Darylrese

I am also building and testing my 23H2 image for students. All the other apps I got rid of from the wim so it’s nice and clean apart from essentials and this silly app. I did start to play with AppLocker but it didn’t seem to work in windows 11 when I tried but I haven’t had more time to go back to it yet. Defender Application Control looks to be a replacement? God knows how we are going to get rid of 10 by 2025, don’t have enough money to replace all our hardware by then!

I gave up trying to get the start menu working in Windows 11 via GPO. Ended up hybrid joining Windows 11 devices to intune / Entra and co-managing them. From there I use a custom configuration profile to push out the start menu and this works well. If the machine is used quickly after build it doesn’t apply for a couple hours but it does catch up and works thereafter. It’s the only way I have got the start menu in windows 11 to work so far. It does allow users to pin and unpin their own items, but just gives them a baseline to work with which is better than nothing

Thanks for letting me know! What a pain! I wouldn’t mind if everything in it was blocked, but it seems to ignore the store being turned off and lets people install whatever they like! [emoji35] I know this in turn would be blocked by web filtering but even so I don’t want students installing loads of apps from this bloatware! Windows 11 doesn’t seem very educational friendly compared to previous versions, think I’ll be downgrading most of our new devices to Windows 10 if they are being used by students!

Hi all, I can't seem to get rid of the built in app 'Get Started' in windows 11. It allows the user to select a category and download apps from the store, even though the store is disabled. Anyone managed to get rid of it? I tried to remove it from the wim (By package name which said successful) along with other apps but unlike other apps, it remains. The store is disabled, but somehow using this app, it seems to download apps like netflix and whatsapp if the user selects them. It also seems to suggest it as an app for students to use (on my test account) which is holding me off deploying Windows 11 at the moment to student devices

Yep, everything is running 21H2 now. I bought Papercut Deploy bolt on which is deploying printers perfectly now, but i still get a UAC pop-up when adding some printers through this. It is really odd because i have one printer that doesnt display a UAC box and installs fine, and another that does but they are the same model printer and using the exact same driver!! Driver is packaged but Type 3. Luckily i only have a couple of that model so i am logging onto every workstation as admin and allowing install, then it works for all users, but what a pain when you have to rebuild a workstation and cant get back to it straight after

Well i still havent sorted mine 100%. Some printers deploy fine, others are showing but dont print when you press print and some just dont deploy via GPO or script atall. All use the same drivers so it cant be a driver issue and those with issues work OK using Papercut Deploy. I have resorted to eother buying papercut deploy to handle printer deployment or PrinterLogic which i am currently requesting a demo of. I kind of want to explore the options of ditching a print server altogether...

Well today i realise tha most TCT/IP deployed printers show but dont actually print. Printers deployed via group policy from our print server dont appear in the list of printers on workstations for admin or for standard users. I am a bit stumped. Its not a driver issue as it doesnt ask for one as admin and i injected all our print drivers into the wim. If user explores the print share and connects to the printer it works fine it just wont deploy it automatically through gpo or script. Works well with papercut deploy but it is expensive and i need to work out if it can allocate to workstations rather than IP ranges. I have updated all workstations to 21H2, fully patched the print server, made all the recommended changes to point and print gpo You had any luck @talksr

I'm allocating them via group policy under computer configuration > preferences > control panel settings > printers > TCP/IP Printer. Select 'create' option and put in the ip address of printer, give it a name and select the printer from the list that matches. Thats worked after i have rebuilt the workstation onto 21H2. Before upgrading to 21H2, ive had a mixture of error 0x00011b, just error connecting to printer or like you say no errors, just nothing prints out. After performing upgrade to 21H2 and adding the abive into my printer gpo it has shown on most if not all devices. FWIW i have left in the same policy the printer that has been deployed via the print server also, so its added both in the normal way and again as IP printer if that makes sense. Im so annoyed by this. 400 devices to reformat and only me here to do it. Laptops are going to be a killer! Cant do inline upgrade on student devices because 1) Its just as slow 2) All the default apps reappear after the upgrade like xbox, as you cant use a custom wim to upgrade

Hi All, Im having all these issues now too. I am finding some success with allocating printers via TCPIP in group policy. Seems to be working for most but i dont know what effect that might have on printing in general. Im having to rebuild all of my workstations to Windows 10 21H2 also to resolve the issue so i have a massive job on my hands. Changing the reg key to 0 doesnt work for me, so ive kept it on 1 and applied all point and print settings recommended by microsoft so hopefully its locked down still. Papercut Deploy is working well for printers, but everyone gets every printer on that without paying £1800 which is a lot of money to get round the issue. Everyone is going nuts though not being able tpo print, microsoft have really shafted us. If you connect printers directly via TCTIP do you need a print server moving forward? To apply it in group policy it still wanted a printer share, so i cant see a way around ditching it.

DNS Scavenging is set to 7 days. DCdiag reports - FRS Event – There are warning or error events within last 24 hours after the sysvol has been shared. Failing Sysvol replication problems may cause group policy problems

Hi Everyone, Some weird issues started end of last week where machines were randomly not getting any group policies. Event Viewer displays: The processing of group policy failed. Windows attempted to read the file DOMAIN\sysvol\Policies\GUID\gpt.ini from a domain controller and was not successful. If you delete the DNS record of the affected machine and reboot, it seems to work for some users, but not others. It does logon and give the user a blank desktop and their documents but no mapped drives or some and others missing. Any ideas? Network had to be turned off entirely over the February half term for building work to take place. Things I’ve tried: Delete DNS record, release, renew, gpupdate /force, reboot Delete local profiles Forced replication between DCs Rebooted all DCs Deleting an affected workstations DNS record and rebooting seems to fix it for a short while then the problem returns

anyone?

Thank-you. Made a new xml and yep, working now through SCCM WOOHOO! Must have moved or deleted an entry by mistake.

If i run \\server\share$\EXE\Office2019ProfessionalPlus64bit\setup.exe /configure \\server\share$\Office2019ProfessionalPlus64bit\configuration.xml it closes the command prompt window and does nothing. If i do \\server\share$\EXE\Office2019ProfessionalPlus64bit\setup.exe /configure configuration.xml i get this error

I have same error you had but putting full path in for xml has not worked. Deploying with SCCM i get an error 0x87D00324 and running directly on the machine i get the error you posted. Ripping my hair out over this now

Anyone deployed via SCCM yet? I'm having no luck. Package removes Office 2016 then errors in Software Center.

I tried but during install is says cannot install on the channel specified (I don't have Office 365 subscription) when deployed to a workstation and errors. Tried deploying volume license version i successfully installed on my PC with a custom xml but this is the error i get

According to the deployment guide, you are supposed to be able to select Office Professional Plus 2019 in the Office 365 Client Installation wizard. No option for that for me? SCCM Version 1806

Tried deploying via SCCM 2016 and it removes old office then errors. Tried rebooting and running again no joy so far.

Good Morning, Currently we don't use offline files on staff laptops and make them go through a remote desktop to access everything, mainly because of GDPR. The only issue is if a teacher tries to use Microsoft Office from home on the laptop, it errors due to redirected documents and desktop. In order to sort this, offline files must be used. I tried yesterday to enable administratively assigned offline files to users home directories, but i'm getting Access Denied messages. After that, they cant even access documents online either. Everyone's Documents and Desktop redirect to \\fileserver\staffdirectory$\username. Everyone has access to their own folder on this share. I have set the policy to \\fileserver\staffdirectory$\%username% Any ideas how to get this working?

Anyone deployed this with SCCM? Bit of a faff but i've got it working on my machine manually installing.

Thank-you. I wanted to avoid offline files on laptops so that data isn't left on there. Laptops do have bit locker enabled and i guess you can encrypt offline files so i'm guessing that's OK.

Hi All, Bit of a strange one. Office applications do not work when laptop is offline. Random errors relating to normal.dot, corrupt message when trying to save and cannot open files from a USB etc. I have done some research and it's possibly something related to the fact our desktops are redirected to the network. Do i have to enable offline files to get around this issue? Didn't really want to use offline files anymore due to GDPR and the potential for laptops being lost / stolen. Anyone come across this before?

PPSK allows you to control access on a user or device basis. For example, you can restrict it to a single use key for BYOD to stop students connecting multiple devices or setup some keys that have a specific time limit, firewall rule etc. Smoothwall's RADIUS can't do that, its just a simple yes or no which is a shame. Personally, i love it and wouldn't use anything else.

Hands down, Aerohive. Brilliant interface, modular, PPSK for BYOD and works perfectly with Smoothwall if you have it. Can’t recommend enough. Not a single issue in 5 years of using it, cloud management is the way forward!