Steve21

Some schools give staff FMS access if they’re using it for things like department orders. But in general you’re right that most shouldn’t Regarding the failing part, the biggest reasons for this normally are things like the firewall rules aren’t setup right (normally set via GPO do you don’t have to manually do it) What was the error it logged if it’s saying it failed? Steve

Assuming it's all setup and working already, and it's a new machine, just go into Solus3, add a target using the AD browser tool to go into an OU and select the machine from left->right side (select SIMs/FMS etc as per the tickboxes) and it should deploy out the agent and then install SIMs afterwards Steve

How they register won't affect how the accounts are managed in that regards, it's still the same environment just changes how the licenses apply Steve

Any reason you aren't just assigning the licenses to them yourself? And disable self-sign up, then you wouldn't have to go through all of that Steve

It's the Unique part that matches, but we haven't used ADFS in years, this is pure Azure SSO so guessing you might need to do something on your end in that regards. So we can just change the unique match depending on what application requires what under a new enterprise app for each one Steve

Could be thermal throttling if it’s overheating, or power saving settings in bios etc to save power if it’s not needing full power Steve

How are you getting up SSO? If it's via SAML etc you can modify the attributes in each link (I'm assuming you have a link for Room Booking?) in the enterprise app, and just change it to what you want to link to Example below: Are you sure you didn't miss a bit though as we use the email/UPN rather than sAMAccountName unless you mean that back to front, where you have sAMAccountName set in SAML/SSO and not in Room Booking? Or do you have existing users you don't want to change? Steve

One other thing that springs to mind, if you're still using that Smoothwall it doesn't look like it's actually turned on (unless you turned the status LCD off), so it could just be a case of you can't get out because your proxy is offline etc unless you aren't using that anymore? Steve

Based on what you said in terms of how it's outputting, it shouldn't do that even if you're using the code logic you mentioned. As if C:\1.txt exists it'll run 1 (and then 3 as 2 doesn't) - Still not what you want I know, but the code you're using will make a difference to how this acts If C:\2.txt exists it'll run 2 only (Not 3 as 1 doesn't check for 3) So unless you're trying to do something like assigning it to a variable using T/F and assigning it wrong so it always calculates 3 anyway As Davit said above, using else/if should work, but I'd still be curious to see your original code as it shouldn't be possible to get 3 from both outcomes either way in your current logic If (Test-Path C:\1.txt) { Write-Host "1" } ElseIf (Test-Path C:\2.txt) { Write-Host "2" } Else { Write-Host "3" } Steve

I’d assume that red port is just because you have no Ethernet plugged into it If that top one is the new one it would need a connection to your router wouldn’t it? Steve

Via the Edge GPO you need to disable updates completely I think to get your way. e.g. "Update policy override default policy" to Disabled. As WSUS is offline MSI/MSU style updates so won't get hit by that Steve

Might be worth trying to clear %AppData%\Microsoft\Windows\Recent\AutomaticDestinations from a broken user and seeing if it stops crashing. We've seen those errors with ShellExperienceHost.exe (aka Explorer) crashing because it's trying to view some bad quick view/links, which I'm guessing you could be setting changes via GPO from your comments Would be an easy enough test to delete those destinations and see if it still still crashes before GPO updates again Steve

It's not "needed" as per the warning, it's just best reliability, with dynamic quorum management you can go down to a single node and still have a proper vote. Otherwise it'd automatically be split. In basic terms (ok yes if you query it a lot this isn't entirely accurate), but you need 50% of hosts up without witness. So in a 3 node, you'd need 2 hosts (without witness). With witness you can need 1+1witness, as the 2/4 combo etc Steve

Normally my default would be it’s permissions, just because you can access it manually doesn’t always mean it’ll map fine as stupid as it sounds What’s showing in event logs on the machine when it fails to map. Should give you some insight Steve

Unless you're after doing something odd/specific it should just be the ones on here (half way down, not the old method at top - TP role + 21 permissions): https://docs.bromcom.com/knowledge-base/how-to-manage-parentpay-integration-settings/ Steve

I mean from the basic checks, are both boot images 32/64 deployed to the DP? Does the RemoteInstall folder hold both images (SMSIMAGES folder) If you have PKI on have you checked for cert errors? Depending on your Task sequence, have you got both uefi and bios settings? As a mismatch in the TS vs PC bios could cause that too Network access account setup which has permissions to access the shares during PXE/TS? (and SYSTEM/SITE SERVER have permission on share) Steve

If it's part of a bigger set of code I'd just wrap a try/catch around it, and output either the "Exception.Message" or "Exception.Innerexception" try { "BrokenErrorCode" } catch { Write-Output $_.Exception.Message } etc Steve

Haven’t tested it but should be able to just do something like vol D: | find "Offsite” if not errorlevel 1 goto run Etc Steve

Not sure if everyone's seen it yet, but thought it might help some people as seems ESS are offering more "extensions" in certain contexts: https://www.ess-sims.co.uk/breakoffers Steve

If you mean the local windows one you can just change the default profile pic and force everyone to use it via GPO Steve

Try the TS power shell version instead of deployment then Get-cmtasksequence -tasksequencepackageid XYZ Steve

Is it a long guid style deployment? Or just a site code style one? If it’s the shorter one like ABc1345 it’ll be a task sequence which wouldn’t show under deployment monitoring/power shell for deployments etc Steve

Out of curiosity what company is it? Looking at rolling out more YoDecks soon so will have to start paying Steve

Depending on how quick you did the install after setup it could just be that the client hasn’t registered the OS etc yet so it’s not recognising it as a valid install As above too, but if you got a lot of deployments just use the SCCM power shell to do get-cmdeployment -deploymentid XYZ And it’ll return details Steve

How did you get the licenses? If it's via A3 etc we just assign them in 365 But when it was separate we used auto-assign in the store, so you don't need to worry about assigning them and they just get it when logging into MCEE Steve