Since Windows 10 embedded a lot of feature some consumer feature are available in the enterprise space like Xbox services and Homegroup, this article explain how do we block these with UEM.
Since Windows 10 1803, we can change the services start type using CSP. This available for any support MDM managed Windows Desktop, (Pro, Business, Enterprise, Education)
Note : Xbox Game Monitoring service is missing from the list but this service depends on Xbox Live Auth Manager and this one is going to be disabled so the service itself won’t be able to start even if the by default the start is on Manual.
Once the service is put at Disabled the service can be change again manually, if the user have the right to do so.
You can modify the behaviour by changing the number :
- Automatic: 2
- Manual: 3
- Disabled: 4
Disable services
Disable All Xbox and All HomeGroup
Install
<Replace>
<CmdID>23271c0f-28e9-43fc-a5bf-00dbde79c6ab</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupListenerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
<Replace>
<CmdID>1a3470b9-9ab5-4e47-921a-2c05f4b763fe</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupProviderServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
<Replace>
<CmdID>64e429dd-adce-4e8a-955a-d641758230e5</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
<Replace>
<CmdID>e9b19123-3715-46a6-979c-78e91418fa05</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
<Replace>
<CmdID>50683e71-fab7-47a8-a52f-5692f3f23c1f</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
<Replace>
<CmdID>4e0f988a-dd6d-458b-97b5-9176b97d08ce</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
?
Remove
<Replace>
<CmdID>23271c0f-28e9-43fc-a5bf-00dbde79c6ab</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupListenerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
<Replace>
<CmdID>1a3470b9-9ab5-4e47-921a-2c05f4b763fe</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupProviderServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
<Replace>
<CmdID>64e429dd-adce-4e8a-955a-d641758230e5</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
<Replace>
<CmdID>e9b19123-3715-46a6-979c-78e91418fa05</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
<Replace>
<CmdID>50683e71-fab7-47a8-a52f-5692f3f23c1f</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
<Replace>
<CmdID>4e0f988a-dd6d-458b-97b5-9176b97d08ce</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable HomeGroup Listener service
Install
<Replace>
<CmdID>23271c0f-28e9-43fc-a5bf-00dbde79c6ab</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupListenerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>23271c0f-28e9-43fc-a5bf-00dbde79c6ab</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupListenerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable HomeGroup Provider service
Install
<Replace>
<CmdID>1a3470b9-9ab5-4e47-921a-2c05f4b763fe</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupProviderServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>1a3470b9-9ab5-4e47-921a-2c05f4b763fe</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureHomeGroupProviderServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable Xbox Accessory Management Service
Install
<Replace>
<CmdID>64e429dd-adce-4e8a-955a-d641758230e5</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>64e429dd-adce-4e8a-955a-d641758230e5</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxAccessoryManagementServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable Xbox Live Auth Manager
Install
<Replace>
<CmdID>e9b19123-3715-46a6-979c-78e91418fa05</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>e9b19123-3715-46a6-979c-78e91418fa05</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveAuthManagerServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable Xbox Live Game Save
Install
<Replace>
<CmdID>50683e71-fab7-47a8-a52f-5692f3f23c1f</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>50683e71-fab7-47a8-a52f-5692f3f23c1f</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveGameSaveServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>
Disable Xbox Live Networking Service
Install
<Replace>
<CmdID>4e0f988a-dd6d-458b-97b5-9176b97d08ce</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>4</Data>
</Item>
</Replace>
Remove
<Replace>
<CmdID>4e0f988a-dd6d-458b-97b5-9176b97d08ce</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>3</Data>
</Item>
</Replace>