CHiLL

We haven't blocked right click either. The only related thing that we have disabled is blocking the ability for students to right click the start menu/task bar.

So I have 1709 deployed out from SCCM with a modified WIM image to remove the built-in apps. I'm now coming to look at 1809 and I've gotten AppLocker working to prevent non-required built-in apps from launching. It doesn't remove them from the Start Menu, but it means I don't have the additional work of modifying the WIM. I've also gotten the in-place upgrade to work and so far so good. I've imported the unmodified 1809 image into SCCM and sorted out the Task Sequence. The in-place upgrade appears to work fine, with no issues with functionality. Though I want to be sure that the fact that I'm upgrading from an OS that has a modified WIM that has removed some of the built-in appx files/packages/applications won't have any ramifications when I upgrade it with an unmodified/vanilla WIM from VLSC. Can anyone clarify this for me?

We have found that at some point between 12pm and 5pm yesterday, the files for our student's shared desktop and start menu had been deleted. I have no idea how. I have got the timeframe based on the VSS copies that were created - icons were there at 12pm and gone at 5pm. I am in a department of two and neither my manager or I have removed these icons. Which means that we've either encountered a bug or someone has gained access to be able to delete them (either by loophole or managed to access an account). So our setup: The Students file server is a VM running Server 2012 R2. It houses the student's home folders and shared folders, as well as redirected folders. The OS is on the C: drive and the shares are on the E: drive. Here is a screenshot of the permissions of that shared start menu: [ATTACH=CONFIG]51718[/ATTACH] The special permissions for Users is: Create files / write data, Create folders / append data. That is all The exact same permissions are also set on the shared desktop folder. We have checked through our Impero logs and cannot find anything relating to file deletion for users and those folders. I am currently at a loss as to why they have suddenly been deleted. Has anyone experienced this sort of thing before?

I have configured a virtual 2019 server with Microsoft's Always-On VPN and it is working - however it is a bit slower than I was expecting. When connected at home, I am transferring/downloading a video file from the on-site network file server to the local C:\ drive of the laptop at my home at approximately 2MB/s (16Mb/s). Whilst this is fine for general use for users to access/edit documents, SIMS, etc...it's not great if they're working on larger files like PowerPoints with embedded videos. I pretty much followed this guide: https://4sysops.com/archives/always-on-vpn-directaccess-for-windows-10/. School Internet connection: 100Mb/100Mb over 1Gb pipe Server network connection: Virtual 1GbE adapter VPN Tunnelling: Split Tunnel Home Internet connection: ~30Mb Sky Fibre Unlimited Laptop spec: Basic Stone NT310 (fairly old) but with a Kigston A400 SSD. I can confirm that I can max out both the school's 100Mb and home 30Mb connections with other types of download, so this appears to be related to the Always-On VPN connection, though I'm not sure how.

Update: It is NetSupport Notify causing the issue. I tested it on another machine and killing notificationAgent.exe also stopped the issue on that too. I contacted NetSupport and they confirmed that it is a bug in v4.00.0001 and has been fixed in v4.00.0002 which was released on 11/12/2018.

Update: I don't know if it's just coincidence or if it's the culprit...but I was looking through the list of running processes on the machine and seeing what was what. Any processes that I know aren't in use or not essential I was ending one by one. I found that when I ended notificationAgent.exe, the issue went away. notificationAgent is the agent for NetSupport Notify. I had initially thought little of NetSupport Notify as it's a display box that is shown and shouldn't be inputting characters. Though that got me thinking - when a message is sent using NetSupport to a locked machines - the machine will often 'bing'. I've put this down in the past to it wanting the attention of the user. But what if it was because it had focus and was trying to enter characters? Weird. I need the issue to happen again elsewhere to try this again.

All of our workstations are imaged with the same reference image (Windows 10 Education 1709 x64, which have had Appx packages removed by using Arthur's script) and it is created/deployed with SCCM and MDT. Edit: Now it has slightly changed it's MO. Instead of typing one 'a', now it's typing two! It has a specific routine too. With the cursor in the password box, it will flash 4 times, pause for about four seconds and then type two a's. Then the process repeats. If the focus is taken away from the password box, no a's are entered in the password box. If I take control of the machine using Impero (with focus in the password box), no a's are entered in the password box. If I release control of the machine with Impero, two a's are entered in the password box.

It's happened on both office and teacher computers. The only consistency that we can tell so far are: They are staff machines Basic HP USB Keyboard Basic USB Mouse Basic HP slim USB DVD-RW Some have had whiteboards connected (the affected classroom PCs) and some don't (affected office PCs).

I can confirm that the case does change when the caps lock is switched on.

Hmm, this is an old school too.

Cheers. Annoyingly we have come to test this using the same user and machine combination...and now it isn't happening. Nothing has changed with the hardware or software as far as we are concerned. This also happened on the previously reported users/computers where it would just stop ocurring by itself. Strange. Edit: Just as a security measure, we have performed anti-virus and anti-malware scans on these affected machines with nothing detected. We've also checked through the Event Logs and not found anything hinting at what could be causing this.

I'd recommend installing the SCEP client onto those primary computers. Taken from: https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-protection

Different types of keyboard and also happens without a keyboard connected.

We have an off bug that's effected a handful of staff over the past couple of weeks. We've had reports that when they have locked their machine, every 10 seconds the password field will have an asterisk entered. When the password field is revealed, it is a lowercase 'a' that has been entered. This will repeat forever until user intervention, with multiple 'a's being entered over time. When the user unlocks their machine, it stops happeneing. It also doesn't happen on the login screen. When we do switch user, it also stops happening. If another use then logs in and locks the machine, it also doesn't happen again. We use Impero, but have ruled that out as it happens even when the Impero service is stopped. (Performed by Impero's direct support) The only other software that we use that can read or input that I'm aware of is Visigo and ClaroRead.

I'm in the process of testing Always-On VPN and also use Smoothwall. I have had it working on a test laptop used at my home (as a basic test to browse home/shared folders and ping servers...which worked). My only issue appears to be connecting the VPN before or during the logon as we use redirected desktops, located on a network share. Obviously when at home without the VPN connected, it can't find the desktop location, so an error accessing the location is shown. When the VPN is manually connected and the desktop refreshed, it works. I was using SCCM's built-in VPN configuration to create and deploy the VPN client connection. Instead I've used Powershell script provided by Microsoft in SCCM as a package to connect the VPN (which also has an auto-connect feature that SCCM's built-in one didn't have). So I'll be testing that this evening.

Our exam's officer is trying to print off labels from Exams Organiser, but it's misaligning the labels, so the printing is merging over two lables. Has anyone else encountered this before or know how to fix it? I've tried specifying the paper type as labels and also played about using scaling options on the printer preferences. This is happening on a HP 2055 and also a Ricoh 3252ci, so two very different drivers.

Yeah, here it is:

So I've created a new VLAN with the following details: VLAN ID: 220 VLAN IP/Gateway: 10.22.220.1/24 The idea is that VPN clients connecting in via Always-On VPN will obtain a DHCP address from the 240 range (I have already configured DHCP and DNS for this range). However when I check my routing table on my core switch (HP 5406zl), all other VLANs appear in the table, apart from the new 220 VLAN. There will be no physical devices connected on this VLAN. The VLAN port assignment is set to auto for all interfaces on the core switch. I'm not sure if I'm meant to change this, as other VLANs have certain interfaces tagged/untagged. What am I missing?

So I have deployed Office 365 64-bit Semi-Annual channel to some test machines and found that they are often coming up with an "Unlicensed product" warning when a user logs on and launches an office application for the first time and prevent them from editing it. If they close it and open it again, the message will disappear and allow them to edit it. All of our users have the correct Office 365 licenses assigned (Office 365 A1 for students and Office 365 ProPlus for students). Below is a copy of the XML file used to deploy/configure Office 365 from SCCM: Configuration: Has anyone else encountered this or fixed it? At the moment, I'm thinking Office 2019 might be a better solution for licensing.

So the client key also needs activating in AD? I thought only the host key did and the client keys were baked into the OS?

So I have fixed my issue. Turns out the KMS key on our relationship summary page is incorrect and doesn't match the KMS key that is listed when I look in Downloads and Keys. As soon as I activated that key from the Downloads and Keys page, my 2019 servers were able to activate sucessfully. So: 1) Have a Server 2019 machine or client machine with RSAT 1809 Volume Licensing Tools installed as a role. 2) Use Volume Activation Tools on Server 2019 / machine with RSAT and specify AD activation 3) Activate the key 4) Run the activation process on your servers Such a bizare issue.

Did anyone find a sucessful resolution to this? I've tried entering my KMS key from VLSC into Volume Activation Tools on my Server 2012 R2 server that also has VAMT 3.1 and RSAT 1809 installed. When I go through the wizard I get the to 'Activate online' section and then receive an 'Access Denied' message when attempting to activate it.

I ran into an issue again installing the RSAT tools. This time I was receiving the error code: 0x8024500c I came across this reddit thread and someone had posted this command: #Set Windows Update Server Key to 0 Set-ItemProperty -Path HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU -Name UseWUServer -Value 0 #Restart Windows Update Service Restart-Service -Name wuauserv -Force #Get RSAT Tools Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online #Set Windows Update Server Key to 1 Set-ItemProperty -Path HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU -Name UseWUServer -Value 1 #Restart Windows Update Service Restart-Service -Name wuauserv -Force #Done That worked for me.

I know right! Edit: It appears to be an issue with my 365 account, not 1809.

So with 1809 on my workstation, I'm having issues using Office 365, specifically attempting to activate it. I'm using the exact same version/installation XML configuration file that I was using on 1803. When I launch an office application, it asks me to sign in and when done, it takes me to the usual New Document page. However the application complains about being unlicensed and has some features disabled. If I close the app and open it again, I'm prompted with the same login box to activate the product, despite I've already done it.