dmanning

We had this same problem with a lot of Acer's we purchased a few years ago and had to do a back and forth with them and MS and CDWG. We had to have Acer make/give us a BIOS update which took about two weeks to correct the issue. Here is a good reference document on MS's site. Most times you can get the vendors to release an updated BIOS to correct the problem. https://support.microsoft.com/kb/942962

One of our guys made a VBS script for our SCCM Task Sequence which might help point you in the right direction ... feel free to copy and adjust it to your environment as you see fit: Dim sNewComputerName, oTaskSequence, sTSMachineName, bPromptName Set oTaskSequence = CreateObject ("Microsoft.SMS.TSEnvironment") ' Get the name the computer is set to receive and truncate to first 6 letters sTSMachineName = lcase(oTaskSequence("_SMSTSMachineName")) If left(sTSMachineName,6) = "minint" Then bPromptName = True ElseIf sTSMachineName = "minwinpc" Then bPromptName = True Else bPromptName = False End If If bPromptName = True Then Do sNewComputerName = InputBox ("ACSD standard computer name. 15 Characters MAXIMUM.", "Computer Name", , 30,30) Loop While Len(sNewComputerName) > 15 oTaskSequence("OSDComputerName") = UCase(sNewComputerName) End If

What are you using for your proxy server? TMG?

If that thread doesn't help then the only things I can think of are: 1. Change http://wsus:8530 in your GPO to your FQDN ( http://wsus.contoso.com:8530 ) 2. Double check and see if it was installed on port 80 instead of 8530 ... then you would just need http://wsus.contoso.com for your WSUS settings 3. Make sure port 8530 is open on the Windows Firewall on the WSUS server

Try this thread ... post number 6 and beyond ... seems similar to your issue: Download failed, error = 0x80244017 - WSUS Support Forums

^This as he said... And if you want you can also change it from "CREATE" to "UPDATE" and then in the Common tab uncheck the box for Apply once and do not reapply. This will make sure it processes every login. Just note that it will be a tad slower logging on to process the group policy each login.

Anything useful in the event viewer of note?

Try adding your domain to your local intranet settings in Internet Explorer. Internet Options --> Security Tab --> Sites --> Advanced --> Add I'd put in the FQDN too.

Yes with the steps I provided it works with a Computer in the OU ... if you want to use users instead you need to switch it to where your Users are and select Users in OU option. We found it was easier to map printers based on the computer location rather than the user since users move around a lot. Make sure you only set one of the two printers to be the default. I can't remember but I want to say having it second in the list and making it the default worked better, you'd have to tweak it until you get the results you desire, but it sounds like you're almost there.

Killed my excitement with that link. We were hoping we were on to something since we only see the buffer overflows on affected profiles. From the log the only things in there are Microsoft files, along with the Bonjour (Apple) entry in the log and the Microsoft Forefront TMG Firewall client we use.

Getting Buffer Overflow errors see attached:

Sorry, you'll need these settings as well:

Here's a screenshot of our GP setup. We break down all of our Workstations --> Building --> Room Then we have a workstation policy for that building with the following settings and utilize the printers there. This way it always maps the printers (even USB printers) for any user that logs in to that room without the need for a VBS script. It's been working flawlessly for us for almost 3 years now. Takes a little work to get it all in the GPO's but once it's there it's not so bad. Just make sure you have a good policy in place if your technicians replace/add a printer so it gets updates. Edit: I should also note that we set it up so that each of our school buildings only show their buildings printers if they manually add a printer, which makes it a lot easier if they can't find theirs or want to print to an alternate location. We just trained them to add them manually as they need them, and auto-map the most logical/closest printer. This also works for us because we set our computer names to BUILDING-ROOM-SERIAL.

The only updates we've done on our network are your standard Windows Updates, plus software updates like Java, Adobe, etc which release almost every other day. We use Microsoft's own Endpoint protection 2012 and we put in exceptions for said locations, still happens. Additionally, we noticed this happens even at profile creation ... so if the users profile doesn't even exist yet, and they login, this problem happens right away with the above events in the log. At the moment, I am installing fresh from the Windows 7 Ent /SP1 DVD on a new machine. Going to drop it in its own OU with no policies at all for Computer or Users, install the same windows updates as we run in our district, and see if I can replicate the problem. This would then eliminate anything such as SCCM 2012, AV, GPO, etc. And will use ProcMon as well. Hopefully I won't get too mad this week and start bashing my keyboard against the PC.

For Windows 8 you need to have the UAC on for things to work properly, I found this out the hard way. Most people in a domain environment turn the UAC off so I had to make a dedicated Windows 8 Policy where I put all our Windows 8 Tablets in the same OU and applied the following Policy.