mrwoberts

I remove the apps from an untouched install.wim file before I place it into my deployment environment. See this thread for the steps to achieve that. THREAD

We've just signed up with Virgin. They offer various packages to schools and one infant school has opted for a 350mbps solution (20:1 contention ratio) for £ 65 per month. Virgin has stated that the minimum they will receive is 18mbps, but that is nearly double what they currently get. Best case scenario, the school have a staggering uplift. We've also gone with an iBoss appliance for the filtering, monitoring and reporting. Virgin are probably not the best comms company, but if you have a good intermediary and put up with slow sales contact then it's a winner.

Depends on how/when you removed the apps. When you remove them from the wim image before you deploy it, then I don't see these links. However, removing the apps post-deployment is hit and miss, but mostly miss. Apparently you can remove or rename the associated app under the Windows\SystemApps folder, but I don't recommend it.

Needed to unblock the following... video.cdn.schooltube.com p.jwpcdn.com

Event Viewer - Administrative Events/Server Roles... Warnings/Errors? Do these VMs have additional (3rd party) software installed on them?

DuckDuckGo.com Loads of custom settings that can all be set through the URL https://duckduckgo.com/?kae=c&kal=-1&k1=-1&kl=uk-en&kz=-1&kaj=m&kam=osm&kw=s&kao=-1&kk=-1&kak=-1&kv=-1&kd=1&kad=en_GB&kaq=-1 Plus the children kind of like using a search engine that sounds like a game they play

@realtnt Here's how to determine your Forest and Domain Functional levels in Powershell Get Domain Functional Level using PowerShell; [color=#666666][font=&quot]Get-ADDomain | fl Name,DomainMode[/font][/color][color=#666666][font=&quot] Get Forest Functional Level using PowerShell:[/font][/color] [color=#666666][font=&quot]Get-ADForest | fl Name,ForestMode[/font][/color]

Do you have 'Authenticated Users' with at least Read permission on the GPO ? Also, might be worth checking if KB3159398 is installed. If it is, temporarily remove it, reboot and test again.

The $ precedes a variable, so if you wanted to make the text literal do not use the quotes or the $ So it would be OSQL -S MyServer\instance -U USER -P Password Also do you know why it say sims.sims.db_p_transfer These OSQL exec statements were relevant to the original poster, but you'd need to change them for your DB. The sims.sims.db_p_transfer_login string is made of up sims = the instance sims = the db inside the instance It looks like your FMS db would instead be... fms.sims.db_p_transfer_login

I found this script in an EduGeek thread The bit that transfers the logins from the Master Database is.. OSQL -S"$server" -U $user -P $password -Q"exec sims.sims.db_p_transfer_login" OSQL -S"$server" -U $user -P $password -Q"exec fmsstm.sims.db_p_transfer_login" The script formatting of that thread looks jumbled on my PC, if you find it jumbled, I've reformatted it... sims-backup-script1.ps1

Yes, it does.

I add this bit to my answer file and it skips the network connection prompt true ...

Slow link GPOs... User Configuration\Administrative Templates\System\Group Policy\Group Policy slow link detection Computer Configuration\Administrative Templates\System\Group Policy\Group Policy slow link detection Computer Configuration\Administrative Templates\System\Group Policy\Configure Group Policy slow link detection

I got the same, but I wonder if that's because I wasn't using a GPO for a custom startmenu layout. Anyway, I found a way around this and it involves just adding a single file to the .wim just before the powershell script saves the image. The LayoutModification.xml, when placed in the folder - C:\Users\Default\AppData\Microsoft\Windows\Shell has the result of creating a slimmer new user startmenu layout - I'm pretty sure it was quicker to login too! Here's the file I used which just gives me three tiles (Explorer, Edge and Remote Desktop). Of course, you can customise this file for your environment... LayoutModification.xml.txt Edit: You'll need to rename the attached file back to .xml extension.

Gotcha. Reading your method above it looks like the TpFnF5.exe /ALLON command would switch the radios back on - presumably the exe is called with /ALLOFF when the pupil presses FN+F8. If you wanted to, you could combine that with the event log method to restore connectivity. Anyways, glad you've got a solution. Incidentally, just been reading that there is a 'Airplane Mode Switch' device in device manager. Disabling that device apparently disables the Airplane Mode switch...

@toffee_paul Back to the Event Log idea, how about the [Microsoft\Windows\WLAN-AutoConfig\Operational] log - event ID 8003 when you disconnect from a network. I guess you'd either need to trigger a reboot for that event or find someway to re-enable the WiFi.

+1 for Synology by the way. I even like the way it can pass on the UPS to other Synology devices, and shut them down when the battery gets to a certain point.

That's what I thought, until I googled and googled and this came out. When I set it up they didn't have the option in Task Scheduler for custom scripts but now they do, so implementing this script is now a lot easier - just drop it in your sysadmin share and point the task to it. ..Here's the clip I saved from the website where the code came from. cat /proc/mdstat cat /sys/block/md2/md/sync_action mdadm --detail /dev/md2 echo check > /sys/block/md2/md/sync_action ;;echo repair > /sys/block/md2/md/sync_action I am late to this thread and have not read it all. However, I run a simple script in the Task Scheduler to scrub every month. I set up 3 User Defined Tasks, each with login as root, and a run command of: /usr/local/myscript/sync_action.sh mdx - where the x in mdx is either 0, 1 or 2. This checks all volumes - 2 hidden and one user - simply add more tasks if you have more volumes. Then set the schedule to whatever you want. I have a monthly schedule to run once a day every month at 22:00. The sync_action.sh script is: --------------------- #!/bin/sh DEVICE=$1 if [ -z "$DEVICE" ]; then echo "Missing argument DEVICE. Eg: md0 md1, md2, etc." 1>&2 exit fi CHECKING=`/bin/cat /proc/mdstat | /bin/grep -A2 $DEVICE | /bin/grep check` if [ -z "$CHECKING" ]; then echo check > /sys/block/$DEVICE/md/sync_action echo "Performing data scrubbing on device $DEVICE now." else echo "Data scrubbing on device $DEVICE in progress." fi ---------------------

Thanks buddy. I've settled for the changes mentioned above and over the summer I'm starting from fresh with 2016 - bit drastic, but I'm just not confident in this setup and I wimped out of migrating DC objects over to the CS. Do you have experience in this area?

Snapshots are definitely not to be used as an alternative to backups, but they are excellent for those what-if, point in time 'snapshots'. Whereby, for example, you were ready to install a bunch of selected updates on your server, but heard rumours that one of them may cause a BSOD. Well, you'd first take a snapshot of the VM, install the updates, run through a bunch of stability tests and if all seems well you simply merge/remove the snapshot. However, if it did cause a BSOD on your VM, you'd simply rollback the snapshot, which is fairly instant. Achieving the same thing with Veeam would take much longer. Does that help?

I read something similar. 2016 Hyper-V has variants [of checkpoints] I believe (Production and Standard). Production provides a flawless reversion, according to this Veeam article... https://hyperv.veeam.com/blog/what-are-hyper-v-snapshots-12-things-to-know/ I suppose that's another good thing about going Hyper! Upgrading your Host 2012-2016 seems to be relatively straightforward.

Max, I've done this recently and it was easier than I was expecting. The host is relatively beefy, but each VM (1 for DC, DHCP, DNS; 1 for SIMS DB) In fact, the VM didn't need that many resources because I was using SQL 2014 Express (we're a Primary school). Runs smoothly.

:laugh:

Thanks sippo We use Sophos AV and a server based console on a couple of sites. Although I'm thankful it doesn't seem to affect our Sophos products I'm shocked that a security company would rely on a protocol that, from recent reading, is grossly outdated, has been strongly advised against for a while, and clearly has the potential for problems. Add to the fact that Sophos has let a few nasties slip through over the past couple of years, I'm seriously considering moving away from Sophos. In fact, one school has just shifted to BitDefender following a bad experience with Sophos. Come on Sophos, up your game!

You're going to need more than a few updates to achieve your aim. Here's the fruit of my near endless quest at creating a fully patched Windows 7 image. It is a little out of date now, you'll want to check through it all, but I've pretty much finished with creating Windows 7 images now and concentrating my efforts on 10. The list is in order of installation (Online). Notice the Convenience update is at the very end, mostly down to the research of others in this area who seem more knowledgeable than I. ::KB3020369 - Servicing Stack, April 2015 ::KB3177467 - Servicing Stack, September 2016 ::KB2670838 - Platform Update ::GENERAL UDPATES & HOTFIXES ::KB917607 - Error opening Help in Windows-based programs: "Feature not included" or "Help not supported" ::KB2574819 - An update to adds support for DTLS in Windows 7 SP1 ::KB2592687 - Remote Desktop Protocol 8.0 ::KB2645594 LDR - An update is available for computers that have an AMD FX, AMD Opteron 4200, AMD Opteron 6200, or AMD Bulldozer series processor ::KB2646060 - An update that selectively disables the Core Parking feature (Depends on KB2645594) ::KB2685811 - Kernel-Mode Driver Framework 1.11. Warning: Recommended not to offline integrate or Install LDR branch of this update ::KB2685813 - User-Mode Driver Framework 1.11. Warning: Recommended not to offline integrate or Install LDR branch of this update ::KB2695321 - IPsec session takes 5 to 6 minutes to connect to a storage controller ::KB2727994 - You cannot open or save Office 2010 documents on a WebDAV file server ::KB2728738 - You experience a long logon time when on a computer with roaming profiles ::KB2750841 LDR - Update for IPv6 readiness ::KB2752259 - An update that improves the performance of the Printbrm.exe command-line tool ::KB2818604 LDR - Microcode update for AMD processors ::KB2830477 - Remote Desktop Protocol 8.1 ::KB2841134 - Internet Explorer 11 Main Package ::KB2849696 - IE Spelling ::KB2849697 - IE Hyphenation ::KB2872035 LDR - WMF ::KB2891144 - Application does not draw polylines correctly when you run it through an RD Session ::KB2907020 - Location is not available error when you access a mapped network drive after Windows standby or resume ::KB2918833 - Third-party IMEs give users unprotected access to your system ::KB2923766 LDR - Black screen when you plug in a monitor on a computer or open a lid of a laptop ::KB2925489 LDR - You cannot establish an IPsec connection with certain third-party devices ::KB2990184 - A FIPS-compliant recovery password cannot be saved to AD DS for BitLocker ::KB2990941 LDR - Update to add native driver support for NVM Express (NVMe) that uses the PCI Express (PCIe) ::KB3033929 LDR - WMF ::KB3046480 LDR - Update helps to determine whether to migrate the .NET Framework 1.1 when you upgrade Windows ::KB3064209 - Microcode update for Intel processors ::KB3158627 - Hyper-V guest integration components: July 2016 ::KB3161102 - Update to remove Windows Journal components ::KB3172605 - July 2016 Monthly Rollup ::KB3179573 - August 2016 update rollup ::KB3181988 - Update to fix SFC integrity scan error in the usbhub.sys.mui file ::KB3184143 - Update to remove GWX and software related to the Windows 10 free upgrade offer ::KB3191566 - Windows Management Framework 5.1 ::KB4019990 - DirectX 11 D3DCompiler ::SECURITY Updates ::KB2898851 LDR - Security update for the .NET Framework 3.5.1: May 13, 2014 ::KB2900986 LDR - Cumulative security update for ActiveX Kill Bits: December 10, 2013 ::KB3046269 - Vulnerability in Windows Task Scheduler could allow elevation of privilege: April 14, 2015 ::KB3059317 LDR - Security update for Microsoft Common Controls: June 9, 2015 ::KB3150220 - Security update for Windows Media Center: May 10, 2016 ::KB3154518 - Support for TLS v1.2 included in the .NET Framework 3.5.1 ::KB3156016 - Security update for Windows Graphics Component (Direct3D10Level9): May 10, 2016 ::KB3156019 - Security update for Windows Graphics Component (Windows Codecs Library): May 10, 2016 ::KB3159398 - Security update for Group Policy: June 14, 2016 ::KB3161949 - Security update for Web Proxy Auto Discovery (WPAD): June 14, 2016 ::KB3161958 - Security update for Windows Search Component: June 14, 2016 ::KB3170455 - Security update for Windows Print Spooler Components: July 12, 2016 ::KB3210131 - Security and Quality Rollup for .NET Framework 3.5.1 ::KB3217125 - Security and Quality Rollup for .NET Framework 3.5.1 ::KB4014565 - Security and Quality Rollup for .NET Framework 3.5.1 ::KB4015549 - LATEST SECURITY ROLLUP - APRIL, 2017 ::KB3125574 - Convenience Rollup