Steve21

You need some boundary setup, even if it's just one to cover your entire AD site (or IP range), but you'd normally have already set that up at the point you're at, as you needed to add the DP to it when configuring it, or didn't you do any of that bit? Also I assume you've opened all the firewall ports for the clients? As there's a number of ports required for DPs Steve

That error just means it couldn't download the software for some reason. In the SCCM console (server) go to the application, and look at the bottom/right for content status. What colour is the circle? If it's not Green it means you didn't distribute the package to a DP yet which would be why the client couldn't get it. Steve

So you created the collection, and the application, have you actually set the application to deploy to the collection? (If you right-click on the application there's an option to deploy it, and then either make it required or available). You'd then pick said collection for that application, and chose when you want it deployed etc Also, have you distributed the package/source to a distribution point? (Is it showing a Green circle, or grey/yellow etc) If you have already done that, have you forced the machines to scan locally for the update? (If you don't force them instantly they refresh on a timer by your default settings which can be hours, unless you've modified that, but easiest just to force while testing it) Steve

You'll have to give us a bit more info than that... Are they not showing at all? Or are they showing but not installing? Have you deployed them to a collection, or aren't you even at that stage yet? etc etc If you can let us know what you've done so far, and what the actual error/issue you're seeing we can try to narrow it down a bit Steve

Not entirely sure what you mean in your wording of it, but if you mean just using a lookup to check what range a date is and returning that value to do another formula then yes that's just a simple lookup like below (Did it on one sheet for screenshot purposes but would work between two etc): If I misunderstood what you meant, or you have an actual example let me know and will take a look Steve Steve

Just as a note, depending on your off-site backups, there's a number of cloud vendors for things like Veeam that won't support 2022 yet until the next Veeam update (as they normally run at least one behind), so we're waiting until that's done to start testing it Steve

Any reason you wouldn't use ADP on the iPad? Or was this more for mass work devices etc like DNS filtering? Steve

Roaming policies are legacy and shouldn't really be used anymore (While they "kinda work" still, MS have already said they won't be supported in the future or building things to work with them). In general though, no shared pcs should be having that many different users log in a month really, even with a normal 50 period 2-week timetable that'd be half of that and only 100GB to support, despite repeated lessons etc. Added to a cleaning profile setup for those who don't log on regularly and generally it'd self manage over time, unless you have tiny HDDs which is then more of a problem In regards to your actual error, as you linked it's a bug in the code due to the way it checks if a roaming folder exists already. You'd have to script your own solution to remove the roaming folder, so when it runs the test it can create it (as it'll always fail to find it if roaming), that way it'd just recreate it, but again kind of defeats the point of a roaming profile that doesn't roam But at least it'd be a work around for Teams for you Steve

That's in the console on the server I assume you mean, rather than the client? If so it sounds it like it's never actually been setup to work properly. Black crosses are expired, but they'd only expire once they've been superseeded (yellow) and then on a few months later etc. Honestly if nothings been setup properly yet, just have a flick through a guide online, it should only take 15-20 minutes to setup a basic SCCM for updates to deploy without anything fancy being setup. Even if you do a GPO to point to WSUS for now, and play with SCCM on a client you'd soon stop using WSUS when you have SCCM working Steve

It's not in compliance. That's settings. SCCM has loads of bits it can do, each have different areas. In control panel, open up Configuration Manager, and re-run the two actions: Machine Policy retrieval and then Software Update Scan Cycle Basically will force it to check now, ignoring any timing/settings you have currently If it's still not finding anything after a few minutes it's most likely some setting is wrong on the server/client config Steve

Yeah had lots of UPS alerts about 6:10~ curious if that’s the same spike across the country? Steve

SCCM doesn’t use the check for updates part, it uses its client, so it wouldn’t ever show if you’re just checking in there. Same with wauclt that’s legacy In terms of timings that depends what you have setup in SCCM for the check in of the clients, if it’s scanning every hour or day etc If you open Software centre is it showing it’s detected them? Steve

Can you? yes (You wouldn’t even need to uninstall it as the GPO would override the SCCM client config as that uses local gpo) Should you? hell no! Sccm is much more powerful than WSUS and requires no real maintenance at all for updates once it’s setup Is there something specific you have issues with? Steve

How new is new? Like today or just a few days? You haven't change the password minimum age in that setting, so it'd still be set to the default which I think was 1 or 2 days, so if you only built this today and can't change it it might be linked to that too Steve

What's the actual outcome you want from the setup? As you mention offline but then start talking about 2nd NAS etc which wouldn't be offline, just online redundancy etc. Or do you define offline as just not on the main server? Just would change what would work best depending on the above really Steve

There are loads of issues that could be related to. Overall things to check: You don't have old WSUS gpo settings clashing with SCCM Client settings are set to manage Windows Updates Updates are set to download/deploy via ADR/SUG Do you have the option set on your ADR to download direct from MS if it can't find the source on the DP? No proxy settings for Updates (or your SCCM url as a bypass) Regarding the ID you can get it via WMI etc, but generally it's easier just to turn on the package ID view in the console Steve

I don’t think you need to add anything in, it’s probably complaining with that line that’s highlighted as Long is 32bit only To make it work with 64bit you’d need to change the Declare Function To Declare PtrSafe Function To tell it it’s safe to use for 64bit And then depending if you want the longer variable the end “Long” to “LongPtr” Repeat for any other bits it complains about Steve

Do you guys have any ad-block/cookie monsters? Those can throw up the 1020s as it uses cookies as part of it's check normally Steve

Ah that’s great, makes more sense haha Thanks, Steve

Sounds like those are from the old batch still as the new ones don’t have the lockdown option, so you can log back into the DFE portal to get all the old bios keys still as we had a few different ones depending when they got the devices Steve

Out of curiosity how’s that work, as it was a question our management asked in a recent meeting Does it do a sync in advance, let you play, and then like a catch up sync before the final move over? I’m assuming you wouldn’t need to update two systems at once with data! Steve

As above really. We don't use it as all the big servers adds an age to the backups if you have a lot of files, and isn't needed for FLRs It's only really useful if no-one knows where a file was, and generally even in that case I find it's easier to use the "Open In Explorer" option as part of the restore and search in that, which doesn't require it being turned on in the backup, rather than have it slowing down each backup But obviously each to their own, and no doubt depends on your usage case Steve

As a test have you tried just setting the regkey which bypasses the update changes to see if that fixes it? If you set RestrictDriverInstallationToAdministrators to 0 it effectively nulls the printer update (yes it means the security issue is back but if you're uninstalling it anyway no difference), that way if it's related to your issue it'll just let you print as soon as you restart once it's setup: https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872 At least if that narrows it down to the update still you can do a quick workaround while trying to sort it properly Steve

From your description that sounds more like standard SSL inspection etc if the cert isn't installed on their phones, or is this with all that set properly? Steve

It’s not as automated as you said, but we normally just use something like https://keyboardchecker.com/ Press each key once and it’ll light up if it’s recognised Generally can get the keyboard done in a few hand presses if you stretch Steve