Lockdown settings removed through Sysprep in Windows Embedded 8.1 Industry

9/16/2013

Microsoft Corporation

September 2013

Summary

Helps you understand lockdown settings that are removed during the Sysprep process in Windows Embedded 8.1 Industry (Industry 8.1) so that you can set them again after deployment

Applies To

Windows Embedded 8.1 Industry Pro

Windows Embedded 8.1 Industry Enterprise

Introduction

During the deployment process, Sysprep removes system-specific settings such as the computer security identifier (SID). However, it also removes some other settings, such as lockdown settings, that you might need to reset after you deploy the image to your devices. Sysprep does not remove global settings.

Sysprep removes user specific settings that include but are not limited to the following:

  • Assigned access settings
  • User-specific settings for Windows 8 Application Launcher
  • User-specific settings for Shell Launcher

To turn features on or off after deployment

  1. In Control Panel, navigate to Programs > Programs and Features > Turn Windows Features on or off.

  2. Choose the lockdown and branding features that you want to turn on or off, and then tap or click OK.

    You may need to restart the device to apply the changes.

Conclusion

These instructions should help you understand the lockdown settings that are removed during the Sysprep process in Windows Embedded 8.1 Industry (Industry 8.1) and show you how to set them again after deployment.

Additional Information

For information about how to set assigned access settings, see Use assigned access to lock down a Windows Embedded 8.1 Industry device.

For information about how to deploy your image, see Deploy to a device and Update Windows Embedded 8.1 devices that are protected by UWF.

For more information about Sysprep, see Sysprep Command-Line Settings on MSDN.