Blue_Cookeh

*grumble grumble we have tools to do this with O365 but no one consulted me* we use GovernorHub.

SCCM should be managing the WDS setup, you shouldn't ever need to touch WDS directly when using SCCM for deployment. Your best bets are to go into the SCCM Administration part of the console and check the status messages next to all the SCCM site components, then you should right click > view log files and scroll through the relevant log files. SCCM's logs are far more useful and verbose than the Event Viewer logs in Windows. What PXE errors are you getting? Have you looked in SMSPXE.log or distmgr.log? (I believe it's in c:\Program Files (x86)\Microsoft Configuration Manager\Logs, or something along those lines). Also, try reinstalling the WDS stuff for SCCM, you can use this post as a general guide: https://www.windows-noob.com/forums/topic/6447-sccm-2012-pxe-point-reinstall/

It's a bit more enterprise-y and corporate, but have you seriously considered RedHat certifications? They're hard but they're much more respected in the industry and will definitely help you get jobs in future.

It should work fine. We run UniFis with 3 SSIDs at the moment. Main - VLAN1 Mobile - VLAN2 VOIP - VLAN900 VLAN1 is our native untagged VLAN, the other two are tagged.

Screw it, Movie Maker it is! Ta guys

Hey, I've got a couple of teachers who need a simple movie editor on their machines, but I'm not really sure what to offer... They asked specifically for Windows Movie Maker but it's been out of support since Windows 8 by the looks of it, and we have Windows 10 deployed so that's a no go. Any ideas? Cheers

They have? Time and time again they have said LTSB is for highly available devices that don't change such as ATMs, PoS machines etc. They have forced Education on us by taking away Enterprise licensing from EES. They probably haven't given us an Education LTSB edition because it doesn't align with their business, and it keeps their SKU count down. If I'm installing a piece of Digital Signage in our school? LTSB. If I'm deploying an IT suite? Education.

Who's reimaging PCs? It's an update you can deploy. Funnily enough see HERE about reinstalling apps. I don't get why people are making a big deal out of the Modern Apps, we have a script in our SCCM TS to remove them, it probably adds <1 min to our deployment time.

I'm glad I'm not the only one that deployed Education! I was getting a bit worried there

It will do in the next major LTSB release, but from what I understand will require a traditional in-place upgrade/reinstall as/when Microsoft release new versions. https://technet.microsoft.com/en-us/itpro/windows/plan/windows-10-servicing-options I still stand by my LTSB is a no go statement!

Your Mac is picking up a different hostname from DNS (probably ends up being the previous computer that had that IP address, or a derivative of the Mac's MAC address). Use this command in terminal to forcefully set the hostname: sudo scutil --set HostName 'PERMANENT-NAME' or you can go to System Preferences > Sharing > Set computer name. Click the "Edit..." button, you'll see a setting for "Use dynamic global hostname", which you should untick. Also make sure DNS scavenging is enabled on your network's DNS servers!

Maybe I'm just used to it, we've always pulled laptop out of trolleys for maintenance regularly! I see reimaging trolleys of laptops a lot more time consuming than a 2 minute look over for issues/login for updates! I know of a relatively large org. that's currently deploying Windows 10 en masse (>20,000 employees) using self-service who are on CB, so it can't be that bad!

I accept there's a deadline, but so far it hasn't caused us a problem. Staff accept that during holidays they will be pulling updates from us and to expect this since they rely on their laptops during term time, and we have time set aside to pull laptops out of trolleys or WOL our desktops for this, so again it's mitigated any problems with updates happening during school time. Maintenance schedules in SCCM gives us as lot of flexibility as to how our updates are applied. You can still hold back updates using SCCM just as you can with previous versions of Windows, there's no reason for me to approve build updates until half terms/holidays.

managed properly WSUS/SCCM sorts that problem out nicely. We've been running Win10 CB since it was available for both students and staff without any issues

Regarding LTSB: https://technet.microsoft.com/en-us/itpro/windows/manage/introduction-to-windows-10-servicing https://technet.microsoft.com/en-us/itpro/windows/plan/windows-10-servicing-options You're creating work for your self further down the line. Why not manage the OS & it's updates properly and reap the benefits later on?

Microsoft specifically don't support the use of LTSB as a general purpose workstation OS. You never know what features/updates Microsoft will release for it, since it's made for things like ATMs, factory machines, PoS etc. Use the supported OS IMO, stick with Education or Enterprise if that's what you're licensed for

We got Iiyama 22" monitors and basic Logitech keyboard/mice from Insight UK, and some Intel NUCs (upgraded to 120GB SSDs) from @VeryPC; which I am very pleased with. Got 3 year warranties on them too. I think total cost per PC & peripherals ended up at about £300ish? Deployed them last week and the performance for these little machines under Win10 is as expected, fantastic. Also Windows 10 seems to have literally all the necessary drivers built in already, that made imaging with SCCM even easier! I don't know what you guys are putting on your machines, but I think you're all severely overestimating the power you need (although I'm a big fan of the NUCs, you can get them up to i7 and 16GB RAM I believe).

Those are permissions issues with your mandatory profile, have a look at the file/folder/registry permissions.

Rarely. It isn't designed for desktop use, it's meant for ATMs, factory machines etc.

Microsoft EMET, AppLocker etc etc.

No company is exempt from the occasional blip, and as annoyed as our school was with the poor service just after signing up, SB did seem to be working hard to fix the issues. Ever since they implemented the final fix (last week, or week before?) our connection was back to being rock solid as it was when first installed. Also their communication during these outages were pretty much second to none. Every time it happened on a different day and we went to call support they already had a message on their auto attendant, and once we were on the mailing list we had updates every couple of hours about any issues that were going on, not just our own. A bumpy start for us, but I think I would still recommend them.

Just to confirm the bold bit. You can use your 1 Standard license to license the physical Hyper-V host (provided NO other role is running on it) + the 2 VMs on it. This is how we have our's, x2 Standard licenses so we can have two Hyper-V hosts with 2 VMs on each. This was confirmed with Microsoft licensing, and our partners, directly in the past. FTE was also confirmed at 200 hours per year if they have access to computers for work (not including POS systems etc). EES works out great for us in this regard, since our FTE is low but our PC count is relatively high (although not for long :/) ... although Microsoft themselves don't seem to understand their licensing at times.

Hi All, I'm trying to go for a BYOD style plan and was wondering how you guys did it? We have some users (governors for example) that need Internet access whilst on site, but not network access. How would you go about this? I don't want to give them access straight onto the Internet, we'd still rather be logging traffic against specific users. I thought about 802.1x authentication on our WAPs but I'm not entirely sure what to do about the certificate, since their devices wont trust our CA. Ideally, I'd like a captive portal type scenario which will authenticate users against AD and pass this on to Lightspeed somehow since this seems like the most unobtrusive way of doing things. I know Lightspeed has a captive portal, but this doesn't seem to have any sort of granular control (so I can disable it on our curriculum LAN). Any ideas?

SCCM can be very granular in it's permissions. You ought to get onto the LA and keep forcing their hand on this, they can give you as much or as little control as they want in SCCM.

AFAIK you should be using SCCM to manage "ring" updates, rather than rolling out whole new images?