mwild

Thanks, but we do not have google workspace admin. Everything is windows here.

Thanks for trying to help but unfortunately I just can't see it. I downloaded the latest files today. Maybe I'm just not seeing it but I'm hoping someone with a Windows environment can confirm either way.

https://support.apple.com/en-gb/101555 That's what documentation says but I don't see it. Can you send me a screenshot of your GPO setting list where you see this?

I am trying to find the method to disable Google Lens on Chrome using GPO. I have the latest chrome.adml and chrome.admx files in the required folders but just cannot see the correct reference for disabling googleLens. Does anyone know what the exact entry is in GPO for this? I have seen a registry update option that I can try but would prefer GPO fix if possible.

And how did you do that? Did you have to install a copy of windows home? Thanks.

All valid observations and all part of the discussion I have had / am having which is why I am asking if anyone is actually doing this. I can see schools are but not the details of how they manage this technically. It seems the only way would be to reinstall a completely new Windows home install on all laptops with all the time/issues that goes with that.

That is why I am asking here to see what other's do (e.g.is the bios key valid etc). I know other schools do similar schemes so there must be options.

My school is looking into options for students to purchase laptops they use in school. Do other schools do this and if so what is the process when the student leaves school? My question is more on the technical side as currently all school devices have a school build and when I test a factory reset the new Windows install is insisting on a school userid so a personal microsoft id cannot be used. How do other schools deal with this to allow the student to have a working windows build at home when they leave school?

Thanks for the suggestion but it's working now. I went back through all the steps and re-applied the rules/bootstrap.ini settings this morning and updated the deployment share and WDS and now working.

This is to install an image, so booting off the network. The PXE boot step works but the MDT not working as expected.

The issue was before I tried copying the old rules over. Originally it did not have the userexit script and even with just a few basic lines it still does not work

Thanks for the info. To me, it looks like it does not matter what settings go into the rules, it is just ignoring and going to the welcome screen. I can see that it is trying to load the customsettings.ini but the screen flashes so quickly. It's either not loading for some reason or loading and ignoring some of the settings. These are the rules from the old server. I even tried copying them over and the UserExit.vbs: [Settings] Priority=Default Properties=MyCustomProperty [Default] UserExit=UserExit.vbs OSDComputername=#GetOfflineComputername()# BitsPerPel=32 VRefresh=60 XResolution=1440 YResolution=900 _SMSTSORGNAME=MYORGNAME OSInstall=YES SkipAdminPassword=YES SkipApplications=NO SkipAppsOnUpgrade=YES SkipBDDWelcome=YES SkipBitLocker=YES DoNotCreateExtraPartition=YES SkipCapture=YES SkipComputerName=NO SkipComputerBackup=YES SkipDeploymentType=YES DeploymentType=NEWCOMPUTER SkipDomainMembership=YES JoinDomain=MYDOMAIN DomainAdmin=administrator DomainAdminDomain=MYDOMAIN MachineObjectOU=MYOUPATH DomainAdminPassword=MYPASSWORD SkipFinalSummary=YES SkipLocaleSelection=YES KeyboardLocale=0809:00000809 UserLocale=en-GB UILanguage=en-GB SkipPackageDisplay=YES SkipProductKey=YES SkipSummary=YES SkipTaskSequence=NO SkipTimeZone=YES TimeZoneName=GMT Standard Time SkipUserData=Yes FinishAction=Restart EventService=http://MYSERVER:9800 Wondering if specifically related to Server 2022 but I think unlikely.

I have installed WDS and MDT on Windows Server 2022. As far as I can tell everything is configured as it should be and PXE boot is working but when a device boots into the Microsoft Deployment Toolkit it shows the Welcome screen with options to Run the Deployment Wizard or Exit to Command Prompt. I have changed multiple settings in bootstrap.ini and Rules but still getting this welcome screen. If I enter the admin and domain details I then see the option to select the task schedule that is available which is what I want to automatically get to. I have copied the settings over from an older existing WDS server and still the same. This is what I have in bootstrap,.ini: [Settings] Priority=Default [Default] DeployRoot=\\MYWDSSERVER\DeploymentShare$ SkipBDDWelcome=YES SkipAdminPassword=YES UserDomain=MYDOMAIN UserID=administrator UserPassword=MYDOMAINPASSWORD Any guidance appreciated. Thanks.

Thanks, Are you able to share the link to these guides? We are not using Azure currently but not not read anything about a CRL server thus far.

I am aware of the issues with WIFI on Windows 11 due to credential guard. I know I have the option to disable credential guard, but to allow credential guard to run and move to EAP-TLS I need to install a new Certificate Authority. The existing CA is a standalone CA/NPAS and needs updating. Best practice seems to be create a standalone root-CA then a subordinate enterprise CA then shutdown the root-CA. Is this what people are doing for their Certificate Authorities or something else?