computer_expert

I think 10.6 may be too old for profile manager - I think workgroup manager is the equivalent for 10.6

The T20s have Gigabit ethernet depsite what the (sometimes incorrect) spec sheet says

If you are not quick, reader will be gone in a flash of fireworks

If it's After Eight you should get a good nights sleep

Oh fudge, I was going to say that

One can only Dream of more puns...

I wonder how many of their servers throttled up for takeoff once power was restored...

Annoyingly, no. I think they are trying to push Sophos Home as a replacement instead. I had to uninstall the UTM endpoint AV before I could upgrade a machine to windows 10 due to incompatibilities.

Only the old UTM has the 50 IP limit - the new XG firewall doesn't have an IP limit (think its hardware spec restrictions now instead). However the XG FW was awful when I tried it (admittedly it was a month or so after release so no idea how much has improved since).

Well, we do have Hammond and May so far. Add Clarkson into the mix and it certainly would be mayhem!

Sometimes I find that cutting off internet access before it starts the checking for updates process works (or at least speeds up the process when you try to manually install updates!)

My response to that is 406....

If the demo of SLRE is anything to go by, you can drive a whole stage with the handbrake on.

Also been playing it on steam during early access. Can't agree more with the controller comment (although you do get the occasional !). Just getting used to flying finland but haven't yet mastered sweden without embedding the car into a snow bank...

I use WPP and it works very well for me pushing out adobe updates (flash/reader) from their scup catalogue. If you use the WPP generated self signed certificate, you'll need to export the certificate from WPP (Tools > certificate > save button) and add it to the needed certificate stores (trusted publisher and trusted root certification authorities) on the clients, then set the allow signed updates from wsus (The exact name escapes me now) via GPO. edit - @pete 's method is the way I do it but I had trouble where it didn't like my internal CAs certificate (despite working fine previously) so switched back to self signed instead.

I think it has been superseded by the TS150 (however they still seem to offer the cashback on the TS140 if you can find it). The alternative from HP is the ML10, Dell is the previously mentioned T20. Just don't forget about the active support contract thing to download HP firmware/bios updates after the warranty runs out.

I bind macs to AD then use the enrolment profile to enrol them to profile manager (so that they can be locked down). When setting up restrictions, I'd create an open directory group then add the AD group as a member of the OD group (assigning the restrictions to the OD group rather than the AD group) as I don't think you can assign restrictions directly to AD groups. As above, I bind the macs to AD rather than OD (and when looking into this I seemed to get the impression that the golden/magic triangle was for older (10.6 & below) OSX versions). Joining the mac server to the AD domain should make the AD users/groups appear in profile manager. Can't really help with this one but there is an option in one of the PM restrictions (login items?) to add an icon in the dock for a network home drive (pulled from AD)

do you have a pause step (or something running ltisuspend.wsf) in the task sequence?

I seem to remember messing around with the following 2 files: com.apple.finder.plist com.apple.sidebarlists.plist However I couldn't seem to get it working in yosemite. Not tried El Cap yet so unsure if it works.

The older UTM 9 does, but the new Sophos XG UTM doesn't have the endpoint protection features.

Have you seen this for acrobat? https://helpx.adobe.com/creative-cloud/packager/deploying-acrobat.html It's an annoying way but this is how I deployed it (to just one machine though...) Building packages is dependent on your internet connection for the initial download of the installers (which are then cached for later use if needed) and updates. Just as a comparison my C2D based box takes no more than an hour to download and build a package of 5 CC applications. The oldest machines (single core CPU, 1GB ram and some also have IDE HDDs) take around 30-40 mins to install two separately packaged applications (MSI deployed via GP) depending on how much load my fileserver is under. edit - also make sure that your proxy isn't filtering anything and that you build the packages on a machine that has NOT had any adobe software installed (thanks adobe!)

Have a look at dell's command & configure tool - this should allow you to create a config that enables this setting (depending on model) and push out the generated exe via startup script/sccm/MDT etc

My NPS server seems to be OK with a self signed certificate (the only reason I do this is I don't have any spare metal to set ADCS up on). If you set up an offline root CA along with a intermediate CA you may be able to do this using virtualization, as the Server 2012R2 licencing allows you to set up a hyper v host (just hyperv on the bare metal, nothing else) and have 2 virtual instances of 2012 R2 running as VMs. I can't really help with any of the other points but hope the above helps you.

You can copy the Sources\SXS folder to a network share and setting this policy means you don't have to fart around trying to find an ISO/DVD every time. I've used this on a vanilla network, but am unsure if it will work on something like an RM based network. As for installing it manually, there is a link at the bottom of the window (in server manager - just before you click install) that allows you to type a path to the location of the sxs folder. I've usually had good luck trying to open stuff with 7zip. If you can convert the 2012r2 image to an ISO you should be able to double click the iso and server 2012+ should mount it with no extra tools required.

What happens when you put the full path to the MST in the command? "\\servername\applications$\Office 2013\setup.exe" /adminfile "\\servername\applications$\Office 2013\office2013.msp" Alternatively you can put the MST into the 'Updates' folder within the source office files and leave the adminfiles switch off. The office installer looks for the msp in the updates folder before installing so should pick it up. Make sure that the account you use to log into MDT (at the very beginning of the deployment process) has a minimum of read only access the network share where the installers are located. This is the account MDT uses for any network resources.