-
Posts
1,598 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by Duke5A
-
Are you using the webcam on the Chromebook for recording? If the app you're using doesn't support different codecs then I would just look for another recording app that does what you need to do rather than transcoding.
-
What kind of printer? Noticed this exact issue just a couple weeks ago after I setup a new HP Laserjet M608 for our business department. There are two drivers available: one written for that specific model printer series, and the second being the universal driver. The HP universal always gave me issues in the past so I used the series specific at first. Printing worked just fine, but then I started getting complaints regarding PDF files take a geological age to print. Sure enough after switching to the universal it alleviated the issue. Haven't noticed any other problems since.
-
I've got WDS working with UEFI and BIOS booting. If you have any trouble, let me know and I can post my DHCP configuration and answer files. As stated though, MDT might be a better solution if you're starting from scratch.
-
Domain accounts don't get local administrator rights to a computer unless there is a domain policy object specifying such. By default a newly domain joined computer's object is placed in \ organizational unit. You can't attach policies their in AD anyhow. You would have to change the default location for newly created computer objects another OU with policies attached that grant domain users local admin rights. You shouldn't be using domain accounts anyhow for the auto login step. Use the local administrator account instead to wrap up post-image tasks. Are you rolling your own images are just going right from installation media?
-
Don't know if anyone here runs Symantec AV in their environment, but I figured I'd toss this here to try and save someone a headache. I got into work this morning to a slew of complaints of Chrome not working. When trying to render a web page it would crash with an 'Aw Snap' page. Thought it might have been related to a bad plugin or something, but nothing worked. Turns out Application Control in Symantec doesn't play nice with Chrome 78. Adding an exception to the SEP management console for the Chrome executable solved the issue. https://windowsreport.com/google-chrome-aw-snap-crash/ https://support.symantec.com/us/en/article.tech256047.html
-
I used WMI profiles between the XP and 7 migration years ago. They work exactly as advertised, but when going from 7 to 10 I just tossed all the clients into the same OU together and everything played nice. Still got a few 7 machines on the network and no issues between three different revisions of 10. Not that I have very complex computer policies though... The command line utility 'gpresult' is good for checking the WMI filtering.
-
I'm not sure how a Smoothwall functions, but can you set it up to where it has two NICs and acts as a router so you can just set the default gateway on your clients to point to it? Either that, or give the clients an actual gateway and maintain the ACL on your firewall to block web traffic from all sources with the exception of the Smoothwall box. Then you could open a hole for the BBC player's destination.
-
Do you want a specific user or group of users exempt from the policy? In Group Policy Editor under the Delegation tab of the Chrome GPO you'll find a section where you can add users/groups and deny them read permission to the GPO. This will prevent it from apply to those users.
-
I know I'm a bit late to the party, but I've used this in the past: https://guacamole.apache.org/ It's an RDP gateway that is HTML5 based, so a web browser is all that is needed to connect. It's pretty slick and works great on mobile devices.
-
You mentioned they're supplying filtering. Maybe try the speed test again during off hours?
-
For what it's worth I use this for a single group with six tiles arranged in three horizontal, two vertical: LayoutModificationTemplate Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"> I don't know if your Explorer link is like that in your actual file, but you have a space in the path where there shouldn't be one. Outside of that it should work. I don't use multiple groups in my XML, but I did notice your second group has it's position defined as starting on column two. This would cause it to go to the right of the first group rather than underneath it. That column field needs to be set to zero. It takes some screwing around with. The export PS command always screws it up.
-
Hey there, those drivers were actually ripped out of a Notebook 14 installer. I think it's just the HID device that needs the new one. Just point it at the root directory containing the contents of that zip and let Device Manager fish the one out that has the correct device ID in the INF. As soon as it's loaded touch should immediately start working correctly.
-
I have no experience with said software, but do the users attempting to run it have local admin access to the computer? If it actually requires local admin rights, but isn't smart enough to invoke a UAC prompt, you can specify that the application be ran with admin rights under the compatibility tab in the shortcut's properties.
-
Script to report folders in C:\users and store results centrally?
Duke5A replied to kennysarmy's topic in Windows 10
How do you have it running now? Login scripts run under user credential and startup scripts run under local computer credentials. Might be easier to run a batch script with something like this: net use z: \\dc01\netlogon\uc /user:username /password:password dir C:\users > z:\%computername%.txt net use z: /delete ...or as recommended earlier using a scheduled task at startup as you can pass alternate credentials to that as well. -
Same here. Just enable the TPM in the BIOS if it isn't on already and configure bitlocker in GPO to store the keys with the computer's Active Directory object. It's all seamless as far as the user is concerned. If you need to find an encryption key that can be done through ADUC after you install the bitlocker feature on the server.
-
Notebook 11 installs and runs fine with the exception that touch recognition/interaction is all sorts of goofball. We run into the same issues you're describing only with the old style boards. We don't have their interactive projectors. What I did to workaround was to shoehorn the 2014 drivers in after installing Smart 11. After that the interaction worked fine on the boards. I can save you the hassle of trying to strip them out of the 2014 installer. I'll attach a zip that contains the actual drivers with the INFs. Just find the Smart interactive device in Device Manager and update the drivers with the attached. Works for us. Cheers! Smart Drivers 2014.7z
-
Just flipped over to LTSC 2019 from 2016 LTSB. No issues at all. We're a Google shop, so there is no integration with MS's cloud services needed.
-
Move Cisco Wireless Control Server (WCS) to a New Windows Install
Duke5A posted a blog entry in Duke5A's Blog
Just documenting this in case some other poor soul is stuck running this garbage and needs to move it from one Windows Server install to another... I have the bad luck of still having to support this and it was originally loaded on a 2003 x86 server that was upgraded in place to 2008 x86. It's now 2019 and server 2008 will no longer be getting security updates past January 2020. There is no migration path from 2008 x86 to something newer. So, WCS needs to be either moved or reloaded onto something newer. The original plan was to spin up a fresh load and import the configuration backups. Herein lies the problem...even if you have the original installer for WCS it does two OS checks and won't proceed unless it detects server 2003. The first check can be bypassed simply by using compatibility settings on the self extracting exe, but the second check is performed by an installer written in Java. So this was a dead end, or so I thought. Turns out the entire thing is written in Java and served out via Apache. For the most part it is very self contained with everything residing in its own install folder. Do this... Copy the WCS install folder off of the old server Copy Start Menu program group Export the registry keys for its two services (Apache and WCS) Load new server (I used 2019) and give it the same hostname as the old server Copy the install folder back to the new server Copy the Start Menu group over Import the registry keys Open 443 and 80 on the local firewall if it's running Start the services Give it a couple minutes to catch its tail and open it up in a web browser Done! Only four things of note: I kept the original file pathing the same between both servers It's imperative you use the same hostname on the new server as the license will fail The service controls in the Start Menu program group need to be run as an administrator or they won't work. Probably a UAC thing... I'm running WCS 7.0. Your mileage may vary with other versions. If you look around the net everyone will basically tell you not to try and Cisco had their reasons for only supporting 2003. Well, it's crap... The entire thing is written in Java. The whole point of that is it'll run on a toaster if you wanted it to. The whole thing stinks of planned obsolescence. Basically the same thing as the expiring built-in certs in the access points. I hope this helps someone out there.... -
We've been getting calls from out of State vendors that are spoofing the caller ID (another failing of the US telco industry) to make it look like they're local, thus increasing the chance of a pickup. I can't ignore these calls because I get a lot that are from vendors and contractors we actually do business with. I really do despise the sales industry.
-
Windows 10 not applying Startup GPOs - not waiting for network
Duke5A replied to ass17's topic in Windows 10
Saw this in June with 1903. Computer Configuration > Administrative Templates > System / Group Policy: Specify startup policy processing wait time Set it to enabled and give it a value of 30 seconds. What baffles me is 30 seconds is the default waiting period if this policy isn't configured, but Windows just ignores the default. Enabling and setting the default value then magically Windows pays attention to it. -
Fresh HAP V10 Installation on Server 2019 - Error 404.3
Duke5A replied to RCoon's topic in Home Access Plus+
I just went through this and blew a good portion of the day getting it working. It was a fresh load of Server 2019 as the old install was 2008. I'm trying to get everything updated before it goes EOL. Do not use HAP 10.6 as it will do that endless loading bug when attempting to access shared folders. Version 10.5 does not have this bug. Anyways, the video guide even though it's for V8 is still relevant for V10. You need to make sure you have ASP .Net installed before going through all of this as a stock IIS install does not include it. When adding the IIS role: Web Server (IIS) > Web Server > Application Development .Net Extensibility 3.5 .Net Extensibility 4.7 ASP.NET 3.5 ASP.NET 4.7 You're going to need the installation ISO of Server 2019 to complete this step. Mount it and add '\sources\winsxs' to installation path. As noted prior in the thread be sure to take out that snippet on the web.config regarding IIS8 or the CSS will be messed up. The above should give you what you need to proceed and the video will cover the rest. -
Depends on what your software load looks like, but I haven't run into any problems with our staff laptops running Win10 LTSB with Office 2016 installs on 256MB SSD. I think that load is only about 30GB. Was running the same on their old laptops and those only had 128GB.
-
It has nothing to do about the licensing costs LTSC users pay and everything to do about cultivating an ecosystem. The warnings regarding LTSC as being extremely limited in use comes from their marketing department. The actual road map that I concern myself with is the one that tells me what the product life cycle is, in this case 2024 as opposed to 2020 for their regular channel. Besides, if something truly life altering were coming over the horizon plenty of warning come through press releases. Building another image is not that big of a task. ...and yes, static is exactly how I want my machines to be. You don't get that with bi-annual forced feature/UI updates. Will the defer work? Will the upgrade fail halfway through and brick the user's device? Need to remove candy crush again? Who knows! A good number of users get lost if icons are even so much as out of place. Consistence is exactly what I want and I get that with LTSC. Like I said in my original post: know the limitations and pros of each edition and choose accordingly. There is nothing wrong with using LTSB/C for regular usage in an organization - been doing it since 2015. The major drawback is not having supported access to their cloud offerings - none of which we use.
-
5k students 7 buildings Private fiber 70 switches Wireless - 180 access points CCTV - 190 cameras 600 Chromebooks Lots of Windows machines Cluster consists of: Three hosts - Dell R710 One SAN - MSA P2000 G3 Two switches for storage I honestly don't see the need for multiple SANs. The P2000 I'm running has redundant controllers with redundant links to the storage switches. Hosts have redundant links back to the switches. Only way I could see using local storage on the hosts is if you're using vSAN, or whatever MS's equivalent to it is. If you're in the VMWare crowd then you should already know vSAN is nothing but a headache. Can't speak to MS. All three hosts are diskless and boot from an SD card. Through upgrades over the years one host has enough resources to handle all the virtual machines. Veeam runs backups each night that are in turn replicated to one of the other buildings. Got an offline backup server that gets switched on every week for jobs on top of that. If there was a major failure with the SAN getting back up wouldn't be quick, but honestly, we've got a four hour support contract through HP for it. I do still keep a physical domain controller and two more on another offsite host.
-
Depends on what you need out of your Windows machines. We're a Google shop and don't use anything in relation to MS's cloud services, so LTSC was a simple decision. If you use their services and Office365 then going with LTSC would be akin to cutting yourself off at the knees. For us though, no Cortana, no store, no Edge and security updates for years is what sold it for us.
