_EnableTaskbarAutoColor,CFG_DisableFontSmoothing,CFG_DisableCortana,CFG_DisableInternetSearch,CFG_EnableOfficeOneNote,CFG_DisableOneDrive,CFG_DisableWindowsFirstLoginAnimation,CFG_DisableIEFirstRunWizard,CFG_DisableWMPFirstRunWizard,CFG_ShowKnownExtensions,CFG_ShowHiddenFiles,CFG_ShowThisPCOnDesktop,CFG_ShowUserFolderOnDesktop,CFG_RemoveRecycleBinOnDesktop,CFG_Hide3DObjectsFromExplorer,CFG_DisableEdgeShortcut,CFG_DisableStoreOnTaskbar,CFG_DisableActivityHistory,CFG_SetSmartScreenFilter,CFG_EnableNumlockStartup,CFG_DisableAppSuggestions,CFG_InstallPSModules,CFG_SetPowerCFG,CFG_PowerCFGFilePath,CFG_EnableIEEnterpriseMode,CFG_IEEMSiteListPath,CFG_ApplyCustomHost,HostPath,CFG_EnableSecureLogonCAD,CFG_DisableAllNotifications,CFG_EnableVerboseMsg,CFG_DisableAutoRun,CFG_PreferIPv4OverIPv6,CFG_EnableAppsRunAsAdmin,CFG_HideDrives,CFG_DisableActionCenter,CFG_DisableFeedback,CFG_DisableWUP2P,CFG_DisablePreviewBuild,CFG_DisableDriverUpdates,CFG_DisableWindowsUpgrades,CFG_ApplyPrivacyMitigations,CFG_RemoveRebootOnLockScreen,CFG_RemoveUnusedPrinters,CFG_DisableSmartCardLogon,CFG_ForceStrictSmartCardLogon,CFG_EnableFIPS,CFG_EnableCredGuard,CFG_DisableUAC,CFG_EnableStrictUAC,CFG_EnableRDP,CFG_EnableWinRM,CFG_EnableRemoteRegistry,CFG_EnableUEV,CFG_EnableAppV,CFG_DisableIPv6,CFG_EnablePSLogging,CFG_EnableLinuxSubSystem,CFG_DisableAdminShares,CFG_DisableSchTasks,CFG_DisableDefender,CFG_DisableFirewall,CFG_DisableWireless,CFG_DisableBluetooth,CFG_DisableNewNetworkDialog,CFG_DisableInternetServices,CFG_DisabledUnusedServices,CFG_DisabledUnusedFeatures,CFG_DisableIndexing,CFG_RemoveActiveSetupComponents,CFG_PreCompileAssemblies,CFG_OptimizeNetwork,CFG_DisableAppScript,CFG_DisableOfficeAnimation,CFG_EnableIESoftwareRender,CFG_EnableLyncStartup,CFG_RemoveAppxPackages,CFG_RemoveFODPackages,CFG_ForceEdgeHomepage,CFG_ForceIEHomepage,CFG_ApplySTIGItems,CFG_ApplyEMETMitigations
 
-
-
 '// GATWAY DETECTION
 [DefaultGateway]
 192.168.1.254=WKS
@@ -39,14 +37,6 @@ SkipApplications=YES
 '// Configuration Settings (Used by Win10OptimizeAndConfig.ps1)
 CFG_VDIOptimizations=True
 
-'// Configuration Settings (used with AppOptimizeAndConfig.ps1)
-CFG_DisableAppScript=False
-CFG_DisableOfficeAnimation=True
-CFG_EnableIESoftwareRender=True
-CFG_EnableLyncStartup=True
-CFG_RemoveAppxPackages=False
-CFG_RemoveFODPackages=False
-
 
 '// DOMAIN SETTINGS
 [WKS]
@@ -197,17 +187,25 @@ FinishAction=REBOOT
 WSUSServer=http://WSUS.mydomain:8530
 EventService=http://MDT.mydomain:9800
 
+HomePage=http://www.sublynx.com
+
 '// Configuration Settings (used with Win10OptimizeAndConfig.ps1)
-'// Overall Settings
-CFG_DisableConfigScript=False
+'// Common Settings
 CFG_UseLGPOForConfigs=True
 CFG_PowerCFGFilePath=%DeployRoot%\Scripts\Custom\OS-Configs\Files\AlwaysOnPowerScheme.pow
-CFG_IEEMSiteListPath=\\%JoinDomain%\NETLOGON\IE_EM_List\SiteList.xml
 CFG_ApplyCustomHost=False
 HostPath=%DeployRoot%\Scripts\Custom\OS-Configs\Files\WindowsTelemetryhosts
 
-'// VDI Performance
+' // LGPO SETTINGS ( used with ZTILGPOSettings.wsf AND Win10OptimizeAndConfig.ps1)
+'// Path to LGPO.exe
+LGPOPath=%DeployRoot%\Scripts\Custom\OS-Configs\Tools\LGPO\
+
+'// Overall Configuation Script Control
 CFG_OptimizeForVDI=False
+CFG_DisableSTIGScript=True
+CFG_DisableAppScript=False
+
+'// VDI Performance
 CFG_EnableVisualPerformance=False
 CFG_SetPowerCFG=Custom
 
@@ -262,16 +260,16 @@ CFG_RemoveUnusedPrinters=False
 '//System Adv Settings
 CFG_DisableSmartCardLogon=False
 CFG_ForceStrictSmartCardLogon=False
-CFG_EnableFIPS=False
+CFG_EnableFIPS=True
 CFG_EnableCredGuard=True
 CFG_DisableUAC=False
 CFG_EnableStrictUAC=False
 CFG_EnableRDP=True
 CFG_EnableWinRM=True
 CFG_EnableRemoteRegistry=True
-CFG_EnableUEV=False
+CFG_EnableUEV=True
 CFG_EnableAppV=True
-CFG_EnablePSLogging=False
+CFG_EnablePSLogging=True
 CFG_EnableLinuxSubSystem=False
 CFG_DisableAdminShares=False
 CFG_EnableLinuxSubSystem=False
@@ -282,18 +280,24 @@ CFG_DisableWireless=True
 CFG_DisableBluetooth=True
 CFG_DisableNewNetworkDialog=True
 CFG_DisableInternetServices=True
-CFG_DisabledUnusedServices=False
+CFG_DisabledUnusedServices=True
 CFG_DisabledUnusedFeatures=True
 CFG_DisableIndexing=False
 CFG_RemoveActiveSetupComponents=True
 CFG_PreCompileAssemblies=True
 CFG_OptimizeNetwork=False
 
 ' // Configuration Settings ( used by: Win10STIGandMigration.ps1)
-CFG_DisableSTIGScript=True
 CFG_UseLGPOForConfigs=True
-CFG_ApplySTIGItems=False
-CFG_ApplyEMETMitigations=False
+CFG_ApplySTIGItems=True
+CFG_ApplyEMETMitigations=True
 
 '// Configuration Settings (used with AppOptimizeAndConfig.ps1)
-CFG_DisableAppScript=True
+CFG_DisableOfficeAnimation=True
+CFG_EnableIESoftwareRender=True
+CFG_EnableLyncStartup=True
+CFG_RemoveAppxPackages=True
+CFG_RemoveFODPackages=True
+CFG_ForceEdgeHomepage=True
+CFG_ForceIEHomepage=True
+