Enterprise taskbar alignment and pinned application management deployed via Microsoft Intune PowerShell scripting for Windows 11 endpoints — enforcing a standardised left-aligned desktop experience across all managed devices.
Windows 11 introduced a centre-aligned taskbar by default, diverging from the traditional left-aligned layout that enterprise users have relied on for decades. While this design choice suits consumer environments, it introduces friction in corporate settings where users frequently multitask across dense application workflows.
This project documents the end-to-end deployment of a taskbar alignment policy that repositions the Windows 11 taskbar to the left and removes default pinned applications (Microsoft Edge, Microsoft Store, and Widgets). The configuration is delivered silently via Microsoft Intune’s PowerShell script deployment pipeline, targeting all managed endpoints organisation-wide.
- Enforce left-aligned taskbar positioning across all Windows 11 endpoints to maintain a consistent and familiar user interface
- Remove default pinned taskbar applications that are not part of the organisation’s approved software baseline
- Deliver the configuration silently through Intune without requiring user interaction or local administrator privileges
- Ensure the policy applies under the logged-on user context to correctly modify per-user registry hives
- Establish a repeatable, scalable deployment pattern for future desktop personalisation policies
| Technology | Role |
|---|---|
| Microsoft Intune | Script deployment and device targeting |
| PowerShell | Registry manipulation and Explorer process restart |
| Windows Registry | HKCU TaskbarAl value and Taskband pinned app data |
| Microsoft Entra ID | Dynamic group membership for device targeting |
| Windows 11 | Target operating system (22H2 and later) |
- Microsoft Intune tenant with active device enrolment
- Windows 11 endpoints (build 22H2 or later) enrolled in Intune
- Entra ID security group containing target devices or users
- Intune administrator role (or equivalent RBAC permissions) for script upload
- Endpoints must have the Intune Management Extension installed (deployed automatically on enrolment)
The deployment follows a registry-based configuration model executed through Intune’s PowerShell script pipeline. Rather than using a Configuration Profile or Settings Catalog (which do not natively expose taskbar alignment controls), this approach leverages a lightweight PowerShell script to directly modify the relevant registry values under the current user’s hive.
Design decisions:
- User-context execution — The TaskbarAl registry value resides under HKCU, meaning the script must execute under the logged-on user’s credentials rather than SYSTEM. Running under SYSTEM would modify the wrong hive and produce no visible change.
- Explorer restart — Registry changes to taskbar behaviour do not take effect until explorer.exe is restarted. The script forces this restart to ensure immediate visual feedback upon next login or during the active session.
- Pinned app cleanup — Default Windows 11 pinned items (Edge, Store, Widgets) are stored as serialised binary data under the Taskband registry key. Removing the Favorites and FavoritesResolve values resets the pinned items to a clean state.
- 64-bit execution — The script is configured to run in the 64-bit PowerShell host to ensure correct registry path resolution on 64-bit Windows installations.
Create the PowerShell script SetTaskBarAlignment.ps1 with the following logic:
# Set Taskbar alignment to the left
$registryPath = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
$registryName = "TaskbarAl"
$registryValue = 0 # 0 = Left, 1 = Center
# Create registry key if it doesn't exist
If (!(Test-Path $registryPath)) {
New-Item -Path $registryPath -Force | Out-Null
}
Set-ItemProperty -Path $registryPath -Name $registryName -Value $registryValue -Force
# Remove Default Pinned Apps from Taskbar (Edge, Store, Widgets)
$registryPathTaskbar = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband"
Remove-ItemProperty -Path $registryPathTaskbar -Name "Favorites" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path $registryPathTaskbar -Name "FavoritesResolve" -ErrorAction SilentlyContinue
# Restart Explorer for changes to take effect
Stop-Process -Name "Explorer" -ForceRegistry values explained:
| Registry Path | Value Name | Data | Purpose |
|---|---|---|---|
| HKCU:...Explorer Advanced | TaskbarAl | 0 (DWORD) | Sets taskbar alignment to left (0 = Left, 1 = Centre) |
| HKCU:...Explorer Taskband | Favorites | (removed) | Clears default pinned taskbar items |
| HKCU:...Explorer Taskband | FavoritesResolve | (removed) | Clears resolved paths for default pinned items |
- Navigate to the Microsoft Intune admin centre at intune.microsoft.com
- Select Devices > Windows > Scripts and remediations from the left navigation
- Click + Add to create a new platform script
- On the Basics tab, enter the following:
- Name: Set Taskbar alignment to the left
- Description: Aligns the Windows 11 taskbar to the left and removes default pinned applications to enforce organisational desktop standards
On the Script settings tab, configure the following:
| Setting | Value | Rationale |
|---|---|---|
| Script location | SetTaskBarAlignment.ps1 | The script file created in Phase 1 |
| Run this script using the logged-on credentials | Yes | The script modifies HKCU registry values, which are user-specific. Running as SYSTEM would target the wrong registry hive. |
| Enforce script signature check | No | The script is not code-signed. In environments with strict execution policies, consider signing with an internal certificate. |
| Run script in 64-bit PowerShell host | Yes | Ensures correct registry path resolution and avoids WoW64 redirection on 64-bit Windows installations. |
- On the Assignments tab, add the target Entra ID security group containing the devices or users that should receive the policy
- Click Review + save to finalise the deployment
- Allow the Intune Management Extension to process the script on targeted endpoints — this typically occurs within 1 hour of the next device check-in
The TaskbarAl DWORD value under HKCU Software Microsoft Windows CurrentVersion Explorer Advanced controls the horizontal positioning of taskbar icons in Windows 11. Setting this value to 0 shifts all icons to the left, restoring the traditional Windows 10 layout that enterprise users expect.
Why this matters in enterprise environments: Left-aligned taskbar layouts provide a predictable anchor point for the Start menu and pinned applications, reducing cognitive load during rapid application switching. In environments where users operate 5–10 applications simultaneously, a consistent left-aligned layout eliminates the visual recalculation that occurs when new taskbar items shift the centre point.
The Favorites and FavoritesResolve values under the Taskband key store serialised binary data representing the default pinned taskbar items. Removing these values strips out Microsoft Edge, Microsoft Store, and Widgets — applications that may not align with the organisation’s approved software catalogue.
Security consideration: Removing default pinned items reduces the attack surface by preventing users from inadvertently launching unapproved browsers or accessing the Microsoft Store in environments where store access is restricted by policy.
The Stop-Process -Name Explorer -Force command terminates and automatically restarts explorer.exe, which is necessary for registry changes to the taskbar to take immediate effect. Without this step, changes would only apply after the user’s next login.
User impact: The Explorer restart causes a brief visual flicker (approximately 1–2 seconds) as the desktop shell reinitialises. No data loss occurs — all open applications remain unaffected.
- Local script execution — Run SetTaskBarAlignment.ps1 manually on a test device to confirm the taskbar shifts to the left and default pinned items are removed
- Registry verification — Open regedit and navigate to HKCU Explorer Advanced to confirm TaskbarAl is set to 0
- Taskband verification — Confirm that the Favorites and FavoritesResolve values under Explorer Taskband have been removed
- Intune monitoring — Navigate to Devices > Windows > Scripts and remediations and select the script to view the deployment status dashboard
- Device status — Confirm that targeted devices report a Success status in the script’s device status blade
- End-user verification — On a targeted device, confirm the taskbar icons are left-aligned and default pinned items have been removed
- New user profile test — Log in with a new user account on a targeted device to confirm the script executes correctly for fresh profiles
- Taskbar alignment successfully enforced to left-aligned positioning across all targeted Windows 11 endpoints
- Default pinned applications (Edge, Store, Widgets) removed from the taskbar, providing a clean baseline for organisation-specific pinned app policies
- Script executes silently with no user interaction required — the only visible indicator is the brief Explorer restart
- Deployment achieved through a single PowerShell script, eliminating the need for complex packaging or Win32 app wrapping
- Configuration applies consistently to both existing and new user profiles on managed devices
| Challenge | Solution |
|---|---|
| HKCU modifications require user context | Configured the Intune script to run under logged-on user credentials rather than SYSTEM, ensuring registry writes target the correct hive |
| Registry changes not visible until Explorer restart | Included Stop-Process for Explorer at the end of the script to trigger an immediate shell refresh |
| Default pinned items stored as binary data | Rather than attempting to decode the serialised Favorites data, the script removes the entire value to reset pinned items cleanly |
| 64-bit vs 32-bit registry redirection | Enabled 64-bit PowerShell host execution in Intune to prevent WoW64 registry virtualisation |
| Script timing on first login | The Intune Management Extension queues the script at the next check-in cycle. For immediate enforcement, consider pairing with a Proactive Remediation. |
- Pilot before broad deployment — Assign the script to a small test group before rolling out organisation-wide to validate behaviour across different hardware configurations and Windows 11 builds
- Combine with a Proactive Remediation — For ongoing enforcement, create a detection and remediation script pair in Intune’s Proactive Remediations to continuously monitor and correct any drift from the desired configuration
- Consider code signing — In environments with strict PowerShell execution policies, sign the script with an internal code-signing certificate and enable the signature check in Intune
- Document the expected user experience — Communicate to end users that a brief desktop flicker will occur when the policy first applies, to avoid unnecessary support tickets
- Layer with additional personalisation policies — Use this script as part of a broader desktop standardisation initiative that includes wallpaper deployment, Start menu layout, and taskbar pinned app management via Intune Configuration Profiles
This project demonstrates a lean, effective approach to enforcing desktop UI standards across a Windows 11 fleet using Microsoft Intune and PowerShell. By targeting a single registry value for taskbar alignment and clearing default pinned applications, the deployment achieves visual consistency without the overhead of complex packaging or third-party tooling. The user-context execution model ensures correct registry hive targeting, while the Explorer restart delivers immediate visual feedback. This pattern is easily extensible to other registry-based desktop personalisation settings and serves as a foundation for broader endpoint standardisation initiatives.
Olu Adelokiki Lead EUC Engineer, UserCompute Website: www.usercompute.com