Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Intune»Configure the Windows 11 start menu with Microsoft Intune
    Intune

    Configure the Windows 11 start menu with Microsoft Intune

    Peter KlapwijkBy Peter KlapwijkOctober 7, 2021Updated:October 7, 202143 Mins Read

    Earlier this week Microsoft released Windows 11. So it’s time to write my first blog post related to the latest Windows version.

    The out of the box start menu on Windows 11, isn’t as bad as seen on Windows 10 (at least the Enterprise version), but still, there might be a reason to pre-configure the start menu.

    For Windows 10 I wrote a post on how we can configure a default Start menu layout, and still allowing the user to change the start menu to their needs. It involved exporting a start menu configuration and by using a script, we imported the configuration to Windows.

    In Windows 11, we have a similar approach of exporting a configuration file (but now to a JSON file) as Microsoft described in this article. The big difference is, that we don’t have to use a script to import the exported start menu, but we can use an MDM policy CSP to set the start menu layout. At the moment of writing, we need to use a Custom configuration profile in Microsoft Intune, to configure the start menu. I assume this setting will make it to the Intune portal in the (near) future.

    Let’s see how we can get our JSON file and deploy it using Intune.

    Start menu areas

    The start menu of Windows 11 consists of three areas: Pinned, All apps, and Recommended.

    We can only configure the Pinned area with the JSON and the ConfigureStartPins setting.

    The All apps section can’t be configured with the JSON. For the Recommended section we can only use the HideRecentJumplists setting to do some configuration.

    Create the JSON file

    The easiest way to get the JSON file is to configure the Start menu on an existing device and export the layout as we used to do for Windows 10.

    Below is an example of the command we need to use to export the existing layout to a JSON file:

    Export-StartLayout -Path "C:\Temp\LayoutModification.json"

    The JSON file can be viewed (and edited) in any text editor and looks like below.

    Deploy the Pinned configuration

    To deploy the JSON to our Windows 11 devices we can use a Custom configuration profile with Intune.

    • Sign in to the Microsoft Endpoint Manager admin center
    • Browse to Devices, Windows, Configuration profiles
    • Click +Create profile
    • Select Windows 10 and later as Platform
    • Select Templates as Profile type
    • Select Custom
    • Click Create
    • Give the profile a Name
    • Enter a Description (Optional)
    • Click Next
    • On the settings tab click Add
    • Give the Row a Name
    • Fill in the OMA-URI:
      ./Vendor/MSFT/Policy/Config/Start/ConfigureStartPins
    • Data type: String
    • Value: Enter the content from the previously created JSON file

    Save the configuration profile.

    Deploy the configuration profile to your Windows 11 devices preferably during Autopilot enrollment, so you’re sure the setting is applied before the user is signed in for the first time.

    End result

    Besides the earlier mentioned article, there isn’t much information yet about this configuration setting, below is my experience, not based on any documentation.

    I applied the setting to new devices (during enrollment) and existing devices. The policy-setting seems to have no impact on existing user profiles. For users who signed in the first time to a device on which the setting is already applied, they’re shown the pre-configured start menu layout as expected.

    And the end-user is still able to change the layout of the Pinned section of the start menu.

    Thanks for reading and let me know what your experience is with this new setting!

    EMS Intune MEM Microsoft 365 Microsoft Endpoint Manager Windows Windows 11
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    Configure Cloud Site List Management for IE mode

    October 21, 2021

    Enable passwordless security key sign-in in Hybrid Azure Active Directory environments

    February 25, 2020

    Setup a Windows 10 Multi App Kiosk device with Microsoft Intune

    August 6, 2019
    View 4 Comments

    4 Comments

    1. Steve on November 24, 2022 10:47

      Thanks for the article it is really helpful, we have configured the start menu pins as you described above, however, if a user pins a new item, it seems to get overwritten when the device checks into Intune again, and goes back to the default. Any ideas on a way to make this apply once but not re-apply, so users can still add additional pins?

      Reply
      • Greg on December 14, 2022 06:58

        I’m seeing the same thing. I wonder if it’s due to an update of some kind? Win 11 22H2 Build 22621.819 on my device.

        Reply
      • Thierry on June 19, 2023 13:21

        Ever found out how to fix this? Having the same problem…

        Reply
    2. Sameer on June 27, 2023 19:35

      I had a hint from some lovely microsoft engineer and created a W32 app that sent the following registry using powershell: cleared all the junk clickbait and allowed users to pin stuff they needed afterwards.

      —————————————————

      Windows Registry Editor Version 5.00

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start]
      “ConfigureStartPins”=”{ \”pinnedList\”: [ { \”desktopAppId\”: \”MSEdge\” }, { \”desktopAppId\”: \”Microsoft.Office.OUTLOOK.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.WINWORD.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.EXCEL.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.POWERPNT.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\” }, { \”desktopAppId\”: \”Microsoft.Windows.Explorer\” }, { \”desktopAppId\”: \”com.squirrel.Teams.Teams\” } ] }”
      “ConfigureStartPins_ProviderSet”=dword:00000001
      “ConfigureStartPins_WinningProvider”=”B5292708-1619-419B-9923-E5D9F3925E71”

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start]
      “ConfigureStartPins”=”{ \”pinnedList\”: [ { \”desktopAppId\”: \”MSEdge\” }, { \”desktopAppId\”: \”Microsoft.Office.OUTLOOK.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.WINWORD.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.EXCEL.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.Office.POWERPNT.EXE.15\” }, { \”desktopAppId\”: \”Microsoft.WindowsCalculator_8wekyb3d8bbwe!App\” }, { \”desktopAppId\”: \”Microsoft.Windows.Explorer\” }, { \”desktopAppId\”: \”com.squirrel.Teams.Teams\” } ] }”
      “ConfigureStartPins_LastWrite”=dword:00000001

      Reply
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025

    Hide the “Turn on an ad privacy feature” pop-up in Chrome with Microsoft Intune

    April 19, 2025

    How to set Google as default search provider with Microsoft Intune

    April 18, 2025

    Using Windows Autopilot device preparation with Windows 365 Frontline shared cloud PCs

    April 13, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Teams Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Adam on Get notified on expiring Azure App Registration client secrets
    • Peter Klapwijk on Update Windows Defender during Windows Autopilot enrollments
    • Rob van de Ven on Add a certificate to the Trusted Publishers with Intune without reporting errors
    • Carl on Update Windows Defender during Windows Autopilot enrollments
    • Peter Klapwijk on The next step in a passwordless Windows experience
    most popular

    Application installation issues; Download pending

    October 1, 2024

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    How to change the Windows 11 language with Intune

    November 11, 2022

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}