computer_expert

Is it possible that google have bumped up the SSL/TLS settings to something more secure that the printers can support? Office 365 can give you a report of what devices are using older versions of SSL/TLS protocols. I don't know if you can get a similar report from google though.

On a similar note something similar worked well for Toby Price in the Dakar rally this year:

Is there a a backup/scheduled task/AV scan/active directory replication running at about that time killing the DCs or server/client performance? If a backup is running - is your network/server hardware(/hypervisor if virtual) being overloaded?

I found LTSC a real pain when testing it with the original release of Win10 and abandoned it fairly shortly after. I'm pleased I did as SAC seems to work reliably if you stick to the september(ish) releases. LTSC is fine for certain uses (display signage/heavy machinery etc) but IMO a daily driver isn't one of them. This reduction will only hurt the companies that are using it as MS intended.

Looks like the lifecycle has been cut to 5yrs for releases 21H2 and later. https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-next-windows-10-long-term-servicing-channel-ltsc-release/ba-p/2147232

How long before Codemasters games get pulled from steam? (or was it someone else who pulled their games from steam and other app stores recently?) There's been so many great Codemasters games over the years like the early Colin McRae/TOCA games and also Dirt Rally on PC (the sim like one, not the arcade type ones). I also suspect it's partly down to CM having the F1 licence (and WRC from 2023). EA picks up 2 official licences up one fell swoop.

It's documented here. If you licence M365 Education A3 you get AAD P1 (or P2 if you go M365 Edu A5) or it may be bundled as part of another license.

You can import ADMX templates but I fell into the trap of a setting being in a 'blocked' location and it not being enforced by intune policy until I used powershell to set the registry value.

I was going to ask did you remove apps as some will break windows in weird ways if removed. I've had good success using this as a reference: https://www.vacuumbreather.com/index.php/blog/item/87-windows-10-1903-built-in-apps-what-to-keep

Error looks to be about this stage here: Error [0x080389] MIG Failure while calling IDiscovery->Gather for Plugin={ServerPath="Microsoft-Windows-AppX-Deployment-Server\AppxUpgradeMigrationPlugin.dll", CLSID={AE27C1A6-25F2-45FD-9A28-081B81F29E0A}, ThreadingModel=Apartment}. Error: 0x800705B4 Error 0x000005B4 while executing critical action Action,CMXEPlugin,C:\$WINDOWS.~BT\Sources\ReplacementManifests,Microsoft-Windows-AppX-Deployment-Server\AppxUpgradeMigrationPlugin.dll,{AE27C1A6-25F2-45FD-9A28-081B81F29E0A},Apartment. Migration will abort[gle=0x000000cb] Can you try binning the C:\$WINDOWS.~BT folder on a test client. I think it's a hidden folder too Also clear the SCCM client cache (in the control panel applet) and try upgrading again

I'm fairly sure I have sibelius licence server running on server 2019 and I don't think I had any issues during the install. I can't remember what version I have but I think it's something like V8.

Pop these into customsettings.ini JoinDomain=youraddomainname.co.uk DomainAdmin=ServiceAccount DomainAdminDomain=youraddomainname.co.uk DomainAdminPassword=P@$$WoRD MachineObjectOU=OU=yourouname,OU=computers,DC=youraddomainname,DC=co,DC=uk This should stop you from having to populate the domain join details during the deployment wizard. As for WSUS, Windows 10 2004 and newer now combine the SSU and the CU as one update (this was only a recent change within the last month or 2) and you can point the machine towards WSUS by using the following in customsettings: wsusserver=https://server.domain.lan:8531 If not using SSL then use port 8530 instead if that's what your wsus server uses. I moved away from sysprep during the windows 7 days and started using OSDbuilder to customise the WIM (remove apps, install latest patches etc) before deployment. There's another tool similar to OSDBuilder called WIMWitch (that has a UI) that seems to get good reviews but I've never used.

The server needs to be under warranty before you can access the SPP ISOs. If the BIOS contains security fixes you should be able to download without login (look through the previous revision list). That's the case for Gen9 servers but I'd imagine the same applies for Gen8 too.

Autopilot allows you to set the keyboard layout as one of the options in the autopilot profile. It's only applied on newer versions of windows 10 (2004/20H2) though and will only work if you have some form of internet access (ie. connect en ethernet cable) before the oobe starts

Does your unattend file have a section for oobesystem? If it does then this is what is triggering the OOBE process and causing it not reach out to intune autopilot.

If you can figure out what manufacturer made the BIOS (AMI, Insyde, Phoenix etc) you may be able to get hold of the tools to change it. For Autopilot: I think intune uses other bits to calculate the hardware hash rather than just the SN. Is the hash produced by Get-WindowsAutoPilotInfo.ps1 the same on multiple devices?

Have a look at the policy CSPs as not everything can be set for users. Here's the Start CSP that has some settings that can be applied to users and some that can only be set per device: https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-start

Virgin media at least offer the option to turn off their DNS hijacking ("Advanced Error Search") here https://my.virginmedia.com/advancederrorsearch/ But then you would fall into the dark depths of @MatthewL's comment

That may be a bit more tricker now that Windows, Android and iOS use MAC address randomisation.

There's a few logs that the upgrade process creates on the client: https://support.microsoft.com/en-us/topic/log-files-that-are-created-when-you-upgrade-to-a-new-version-of-windows-9ec8aa31-0cc1-a0b2-2d98-e9c6714349b9 I suspect it will be one or more of the following - An outdated driver, antivirus/security software, lack of free disk space or a safeguard hold.

The following post may be of interest for hardware hashes and SCCM: https://oofhours.com/2020/09/28/export-all-your-hardware-hashes-from-configmgr/

These APs will be end of life in just under a month. See this: https://community.ui.com/questions/Select-UniFi-Access-Point-AP-Models-Obsoletion-Date-March-1-2021/65487283-ce9d-49f4-85b9-b6aa54659ef7

I believe it affected windows update too at one point as microsoft lifed the upgrade block at some point in December.

What does mailbox auditing say? https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide Move, MoveToDeletedItems, RecordDelete and SoftDelete would be the Mailbox actions to look for.

It's a bug with the 20H2 install media you used. If you install the latest patches on an older build (e.g. 1909), then upgrade using unpatched 20H2 media, all your certs go missing. The fix is to use the latest 20H2 ISO on VLSC or patch your exising 20H2 media with the latest updates.