robyholmes

Secondary School ~ 300 Students & 50 Staff

Its normally due to old stale DNS records meaning your print server thinks its sending the notice to the right machine, but gets the wrong one as the DNS entry is out of date.

Can't find anything and RSOP doesn't show any. There was some in the SYSVOL folder which I've moved to make sure they couldn't be run.

Its happening on new installs and old. I don't think its any locally installed software as it happens on a number of machines but not all the time. I did think about enabling it but then I think it runs on admin but during login so you don't see it.

User accounts are clear of login scripts, I did check that.

Hi All, I'm support a school which has an odd problem I can't get to the bottom of. Both staff and students get a CMD window appear once they've logged on. It states command prompt is disabled so they can't do anything with it but I can't trace where its coming from. They don't run any scripts (Or at least group policy doesn't show any and neither does rsop.msc) and I can't see anything in the start up on the machines. Admin account don't display it but that might be because its already run by the time the desktop is shown. It also doesn't happen every time, it seems random. I'm looking for tips on tracing where this can be coming from? Is there anyway to trace the program which opened the window? Task Manager just shows it as a cmd window? Thank you, Rob

I look forward to it as well. I think this has got more complex for me as some of our IWB computers have ActivInspire installed which comes with its own Flash Plugin. I've got Edge working on these machines but Chrome still doesn't. I'm going to try remove the extra plugin which installs with Inspire and see what breaks. Might as well find out now then our staff can plan for it (Well, plan how to complain they need it after 2020..)

FlashUtil_ActiveX.dll in Windows\System32\Macromed\ Looking at my other rules it should have been covered from what I can see so really not sure why it wasn't. Anyway rule now in place and seems to be working. Odd that it affected Chrome though as well as I thought its Flash was self contained. That's how it updated it. Unless on Windows 10 they use the built in one.

Break through. I've put our AppLocker DLL rules in to Audit mode. GPupdated the machines and restarted and sure enough it worked straightaway in both Edge and Chrome. The only problem now is AppLocker event viewer isn't showing anything blocked (As before) so its a guessing game which DLL it doesn't like.

No, no errors showing in console or network. The account I'm logged on with is an admin so it shouldn't block very much anyway. I think my next step is to change AppLocker in to audit mode and see if it works then. This is what I know so far: Windows 10 1803 Machines with AppLocker - Working in both Windows 10 1903 Tech PC without AppLocker and Chrome installed locally - Working in both Windows 10 1809 Machines with AppLocker - Not working in either Windows 10 1903 Machines with AppLocker - Not working in either Our 1809 and 1903 machines have been upgraded from 1803 so I'm preparing a MDT image with 1903 to try a fresh install as well.

This is what I get in Chrome (Even my new package) All the settings I can find are set to run, the website is in the allowed list. When you right click on select 'Run this plug-in' it just does nothing.

The plugin 'Flash' is allowed to run, in fact the users is even asked about it. It just doesn't. I've got all the group policy settings setup as our 1803 machines seem to be working fine. Its just our 1809 and 1903 machines which can't load Flash. I'm really trying anything now as I can't find anything to point to the cause.

I'd love to but our staff need access to a site which uses it so I need to find a solution. Google Chrome is a App-V package so I've re-packaged it and made sure to load a Adobe Flash page before capturing the package. I'm hoping this will 'pre-load' Flash and solve the issue with Chrome. Edge however I'm not sure on. Currently the laptop I'm testing with isn't installing all windows updates, including a Adobe Flash one so I'm trying to solve that.

Machines running 1903 also have the issue but interestingly Adobe Flash security update is failing to install along with a number of other updates.

I think its linked with the 1809 update as its been reported to have worked on machines which have not updated to 1809 yet. However my machine which doesn't currently have AppLocker applied to it is also working so its a combination of both which seems to be causing it.

Hi All, I've got a odd issue with both Edge & Chrome not able to run flash. I get the 'Allow flash' option which is selected its what happens after that. Edge just loads nothing, so if the page is a full flash page you don't see anything but a background colour. Chrome shows the 'Right click to run Adobe Flash Player' but when you right click and press 'Run this plug-in' it doesn't do anything. I think it might be linked with AppLocker but the AppLocker event viewer shows nothing being blocked. We've enabled the DLL rules as set out in NCSC document here: https://www.ncsc.gov.uk/collection/end-user-device-security/platform-specific-guidance/eud-security-guidance-windows-10-1809 over summer and that seems to have been when it started but I can't pin down exactly which rule is affecting it. Nor can I find where the flash plugin lives in Chrome or Edge to make sure its not covered by the block rule. Thanks, Rob

We used this before we got our MDT & Apps deployment got sorted to allow us to simply re-install quicker than we could migrate. https://www.disk-partition.com/

Thanks, I've added it and we'll see what happens. In the meantime Sophos are investigating as I can't see its still blocking it but it isn't working either.

I'm still struggling with it. I'm getting a 'access denied' error on the exe when trying to run it. Can you screenshot your exception for me?

Check in Teams settings. I found one which blocked 'students' from using it.

I have the same issue as this and found Sophos had detected the service exe as Malware. We'd just moved to Sophos Online with Sophos X and so far I've not been able to restore it long term (Sophos seems to take over again despite me telling it not too). Do you have Sophos?

Have you considered a HVAC system rather than under floor heating? It would solve your ventilation problem. Under floor heating can have a problem of being slow depending on the thickness of your floors.

We used one of these for exactly that job. https://www.aten.com/gb/en/products/professional-audiovideo/video-extenders/ve803/ Cost was around £80 if I remember right. HDBaseT might also be worth a look but likely to be a lot more.

Desktops in each classroom with some more in the staff room. PE staff have laptops & iPads (Which they funded). Some other staff also have laptops (Mainly as they already had them and SLT don't want to force them to hand them back) but we also have some pool laptops which staff can borrow. The direction we're taking is this: - All rooms should have Desktops - Laptop Pool for staff to book (Short term books, not 'I'll have it this term') - Move MIS to allow PE staff to solely use iPads during lessons and desktops during PPA time All the above is linked with our move to Office 365 for storage allowing any device, anywhere to access files. Allowing staff to work how they want, in school, at home. On the beach, up to them! (With MFA protection of course)

Plug a laptop in to the faceplate upstairs to see if you get anything. Might also be worth checking your patch cables at each end.