Here is a common scenario. You are deploying an operating system using mdt Lite Touch, during the deployment you install some user specific applications. However the users think that the deployment is completed an they close the application installs or perhaps start messing with the machine while it is still logged in as the local administrator. Now you could simply inform the user that they should not touch the computer until the deployment is completed. However in my experience this “don't touch” approach has not always been 100% successful.
Well now we have a better way, you can hide explorer shell while MDT is “doing it's thing”!
So how do we do this? It is simple, just add the following line to the customsettings.ini file:
I have included before and after shots below:
No explorer…. that's better!