Steve21

The wrong part was in relation to if they aren't breaking any AUP/Policies by doing that As in if you didn't have that in them. Steve

Yes If they can access that sensitive data at home to be able to add it to an unencrypted USB in the first place they're either breaking AUP/policies etc, or you have something setup wrong What's the difference to accessing the files at home and emailing them in? You won't block attachments etc would you. There's always going to be a level of "what ifs", like taking a picture of the screen with a phone and printing out an image etc, but as long as you're putting the policies and practices in place you're doing more than enough. Steve

Do you have a wildcard for your main domain? easiest way would just be add in the full "external-ish" DNS name for the server and use that internally (Like you would if you were accessing your external website internally) so you'd end up with using a dashboard.school.co.uk etc (doesn't need to work externally) In regards to doing what you mean you can just use the powershell (or other program) way to do it just by adding the -dnsname as the dashboard rather than localhost etc Example (not complete based on what other options you want): New-SelfSignedCertificate -DnsName "dashboard" .... Steve

Isn't that why all the apprentices go to buy left handed hammers?!? But in all seriousness there are left handed vertical mice too Logitech aren't the first to make them! Steve

Depending on how it's setup it might just be worth forcing your card to use 2.4 over 5ghz and test if it's just the range differences, it might be trying to use it when it can get it as it's faster etc but then drops off where as 2.4 may stay on. In terms of dongles never really found any that work much better than the cards unless you're buying a decent (expensive) type Steve

Nah dude the nighthawks can make some epic rainbow pcs! Steve

Do you redirect their desktops? (without using Offline Files to Cache its location)? There's a check when Office opens to look for their desktop location to use a location and if it can't fit it it'll wobble and normally give those errors. Steve

80004005 is a failed to access file/file in use normally (not access denied), so could be something stupid like AV on-access scanning/firewall rules etc too. Might be worth disabling the AV and trying a rebuild too if get a minute. Steve

Rice with herbs I'd go with (there's no P in arabic and it's written as a B-ish) Steve

For anyone who hasn't noticed it seems most of the SIMs Online bits have been disabled until the new patches are released: Download & Support | Capita Education Support Services Steve

It only gives you the option when it fails to install. If you wiped a machine etc you need to delete the record and re-add it in (It won't give you option to reinstall) Steve

It's mainly the Third Party Reporting if you want the unique IDs etc, but if you want everything ours has: Personnel Assistant, Personnel Officer, Schools Administrator, Senior Management Team and TPR (Note this account is used to sync a few products so some bits like the behaviour sync need some that Parentpay doesn't) If you want to break it down in more detail, you can manually run the reports in SIMs when logged in to your service account and you'll see if bits are missing just with TPR. Steve

The author won't affect any security permissions in regards to who can open it. It'll be the share/file permissions that's on said folder/share/mapped drives etc. When you're manually copying said files over one by one you're saving them as your new user so you inherit permissions on them automatically. Best way to check it would be using "effective access" right click on a file and go the properties -> security -> advanced -> effective access -> add in username etc -> view effective access and see what it returns Example below: Steve

Try that for alliance and then hide! Steve

In the US version "US english" is the main one and everything else is a sub-option/downloadable extra. In the GB version "real english" is the main one etc etc MS Logic! Steve

Before digging into the unattend I take it you are using a US version of the ISO and not the GB one? The GB doesn't include US languages by default so wouldn't let it set them (It's an addon like the GB keyboard is to US etc, unless they changed it recently). (As in on the page where it should skip and is asking for a language, what's it actually allowing you to select currently) Steve

So what exactly are you trying to do here, you're using an autounattend on a captured image? Or the default media/DVD, but you've used a VM to make the unattend? As for a start you mentioned using enterprise embedded, is that a typo or did you mean you want the embedded versions? (Seeing you have Windows 10 Enterprise Evaluation in the unattend file unless that's legacy?) Steve

We just use control panel for all that, as that still works on the original user based gpo and leave settings locked down for all as you mentioned. The other option is restrict settings via applocker, and let them do printer settings via control panel via the old gpo if you want to access settings as admins Steve

Assuming that wasn't a bootable one then and just manually loaded? You can copy the WIM on and manually load the setup into memory etc, but unless they've changed something you shouldn't be able to load it bootable in FAT32 due to the limits? (Edit - Seems there is a new feature it can do NTFS via UEFI only using UEFI:NTFS, but that's dependant on your system and whether you need to start disabling secure boot etc to get it to work, but for all systems it won't work it seems) Steve

It's much of a muchness really, personally I disabled the CM route as I didn't want anyone to have the ability to accidently push rebuilds So lock it down to the standard pxe routes, obviously means a bit of legwork when you want it done, but generally it's a once a year thing as you said anyway. You can link up UEFI swaps via bios tools for most standard brands into a task sequence too to automate the method of changing it over if you wanted, makes life easier too Steve

If it's a oneoff build etc we found it's easier just to use the old iso's (can't remember which version it was but I know some of the old ones fit on a dvd) then just use windows upgrade for the new version/features. All the latest ones don't fit on DVDs anymore, and also won't fit on FAT32 for bootable due to the 4GB limit etc Steve

Never used the exe directly, it's only a small 900KB wrapper to call the MSI etc Might be worth a try (If you mean the Adobe SCCM docs it's still 2007 setup it uses) Steve

Any reason you aren't using the MSI's it creates? Steve

Haven't done a neat WDS in awhile but isn't it in the bootstraps? Steve

Normally it depends if someone has done any pre-work on the server, but if not there will be a key at boot to enter the raid config, (like an F8 style etc but not), and then you need to choose what HDDs are going to be raided and what raid level etc, before that's done it won't show a drive through to Windows etc sometimes as effectively there isn't one setup Steve