mrstrong

In WSUS when I go to the All Updates View with approval: unapproved, status: any I can see KB5005568 but the needed count is currently 1 (it was zero yesterday before I rebooted the wsus server) https://support.microsoft.com/help/5005568 I have quite a few win 10 1809 ltsc machines. A Status report for the update shows status of either "Not Applicable" or "No Status" for these machines. I imaged a new 1809 ltsc machine and pointed it direct to windows update (not wsus) and it duly downloaded KB5005568. My WSUS skills are a bit rusty so maybe I’m missing / misunderstanding something obvious ? I guess I could just approve it for my test group of computers but be nice to understand whats going on!

was looking at this myself, there is the powershell Export-VM but that does everything, i.e. disks or just to see vm info you could use get-vm | fl * and to see drive paths get-vm | select -ExpandProperty HardDrives Also I'm sure each VM used to have an XML config file you could copy / backup but just checking under "Virtual Machines" sub folder I can't find it now, Quick google looks like xml file has been replaced by a binary vmcx file

slightly off topic but made me think "Eisenhower's Urgent/Important Principle" e.g. see https://www.imperial.ac.uk/media/imperial-college/administration-and-support-services/staff-development/public/impex/Prioritisation-and-Time-Managment.pdf

any bikers on here ? https://www.bbc.co.uk/news/technology-58507764

have a read here: How to Add, Edit, Deploy and Import Registry Keys through GPO? | Windows OS Hub

I'm deploying printers via a user gpo i.e. Preferences==>Control Panel Settings==>Printers new Shared Printer Action Update so for users who've logged on and got their printers added ok (i.e. drivers installed) should be ok (as the gpp action is update)? Only issue might be with new logons after the update(s) ? (which I've not approved yet ) Am I right ? edit: No for all Common options e.g. Run in logged-on user's security context (user policy option) No

trying to catch up on this. Can't you just disable point and print restrictions ? :

Hi, an someone explain what they mean when they say local profile ? e.g. is it just a case of in the ADUC user account properties leave the profile path empty so on initial login it copies from C:\users\default user ? I guess if you put something in that profile path your are then using roaming profiles ? Found this for deploying roaming https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-roaming-user-profiles but can't find anything official from ms about how to do "local profiles" ?!

thanks will give it a go, shame i've only got 1 usb to lan cable

yeah but when you've got a lot to do it becomes a pain (seems to happen every time for us)

Every time I try to enroll a chromebook it fails. The second attempt always works. Quick google shows others have had this issue but no solution ? Could it be something about our wifi / are there any logs I can view ? Very annoying

saw interesting interview on bbc breakfast this morning with Dr Rosemary Leonard (at 6:40am) she said sending whole class or even whole year group home to self isolate for 10 days when one child tests positive is ridiculous and not needed Still seems to be common practice in schools round here. Are they just following Gov advice (like the Scottish football team) ?

Where do you put your coffee then ?

I have basic gam set up (did via instructions here: https://github.com/jay0lee/GAM/wiki) on a PC To use advanced gam in cloud shell which instructions did you follow ? e.g. https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Install-Advanced-GAM is there a need to uninstall version on PC first ?

I find wsus a bit of a pain to manage and there are several different approaches. I've found these series of articles by ajtek useful : https://www.ajtek.ca/guides/how-to-setup-manage-and-maintain-wsus-part-1-choosing-your-server-os/

I'm looking at our backups also. Do veam still do a free version that is "good enough" to back up a few hyper-v VMs e.g. backup to a usb drive for an offline copy. On the website they have lots of products! Found the veam agent for PCs and "Veeam Backup & Replication Community Edition" The latter seems to be the one I should be trying ?

are smoothwall no longer sponsors on edugeek ? I've always found ibpalle to be very knowledgeable and helpful. Not sure if he is actually employed by smoothwall to answer queries on edugeek @ibpalle ?

thanks just got back onto this, was my policy correct ? who what where when bandwidth-limit allocation everyone everything everywhere always #kbytes shared

when I renewed our licensing got contradicting info from different suppliers. However does seem that if they work more than 200 hours a year (i.e. everyone!) and log on to the domain you need to count them as FTE think we paid about £46 per FTE (windows, office and CAL) You can also get office 365 A1 "free" and this is not based on FTE e.g. you can have more of these e.g. for staff who don't log on to domain but need an email (and gives access to other apps like one drive, teams etc) I think there was a thread on here about MS changing licensing for schools though Actually just looking in office 365 admin we have unlimited Office 365 A1 plus and in VLSC I have an option to activate a fixed number of "O365 EDU A1 Open Fac" and the same number of "M365 Apps for enterprise Open Fac" Not sure if I should activate these? should office 365 admin and vlsc match ? confused again !

i've always just used a standard vac borrowed off cleaners. never had a dead pc yet

thanks, found at the bottom, link under Shared with external users to "run report"

probably easy but can't figure it out: google just brings up stuff about how to share basically in a team that i am an owner of I'd like to see: what files / folders have been shared and if poss more detail e.g. who they've been shared with (e.g. internal / external) who shared them type of share (e.g. anyone with link, specific users, read only) went to files tab and open in sharepoint but can't see anything obvious

@ibpalle sorry to pester, is policy in last post correct ? Went ahead and turned on spoofing for guest vlan, did get a warning I don't fully understand, not sure if I need to do anything extra: So far seems to be working (no helpdesk calls yet)

great, one final query, could you explain how to do it : e.g. do you mean just having this policy : who what where when bandwidth-limit allocation everyone everything everywhere always #kbytes shared

cheers for that, so it looks like i can turn spoofing on. I'll try it on guest network first and then if ok maybe staff one also Also had a look at web proxy band width limiting like you said. Looks good e.g. I see I can limit via a category like YouTube, how would I go about throttling (i.e. capping) downloads as thats not a "category" ? Also are there any performance implications with either method, e.g. is one more resource intensive than the other (bandwidth module vs bandwidth proxy limiting) ? Our load average has been a bit high recently, might open that as a separate post as I'm not sure what it really means and what is acceptable, e.g. this morning it was 10 and a few weeks ago it got up to 30!