gshaw

Yup I can confirm this, had to add exactly the same API URL to Authentication Exceptions then it worked OK

Don't you reimage most of your stuff yearly anyway? Staff machines will need the update and we'll have to manage that but classroom ones get a refresh every summer in any case. Updating the image is a trivial process now as I build from the MS WIM so no capture work required, just slot in the new OS and carry on. I get the feeling MS will end up having to backtrack on their MDM / cloud GPO vision in the same way they had to backtrack with the Start screen. Can't see many big businesses wanting to swap GPO for InTune / AAD Premium at double the cost. The flip side will be if MS hike on-prem licensing hugely to force the change. That'll be a huge gamble if they do as I suspect many would rather switch to Google than pay a small fortune to run all their workloads in Azure. The people I feel sorry for are those paying commercial rates for O365 base services. Recently I've felt like the standard plan almost feels like a "freemium" offering with MS pushing you towards upgrades e.g. basic anti-spam > ATP, Office 365 MDM > InTune, AAD Free > AAD Premium etc. Then I remember some people are paying good money to be shown "ah yes you can't see those stats without a Premium subscription... ouch.

Just booted up my test machine from yesterday, despite upgrading the client during the MDT Task Sequence it still deploys the old 2016 version to the first user who logs in... epic fail @Arthur does the Windows Server 1709 have the HTML6 RDS client included that was posted about the other day?

That's the problem I have with this new vision MS are trying to push that AD / GPO is dead and MDM etc. is the future. It's just paying for what we already had and for on-prem office-based desktops it's overkill. They say to take a Win10 device out of box and just provision it but we do our own work removing the (cr)apps that come preinstalled to get a nice clean image as OEM ones are often bogged down from new. Mixing some of that cloud management in for mobile devices perhaps is a plan but not as a complete replacement. Of course MS would like everyone on full Azure AD, EMS etc. as it's a per device / per user premium for something that you get as standard right now.

Can see a registry key there which should do the trick, cheers 😎

Indeed, bit of a balls up including the sync-based client rather than the Files on Demand version. Imagine something went awry internally and the OneDrive team didn't get the finished client done in time to ship in the 1709 WIM? There's a delay after login before the client appears as well so it seems to provision itself per user. I left the updated TS installing when I went home so will try a fresh login tomorrow on the machine I had the updated client installed by MDT and see if it works cleanly now via the GPO settings. Also need to go back on myself and double check about having Personal OneDrive disabled. Pretty sure I did it somewhere but it's not in the OneDrive ADMX template settings... calling @Arthur who may know on the off-chance Edit: there is an org ID policy which I've configured to our O365 tenant so perhaps that disables sync to Personal OneDrive at the same time? Boot and login seem a tad faster than 1703 too, so far so good...

It works for me with 17.3.6998.830 which seems to report as slightly later build when viewed from the client's Settings page once installed

Just updated my Task Sequence to manually deploy the latest OneDrive client so it's already up-to-date before the first user hits it: https://support.office.com/en-gb/article/Deploy-the-new-OneDrive-sync-client-in-an-enterprise-environment-3f3a511c-30c6-404a-98bf-76f95c519668 Configured the GPOs so fingers crossed can get it automatically signed in and with Files on Demand after next image run

Just what I was looking for, cheers @Arthur Oddly I had to update the client manually to get Files on Demand to appear. Out the box it comes with "version 2016", which after updating changes to "version 2017" with the Files on Demand options. I wonder if we need to manually update the client at image time to make sure it starts off with the correct version for Files on Demand? The update seems to install per-user as well which is weird. Also note this for people on older Windows 10 releases

Nice, well done MS getting everything out early (or on-time depending on your point of view) Gonna try and deploy it anyway with my existing Task Sequence for 1703 and see what happens. Just starting it now

Mine's done, importing into MDT now... ...thinking about it that's a good point, going to need an updated ADK etc. for it too

The moment I head out for lunch... typical lol

I have no idea who Dona is but want that ISO Just realised we're taking a bit of a punt by deploying the CB rather than CBB branch but 1703 has been fine in production so far.

1709 is a game-changer for Office 365 enabled organisations. We've needed the placeholder functionality for years and the Drive Mapper scripts never really cut the mustard performance or reliability-wise (WebDAV is a horrible protocol). Waiting for the VLSC download so I can slot the new version straight into MDT, imagine the only change required will be on the Remove Apps script as I noticed some more cruft being installed by default. The O365 Exchange Admin Portal is the same, uselessly slow early morning then speeds up when the US wake up

Quick question for you all running G-Suite, how effective do you find the Spam \ Phishing \ Malware filtering in Gmail? Our basic Office 365 protection used to work well but recently I've been noticing more and more slipping through the net and the sales talks for going back to an external email security vendor increasing. Those third parties offer additional layers like link scanning etc. but are *pricey* as they're cloud and per-user based. So going back to G-Suite, how many bad emails have you seen getting through? I ask as some of the cybersecurity breaches have had fake Google login pages as the delivery method so by that alone it suggests the Gmail filter as equally vulnerable as O365?

For OneDrive Files on Demand I mean

Interestingly I had to download and install OneDrive separately on the Insider Build so it seems the functionality is half and half between OS and client. What's the betting there won't be any decent GPO templates to control the new features though (e.g. force online-only)

Doubt it somehow, they're pitching it as a Fall Creators feature. This is why going on LTSB can come back to bite as the new features all go to CB versions.

Windows 10 1709, tomorrow Got Files on Demand running in a VM and it's doing the trick

I do get the feeling it's like comparing tomato ketchup with red sauce at times

Hi all, looking for some external opinions on the ever-changing battle between Office 365 and G-Suite. We use both, staff predominantly Office 365 users with G-Suite introduced not so long back mainly for Chromebooks. However we need to start formalising where data is stored for GDPR and generally for good practice so it's decision time in some respect. There's no doubt both are very competent platforms and give us a level of tools, storage and feature sets that were a pipe dream 5-10 years ago. Here's a few of my initial thoughts as a starter for 10, please pitch in with your own experiences so I can get an idea of how things are going elsewhere: storage wise Google Drive appears to be easier to use than OneDrive *but* File Stream and OneDrive Files on Demand are going to make the web UI somewhat irrelevant and remove need for mapper scripts \ software Google give unlimited storage but realistically 1TB+ is more than most users are ever going to need Office 365 \ Outlook is a standard business tool and I'm not convinced Gmail is quite as feature-rich, also email migration between one cloud and another is a lot of pain for not much gain G-Suite I think works better if you create documents within it rather than keep creating in MS Office and uploading to Drive? Particularly complex spreadsheets etc? Google's videoconferencing tools keep changing with the wind, just noticed there's another new version of Hangouts after they discontinued the previous iteration with no roadmap for replacement earlier on in the year. Hangout Meets looks pretty enough though... GDPR wise Microsoft are pretty simple in terms of data in EMEA region staying there whereas Google quite happily ship it off to the US but via EU Model Clauses. OK it's compliant but not quite as convincing somehow. G-Suite Forms, Sites and Chromebooks are great features for curriculum and no real equivalent in O365 MS Teams could be interesting but there's lots of overlap with Groups, OneDrive, SharePoint etc. and still a bit confusing Overall it seems like continuing to support both makes sense but perhaps keep all our administrative data on O365 then make use of the Google side for curriculum use. Anyone else doing similar?

For customers who aren't happy with data being sent to the US in any form?

This is interesting, why aren't Google offering UK \ EU only storage of data? Microsoft seem well ahead in terms of being in control of where data is located. Makes for an interesting discussion on the suitability of OneDrive vs Google Drive for personal data. Hmmm so rather than just keeping data within the EU Google are taking the view that Privacy Shield is sufficient, debatable...

Still doing battle with Lenovo getting them to accept there's an issue. Just did 55 of them with the following process to get them back into circulation, will see how it goes... - reset BIOS - image Win10 basic image - apply version 35 BIOS - reset BIOS - reimage back to Win7 or Win10 college image Had to do the initial Win10 image to get something on there as the BIOS failures stopped the machines from booting and the Lenovo utility is Windows only. If the BIOS doesn't work there's clearly a hardware fault and it seems it needs a group action to prove to Lenovo that there machines have an inherent design problem and therefore not fit for purpose.

The best build is the one that comes off the ISO, do your other changes via scripts and GPOs during the Task Sequence etc. Particularly relevant for W10 so when MS bring out the next build all you have to do is swap out the WIM and carry on