Windows 10 & Windows 7 Side By Side

[2097]

Our of interest is any one doing this atm for testing ?

 

Im ready for testing windows 10 in a single ICT suite

 

We are currently windows 7 , Man profiles for kids and Roaming for staff .

 

I have been building the 10 base image and default / man profiles for 10 and everything is fine. I have also created a new GPO's for windows 10 to seperate them from old GPO's.

 

Profiles aint a issue because of the .v6 , But more the applying of GPO's

 

What i have done is create a OU called windows 10 , all windows 10 machines will go in there. I have blocked inheritance and enabled loop back mode and also put my userbased GPO's into the same folder as the computer GPO's.

 

Am i right in assuming any computer in that "windows 10" folder will only apply the user based GPO and Computer based GPO's from the "Windows 10" folder.

 

Please give me a nod if you agree

[EddyAllen]

Sounds good, one bit of advice I would give though;

 

GET RID OF ROAMING PROFILES!!

 

MS went silent on these for a while and nobody was really sure if they were still supported until MS came out and said they planned to retire them but didn't know when! Schools being what they are (very concerned with cost) we have been using some pretty janky old PC's and the increase in performance from euthanising roaming profiles was dramatic. Just use local profiles with folder redirection and set up a GPO that deletes them after x amount of days of inactivity to stop the machines being clutterd up. Better yet, do away with folder redirection and use sharepoint / onedrive instead.

 

The alternatives are UE-V which is easy to set up and works quite nicely imo, alternatively you could use FSLogiX which MS have aquired which uses VHD's for users profiles but in such a way that it is streamed rather than cached in its entirety on the client device. It's availability is also better than UE-V as you can create a cloud VM that stores the VHD's for remote users.

[fiza]

We run side by side windows 10 and 7. You should use WMI filters to keep your OUs as they are and use WMI filters to apply gpos to only windows 10 or only windows 7.

[FN-GM]

We run side by side windows 10 and 7. You should use WMI filters to keep your OUs as they are and use WMI filters to apply gpos to only windows 10 or only windows 7.

 

Hit the nail on the head.

[ticktock]

WMI filters here as well. Does the job.

[2097]

Sounds like WMI filters are the way to go

 

Thank you .

 

Also thanks for telling me about the roaming profile issue , is any one here using both roaming and mandatory and experiencing problems ? From my testing the profiles seem to work fine .

[chazzy2501]

yeap, WMI filters, useful for distinguishing mobile and non-mobile devices as well.

[Rob_D]

Sounds like WMI filters are the way to go

Thank you .

Also thanks for telling me about the roaming profile issue , is any one here using both roaming and mandatory and experiencing problems ? From my testing the profiles seem to work fine .

 

Yeah. We had students on mandatory and staff on roaming and had issues with both.

For students, we had problems with the start menu not loading and some internet/ssl connection issues. switching them to local profiles has fixed this and made them generally more stable.

For staff, taksbar pins didn't stay, the calculator/photos app kept falling over, Outlook profiles would corrupt randomly and the PCs were generally quite slow. But all this is pretty intermittent and has been hard to pin down. But switching staff with issues to UEV had resolved most of the problems so we're slowly moving all the staff over. It also saves a good chunk of space as 300 odd staff with 50+mb profiles quickly adds up.

[2097]

Thanks every one for the information .

 

Im not sure i can change the profiles atm , because of the side by side running with windows 7. But Something to look at when its a full rollout.

 

Since reading the above problems , I have fixed a few things

 

Windows Store apps not loading for roaming and mandatory - Enabled Allow deployment operations in special profiles via GPO ( Computer based not user ), all now work ..

 

Start menu for roaming users - I currently inject LayoutModification.xml as part of the task sequence but was still experiencing the tiles dropout on 2nd login . I have set the XML file in GPO to apply the start menu tiles and added the SpecialRoamingOverrideAllowed key in the registry . They now load everytime . Obviously the staff members wont be able to apply their own icons but its fine for now. Weirdly this didnt affect the mandatory profile , that seems to load fine everytime.

 

Also im running 1903 Education for any one interested.

[BOOT]

I found setting the computer GPO option [system/User Profiles/Only allow local user profiles] for my new Window 10 builds very useful when migrating.

Allows roaming profiles to be used on PCs without that GPO set, switches to local profiles where the GPO is enabled.

[CHiLL]

I used WMI filters back in 2016 when testing Windows 10 alongside Windows 8.1. Worked perfectly. Though I believe Microsoft have ditched support for mandatory and roaming profiles on Windows 10. Whilst they can still be used, I don't think they work quite like they used to.

[2097]

I used WMI filters back in 2016 when testing Windows 10 alongside Windows 8.1. Worked perfectly. Though I believe Microsoft have ditched support for mandatory and roaming profiles on Windows 10. Whilst they can still be used, I don't think they work quite like they used to.

 

Quite difficult to understand Microsoft intentions with these . Ive also seen reports that they are ditching U-EV profiles... So totally confused on what to use.

 

Also i noticed that the apps are still broken despite the fix above ( worked ok once ) , Either going to install replacements for calculator and Photo viewer or try and find a bodge fix some where .

[mavhc]

I don't do any roaming/mandatory profiles, I redirect Documents, that's it. So no problems moving to Win 10. Got one GPO that's just for Win10 settings with WMI filter.

 

We're at about 80% staff having their own laptops, and 60% pupils. Not had a pupil who's had a laptop assigned to them break a pupil laptop in the over a year since we started pupil assigned laptops, weird that. One did break her own iPhone and a teacher's laptop, teacher got her laptop. And one teacher did close the laptop on a pen, they got a hard stare.

[Duke5A]

I used WMI profiles between the XP and 7 migration years ago. They work exactly as advertised, but when going from 7 to 10 I just tossed all the clients into the same OU together and everything played nice. Still got a few 7 machines on the network and no issues between three different revisions of 10. Not that I have very complex computer policies though...

 

The command line utility 'gpresult' is good for checking the WMI filtering.

[2097]

My first ICT suite on windows 10 . The oldest of the machines so had to upgrade the ram and hdd to SSD ( They are 3rd Gen i5's )

 

Everything is working as expected . The only annoying issue i can see is i have set the default browser to IE11 , but everytime a kid logs in ( after their Profile is deleted , after reboot) i get an annoying toast prompt saying the browser has been reset to Edge , Yet it stays as IE11.

 

I have disabled the Toast notifications for the mean time , But very strange its attempting to reset it ( especially at login ! )

[mavhc]

My first ICT suite on windows 10 . The oldest of the machines so had to upgrade the ram and hdd to SSD ( They are 3rd Gen i5's )

 

Everything is working as expected . The only annoying issue i can see is i have set the default browser to IE11 , but everytime a kid logs in ( after their Profile is deleted , after reboot) i get an annoying toast prompt saying the browser has been reset to Edge , Yet it stays as IE11.

 

I have disabled the Toast notifications for the mean time , But very strange its attempting to reset it ( especially at login ! )

 

You set the browser to IE? Why do you hate your users so much? Also your security.

[DJ-1701]

I agree with @mavhc... IE has basically been abandoned by Microsoft... it may be useful for old sites, but for newer ones, you're going to start having issues if you haven't already.

[Bladez]

another +1 for the wmi filtering here, worked here while we were transitioning. I just made sure i named all my new policies with WIN10 somewhere in it so i knew which were which.

[mavhc]

I agree with @mavhc... IE has basically been abandoned by Microsoft... it may be useful for old sites, but for newer ones, you're going to start having issues if you haven't already.

 

Is there an easy way to only let IE be used for the 2 sites it's required for?

[2097]

If you know the websites , You can do direct shortcuts to the URL's and reference IE's exe . I do the same with firefox

[Davit2005]

I don't do any roaming/mandatory profiles, I redirect Documents, that's it. So no problems moving to Win 10. Got one GPO that's just for Win10 settings with WMI filter.

 

We're at about 80% staff having their own laptops, and 60% pupils. Not had a pupil who's had a laptop assigned to them break a pupil laptop in the over a year since we started pupil assigned laptops, weird that. One did break her own iPhone and a teacher's laptop, teacher got her laptop. And one teacher did close the laptop on a pen, they got a hard stare.

 

This is exactly what we done at our last place. We had a shared desktop for students which they could not save to but we could quickly place short cut items on for the students to use.

 

It is possible to re-direct appdata as well but I would be careful and block things like iTunes so the phone backup data does not fill up your users home drives.

[2097]

As part of the general consensus in this thread i have set the default browser to edge. I get what people are saying that IE11 is outdated.

 

I am running IE11,Edge and Firefox ( really not a chrome fan)

 

They are all listed in the start menu tiles for users to choose.

 

 

I have office 2019 installed and we run exchange in house ( 2016 ) . I noticed some one said something about outlook profiles being corrupted when using roaming profiles on windows 10, Is this still the case with the required GPO's enabled and running 1903 ?

[2097]

Ok first hurdle ,

 

Unsure wehat other people do on this , But on Windows 10 the power button doesn't display logoff . Only restart and shutdown.

I know you can click on the user account icon and sign out , I also added a nice sign out button to the start menu tiles.

 

Kids are still shutting down the machines ! despite my best efforts.

 

Any way of adding the "sign out" to the shutdown button ?

[CHiLL]

Ok first hurdle ,

 

Unsure wehat other people do on this , But on Windows 10 the power button doesn't display logoff . Only restart and shutdown.

I know you can click on the user account icon and sign out , I also added a nice sign out button to the start menu tiles.

 

Kids are still shutting down the machines ! despite my best efforts.

 

Any way of adding the "sign out" to the shutdown button ?

As far as I'm aware, you can't change that at all. We just removed the shutdown/restart option for students via GPO, so nothing appears when the students press that button, it's just an empty menu. That forces them to use the other option.

[2097]

As far as I'm aware, you can't change that at all. We just removed the shutdown/restart option for students via GPO, so nothing appears when the students press that button, it's just an empty menu. That forces them to use the other option.

 

Thanks , Might be the option .