Gongalong

Hi folks, I’m trying to setup Active Directory-based activation on a couple of DCs within our forest. I have installed the Volume Activation Services role and rebooted the server. I have tried running the Volume Activation Tools (as domain admin, and elevated as well) and adding the key but at the point of online activation I get the error “Access is denied”. I have also tried doing this via elevated command prompt using “slmgr ad-activation-online”, but also get an access denied error (specifically: Error: 0x80070005 Access denied the requested action requires elevated privileges.) I’ve researched the errors but there don't appear to be any clear answers aside from running with elevated privs, which I've done. Any ideas? Thanks

Ah, looks like this answers it https://docs.microsoft.com/en-gb/sccm/sum/deploy-use/manage-office-365-proplus-updates

Hi folks, This is one of those cross-forum posts, as it also relates to SCCM. I just want to make sure I'm using the correct process to deploy Office 365 ProPlus as part of a task sequence in SCCM. I followed the instructions to create a local build of O365PP. Do I just need a command line entry in the task sequence to run the deployment? i.e. setup.exe /configure installconfig.xml Thanks

We were running SLG but no longer, but I suspect our permissions are a mess hence the OP. Our SIMS Admin struggles with this side of things, so trying to help them out.

(This is a poll, which might not be visible on the app/mobile devices)

If the Capita permissions spreadsheet is to be believed it says Assessment Manager Tools > System Utilities > Individual Reports > Use Print requires "Assessment Coordinator", although that sounds like a rather lofty permission. All our teachers seems to have Assessment Operator, along with Class Teacher, Administration Assistant (I think this needs to be removed), and Parent (also needs to be removed!).

The difficulty is that the permissions are hugely detailed, so looking at least for a recommendation as to who should have what.

The spreadsheet I already have. As per Boredguy I was more after a list of what staff roles should have one or more SIMS roles, just so we can double check what's listed here.

Hi folks, Is there a list anywhere of what types of users e.g. teachers, school nurse, receptionist, should have in terms of the SIMS roles e.g. Administration Assistant? Thanks

Hi folks, Anyone out there with their finger on the hardware pulse. I'm trying to find a good quality mid-range tablet/2-in-1 PC. We have some Lenovo Miix 320s, which are great for £200, but just lacking in CPU power. Price then seems to jump to £800+ Lenovo Miix 510 or 700 with an i5 (and 4GB RAM and 128GB SSD). Is there anything that sits in the middle ground pricewise with say an i3, 4GB RAM and 64GB SSD? Any suggestions? Thanks

Hi folks, I'm trying to rack my brains as to where I first learned this, but I have a question re. open education licenses. My understanding was that schools only had to pay for a license (for Windows and Office) for staff that worked over 200 hours. Student PCs essentially got the license for free (for Windows and Office). I called the Microsoft Licensing Centre about an unrelated issue, but the guy there said we should be paying for licenses for both staff and students. Did something change, or does he not know what he's talking about? It would be a major issue for us because obviously there's a huge difference between staff, and staff + students! Thanks

Is there a way to display a shared O365 calendar via the stock Android Calendar app? (or for whatever passes for stock on a Huawei P20) I don't seem to have any control over an account once imported, other than to change the colour of the calendar. Thanks

Should be, as it's working fine via PXE. I pick the option "Only Configuration Manager Clients". It does work for some PCs, but others have something along the lines of the log in the OP. It's moot for the moment because I've imaged the lot via PXE, but might be useful to have a fix for next year.

No, definitely no encryption. As mentioned in the OP, the irony is these were Win 7 machines, and when I imaged using the CM client (rather than PXE/media) to Win 10 it went fine. Now that I've come to reimage with Win 10 again, it hasn't worked. The Task Sequence is set to reboot in PE, then partition the disk either as BIOS or UEFI, then it applies the new OS. The only changes I've made to PE are to add in some network drivers. I had to press ahead and get them imaged so used PXE. We'll see next Summer whether I have the same problem...

What would be more useful is if it would just check for and install updates when the PC is on, but just not reboot with a user logged in. Anyone got any ideas on what GPO settings would be used to apply that? It seems to only allow a scheduled install, unless it's just a case of turning that off.

Nope. I ended up PXE booting the lot. I raised the same query on Technet, and someone from Microsoft said it was unable to access a partition. There is no encryption on the drives though, so not sure why.

Looks like it was impatience on my part, as I just happened to look at Windows Updates on a PC around 3:05pm and it suddenly kicked off installing. I've gone back to a PC that also had loads of updates pending, and they have mostly installed. Just a couple of errors which I'm guessing were because it needed a reboot. Does the schedule apply rigorously, or will it run the next time the PC is turned on if it misses the 3pm time?

Just to update, you can get them here. No sign up required I think https://www.techsoft.co.uk/Download

Hi folks, Are any extra GPO changes required to get Win 10 to actually install updates? I've reimaged several hundred PCs with 1803 and from what I can see Windows Update on a client PC is showing updates are there, but it doesn't seem to install them. I know that there's this concept of "Active Hours" with a Win 10 PC, which seem to be set to 8am - 5pm, but having left the PCs overnight the updates are still pending. I've manually rebooted the PCs as well. In terms of GPOs, I have the following set under Computer Config > Policies > Administrative Templates > Windows Components > Windows Update Allow Automatic Updates immediate installation = Enabled Configure Automatic Updates Configure Automatic Updating = 4 - Auto download and schedule the install Schedule install day = 0 - Every day Scheduled install time = 15:00 Do not connect to any Windows Update Internet locations = Enabled Enable client-side targeting = Enabled No auto-restart with logged on users for schedule automatic updates installations = Enabled Specify intranet Microsoft update service location = WSUS server is defined here Turn on Software Notifications = Disabled I'm not really that fussed when the updates get installed, just that it doesn't reboot the PC or otherwise interfere with the user on the PC. Any advice appreciated! Thanks

Finally had time to revisit the problem. I did change a few bits of registry, so can't guarantee it was just this, but this was definitely part of it: HKLM\System\CurrentControlSet\Services\LanmanServer. DependsOnService. Ensured this was set to SamSS Srv2, not SamSS Srv. HKLM\System\CurrentControlSet\Services\LanmanWorkstation. DependsOnService. Ensured this was set to bowser mrxsmb20 nsi, not bowser mrxsmb10 mrxsmb20 nsi, or bowser mrxsmb10 nsi Now working in that I can browse the server and deploy SIMS.

Hi folks, Fairly regularly my parents get stuck on their iPad e.g. "this app doesn't look right". I know Apple lock these things down pretty well, but can anyone recommend any free remote access apps that I can use, even if it's just to see what they're seeing? It would need to be something pretty simple so they can use it. Thanks

Ah yes, I should have been clear that we're already using SCCM.

Hi folks, Curious to know how others approach imaging. My plan is to reimage machines in the Summer hols, to start with fresh machines at the start of each year. My plan had been to do this via the CM client - just turn on the PC and then send the image to the client - although that isn't working for the moment, probably due to historic issues with partitions and BIOS/UEFI. I'm debating whether just to switch the BIOS over to UEFI this year and set PXE to boot first, so next year I can just deploy to PXE and turn on the PC. Do other do this, is there a better approach, or is it horses for courses? Thanks

Hi folks, I've got around 300 PCs that I'm looking to reimage over the hols. Last year we used SCCM in anger, reimaging the same number of PCs from Win 7 to 10. The actual imaging ran fine, and I was able to deploy to the CM client rather than PXE booting. Ironically this time around it's not working as well. For example I have tried to reimage a classroom of 28 PCs, and only a handful imaged. The rest seemingly did nothing, but I see these errors in the SMSTS.log: Volume '\\?\Volume{1fc8bd7a-f18d-4abf-b5f5-09e7e0538aa7}\' not found TSManager 06/08/2018 12:35:25 17460 (0x4434) BackupEfiBoot: Z:\, C:\_SMSTaskSequence\backup-EFI TSManager 06/08/2018 12:35:25 17460 (0x4434) Failed to copy Z:\EFI\Microsoft\Boot\BCD to C:\_SMSTaskSequence\backup-EFI\EFI\Microsoft\Boot\BCD. 0x80070020 TSManager 06/08/2018 12:35:26 17460 (0x4434) Failed to copy Z:\EFI\Microsoft\Boot\BCD.LOG to C:\_SMSTaskSequence\backup-EFI\EFI\Microsoft\Boot\BCD.LOG. 0x80070020 TSManager 06/08/2018 12:35:26 17460 (0x4434) BcdBackup: C:\_SMSTaskSequence\BCD-EFI\bcd TSManager 06/08/2018 12:35:26 17460 (0x4434) Executing command line: "bcdedit.exe" /export C:\_SMSTaskSequence\BCD-EFI\bcd TSManager 06/08/2018 12:35:26 17460 (0x4434) Process completed with exit code 0 TSManager 06/08/2018 12:35:26 17460 (0x4434) TSUEFIDrive: TSManager 06/08/2018 12:35:26 17460 (0x4434) Staging boot image S0100005 TSManager 06/08/2018 12:35:26 17460 (0x4434) Volume '\\?\Volume{1fc8bd7a-f18d-4abf-b5f5-09e7e0538aa7}\' not found TSManager 06/08/2018 12:35:26 17460 (0x4434) Boot Image not found in local data cache at 'C:\_SMSTaskSequence\WinPE\sources\boot.wim'. Staging is required TSManager 06/08/2018 12:35:26 17460 (0x4434) And later... Failed to install boot image. Unspecified error (Error: 80004005; Source: Windows) TSManager 06/08/2018 12:35:32 17460 (0x4434) Failed to install boot image S0100005. Unspecified error (Error: 80004005; Source: Windows) TSManager 06/08/2018 12:35:32 17460 (0x4434) Failed to reboot the system. Error 0x80004005) TSManager 06/08/2018 12:35:32 17460 (0x4434) Failed to initialize a system reboot. Unspecified error (Error: 80004005; Source: Windows) TSManager 06/08/2018 12:35:32 17460 (0x4434) Fatal error is returned in check for reboot request of the action (Restart in Windows PE). Unspecified error (Error: 80004005; Source: Windows) TSManager 06/08/2018 12:35:32 17460 (0x4434) An error (0x80004005) is encountered in execution of the task sequence TSManager 06/08/2018 12:35:32 17460 (0x4434) Set authenticator in transport TSManager 06/08/2018 12:35:32 17460 (0x4434) Task Sequence Engine failed! Code: 80004005 TSManager 06/08/2018 12:35:32 17460 (0x4434) **************************************************************************** TSManager 06/08/2018 12:35:32 17460 (0x4434) Task sequence execution failed with error code 80004005 TSManager 06/08/2018 12:35:32 17460 (0x4434) Any ideas what's wrong? Am I better just to PXE boot these machines instead? Thanks

Is there a way to tell if a user record is linked to a staff record?