william_tropico

Hello All, I have a very weird and equally infuriating issue with software restriction polices. These have been in place for ages and for the most part have not caused any issues. Unfortunately over the past few months this has started to change. A staff member will log in and anyapplication they load will get "This app has been blocked by your system administrator". If they log out and back in it will load as normal and they will be able to open applications which are in the allow list. Recently it has been happening more and more and now it's causing issues when students log in. It's very hard to pin point where and when it will happen as it happens on different computers to different users at different times. Very hard to troubleshoot. This will generally happen for the first user logging into the pc after it's turned on Logging off / back in will generally resolve this on some users they have to log out / in 2 or 3 times this happens on freshly re-imaged machines as well as ones which were imaged over 18 months ago It's become such a common issue that an automated rule has been set up on our helpdesk system to respond to end users. I've been pulling my hair out over this (well what is left of it anyway) as I cant seem to find out what is causing it. Even our third party support looked and said "GPOs look fine". I'm just wondering if anyone out there has had this issue before or could at least make some suggestions?

How can I do this with firefox? There doesn't seem to be a GPO to specify profile location.

I'm aware of the GPOs for firefox but looks like i can only set manual bookmarks to be added to toolbar and not user created ones. I want to know how to have bookmarks saved either in a file or unique location so when a user logs into a different computer their bookmarks are there.

Hello, Is it possible with Firefox/gpo to allow bookmarks to be saved in the users home drive? We have IE favourites set with folder redirection and chrome has gpo profile path applied. Is there a similar setting for firefox or is the only way to use roaming profiles for app data?

5 Years later I found something which might help (if anyone finds this topic via search engine) https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/export-or-import-default-application-associations

Thanks for the reply @LanSchoolUK_Adam Regarding the Edge/Chromium extension support is it possible to automate this step. Ideally I would like it deployed when we re-image a machine.

Do you use the Mail app? if not the following will remove/uninstall the App Get-AppxPackage -allusers microsoft.windowscommunicationsapps| Remove-AppxPackage -allusers

Hello, Is Microsoft Edge now a supported browser by LANSchool? Historically we have installed LTSB/LTSC versions of Windows 10 that do not make use of the modern browser with windows so have never had to worry about Edge. Looking at deploying Windows 10 1909 which would use edge but I can't seem to see if it's possible to manage web logs, block websites in edge using LANSchool? ALLOW_METRO_IE is mentioned on the switches of the msi install but I cant see if it actually installs an extension similar to chrome. Anyone have any experience with this? 8.0.2.54 is the version I'm using.

Is there anything in Task Scheduler? Have you got an application that manages the computers remotely for startup/shutdown at certain times of day?

What does Event Viewer say on the machines that reboot? Any driver installs Edit: On a machine that restarts go to System Properties > Startup and Recovery Settings > Untick Automatically restart on system failure. This was if it does BSOD you can see the error code

going though the logs it looks like devices and not users but why would it suddenly try and remove 500+ computers from Azure? They are still all in AD

Morning, Got a strange one. Had an email at 12:15am which said "Identity synchronization object deletion limit reached". I saw this at 5am and panicked! It looks like over 500 items were attempted to be deleted during the sync between AD and O365. I looked in Active directory and looks like everything is still there. What would have caused this and at such a strange time, and how can I see what was removed?

Morning, I had a previous post (http://www.edugeek.net/forums/cloud-services/207696-o365-seperate-domain-admins.html#post1776511) about separate domains using one O365 Tennant. For the most part this is working fine however I cant seem to find a way to limit an administrator of O365 to a certain group or sub domain. e.g. I want [email protected] to only manage users who's email address is @academy1.trust.com. Has anyone had experience with this?

Thanks @ibpalle, I guess it's back to the drawing board

Hello, Have created a security group in AD which holds staff laptops (as computer objects not usernames) and this group has been added to Smoothwall under groups so it can be used for BYOD Radius. The issue is that When I try to connect to the wireless network the wireless controller giving the following message AAA Authentication Failure for UserName:host/LAPTOP.DOMAIN.LOCAL User Type: WLAN USER Is it possible to configure Smoothwall to authenticate wireless clients as device instead of username?