dmanning

We had this same problem with a lot of Acer's we purchased a few years ago and had to do a back and forth with them and MS and CDWG. We had to have Acer make/give us a BIOS update which took about two weeks to correct the issue. Here is a good reference document on MS's site. Most times you can get the vendors to release an updated BIOS to correct the problem. https://support.microsoft.com/kb/942962

One of our guys made a VBS script for our SCCM Task Sequence which might help point you in the right direction ... feel free to copy and adjust it to your environment as you see fit: Dim sNewComputerName, oTaskSequence, sTSMachineName, bPromptName Set oTaskSequence = CreateObject ("Microsoft.SMS.TSEnvironment") ' Get the name the computer is set to receive and truncate to first 6 letters sTSMachineName = lcase(oTaskSequence("_SMSTSMachineName")) If left(sTSMachineName,6) = "minint" Then bPromptName = True ElseIf sTSMachineName = "minwinpc" Then bPromptName = True Else bPromptName = False End If If bPromptName = True Then Do sNewComputerName = InputBox ("ACSD standard computer name. 15 Characters MAXIMUM.", "Computer Name", , 30,30) Loop While Len(sNewComputerName) > 15 oTaskSequence("OSDComputerName") = UCase(sNewComputerName) End If

What are you using for your proxy server? TMG?

If that thread doesn't help then the only things I can think of are: 1. Change http://wsus:8530 in your GPO to your FQDN ( http://wsus.contoso.com:8530 ) 2. Double check and see if it was installed on port 80 instead of 8530 ... then you would just need http://wsus.contoso.com for your WSUS settings 3. Make sure port 8530 is open on the Windows Firewall on the WSUS server

Try this thread ... post number 6 and beyond ... seems similar to your issue: Download failed, error = 0x80244017 - WSUS Support Forums

^This as he said... And if you want you can also change it from "CREATE" to "UPDATE" and then in the Common tab uncheck the box for Apply once and do not reapply. This will make sure it processes every login. Just note that it will be a tad slower logging on to process the group policy each login.

Anything useful in the event viewer of note?

Try adding your domain to your local intranet settings in Internet Explorer. Internet Options --> Security Tab --> Sites --> Advanced --> Add I'd put in the FQDN too.

Yes with the steps I provided it works with a Computer in the OU ... if you want to use users instead you need to switch it to where your Users are and select Users in OU option. We found it was easier to map printers based on the computer location rather than the user since users move around a lot. Make sure you only set one of the two printers to be the default. I can't remember but I want to say having it second in the list and making it the default worked better, you'd have to tweak it until you get the results you desire, but it sounds like you're almost there.

Killed my excitement with that link. We were hoping we were on to something since we only see the buffer overflows on affected profiles. From the log the only things in there are Microsoft files, along with the Bonjour (Apple) entry in the log and the Microsoft Forefront TMG Firewall client we use.

Getting Buffer Overflow errors see attached:

Sorry, you'll need these settings as well:

Here's a screenshot of our GP setup. We break down all of our Workstations --> Building --> Room Then we have a workstation policy for that building with the following settings and utilize the printers there. This way it always maps the printers (even USB printers) for any user that logs in to that room without the need for a VBS script. It's been working flawlessly for us for almost 3 years now. Takes a little work to get it all in the GPO's but once it's there it's not so bad. Just make sure you have a good policy in place if your technicians replace/add a printer so it gets updates. Edit: I should also note that we set it up so that each of our school buildings only show their buildings printers if they manually add a printer, which makes it a lot easier if they can't find theirs or want to print to an alternate location. We just trained them to add them manually as they need them, and auto-map the most logical/closest printer. This also works for us because we set our computer names to BUILDING-ROOM-SERIAL.

The only updates we've done on our network are your standard Windows Updates, plus software updates like Java, Adobe, etc which release almost every other day. We use Microsoft's own Endpoint protection 2012 and we put in exceptions for said locations, still happens. Additionally, we noticed this happens even at profile creation ... so if the users profile doesn't even exist yet, and they login, this problem happens right away with the above events in the log. At the moment, I am installing fresh from the Windows 7 Ent /SP1 DVD on a new machine. Going to drop it in its own OU with no policies at all for Computer or Users, install the same windows updates as we run in our district, and see if I can replicate the problem. This would then eliminate anything such as SCCM 2012, AV, GPO, etc. And will use ProcMon as well. Hopefully I won't get too mad this week and start bashing my keyboard against the PC.

For Windows 8 you need to have the UAC on for things to work properly, I found this out the hard way. Most people in a domain environment turn the UAC off so I had to make a dedicated Windows 8 Policy where I put all our Windows 8 Tablets in the same OU and applied the following Policy.

Try opening your SQL Server Config Manager and under the SQL Network Config --> Instance in question --> Open Properties on the TCP/IP and check the IP Address Tab, and scroll down. Most times it dynamically creates a port. If you are changing this to a static Port, you need to remove the Dynamic info and put your port in the TCP PORT field only. This should only be needed though if the program you are using does not work with Dynamic ports for some reason (Some legacy apps do). I would make sure that Dynamic port is opened on the Windows Firewall. Usually I just add that port to the pre-created SQL Server Firewall Rule under the Windows Firewall Advanced settings.

In my district I had this problem when using Per Device CAL's ... once we switched to Per User CAL's the problems went away. I just looked at my license server and it's issued 114 and is still working perfectly. Check your RD Licensing Manager and see if you are still giving out Temporary CAL's ... if so then I would reinstall your licenses / reregister them with the microsoft clearing house. You might even be able to find more information in the Event Viewer to point you to where the problem is.

Is your issue with regards to word being they get the error stating they can't find the normal.dott file? If so we resolved this when we found out it was because we were using DFS Folder redirection. In order for this error to go away you need to have your laptops GPO point to the server share since it doesn't seem to support DFS. Once we did that the error went away and Offline files are working properly and syncing without any problem.

Copied this from my post on technet, but not getting any reply from MS, so I figured I would bounce this issue across this community which has been extremely helpful in the past. - - 1508 0 2 0 0 0x8000000000000000 3302 Application ABK-A23-BW87.acsd.local - The process cannot access the file because it is being used by another process. C:\Users\95142\AppData\Local\Microsoft\Windows\\UsrClass.dat - - 1542 0 2 0 0 0x8000000000000000 3303 Application ABK-A23-BW87.acsd.local - The process cannot access the file because it is being used by another process. Windows 7 Enterprise - Profile "Corruption" Issue We do not believe this is a network or DFS/Server issue, as this happens even to profiles that are on the local machine (ie local administrator account gets bugged too) Background: We are a full Windows Shop with Server 2012 and 2008 R2 Domain / Virtual Servers (VMWare). DFS namespace for Folder Redirection (via GPO) of "My Documents" (Not AppData/Profile Info), Shared Drives. We use Endpoint Protection and do all of our Imaging via SCCM 2012, and are a full Windows 7 Enterprise desktop shop. Problem: Over the past 4 months this problem has gone from once in a while to about 30-40 calls a day inconveniencing our users. It is best explained on these forums, of which I have copied and pasted to save my fingers: What causes corrupt profiles? - AnandTech Forums "One of the problems we have at my work is when a user logs on they get a red x on the network icon, but it isn't a network issue. When this happens the computer is almost unusable. You cant use things like windows explorer, or internet explorer. We know how to fix the issue, which is deleting the usrclass.dat file in the users profile. It has been suggested that SCCM could be causing the issue but i don't know. Has anybody else ran into this issue on a Windows 7 enterprise environment? I've tried googling the issue but some of the stuff is way over my head, and I dont know much about SCCM and if that is causing the issue." We can resolve the issue by deleting the users profile, OR by deleting the UsrClass.dat file and letting it rebuild each login, however, we prefer to get to the root cause of the problem. Thanks for reading and I look forward to your input. Note: We noticed yesterday that there seems to be two \\ in the event log, not sure if that's just how Microsoft drops it in the event log or if that could point to the source of the problem. (C:\Users\95142\AppData\Local\Microsoft\Windows\\UsrClass.dat)

We use to have problems using the printers via GPO, but once we figured out the best settings/setup for it we've had no issues using GPO for printers and stopped using VBS scripts because they were too inconsistent. It looks like you've already moved on to the VBS scripts but if you ever need help with the GPO method I could share how we have it setup here in our school district.

Their latest version might have fixed this issue, but if not, this is the document I made for our techs when I got it working: 1. Copy the unpacked “sec_45” directory (as generated by the SFX download) to the Windows 7 machine. E.g. "C:\sec_45". 2. Open a command prompt (cmd.exe) running as Administrator (This is important otherwise the installation will fail). To do so, search for cmd.exe in the “Search programs and files” search field in the Start menu. When it appears above, you can right click and choose “Run as administrator”. 3. In the command prompt, change directory to C:\sec_45\ServerInstaller\. CD C:\sec_45\ServerInstaller\ 4. Run: "Sophos Enterprise Console.msi" OVERRIDECHECKS=TRUE 5. At the “Setup Type” page, choose “Custom” and then ensure just the “Management console” feature is selected. Do not choose a “Complete” installation or choose to install any other components. 6. On the “Management Server” page choose the IP, or hostname of the machine where the Sophos Management Service is installed and then continue with the install. 7. Before launching Enterprise Console, ensure that your account is a member of the necessary groups, namely “Sophos Console Administrators” and if the user hasn’t be granted specific access through RBA then also “Sophos Full Administrators". 8. From the Start menu you should be able to launch "Enterprise Console".

In my district we have a locked down Desktop because users always saved stuff to the desktop and when their machine hard drive puked they would always whine, so we redirected their desktop to a DFS Share and locked it down. But for the Documents+, Favorites, Links, we have them redirecting to a DFS share as well without issues. Mine is the same way. What happens with me is when I go home and login it can't find the domain so uses my cached profile, but when I return to work and login and re-establish connection it auto migrates my documents from the cached profile to my DFS location based on our group policies. We have yet to have any problems with that. Our policy is set in: User Configuration - Policies - Windows Settings - Folder Redirection - Documents Target Tab Basic - Redirect everyone's folder to the same location Create a folder for each user under the root path \\\\ Settings Tab Grant the user exclusive rights to documents (Unchecked) Move the contents of Documents to the new location (Checked) Also apply redirection policy to Windows 2000 .... etc (Checked) Policy Removal Leave the folder in the new location when policy is removed.

In our district we found this issue to be caused by the Temporary Profile issue. We resolved this by setting our Computer's, Computer Configuration Group Policy with the following Enabled: Computer Configuration - Administrative Templates - System - User Profiles - Do not log users on with temporary profiles