djwingfield

I have resolved the issue with Windows 7 by applying the following GP settings for both user and Computer, Computer Configuration Administrative Templates > Printers • Only use Package Point and print = Set to Disabled • Point and Print Restrictions Enabled • Users can only point and print to these servers: Enabled ○ Enter fully qualified server names separated by semicolons: FQDN of the print server • Security Prompts: ○ When installing drivers for a new connection: Do not show warning or elevation prompt ○ When updating drivers for an existing connection: Do not show warning or elevation prompt User Configuration Administrative Templates > Control Panel > Printers • Only use Package Point and print = Set to Disabled • Point and Print Restrictions Enabled • Users can only point and print to these servers: Enabled ○ Enter fully qualified server names separated by semicolons: FQDN of the print server • Security Prompts: ○ When installing drivers for a new connection: Do not show warning or elevation prompt ○ When updating drivers for an existing connection: Do not show warning or elevation prompt

Windows 10 Conflicting Time I have a very strange issue with the time service. I have created a very basic build on Windows 10 Education 1511 x64. I have removed a few Microsoft Store Apps (see below), and installed Office 2016. All this has been done in audit mode. I’ve sysprep’d the image using the answer file below. I then capture it to WDS and deploy it to various clients, physical and virtual. It deploys successfully and I can login as a domain user. The client picks up time from the PDC emulator and all is well. However, after anywhere from a few minutes to a few hours the time on the client reverts back to the time it was captured. I think start getting errors in the event log (please see below). Any help would be greatly appreciated. App Packages Removed 'Microsoft.3DBuilder' 'Microsoft.BingFinance' 'Microsoft.BingNews' 'Microsoft.BingSports' 'Microsoft.BingWeather' 'Microsoft.CommsPhone' 'Microsoft.Getstarted' 'Microsoft.Messaging' 'Microsoft.MicrosoftOfficeHub' 'Microsoft.MicrosoftSolitaireCollection' 'Microsoft.Office.OneNote' 'Microsoft.Office.Sway' 'Microsoft.People' 'Microsoft.SkypeApp' Microsoft.Windows.Photos' 'Microsoft.WindowsAlarms' microsoft.windowscommunicationsapps' Microsoft.WindowsMaps' 'Microsoft.WindowsPhone' 'Microsoft.XboxApp' Microsoft.ZuneMusic' 'Microsoft.ZuneVideo' 'king.com.CandyCrushSodaSaga' 'Microsoft.Appconnector' '9E2F88E3.Twitter' Sysprep Answer File true true XXXXXXXXXXXXXXXX Client Event Log Error TIME-SERVICE EventID 34 The time service has detected that the system time needs to be changed by 349871 seconds. The time service will not change the system time by more than 4294967295 seconds. Verify that your time and time zone are correct, and that the time source DEPLOYSERVER.DEPLOYTEST.local (ntp.d|0.0.0.0:123->192.168.121.1:123) is working properly.

I know they use smoothwall for the education network.

I believe this should work ROBOCOPY "Source" "Destination" *.pst /E /sec Sorry cant check if works currently on iPad.

This is correct but volume licensing customers can download the RTM.

synaesthesia - That’s for SCCM 2007. FN-GM - Any luck? You get "removed locally" when you deploy FEP Via the console and its not installed correctly on the client or a software or hardware inventory hasnt taken place since the install.

Hi I use SCCM but I do the following "FEPInstall.exe /s /q" then SCCM client will apply the policy after a hardware and software inventory.

I have heard whispers that it's going to be launched at the MMS 2012, if ture during April.

Thats correct Rabbie Burns with SCCM 2007, you do need SCCM to manage your FEP clients. But with SCCM 2012 its a role stright out of the box.

We use remote tools which is built into SCCM.

I remember somebody on the Serco stand at the bett was plugging Corero Business Systems.

I have used it now for the last year, at a secondary school which I managed. The key reason we implemented it was the saving on anti-virus protection. But it does so much more out of the box, simple OS and software deployment’s with reporting. Personally it has it faults but testing SCCM 2012 these don’t exist anymore.

I had a similar problem with most of our HP printers which was due to the print server having invalid registry keys. The problem was when we migrated our printers from 32bit server to a 64bit server, using the Microsoft Printbrm.exe tool. The invalid key was when SourceDir key had a invalid name. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers\W08-1\CopyFiles\BIDI] "SourceDir"=\\\\OLDSERVER\\print$\\BIDI How we solved the problem was to recreate the printer’s and call it a different name and share name then remove the old printer and all worked again. Another fix which also fixed a crashed spooler, was to change the Previous Names key to hex(7):00,00. Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT 86\Drivers\Version-3\HP Universal Printing PCL 6] "Previous Names"=hex(7):00,00

We use TMG with Websence and hopefully going to implement this after approval I am sure all you need to do is right click on a rule select “Configure HTTP” and change the headers. Let me know if you have any luck with this.

Room Booking - Room Booking System Asset Management - Excel Help Desk - Reception / Email Active Directory Adding Users (Bulk) - admwin Print Management - PaperCut / Uniflow Software Deployment - System Center Configuration Manager Image deployment - System Center Configuration Manager

i belive dism.exe maybe what you are looking for. Deployment Image Servicing and Management Technical Reference

A must have for a domain machine image, RSAT - Remote Server Administration Tools

I would recommend going down the enterprise Route, the main reason for this that you will get every feature available for windows 7, same as ultimate. The two key features that make enterprise essential for your institute are, Bitlocker to go - Encrypt Staff USB drives AppLocker – Enforce software restriction policies Long term you may want to use Direct Access, for staff laptops.

Mine would be better network awareness, being able to set up different proxy per LAN natively. They can do it with printers why don’t proxy settings.

According to “Enrolment for Education Solutions - Offering overview” you are entitled to it as part of your Professional Desktop Platform Suite for Software Assurance.

DaRT is part of the Microsoft Desktop Optimization Pack, I belive you should be able to get in though the Microsoft Volume Licensing site, i use it all the time to fix computers.

Morning, The syntax for SET, "SET /P variable=[promptString]" So what you will need is the following script, set /p key= slmgr.vbs -ipk %key%

Hi James, I belive this is what you are looking for, Remove Sophos script - edugeek Dan

Microsoft System Center: Data Protection Manager

Hi, i use a dsget Script with a dsmod pipe, to activate exams accounts on and off, like shown below. Exam Users - Enable dsget group "cn=10rggn,ou=Controlled Assesments,ou=Exam Users,ou=Users,ou=School,dc=school name,dc=org,dc=UK" -members | dsmod user -disabled no Exam Users - Disable dsget group "cn=10rggn,ou=Controlled Assesments,ou=Exam Users,ou=Users,ou=School,dc=school name,dc=org,dc=UK" -members | dsmod user -disabled yes As you can see dsget looks up the users in the 10rggn group then dsmod change the accounts to enable or disable. Dan