Start Layout -

As with the past versions of windows the tiles on the Start menu are actually standard shortcuts located is specific locations on the system drive, the two locations are one master location which can be system admin locked and there is also a user folder which users have right to access by default

Main is at C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
User is at C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

With a little bit of creative permission allocation you should be able to have a set of standard icons for everyone and additional icons set by the user, setting the Default user should automatically set up the permissions for each new user.
#
You do not say if you are using a Client Server setup, If so this should be controllable from the sever for new and existing users

--------------------------------------------------------------------------------

Just thought if this is a single system with multiple users, it will work out of the box, just set up one Admin and the others as standard users, the admin can go to the folder and add and remove entries as needed and the users entries will be displayed on the left hand list for drag and drop to the main panel which also shows the admin added items

--------------------------------------------------------------------------------

The taskbar behaves the same way although I have never used this for Admin/User mix so do not know the actual locations used

One way to achieve taskbar control is the use of toolbars these can be setup by the admin and then the users icons will fit on the taskbar as usual but those on the Admin toolbar will not be editable by the user

An image would work, as this method uses the default out of box settings and to be honest would be better in a domain environment than adding login scripts for first time login.

Just setup a default user as you would usually and remove the unwanted items from, and add any specific apps you need the users to access into the Master folder, the full set of applications would show in the full list on the far left and the user could then drag from there onto the start menu area, (they would be actually added to the user shortcuts folder )

There is an issue with the Universal apps as these do not follow any of Microsoft's own rules, they are stored somewhere of course ,but I do not use any of them so cannot help there, Hopefully our Shawn @Brink will be able to suggest how to handle these should you use them

The default user is the base profile user for all standard users, you would of course also need at least one admin user, this could be a local admin on each machine but would be better if domain based so giving one central control, but mixtures of remote and local admins are often the norm so I assume you have this in place

Hello DarkArmy,

Unfortunately, setting a default Start layout does prevent user from being able to change their Start layouts other than resizing the Start menu.

I suppose you could see if you may be able to use the method in the tutorial below to back up and restore the Start layout for this. You could back up the Start layout you want as default, and manually restore it per account you want with them still being able to change it. Since this is for a domain environment, you may be able to deploy it somehow so you don't have to restore it manually one by one, but I don't know how if there is a way.

Backup and Restore Start Layout in Windows 10