disk

I am trying to redo our kiosks across campus and so far, every solution we have evaluated has too many issues. Microsoft made a kiosk browser and released it for free along with Win 10 1803. It looks very promising however, I am unable to download it for offline use. Here is the information on the new kiosk browser: https://docs.microsoft.com/en-us/windows/configuration/guidelines-for-assigned-access-app#guidelines-for-web-browsers This page has some additional information/links: https://www.microsoft.com/en-us/windowsforbusiness/digital-kiosks All of the documentation states that this kiosk browser app allows offline deployment. Have any of you had success with this or any other apps in the MS Store for Education or Business? So far, all I have manged was to log in to the MS Store for Education: https://educationstore.microsoft.com/en-us/store And from there, I was able to assign the app to myself and download it on my PC and my test PC through the Store app. I have a ticket open with the Education Store support team but they are less than helpful with this matter.

Thank you so much! That was exactly the information I was unable to find.

I'm not seeing a link

I am interested in using Windows 10 S Mode for some kiosks around campus. I thought I had read somewhere that along with the launch of 1803 that Enterprise could enable S Mode? I have been searching around but have not found a way to enable this. I then took a look through the Microsoft Volume Licensing Site and saw a download option called "Windows 10 S". I downloaded the ISO and installed it onto a test pc using rufus. It appears to be just regular Windows 10 Pro. Anyone hear used Windows 10 S yet that could help explain this to me? I know there are some devices that come with S Mode on by default, but I just want to enable it on a few PCs.

Sorry if this was already covered (I only skimmed the conversation), but are you sure you are using the new OneDrive Sync Client and not the old groove.exe one? https://support.office.com/en-us/article/which-version-of-onedrive-am-i-using-19246eae-8a51-490a-8d97-a645c151f2ba?ui=en-US&rs=en-US&ad=US

According to this page: https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-1803 The new 1803 build of Windows 10 provides some new kiosk options. This includes a new Edge-based kiosk browser. The browser is apparently only available through the Microsoft Store for Business. https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Simplifying-kiosk-management-for-IT-with-Windows-10/ba-p/187691 I then started looking into what it would take to implement the Microsoft Store for Education: https://docs.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview Under the prerequisites section, it says Microsoft Azure Active Directory accounts for your employees. We currently have on-premise Activate Directory infrastructure but just last year implemented O365 for the school. We have AD Sync configured to sync our AD to O365. Does this mean we can enroll in the Microsoft Store for Education? I would love to hear from any of you who have experience with this!

Edge in 1803 is fantastic. Our ticketing system was pretty bad in chrome, firefox, and edge. After upgrading to 1803 it runs far better in Edge than any other browser!

We are looking to trial netsupport school with an Azure-hosted vdi collection (Windows 10 1709). The VDI collection was created using Citrix XenDesktop. We downloaded the netsupport school 12.5 trial and installed the student portion in our master image. We have a standalone vm running in azure where we installed the tutor station. So far, we have been pouring over firewall rules and such but have not had any luck in finding student pcs from the tutor console. Any tips?

We do not use Small Basic, though looking at the system requirements, I don't see where it even uses the web browser. Is this what you are referring to? https://social.technet.microsoft.com/wiki/contents/articles/30513.download-microsoft-small-basic.aspx#Microsoft_Small_Basic_1_2 Also, just a quick note, after upgrading a few test machines to the 1803 build yesterday, Edge now seems much faster on the handful of sites that it previously had some issues with.

We have been pushing Windows 10 for the past year (Build 1703 Enterprise) with Edge as the default, no issues from IT or users standpoint. We do also install Firefox as a standby but most of the time it goes unused.

We currently have a pay-as-you-go Azure subscription with a small number of test systems running. I have been trying to find out if there are discounts for educational organizations. Apparently there are, but damned if it is not confusing. We already have Office 365 as part of our campus agreement by the way. I found this Microsoft PDF that describes six different programs! http://download.microsoft.com/download/3/9/0/39090891-52ff-46ec-aa21-57bbe61981aa/Volume_Licensing_Comparison_Academic_and_Partner.pdf Have any of you used one of these programs to get cheaper Azure rates? We are mostly concerned with just building out more Windows servers and Windows 10 VDI collections within Azure. Thanks!

Not that I'm aware of. Perhaps that will change when the new 1803 build is released (I haven't been following the insider stuff lately). Perhaps you could use group policy folder redirection to achieve your desired state?

According to this doc: https://docs.microsoft.com/en-us/education/windows/take-a-test-multiple-pcs#set-up-a-test-account-in-mdm-or-configuration-manager I should be able to configure the Windows 10 Take a Test kiosk mode using SCCM. I am unfamiliar with creating a policy such as this in SCCM. Has anyone here done this? I have been searching in the SCCM console for the past hour but can't seem to find it. I have a feeling that the documentation is lacking or I need more coffee to get this done.

Maybe try running the free SolarWinds WSUS diagnostic tool? https://www.solarwinds.com/free-tools/diagnostic-tool-for-the-wsus-agent

I always saw it that way but every time the subject was brought up, it tended to receive a lot of pushback. There was a split many years ago and some departments within IT embraced OpenLDAP and others AD.

Not sure if this is the best forum for this question, but here it goes. We currently have all staff and faculty in Active Directory. Our students have accounts within OpenLDAP. Over the past 10 years or so, whenever I would attend any education-centric IT conference, when the subject was inevitably brought up, it seemed we were always the only institution whose students were not also in Active Directory. There are many use cases that have come up over the years where having them in Active Directory was the only way or easier way to accomplish something. We are finally at the point where myself and a coworker have been asked to write up a business case for migrating students to Active Directory. I just wanted to post this here in case any one had any advice/input on this subject.

Ok, so that is the July cumulative. If you want to test a theory, try installing the August or September cumulative update manually (download from Windows Update Catalog), and then see if it updates properly from your WSUS afterwards.

For the 1703 machine, what is its current patch level? We had a number of Windows 10 1703 PCs (deployed from SCCM using an image that was unpatched) and noticed they had not been updating from WSUS. We then manually applied a cumulative update from July and then they all seemed to be fine after that and have been patching fine since. Our situation is a bit different however because our staff PCs running 1703 are fine, but the lab PCs that were not patching have Deep Freeze installed on them. Deep Freeze is in control of Windows Updates and is pointed to our WSUS server.

Nice! Thanks for the info.

We already have a DR site elsewhere. This Azure hosted extension of our domain would be to serve our XenDesktop implementation that we want to move to the cloud. Basically, we will have a number of Windows Servers running in Azure that need to be AD joined and managed.

Awesome! Did you end up standing up DCs in different Azure regions for high availability? Did you ensure one of the Azure-hosted DCs had a copy of your global catalog? What kind of vpn solution did you end up using for AD site replication with your main campus?

We've discussed domain consolidation but the security settings alone are currently a show stopper. Our students are in OpenLDAP and have no AD accounts (this is something myself and a few others have been pushing for). So in our lab environments, we use generic domain accounts, most autologon with no password.

I am looking to standup a Citrix XenDesktop implementation in Azure. Currently, we have two domains on campus (parent for staff/faculty, and child domain for instructional areas). I'm thinking the best way to go about this is to create two new domain controllers within Azure and then configure a site-to-site vpn for replication. At this point, are there any gotchas that I should be aware of? This is my first foray into actual cloud work. We would also need to create a new site within AD as we would not want on-campus PCs going out to Azure to authenticate and receive group policy, etc. Any one doing anything like this? Is it possible to replicate just specific OU's or should it not really matter? I'm assuming we should have a copy of the global catalog in Azure too? I would love to hear from anyone that has gone through this process already. Things to look out for or things we need to consider? Thanks!

Can you use the Windows Store for Business to cache and deploy updates to the default Windows 10 store apps (skype, mail, photos, etc)?

We have always stuck with the default windows wallpaper...until now. We are now receiving requests across campus to allow each department to have control over their labs desktop wallpaper (we don't show lockscreens). We use Deep Freeze to lockdown all our computer labs. In the past, we had tried this once before and had a terrible time using group policy. We set the wallpaper, and then when we went to change the wallpaper (same filename in same network share), it copied the new image down to the PCs, but did not actually change the wallpaper. It appeared as though keeping the same name was a no go. Anyway, we are seeing requests where a department wants to set a wallpaper, and then on specific dates throughout the semester, switch wallpapers. Is there anything better than group policy for this? I'm also imaging some departments wanting to have a rotation of pictures. We also have an issue with various screen sizes, resolutions, and aspect ratios to be concerned about. Any input would be most welcome!