Scorpio

Hi Guys Seems this GPO below doesn't work anymore or is broken at least in Windows 11 23H2, i've even tried a new build and adding the key and the tray icons just stay there and don't hide: Users > Start Menu and Taskbar > Hide the notification area Registry Hive HKEY_CURRENT_USER Registry Path Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Value Name NoTrayItemsDisplay Value Type REG_DWORD Enabled Value 1 Disabled Value 0 Anyone else come across this or have a work around ? Thanks S

Hi I think ive sorted it! Sods law after posting here. LOL. But posting what ive done to fix it, to help others. Even though it says its not installed, traces must have been left, so run this first: DISM /Online /disable-Feature /FeatureName:NetFx3 Then run the enable script: DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:"\\server\share\net35\sources\sxs" This seemed to fix it. I did run this previous, but not sure its required: DISM /Online /Cleanup-Image /StartComponentCleanup Let me know how you get on! Cheers S

Hi Yes same script as we have and downloaded about 7 versions of the cab and tried them all. Still no joy. Thanks. S

Hi Guys Had some new laptops and as standard we have a script that installs/enables .NET 3.5 on the computers that have the Surpass Exam software, but recently this script isnt working. It fails and you cant even install .net 3.5 from the control panel it fails also. Nothing ive tried will install .net3.5. Forums have said they have had to rebuild the PC and install it straight away to get it on there before anything else. DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:\\{PATH to cab} Ive disabled WSUS and bypassed in GPO to use the internet for Optional Components Used latest versions of the CAB file from 10 22H2 even download the FOD ISO and tried the one on there, even the 11 23H2 version. Tried .Net Repair tool Tried resetting Windows Update with script Tried adding the feature before enabling using Enable-Feature Tried via Powershell: Add-WindowsPackage -Online -PackagePath "\PATH\microsoft-windows-netfx3-ondemand-package~31bf3856ad364e35~amd64~~.cab" Ran SFC RAN DISM Health checks and DISM /Online /Cleanup-Image /StartComponentCleanup All I get is error 0x8000FFFF catastrophic failure. It really doesnt want to install at all. Has anyone had this problem recently as older computers took the .net feature enable script ok and installs and is working with Surpass. Cheers S

Hi All Has anyone got a handy list of the Application IDs for Intune to search and remove/uninstall, I know you can get the ID from the Store Website, but finding them all one by one is a pain, we are moving away from the Powershell scripting way to this method. Also some I really cant find like Candy Crush and Getting Started Is it true We may have to keep a script for a few of them as they don't appear to be in the store ? Many Thanks S

The risk to to the machine, or at least the user will have access to all the control panels to change the look and feel of the machine, showing local disks, which further down the line will cause us headaches. I know they will be limited but will be able to change many things they wouldn't normally do if the polices were already applied on login. When connected to a local server there would be a setting "Wait for Policies". It doesn't seem fit for purpose in a school environment, where you will get them trying the play with every setting if not locked down.

Hi Guys I'm not sure if its just us, but this applies to multiple different schools where we use Intune, the applying of policies, settings, scripts, installs etc is just not acceptable for deploying, as when a user logs in they do not have settings applied to them for some time, meaning this could cause a security risk if the setting is protecting something etc. We've applied a scheduled task to get the SharePoint to sync on login as this is known issue for the folders not appearing for many hours, but just seems to be hit an miss overall and not really workable. Is there any tips or tweaks we can do to ensure the users / devices have the right settings in good time. Obviously we have manually synced from both the machine and portal but still many take a while to apply. Cheers S

Hahaha, yeah we all know how that works out don't we. Like you can treat many users with the same level of understanding. If only hey. I'm shocked there isn't a way to stop this that I can see. S

Hi Guys So nobody has this issue then, have you seen that you can do this and how this can become a big problem? I think this is lacking a setting to stop this, unless I'm missing something obvious here. Thanks S

Hi All I cant find a way to stop users saving into the root of: C:\Users\USERNAME\Sharepoint Folder The Libraries are listed in here fine, but we are having some users saving in the root and this isn't synced, its quite dangerous, leaves the files on the computer and prone to loss if profile is removed. I don't really want to touch the permissions as this may inhibit the creation / Sync of new SharePoint Libraries in the future. There used to be a GPO for this in relation to User Profile to stop saving in the root, but nothing for this. Surely this has caused other people headaches ? Any ideas? Cheers S

Yes, this looks to be because of Intune. As the slider Option is there but greyed out. I've tried al sorts to no avail. Like you say seems weird as surely it should be an option. Somebody could join a pc from any place. I know its not a huge deal but still surely we dont want random pcs showing up in there. Cheers S

Thanks for the input But this wont stop someone at home registering their home computer no ? Cheers S

Hi Free780 What exactly am I looking at in the link? That shows it greyed out too, but doesn't explain how to stop persal devices from being registered? Thanks S

Hi I'm aware of the differences between AAD Join and Register We don't want people registering devices that are not corporate devices ? We just want to AADJoin Devices by an authorised DEM role user, without random machines popping up in AAD as registered. Explain why you think this isn't an issue ? I'm intrigued if we don't want these devices Managed or not on the system. Happy to hear your reasoning. Cheers S

Hi all I've be trying this for ages but cannot for the life of me prevent this from happening. I can prevent Enrolment into Azure AD and I can prevent Enrolment into Intune, but still cannot stop the registration of devices by the users. I've tried conditional access with multiple different Filter for devices: IsCompliant TrustType Deviceownership Still the user can Register a device. Obviously with Intune the Button "Users may register their devices with Azure AD" is greyed out in AAD Device settings page. How have you guys done this ? Thanks S