Configure Program Pinning to Taskbar Using Microsoft Intune Policy

Start by logging into the Microsoft Intune admin center to create your taskbar configuration policy.

Open your browser and navigate to endpoint.microsoft.com. Sign in with your administrator credentials that have Intune permissions.

Once logged in, navigate to Devices > Configuration > Create > New policy.

Select Platform: Windows 10 and later and Profile type: Settings catalog, then click Create.

Name your policy with a descriptive title that indicates its purpose and scope.

In the Basics tab, enter:

• Name: "Windows 11 Taskbar Configuration - Corporate Apps"
• Description: "Controls taskbar pinning for standard corporate applications across all managed devices"

Click Next to proceed to the configuration settings.

Before adding settings to Intune, create the XML file that defines which applications should be pinned to the taskbar.

Create a new text file and add the following XML structure for pinning Microsoft Edge and Notepad:

<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" Version="1">
  <LayoutOptions StartTileGroupCellWidth="6" />
  <DefaultLayoutOverride>
    <StartLayoutCollection>
      <defaultlayout:StartLayout GroupCellWidth="6" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout">
        <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Accessories\notepad.lnk" />
        <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationID="Microsoft.MicrosoftEdge" PinGeneration="1" />
      </defaultlayout:StartLayout>
    </StartLayoutCollection>
  </DefaultLayoutOverride>
</LayoutModificationTemplate>

The PinGeneration="1" attribute allows users to unpin the application without it being re-pinned on the next policy refresh. This requires Windows 11 23H2 with KB5060826 or Windows 11 24H2 with KB5060829.

Now add the XML configuration to your Intune policy using the Settings catalog.

In the Configuration settings tab, click Add settings.

In the Settings picker, search for "Start" and expand the Start category.

Select Configure Start Pins and click Add.

In the Configure Start Pins field, paste your XML configuration from the previous step.

Click Next to proceed to assignments.

If you want to prevent users from pinning or unpinning any programs beyond your corporate configuration, add an additional setting.

Click Add settings again and search for "taskbar".

Navigate to Administrative Templates > Start Menu and Taskbar.

Select Do not allow pinning programs to the Taskbar (User) and set it to Enabled.

This completely locks the taskbar from user modifications.

Configure which users or devices will receive this taskbar configuration.

In the Assignments tab, choose your assignment method:

• Include groups: Select specific Azure AD groups
• Exclude groups: Exclude pilot groups or executives who need flexibility

For Windows 11 23H2+ features like PinGeneration, click Add filter and create a device filter:

(device.osVersion -startsWith "10.0.22631") or (device.osVersion -startsWith "10.0.26100")

This targets Windows 11 23H2 (build 22631) and 24H2 (build 26100) devices.

Click Next to review your configuration.

Complete the policy creation and monitor its deployment across your organization.

Review all settings in the Review + create tab, then click Create.

Navigate to Devices > Monitor > Device configuration to track deployment status.

On target devices, force policy sync by running:

gpupdate /force

Or through Settings > Accounts > Access work or school > [Your organization] > Sync.

Check policy application in Event Viewer: Applications and Services Logs > Microsoft > Windows > StartLayout > Operational.

Verify that your taskbar policy is working correctly on target devices.

On a test device, check that:

• Configured applications appear pinned in the correct order
• Users cannot pin unauthorized applications (if restriction is enabled)
• PinGeneration allows selective unpinning without re-pinning

Test the policy by having a user attempt to:

1. Right-click the taskbar and select "Taskbar settings"
2. Try to pin a new application from the Start menu
3. Attempt to unpin a corporate-mandated application

Document any unexpected behavior for troubleshooting.