Sheridan

Yup we've found deleting the profiles helps and we do use Sophos. Most of those services we have disabled as well, apart from wisvc,ffsvc and DiagTrack which don't seem to appear in our services in the GPO.

Nope, no impede here just vanilla Windows!

Individual video approval works, but channel approval seems to only approve the channel and no videos with it! The way its worded on Google's documentation is that approvers can approve a video or channel. Still its a step forward anyway - approving a whole channel should be approached with caution unless you've checked out every video in it!

That's OK though, its better than I was expecting. The only thing that doesn't work is an Approved channel shows no videos (and there's plenty in the test one!) I don't know if that's the way I'm doing it, or whether there's a delay whilst the channel videos are approved?

Ah ha! It looks like its working with the smoothwall content mod - it must have just taken a little while for the settings to replicate on the G Suite side of things! Now a staff member can approve a video and the student can watch it. I take it that its normal behaviour for an Approved video not to show up in the search, but can be accessed using the link?

I think I'm nearly there. Both staff and students can sign into youtube ,Staff have full access to youtube, students have restricted access whether signed in or not (thanks to the smoothwall content mod) What I seem to be missing is the facility to approve a video - but I'm guessing thats down to the dns settings - and I can'y really mess about with dns settings for the most important website of all during lesson times!

I think this is where I got stuck a year or so ago, when I enabled the sign in to Youtube and set Staff as Approvers and students as restricted. Staff couldn't see any option to approve a restricted video so I guess the DNS entries are where I went wrong!

That sounds like what we might need to do - unblocking youtube completely for students is a non starter on many levels, not just safeguarding. Can I ask what you had to do with GPOs and DNS to allow this? I've read that you point DNS entries to a different url - and this then requires all users to be signed into Youtube with their GSuite account (which we don't currently allow) Did you have to set a GPO to allow them to login to youtube?

Youtube Edu was a good direction initially - we could then tell staff if it wasn't on there kids couldn't see it! Now its a bit of a mash up.

We have whitelisted certain channels in the past - but staff just seem to have a scatterbomb approach. I.e whatever they find that is remotely useful gets chucked into the mix. Unblocking all of these channels would be a nightmare! We have looked at the Google method - but that relies on them signing into youtube (which I guess could be tied in with their G Suite account login) but I've never looked into this too much. I guess we'd have to block youtube entirely then unless they were signed in.

We currently allow youtube for staff, and for students with Restricted Mode enabled using the Smoothwall content modification. Its a major pain now as all Staff do is look for videos and send the links to the kids - which are blocked in most cases as its in restricted mode! (even if the video itself appears pretty tame) It even worse as they do their searching at home which is obviously unfiltered! We also use G Suite - so I'm wondering how does anyone else deal with this? Do you do the filtering by allowing them to sign in using their G Suite account and filter through that, or use Smoothwall in a different way, or simply block youtube for students!

We've got a new problem with a previously 'stable' 1703 build. Once a user logs in the screen goes black and all they see is the mouse cursor, which can be moved but they have no desktop. CTR+ALT+DEL and Sign out and then their second login works as normal. I'm guessing an update has now broken the only W10 image we had that worked but has anyone any idea which one? Otherwise I guess I'm stuck with reimaging them

I wish I'd stayed with 7 until 10 was working - a timely example is I've just been called into an IT Suite (running 1703 with CSM 4.3.1) and at least 8 had frozen - some straight after login, some after 40 or so minutes of use. This is now a regular event and occurs only on 1703 regardless of hardware. Of course our testing didn't reveal this as its random and variable.

My biggest issue with 10 is I get a nice stable image, then updates break it or things start to happen like explorer hanging a lot. This has become a big issue for us and it only started several months after we rolled out 10 - hinting at it being an update that caused it. Obviously we test our builds, but you can't test everything and MS seem to introduce new issues with every new build. I still can't quite believe the mess they made of the start menu, and so many of us have opted for a third party tool!

To be honest I put 1709 back on the shelf for a while. Its taken too much time up and I'm still dealing with issues in 1607 and 1703 with explorer hanging, printers not deploying, updates not installing and so on. The only thing that has worked consistently is classic start menu! Maybe they should rewrite the whole OS!

We did, and felt that at least proceeding with Edu would help with bug fixes in the future! The problems we're seeing seem to be update break a lot more than they used to, so a previously working build develops new problems.

Very much this - the OS is a tool to help them teach/learn/whatever. The OS doesn't 'inspire' you or show how forward thinking you are/not. I'm happy to roll forward but not when the OS is causing more problems that the previous one. I'm about 50/50 between 7 and 10 and halted any further 10 as it was increasingly problematic.

See my other thread: http://www.edugeek.net/forums/windows-10/190663-1709-business-normal.html Although I can add a few more things I simply rolled back and will prepare a new image with the next build

Because updating usually breaks things. My test update from 1703 to 1709 broke enough to warrant a rollback on the machines I tested it on. Rebuilding a new image is usually the only reliable way.

In our case the Printers are deployed as a Computer Preference (i.e room based printer deployment) and the machines all show that GPO's have been processed on boot, they just don't seem to be taking effect in the case of the printers.

Hardly accurate. I've normally wanted to roll out new OS's as soon as I can. 10 has been the buggiest, least reliable and most frustrating pile of poo I've ever had to deploy in 25 years of working in IT. The amount of flak Vista took was amazing compared to this crud. And the new update model is a farce. Basically a move to 10 is reimaging every PC every year. Quite a change of policy compared to deploy/update/upgrade methods of the past which worked fine in most scenarios. The best thing about 10 is its made me think about a complete system change, now moving to chromeos, macos or Linux looks a lot more appealing. And there's no educational benefit from 7 to and version of 10 - only the security aspect. In fact, the issues we've had with 10 have caused more disruption than 7 ever did

Crazy that you have to force a gpudate though, isn't that the point of GPOs that they will update when changed! I've given up with this printer - even a brand new fresh login on one of the PCs brings up the printer with the old drivers, somewhere a reference to it can't be removed!

Yup - I used to user Deployed printers in Windows 7 with few issues, now neither Preferences or Deployed seems to work. Annoyingly in this case the printer had deployed - but it died and I had to replace it and therefore the driver. Despite the driver working on other machines all these are still clinging on to the old driver!

Printer deployment in Windows 10 is a complete nightmare now. Even a printer we managed to deploy using GPO Computer Preferences now won't update! We simply changed the printer and driver on the printer server, yet all of the PCs still think its using the old driver. If we remove the printer from GPO preferences it still stays in the users Devices and Printers. Its a bug ridden mess compared to the way W7 used to work. This is on 1607, 1703 and 1709.

Made the mistake of updating a 1607 to 1709: 1) It removed classic start menu 2) None of the Settings applets work at all (simply hang for a few minutes before it closes) 3) All logins stick at 'Preparing Windows' until you CTRL+ALT+ and then Cancel to get to the desktop 4) Printers all gone 5) Default (login screen) background no longer works Every iteration of this awful OS seems to bring more issues and fix none.