Mike_ITDept

Sorry to revive an old thread but this is exactly the issue that I am concerned about when considering a move from onprem hybrid to full intune. I can deal with the policy delay in terms of applying new policies might take a long time to hit the endpoints, but what I can't accept is that the policies won't always apply to the users every time. Is it still the case that user policies deployed through Intune do not always get applied?

In my opinion, notepad should have had very little work done to it (maybe tabs only) and they should have expanded the range of capabilities of Wordpad which they instead retired. But realistically, this is Microsoft we are talking about and they don't often do things that make sense. They do have a Notepad ADMX that can disable the AI features, but it cannot disable the spellcheck. This is a problem for us in an exam scenario.. I now need to block notepad, but noticed that they are updating it via the MS Store which means the directory must change, it's currently in: C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2508.38.0_x64__8wekyb3d8bbwe\Notepad Previously I would have used AppLocker to deny permission to the executable's path but I don't think that's going to work anymore. I suppose there will be another way to use AppLocker to do this but I'll need to investigate.

We run a very basic printing environment with a Windows print server. Sometimes, I need to be able to check things quickly, like pending/completed jobs and ink status. This can be done via the printers themselves by logging in individually through their HTTP management pages, although with Xerox, there is no list of completed jobs and generally it's a poor experience. In Windows, the driver includes some very useful software that can monitor the status of a printer, however I can't figure out how to open the software to check the status of any printer, without having the printer installed and using the Printer Preferences button in Settings. The software also auto opens when a job has been sent to print and shows you the status. For example, if I choose the printer in Windows Settings and then click Printing Preferences, I get a lovely UI. I want to be able to open this to view the status of any printer, but I don't want to add every printer to my computer and then click the printing preferences button to get there. The program responsible for showing this lovely UI is (part of the Xerox driver): C:\Windows\System32\spool\drivers\x64\3\x3jobt02T.exe This executable is capable of showing the print status of any Xerox printer, but I don't know the parameters to pass through to it that Windows uses when clicking the Printing preferences button. If you run the exe standalone, it says: ---------------------------Application Execution was Terminated.--------------------------- Job Tracker requires a Printer Name parameter provided to run effectively. ---------------------------OK --------------------------- Does anyone know how I can figure out what the parameters are, and how to correctly pass through the parameters so I can open this print status software based on the name or IP of the printer?

For such a large company, sometimes I do wonder what on earth they are thinking. By trying to simplify things, they certainly make it a complicated journey.

We use Xerox printers and for some reason, Windows 10 likes to notify users about 20 times when they login that the printers still exist. It's incredibly annoying and I'm struggling to find a group policy method to disable this behaviour without disabling the Windows Notification system altogether. Here is an example of the notification on a test system: Imagine this coming up over and over again, every time you click the X it just keeps coming up until you've gone through 15-20. There are more notifications popping up than we have printers!

Yes, computer config software deployment. Are you saying that you're able to use the MSI as provided directly from the VLC website and deploy to computers, without each individual user seeing the windows installer upon their first time opening VLC?

Unfortunately we do not have an Intune licence. For Adobe Reader, I use the Adobe Customization Wizard to create an MSI for our environment that works well with GPO Software Deployment.

So I've heard of PDQ Deploy before but I didn't realise there was a free tier. Grabbed it, set up the deployment as you described and yeah it worked perfectly on several test machines. That's awesome, this software is really nice, if only there was a budget to pay for it! Overall, I think I'd prefer to use MSI deployment as it can install when the machines restart. There are lots of machines that are powered off and as I can't set a schedule for retrying, it will be difficult to maintain this method of deployment. At least it works to get the majority of machines updated easily enough. Thank you!

Hi All, Sorry to resurect an old thread, however it is basically the same issue that I'm facing, however the solution found by the OP isn't something that works in my environment. VLC is installed on hundreds of machines, installed manually over some years, running various versions. I'm looking for a way to batch update all machines to the latest version of VLC, but I cannot use SCCM or any other type of utility that requires a licence to deploy. So I'm using Software Deployment to deploy MSI via GPO. Using the 64 bit MSI from VLC website does work, however it results in the Windows Installer dialogue showing for 15-20 seconds per user, per machine on first launch of VLC. Using the free trial of Advanced Installer, I converted the VLC EXE installer to MSI, this works when deploying to a fresh machine that's never had VLC installed, but the installer fails on a machine with a pre-existing version of VLC installed. I have also tried using Orca to create a .mst modification file for the original VLC MSI but Orca fails to create the .mst with the error:Orca was unable to read the SummaryInformation from the database. (MSI Error 0) Orca was unable to create a new transform. (MSI Error 1627) So does anyone know a way to deploy VLC with an MSI for all users?

Wow, thank you very much! I had been Googling to no end and just couldn't find anything that worked. MSI Deployment worked instantly, really apprecaite the quick response and link to the thread. Hopefully anyone googling the same errors as me might come across this thread!

Hi All, I am the sole IT department at a school and I need some help please! When opening HEIC images without the right codec/licence installed from the Microsoft Store, it will not display the image and you will be unable to view it. I am looking to get HEIC images viewable inside the default photo viewer on Windows 10 for all endpoints (300+). The solution needs to work with these factors in mind: The HEIC licence needs to install automatically on all domain joined machines for all users without any user interaction Intune / SCCM cannot be used (we don't hold the licencing for these services) Cannot run via Powershell on endpoints as powershell.exe is blocked via software restriction gpo for obvious reasons. Cannot use Microsoft Store for Business as this is being retired in 2023 It must be free I am trying to install the following Microsoft Store packages as I have determined that these are what is required to display HEIC images in the Windows 10 Photo Viewer: https://apps.microsoft.com/store/detail/hevc-video-extensions-from-the-device-manufacturer/9N4WGH0Z6VHQ https://apps.microsoft.com/store/detail/heif-image-extensions/9PMMSR1CGPWG Attempt #1: winget install --id 9N4WGH0Z6VHQ --silent --scope machine --accept-package-agreements The above commands uses the built in Windows Package Manager to install an app directly from the store. This gives me the error: Checking the logs shows the reason: So it can't find an installer for the machine option. Even if I try: winget install --id 9N4WGH0Z6VHQ --silent --accept-package-agreements I get this error: Although, Winget will install the other package (9PMMSR1CGPWG) using the above second command. Attempt #2: DISM.EXE /Online /add-ProvisionedAppxPackage /PackagePath:S:\PathHere /SkipLicense The above command calls on the "add-ProvisionedAppxPackage". This command will provision the .appx file to be installed for all users who login to the machine. I have downloaded the entire package using https://store.rg-adguard.net/ . Ideally, this is the solution that I like, however I am facing this error message: "Error 5 Access is denied." Checking the DISM logs shows this: Note that all my test commands are being run whilst logged into an a domain administrator account and running command prompt as admin. The folder that I have the Appx file in is readable by "Everyone". At this point, I'm not even working on the deployment to multiple machines, just running the commands on a test machine to get the package installed. I need the package to install successfully on a machine, once that hurdle is completed, I can work on a script that will run at boot and run the working command. I can install any AppX package using the powershell command "add-appxpackage S:\PathHere", however this isn't the solution as it only installs the package to the currently signed on user. I'm sure that I can find some 3rd party program and deploy it super easily that will allow HEIC images to be viewed, I just wanted the solution to be cleaner than this. It seems insane to me that it's so difficult to merely deploy a Microsoft Store package. If anyone has any suggestions, please share!