Windows 10 Considerations
Windows 8.1 and 10 support
Windows 8.1 and continuing with Windows 10, workflow has changed from that which had been provided with Windows 7. To achieve a similar workflow, the following settings must be updated in your Windows 8.1/10 environment.
The "Navigation" properties must be adjusted for each "user" (this includes the generic Kiosk User account for Kiosk Mode) via user policy updates: on session creation, "When I sign in or close all apps on a screen, go to the desktop instead of Start"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage OpenAtLogon: REG_DWORD = 0
0 = boots to desktop 1 = boots to Windows Start screen
APPLIES TO:WIN 8.1
The startup delay setting should be reduced to 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize StartupDelayinMSec: REG_DWORD = 0
if not present, this value defaults to 5 seconds.
This has the effect of delaying startup of all SSO process, lengthening the time a user has to wait before using the PC and their applications. Setting the value to 0 eliminates this delay and tells Windows to start launching RUN key applications as soon as possible.
APPLIES TO:WIN 8.1WIN 10
For security purposes, it is recommended that a Kiosk Mode user policy be set for the generic account such that this user is unable to launch the task manager. If this policy is not enabled, Windows 8.1 allows the task manager to be executed and displayed on the Privacy Shield. Intermittently, Windows 10 also exhibits this issue.
APPLIES TO:WIN 8.1WIN 10
AutoUpdateInit.exe requires UAC elevation on Windows 8.1 and above. Windows 7 allowed this to be bypassed for compatibility. Microsoft has eliminated this ability starting in Windows 8.0.
If your environment contains Window 8.1 or Windows 10 workstations, it is recommended that auto-update be replaced by an HCIDeploy configuration or some other deployment tool. Anyone upgrading from an older version of ExactAccess that supported AutoUpdate will need to switch to using HCIDeploy on these operating systems.
APPLIES TO:WIN 8.1WIN 10
It is recommended for kiosk mode to disable workstation lock, since typically the end users will not know the generic Windows account password. If the workstation becomes locked at the operating system level, the user has no way to resume the session. Additionally, this allows kiosk mode to lock using the privacy shield with the Windows-L key combination without locking the Windows session.
GPEdit can be used to disable lock: Administrative Templates > System > Ctrl+Alt+Del Options. On the right, find the “Remove Lock Computer”, enable this setting.
Manually by editing the registry:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ DisableLockWorkstation: REG_DWORD = 1
APPLIES TO:WIN 8.1WIN 10
Shell Replacement support
Windows 10 has introduced new requirements for replacing the Explorer Shell for Passthrough configurations.
See Shell Replacement - specific sections address Windows 10 requirements.