CHiLL

Cheers, though it wasn't the WMI filter. It turns out that we had the 'Remove All Programs list from the Start menu' enabled in User Configuration > Administrative Templates > Start Menu and Taskbar. Despite this being enabled, it did not affect our 1607 clients in any way and they showed the Start Menu. Weird. Setting it to 'Not Configured' brought back the Start Menu items. Interestingly...I enabled the setting again and set it to 'Collapse'...logged off and back on again...and I had the missing text/language pack bug. I set it back to 'Not Configured' and the text displayed after another log off and back on. I set it back to 'Enabled > Collapse' and the text disappears again. I left the setting as 'Enabled > Collapse' and ran DelProf2 on the machine. Logging back in as the same user also has the same problem. Clearly that setting is a trigger for the missing text bug problem. Edit: As it turns out, there are quite a number of GPO settings within Start Menu and Taskbar seem to cause the missing text bug. I haven't checked any other GPO settings.

That is a very good call. I have WMI filters set, but it should include all Windows 10 variants. Here is the filter that is applied: select Version,ProductType from Win32_OperatingSystem WHERE Version like "10%"

I don't know why yet, but I'm having issues with Start Menu redirection (not Start Tiles) on 1703. When the same user logs into one of our Windows 10 1607 machines, it works. When the same user logs into the 1703 machine - it doesn't. I can't seem to find any corresponding logs at the moment.

Interesting. RM simply said that they cannot do it at the moment, their development team are aware of it but there is no estimate as to when or if this can be done. The last time I spoke with Impero a couple of months ago, they recommended using an Impero policy to block the running of Edge. I'll have to ring them up.

Definately not with this in mind: Windows 10 S won't let you change the default browser or switch to Google search. RM who provide our Internet connection and web filtering is unable to filter Bing and they recommended that we blanked block Bing and switch all default search engines to Google. Impero does not have a plug-in available for Edge, therefore cannot monitor it...so we also have a blanket ban on Edge from running.

I wrote that and shared it with them (just to claim some credit! lol)... There should be a line at the start with :IMP though so it loops back to the beginning and you can do loads in sequence... Well that deserves a thank post! So the :IMP is the first line of the script? Because it appears that they've missed that off.

I have no idea, however it's not a one off/one time fix thing either. It is still an issue on v6.0.45 as I upgraded our site earlier this week. My own workstation that I use the console on was affected late this morning. That is despite I had the console open when I powered on my machine this morning. So for some reason, that file became corrupted this morning and I have no idea why. I have received the script that Impero are providing as a start up GPO. Official bitlink located here: http://bit.ly/2lTaxwM cls @echo off set /p id="Fix Impero Service On: " %=% ping -n 1 %id% > nul if errorlevel 1 goto OFFLINE goto ON :ON sc \\%id% stop ImperoClientSVC timeout /t 2 /nobreak sc \\%id% stop ImperoGuardianSvc timeout /t 10 /nobreak echo "Deleting Files" del /s \\%id%\C$\Windows\Temp\AgileDotNetRT.dll :RESTARTIMP sc \\%id% start ImperoClientSVC timeout /t 2 /nobreak sc \\%id% start ImperoGuardianSvc timeout /t 8 /nobreak sc \\%id% query ImperoClientSVC | find "STATE" | find "RUNNING" if errorlevel 1 goto RESTARTIMP timeout /t 2 goto :IMP :OFFLINE echo "PC Offline" timeout /t 3 goto :IMP

I'm using GPP to delete the folder. Appears to be working. Computer Configuration > Preferences > Windows Settings > Folders Create a new folder and set the action to 'Delete' Select the path in question. I also ticked the boxes for; Delete this folder (if emptied) Recursively delete all subfolders (if emptied) Delete all files in the folder(s) Allow deletion of read-only files/folders In the Common tab, I also selected 'Apply once and do not reapply'.

Found another issue that Impero confirm is another known bug. The issue is that the Impero client (or console) will not run, stating that the services are not running, despite when checking the services, they are running. Restarting the services and also the device itself does not rectify the issue. Nor does uninstalling Impero and re-installing it. According to Impero, the problem is with the .NET 4.6 installation and Impero not liking a specific temp file that .NET creates. The file in question is: C:\Windows\Temp\45f20368-587d-4341-b744-01cc97dbd28d\AgileDotNetRT.dllIf this file reports a file size of 0KB - that is causing this problem. To fix the issue, simply delete the entire folder "C:\Windows\Temp\45f20368-587d-4341-b744-01cc97dbd28d" and then restart the Impero Client SVC service (or reboot the machine). Windows will automatically re-create the folder and file within it. You'll know this works as the new file will be 121KB in size. If like us, this is affecting multiple machines, then this can be included within a machine start-up script using GPO, or as a macine start-up GPP. Edit: God damn it, beaten to the punch by @L3OUGH

I have SCCM configured for Software Updates in the following way: Software Update Group - "Baseline: Windows 8.1" Contains all critical and security updates (no other update types) up to the time of group creation and is deployed to our Windows 8.1 collection. Deployment Package - "Windows 8.1 Monthly Updates" (Creating during the creation of the above Software Update Group) Automatic Deployment Rule - "ADR Windows 81 Monthly Updates" - Set to download all critical and security updates (no other update types) and place them into the "Windows 8.1 Monthly Updates" deployment package. It is my understanding that the ADR places the new updates into the Deployment Package. Does the Deployment Package slipstream into the Software Update Group containing all of the other baseline updates? How does that aspect of it work? Now I have come across a KB that I need to deploy to fix a site wide issue, however it is neither a critical or security update. I have found the KB in "All Software Updates" and selected 'Download' and selected the "Windows 8.1 Monthly Updates" deployment package. I did this nearly 48 hours ago and it's only deployed to 17% of the site, despite the whole site being powered on. When I look at a target machine and check the Software Centre, it does not see this as an installed or available update. I have performed the Software Update scan cycles from both the client and SCCM (even using RC Tools). Have I gone through the correct process here?

I have come across and issue where the captures preview isn't working in Computer List view. When you click 'x captures (x new)' in the computer list view, it does not display the captures. Instead it is blank, the 'Save to Disk' button produces an error and copy to clipboard does not work. Impero have confirmed that they are aware of this, it is a bug with v6 and they are working on a fix (no eta at this time). There is a workaround though. In computer list view, you can expand the user that has the captures and then expand 'Captures'. You can then see a list of the captures and if you hover over one of the items, it will pop-out with a screenshot, which includes the save/copy to clipboard options.

I have come across and issue where the captures preview isn't working in Computer List view. When you click 'x captures (x new)' in the computer list view, it does not display the captures. Instead it is blank, the 'Save to Disk' button produces an error and copy to clipboard does not work. Impero have confirmed that they are aware of this, it is a bug with v6 and they are working on a fix (no eta at this time). There is a workaround though. In computer list view, you can expand the user that has the captures and then expand 'Captures'. You can then see a list of the captures and if you hover over one of the items, it will pop-out with a screenshot, which includes the save/copy to clipboard options.

I have Windows 10 Eduation 1607 and set the default apps via a GPO using the setting Computer Configuration > Administrative Templates > Windows Components > File Explorer > Default Associations Configuration File. That XML file is located in a read-only area that everyone can read from (confirmed). However I'm noticing a lot of inconsistencies with the XML deployment, specifically it's taking a long time to deploy or it is not applying at all. The main reason this is causing a problem is because of Edge. We use Impero to block the use of Edge as it cannot be monitored at the moment. So the default associations file sets IE11 as the default browser, as well as other things like Adobe Reader being the default PDF viewer. Examples: 1) Newly imaged machine that is in the correct OU and had gpupdate /force and rebooted several times can take up to 60 minutes (longest I've seen so far) for the default associations to apply. 2) One of our live Win10 test machines in the library had the associations working fine - IE11 as the default browser. I ran DelProf2.exe on the machine and rebooted. Then the default browser was set as Edge and I don't know why. Has anybody come across this behaviour before?

I have Windows 10 Eduation 1607 and set the default apps via a GPO using the setting Computer Configuration > Administrative Templates > Windows Components > File Explorer > Default Associations Configuration File. That XML file is located in a read-only area that everyone can read from (confirmed). However I'm noticing a lot of inconsistencies with the XML deployment, specifically it's taking a long time to deploy or it is not applying at all. The main reason this is causing a problem is because of Edge. We use Impero to block the use of Edge as it cannot be monitored at the moment. So the default associations file sets IE11 as the default browser, as well as other things like Adobe Reader being the default PDF viewer. Examples: 1) Newly imaged machine that is in the correct OU and had gpupdate /force and rebooted several times can take up to 60 minutes (longest I've seen so far) for the default associations to apply. 2) One of our live Win10 test machines in the library had the associations working fine - IE11 as the default browser. I ran DelProf2.exe on the machine and rebooted. Then the default browser was set as Edge and I don't know why. Has anybody come across this behaviour before?

I updated to v6.0.42 late last week, however our clients weren't auto-updating. It appears that the upgrade had disabled the Auto Update feature in Impero Server, as soon as it was re-enabled, it our clients started automatically updating. So that might be something for other's to watch out for.

That worked, cheers. However, I now have encountered another issue. I've used this to disable Edge, however now my .url shortcuts have no file associations. This is despite the fact that I am deploying the default apps by the XML file, setting IE11 as the default browser, which worked prior to this change.

The Application Identity service wasn't running, so I've set it to start automatically in the GPO. I've also selected the tick box in AppLocker Properties to enforce the packaged app rules. After a few gpupdate /force and reboots, the items are still appearing in the list. However, when I attempt to run them, they say 'This app has been blocked by your system administrator', which is a step in the right direction. If only we could remove them completely from the menu items.

I'm using Windows 10 Education 1607.

Unfortunately that hasn't worked for me. The apps aren't blocked and are still appearing in the Start Menu. I've attached a screenshot of my settings. [ATTACH=CONFIG]42035[/ATTACH]

That's a possibility, however that would also prevent staff from shutting down the machines, even if it's only pushing to the student machines, it would affect the library computers when staff log on for example.

I can't seem to remove the power icon completely from the Start Menu. I've set the GPO 'Remove and prevent access to the Shut Down, Restart, Sleep and Hibernate commands', however that leaves the power icon in the Start Menu, though when the user clicks it, they don't see any options. The reason I'm asking is because it's confusing a lot of our students who can't seem to understand that you now click the icon that looks like a person to sign out. They'll probably learn over time, but I was hoping to reduce our call outs during that time.

How can I restrict the Start Menu search to the redirected Start Menu and Desktop? At the moment, search is also bringing up results from the Settings applet, which aren't ideal. Also, we prevent users from seeing the power options, only having the sign out option. However, if they type 'shutdown /s' into the Start Menu, a result for shutdown as a file is returned and it can be executed, meaning the machine is shut down. Can I prevent such things appearing?

We use Start Menu redirection to control the Start Menu, however some items appear in the list that ideally I don't want. How can I remove them? I can't seem to figure it out. For example, the following are appearing: Connect Contact Support Microsoft Edge Photos Search Settings

I used an administrator account to perform the Export-Startlayout command. Then I stuck the exported XML into the GPO and it is applying for both staff and students who have their start menu redirected. From what I've gathered, the Export-Startlayout command works for the right hands side/metro section of the start menu. Therefore it is a separate element to the actual start menu/applications list and shouldn't affect it. Note: Do not use Notepad to edit the file - this seems to cause corruptions. I've used Notepad++ thanks to @ChrisRobb's post: http://www.edugeek.net/forums/windows-10/178610-has-anyone-got-windows-10-start-menu-working-reliably-without-using-classic-shell-5.html#post1545634

I'm deploying it as part of the SCCM Task Sequence and these are the steps I took (originally from a guide I found online, but I can't remember which it was). 1) Copy 'microsoft-windows-netfx3-ondemand-package.cab' from the 'Sources\sxs' folder of the Windows 10 installation media/ISO to an appropriate folder on your SCCM Sources$ share, such as \\sccmserver\sources$\Apps\NET 3.5. 2) In the same location that you have now copied the NetFx3 cab to, create a new powershell script containing: $currentLocation = Split-Path -Parent $MyInvocation.MyCommand.Path; Enable-WindowsOptionalFeature -Online -FeatureName NetFx3 -Source $currentLocation -LimitAccess -All 3) In SCCM, create a new application package and select 'This package contains source files'. Select the path you have saved the NetFx3 cab to. 4) Click Next and select 'Do not create a program'. 5) Distribute the package to your distribution point. 6) Edit your Task Seqeunce and add a new step for Add > General > Run Powershell Script 7) Browse for the package you have created 8) Enter the script name in the 'Script name' box 9) Set the PowerShell execution policy to 'Bypass' in the drop down list I don't know why, but I had issues deploying this as an application, but it works through the task sequence.