Scorpio

Hi Guys Seems this GPO below doesn't work anymore or is broken at least in Windows 11 23H2, i've even tried a new build and adding the key and the tray icons just stay there and don't hide: Users > Start Menu and Taskbar > Hide the notification area Registry Hive HKEY_CURRENT_USER Registry Path Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Value Name NoTrayItemsDisplay Value Type REG_DWORD Enabled Value 1 Disabled Value 0 Anyone else come across this or have a work around ? Thanks S

Hi I think ive sorted it! Sods law after posting here. LOL. But posting what ive done to fix it, to help others. Even though it says its not installed, traces must have been left, so run this first: DISM /Online /disable-Feature /FeatureName:NetFx3 Then run the enable script: DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:"\\server\share\net35\sources\sxs" This seemed to fix it. I did run this previous, but not sure its required: DISM /Online /Cleanup-Image /StartComponentCleanup Let me know how you get on! Cheers S

Hi Yes same script as we have and downloaded about 7 versions of the cab and tried them all. Still no joy. Thanks. S

Hi Guys Had some new laptops and as standard we have a script that installs/enables .NET 3.5 on the computers that have the Surpass Exam software, but recently this script isnt working. It fails and you cant even install .net 3.5 from the control panel it fails also. Nothing ive tried will install .net3.5. Forums have said they have had to rebuild the PC and install it straight away to get it on there before anything else. DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:\\{PATH to cab} Ive disabled WSUS and bypassed in GPO to use the internet for Optional Components Used latest versions of the CAB file from 10 22H2 even download the FOD ISO and tried the one on there, even the 11 23H2 version. Tried .Net Repair tool Tried resetting Windows Update with script Tried adding the feature before enabling using Enable-Feature Tried via Powershell: Add-WindowsPackage -Online -PackagePath "\PATH\microsoft-windows-netfx3-ondemand-package~31bf3856ad364e35~amd64~~.cab" Ran SFC RAN DISM Health checks and DISM /Online /Cleanup-Image /StartComponentCleanup All I get is error 0x8000FFFF catastrophic failure. It really doesnt want to install at all. Has anyone had this problem recently as older computers took the .net feature enable script ok and installs and is working with Surpass. Cheers S

Hi All Has anyone got a handy list of the Application IDs for Intune to search and remove/uninstall, I know you can get the ID from the Store Website, but finding them all one by one is a pain, we are moving away from the Powershell scripting way to this method. Also some I really cant find like Candy Crush and Getting Started Is it true We may have to keep a script for a few of them as they don't appear to be in the store ? Many Thanks S

The risk to to the machine, or at least the user will have access to all the control panels to change the look and feel of the machine, showing local disks, which further down the line will cause us headaches. I know they will be limited but will be able to change many things they wouldn't normally do if the polices were already applied on login. When connected to a local server there would be a setting "Wait for Policies". It doesn't seem fit for purpose in a school environment, where you will get them trying the play with every setting if not locked down.

Hi Guys I'm not sure if its just us, but this applies to multiple different schools where we use Intune, the applying of policies, settings, scripts, installs etc is just not acceptable for deploying, as when a user logs in they do not have settings applied to them for some time, meaning this could cause a security risk if the setting is protecting something etc. We've applied a scheduled task to get the SharePoint to sync on login as this is known issue for the folders not appearing for many hours, but just seems to be hit an miss overall and not really workable. Is there any tips or tweaks we can do to ensure the users / devices have the right settings in good time. Obviously we have manually synced from both the machine and portal but still many take a while to apply. Cheers S

Hahaha, yeah we all know how that works out don't we. Like you can treat many users with the same level of understanding. If only hey. I'm shocked there isn't a way to stop this that I can see. S

Hi Guys So nobody has this issue then, have you seen that you can do this and how this can become a big problem? I think this is lacking a setting to stop this, unless I'm missing something obvious here. Thanks S

Hi All I cant find a way to stop users saving into the root of: C:\Users\USERNAME\Sharepoint Folder The Libraries are listed in here fine, but we are having some users saving in the root and this isn't synced, its quite dangerous, leaves the files on the computer and prone to loss if profile is removed. I don't really want to touch the permissions as this may inhibit the creation / Sync of new SharePoint Libraries in the future. There used to be a GPO for this in relation to User Profile to stop saving in the root, but nothing for this. Surely this has caused other people headaches ? Any ideas? Cheers S

Yes, this looks to be because of Intune. As the slider Option is there but greyed out. I've tried al sorts to no avail. Like you say seems weird as surely it should be an option. Somebody could join a pc from any place. I know its not a huge deal but still surely we dont want random pcs showing up in there. Cheers S

Thanks for the input But this wont stop someone at home registering their home computer no ? Cheers S

Hi Free780 What exactly am I looking at in the link? That shows it greyed out too, but doesn't explain how to stop persal devices from being registered? Thanks S

Hi I'm aware of the differences between AAD Join and Register We don't want people registering devices that are not corporate devices ? We just want to AADJoin Devices by an authorised DEM role user, without random machines popping up in AAD as registered. Explain why you think this isn't an issue ? I'm intrigued if we don't want these devices Managed or not on the system. Happy to hear your reasoning. Cheers S

Hi all I've be trying this for ages but cannot for the life of me prevent this from happening. I can prevent Enrolment into Azure AD and I can prevent Enrolment into Intune, but still cannot stop the registration of devices by the users. I've tried conditional access with multiple different Filter for devices: IsCompliant TrustType Deviceownership Still the user can Register a device. Obviously with Intune the Button "Users may register their devices with Azure AD" is greyed out in AAD Device settings page. How have you guys done this ? Thanks S

That's worked, thank you all so much, that must have been a recent change. Google loves to change everything every day... Nightmare! Cheers S

Hi I've had a look and cant see a "Search And Assistant" app in that section ? Many Thanks S EDIT: Found it on next page... doh.... WIll give it a shot! Cheers.

Having similar / same issues with the Chromebooks constantly popping up "before you continue to Google" every time the browser is opened, and you click accept and close the Chrome Browser and it pops up again, if you type Gmail.com in the top the top right changes to the users name, then when you close the browser the pop up asking to accept appears again and top right shows sign in? Anyone got to the bottom of this, Ive powerwashed the device and it does it for new users too. ChromeOS is updated, i've powered on and off the device. Cheers S

Ive tried everything and nothing seems to stop this? S

Hi Yes that's the version there. Still asks to accept each time.... S

Thanks everyone. The problem seems to be the Chromebook is constantly popping up "before you continue to Google" everytime the browser is opened, and you click accept and close the Chrome Browser and it pops up again, if you type Gmail.com in the top the top right changes to the users name, then when you close the browser the pop up asking to accept appears again and top right shows sign in? Its not in incognito mode and cookies are on, if there anything else that would cause this behavior, Ive powerwashed the device and it does it for new users too. ChromeOS is updated, ive powered on and off the device. Any more ideas? Thanks S

Hi Guys Seeing a strange problem recently when logging into a managed Chromebook, each time the user is presented with the Google User Acceptance Screen and the SSO doesn't seem to carry through to the Google apps, or not fully at least. The sign in button shows instead of the user who has logged in, but clicking it doesn't seem to do anything, however if they click a document it knows its that user and the top right then changes to the user for that moment, then when you go back to Google to search the UAP pops up again and you have to accept again and the top right shows "Sign In" Google Classroom doesn't show in the Tiles either, however it seems to partially know the user is logged in but not seamless as before. Nothing has changed from our side, but clearly something has on the back end. Also the users reports not being able to save password for new users or new sites added. Any of you had any similar issues ? Thanks S

Wow, thanks for your efforts on this, most helpful, I will give it a go and see how I get on. Thanks again! S

Here you go fella, thanks. https://www.sharp-cee.com/cps/rde/xbcr/documents/documents/Service_Information/Software/PenSoftware_current_version_installer.zip

Yes, I've tried that doesn't install, also tried switches on the EXE for silent install as a start-up script. Thanks for the input though. Anyone else got anything? Thanks S