Jump to content

Sheridan

Members
  • Posts

    4,144
  • Joined

  • Last visited

Everything posted by Sheridan

  1. Permission block those registry entries - but even so, they GPImagePath_P is pointing to the correct local image filename!
  2. Fresh install of 1703 with latest CU - doesn't show custom lock screen until someone logs in and then back out, then it shows. But reboot it and its back to that stupid cave again. Just as well windows 10 isn't being used in anything mission critical eh!
  3. Stopped working again here, but 1703 seems to be one of the worst updates (and thats saying something!) for breaking things. I'm not deploying any 1703's anymore - updates are broken on many of ours as well so we reimaged them back to 1607. FFS what rubbish are MS doling out these days.
  4. Its been a couple of days since Windows 10 broke something, but this is a new one. Editing an applocker group policy, when you click the 'Select' button to define the users to which the rule will apply, it bombs out with the following really helpful error: Server stack trace: at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.OnThreadException(Object sender, ThreadExceptionEventArgs e) at System.Windows.Forms.Application.ThreadContext.OnThreadException(Exception t) at System.Windows.Forms.Control.WndProcException(Exception e) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG& msg) at System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr dwComponentID, Int32 reason, Int32 pvLoopData) at System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32 reason, ApplicationContext context) at System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason, ApplicationContext context) at System.Windows.Forms.Form.ShowDialog(IWin32Window owner) at Microsoft.Security.Srp.Ux.SrpUxRuleListView.CreateManualRule(RuleType ruleType) at Microsoft.ManagementConsole.View.DoAction(Int32 actionId, Boolean selectionDependent, Int32 selectionId, IRequestStatus requestStatus) at Microsoft.ManagementConsole.View.ProcessRequest(Request request) at Microsoft.ManagementConsole.ViewMessageClient.ProcessRequest(Request request) at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessRequest(Request request) at Microsoft.ManagementConsole.Executive.RequestStatus.BeginRequest(IMessageClient messageClient, RequestInfo requestInfo) at Microsoft.ManagementConsole.Executive.SnapInRequestOperation.ProcessRequest() at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(SimpleOperationCallback callback) So don't update to 1703 if you're using applocker!
  5. We had this initial very slow login on a batch of w10 PCs and after much checking we found it was the firewall service running at a solid 50% or more for a good 5 to 10 minutes after boot. The first user always copped the long login but by the time they'd logged out and the next user logged in it had settled down. We found this by using the task manager and ultimately disabling the firewall service in those PCs, worth a try?
  6. The free Aid4Mail one doesn't seem to offer conversion to PST as far as I can see, unless I've missed something when I installed it.
  7. Anyone got any recommendations for a decent mbox (gmail export) to Office 365 (.pst) convertor? I'm guessing theres no free ones worth anything, but would be grateful if anyone could tell me if they have used one that worked well? Its only for 20 mailboxs at the most. Just a one off as the export was done before I could do a migrate!
  8. Egress doesn't look too bad if you only want a handful of maiboxes (I thin we'd need less than 10 in total) Will also have a look at how it would work with 365 as well!
  9. Changing up back to what it was didn't fix the problem, it really screwed up Wsus! In the end I did a reinstall on the new IP address.
  10. Do you mean that you have users with both g suite accounts and office accounts as well?
  11. Just watched My Way which I believe is a Korean film set in the Second World War about two rival runners who end up fighting for various sides having been captured! It has some pretty amazing special effects, especially the d day scenes towards the end, and you hardly notice the subtitles after the first few minutes! It was a eBay find and well worth the few quid it cost!
  12. We've been asked to provide encryption for emails for confidential exchanges, and as we use GSuite I'm guessing we're going to be relying on a third party tool. Does anyone else encrypt their emails and have you any recommendations? Or is it more cost effective to buy an encryption package so documents are sent as encrypted attachments, I know Sophos offer this and we already pay for endpoint protection.
  13. Cheers, going to split this off to go directly out if I can!
  14. Yes this is outbound, worked before the smoothwall went in so something is getting blocked somewhere
  15. I've got a default allow everything out rule, but I'm missing something maybe, I don't suppose you could drop a picture of the firewall rule you put in on here?
  16. Yeah it bypasses authentication, https inspection and is whitelisted! Problem is this is a utm so it is the firewall as well as the filter so there's no other way to allow a bypass other than use a different firewall!
  17. How did you get round it? We have several users affected! Smoothwall don't seem to have a solution to this as far as I can find, anyone done this with a Sophos UTM?
  18. Anyone got an ideas about why a smoothwall UTM would stop access to RemoteApps hosted on a council 2012 Server? We set this up and the school involved now cannot access their MIS systems anymore as they simply get the generic 'could not connect to the remote computer' message when they try to run an app. The can login ok but cannot run any apps. I've whitelisted the entire domain involved, excluded it from https inspection and also authentication but still no joy. I've contacted smoothwall support but no reply there yet and this is now time critical - in 24 hours I've got to fix this or pull the smoothwall out and replace it with something that will work (any suggestions?) I've had this before where a smoothwall box mangles access to something, but the only way around that has been to bypass the smoothwall entirely, which isn't practical in this scenario!
  19. We've done the same, stuck 10gb modules on a mixture of om1,2 and 3 and all have achieved a stable 10gb with the shortest run being about 30m and the longest about 150m. All netgear stuff as we got the modules on offer! The fact we didn't notice any benefit suggests our network was ticking along quite nicely but at least we've future proofed it a bit more!
  20. Both of those updates are already on this particular PC, it was updating happily until a week or so ago!
  21. We've got the dreaded Windows Update 0x80073712 error on one W7 PC, it won't download updates from WSUS, directly, or even manually run update packages I've done all the usual MS guff about resetting WU, but that stuff never worked. Just before I reimage the PC (the only MS solution that will probably work!) did anyone ever find a way to fix this error?
  22. Can this not be done with your web filter? Fixed IP on the PC and a 'Allow Only these Sites' type of rule on the filter? We've done that before with some old kiosk style xp PCs
  23. I've got my fingers crossed for 'Windows 10 - Working Edition' Might be waiting a while though....
  24. We tested a fresh 1702 update and then added the latest CU and after several reboots it has worked! So upgrading from 1607 to 1703 is a waste of time. Reimaging seems to be the default option now.
  25. Re-imaging 1703 from scratch now to try it out!
×
×
  • Create New...