abaxter2

Hi All, I was wondering how many of you allow teachers access to view / edit students documents / files that are stored in their my documents? I am not trying to stop teachers from doing their job but feel that students need to take responsibility for their own files and do not want to open the school up to being accused of adjusting work so currently we do not allow this but I am looking into a "hand in folder" on the network or via office 365. The problem I have is that one of the schools teachers is pushing for full access to students documents and now the schools SLT are asking why I will not give this teacher access. I am willing to say I am wrong with my thinking but before I do this this I am interested to hear what other schools do? Am I right to stick to my guns and push for a hand in folder solution or should I drop this and allow full access to student "My Documents" Thanks in advance.

Yes as mowgli82 has said you will need the latest admx files first: https://www.microsoft.com/en-us/download/details.aspx?id=53430 Once added to your central store you will find the settings for edge under: User Configuration >Administrative templates > Windows Components > Microsoft Edge

On the GPO that you apply the pop-up blocker you can set this via GPP: User Configuration > Preferences > Control Panel Settings > Internet Settings. If you have already applied a internet setting you can just edit but if not create a new one and under privacy untick "Turn on Pop-up Blocker and then press F7 so that the line under goes green then click apply and ok. Or set "Use Pop-up Blocker" to disabled under User Configuration > administrative templates > Windows components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone I have not tried this as I want the pop-up blocker to run but it may help you.

@Sheridan @maxrebo if you are still using wsus on win server 2012 / 2012r2 - you will need KB2919355 https://support.microsoft.com/en-gb/kb/2919355 and also KB3159706: https://support.microsoft.com/en-gb/kb/3159706 you will also need to do the manual setps that are listed in KB3159706 - by not doing this will break WSUS - the abovce updates are for win server 2012 / 2012 r2 only so if on win server 2008 they do not apply.

If you are runing a mix of win 7 and 10 or just win 10 on server 2012 / 2012 r2 you will need to have installed the following and done the manually steps: https://support.microsoft.com/en-gb/kb/3159706 to install this update you will also need: https://support.microsoft.com/en-gb/kb/2919355 A link to the update and the manually steps are included in the above link.

The other update to make sure is installed on the clients is KB3176936: https://support.microsoft.com/en-gb/kb/3176936 I thought this update would be included in CU updates but yesterday I wanted to test how the monthly roll update would work on a fresh install base image of 10.0.14393.0 and found that updates where taking ages but after installing KB3176936 all kicked in. So even if the september CU or the latest CU does include the WSUS fix you may still need KB3176936 installed first to get CU updates to install so might be worth downloading this update manually from the Microsoft update catalog - running it to check it is installed.

Is that aso with the firewall off on the hyper v / VM host? or just on the clients? Also sorry if this is real low level but is there a firewall rule in place to allow access to the ip address and not just the port?

Sorry if this is no use but have you checked that your firewall is not blocking connections to your wsus on hyper v / VM? I know that symantec endpoint block traffic with the default rule

@Simcfc73 what build number are you running? the wsus issues is not fixed until at least build 10.0.14393.189 if you are not on 10.0.14393.189 or above you will find issues with wsus

It may be worth looking at these: https://blogs.technet.microsoft.com/wsus/2016/01/22/for-those-on-wsus-3-0-sp2-or-sbs-2011/ https://blogs.technet.microsoft.com/wsus/2016/09/15/update-on-wsus-3-0-sp2-end-of-life/ Another good place to look would be on Steve Henry TechNet profile (https://social.technet.microsoft.com/Profile/Steve%2bHenry%2b%5BMSFT%5D/activity) as he has written the above - works at Microsoft and deals with WSUS. I hope you do not think that I am trying to push you to WSUS via server 2012 / 2012 r2 or even 2016 but if you are planning on Windows 10 you might have better luck with WSUS on server 2012 r2 full patched with the manual steps completed - link again: https://support.microsoft.com/en-gb/kb/3159706 but I do understand that you have already tried WSUS on server 2012 so again sorry if this is not helpful.

Hi Sheridan, Not sure how helpful this may be but are you still running windows 7 and windows 10? If you have windows 10 clients I do not think server 2008 can service them and if you are still trying server 2012 / 2012 r2 as your WSUS it must be fully patched and the manual steps completed: https://support.microsoft.com/en-gb/kb/3159706 When my clients were still on Windows 8.1 and I was looking to move to Windows 10 but did not do the above steps none of my clients would connect to WSUS - I am not saying this is the same issue as you are having but worth a look and if you are still using 2008 as your WSUS but have Windows 10 clients this could be your problem as I believe to service windows 10 you must be running Server 2012 / 2012 r2

Sorry I meant the full build base number IE: 10.0.14393.223 beacuse if the base image is below: 10.0.14393.189 it will not include the fix for the windows update client and the issue with installing updates will happen - if the base image is above: 10.0.14393.189 then the fix is included. Ideally the base image should be either 10.0.14393.222 or 10.0.14393.223 It would be very wrong of Microsoft to ship the new LTSB image without that fix included but it would not surprise me.

I have not download the October build of LTSB, what is base build number?

I cannot get over how many Cumulative updates for windows 10 1607 have been released - with today's one KB3197356: https://support.microsoft.com/en-us/kb/3197356 would make 8 since August 2nd! https://support.microsoft.com/en-us/help/22880/1607-windows-10-update-history?ocid=1607 Come on Microsoft sort this out as not funny anymore and about time they got it right.

@Simcfc73 how did you get on with KB3194496 ? as microsoft have just released KB3197356: https://support.microsoft.com/en-us/kb/3197356 what of course replaces KB3194496 KB3197356 is on the Microsoft update catalog website so can be download for offline install. So far KB3197356 seems to be installing ok at my sites like KB3194496 did but as you did have problems with KB3194496 this latest update may help - well at least we can get the .msu from the microsoft catalog unlike KB3194496

So here we are as Microsoft go full steam ahead with their monthly patch rollup including windows 7 8/8.1 server 2008 / 2012 and 2012 r2: https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/ Microsoft shifting to monthly patch update model for Windows 7 and 8.1 | Windows Central

I wanted my clients to get windows updates only from my WSUS server so without the delivery optimization set to "Bypass" my clients were getting updates from WSUS and clients on the network. More information here: https://blogs.technet.microsoft.com/mniehaus/2016/08/08/using-wsus-with-windows-10-1607/ https://blogs.technet.microsoft.com/mniehaus/2016/08/16/windows-10-delivery-optimization-and-wsus-take-2/ Latest ADMX files can be found here: https://www.microsoft.com/en-us/download/details.aspx?id=53430&tduid=(96056b07637b2ac0553d1cc9bbe4dfe0)(266696)(1503186)(skim8775X675754X8a3afc38216f1ec94d7c26128386099a)() If you only want your updates to come from WSUS like I do then having a look at the above may help.

I am finding that KB3194496 is the first Cumulative Update since build 1607 that is installing on my clients without any problems but this after I had to push KB3189866 out manually. KB3189866 was the update that was promised to fix the WSUS issue with windows 10 build 1607 on the 13th of September and after this update was installed my WSUS seems to be working as it should. I should also mention that Microsoft did have a problem getting KB3189866 out so they released KB3193494 on the 20th of September but both KB3189866 and KB3193494 bring the build number upto 14393.187 so I am finding if you was already on build 14393.187 by either installing KB3189866 or KB3193494 then KB3194496 seems to install well. I have also set the following GPO: Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization Select "Download Mode" and select "Bypass" So the first thing I would check before installing KB3194496 is that either KB3189866 or KB3193494 is installed on the client.

Try the following: User Configuration > Administrative Templates > Start Menu and Taskbar change the following: "Remove frequent programs list from the Start Menu" to Enabled Works for us here, you can also find more information here: https://technet.microsoft.com/en-gb/itpro/windows/manage/changes-to-start-policies-in-windows-10

The first thing I would check is you have KB2919442 installed on your 2012 box because without KB2919442 https://support.microsoft.com/en-gb/kb/2919442 you cannot install KB2919355 Direct download for KB2919442 (Server 2012 r2 X64) https://www.microsoft.com/en-us/download/details.aspx?id=42153 Direct download for KB2919355 (Server 2012 r2 X64) https://www.microsoft.com/en-us/download/details.aspx?id=42334

Hi JackT are you running wsus on server 2012 /2012 R2? and if so have you applied the patch for server 2012 and done the manual steps in the following: https://blogs.technet.microsoft.com/wsus/2016/04/22/what-you-need-to-know-about-kb3148812-part-two/ https://blogs.technet.microsoft.com/wsus/2016/05/05/the-long-term-fix-for-kb3148812-issues/ https://support.microsoft.com/en-gb/kb/3159706 On my main site where I am running windows 10 build 1607 the September patch tuesday (KB3189866) has so far seemed to have fixed this issue and on my primary school site that I look after where I am running windows 10 build 1511 / server 2012 r2 and I have the above links installed I am not seeing any wsus problems with windows 10 1511 but that is just on my sites and not to say that people are having problems with 1511 on other sites.

Yes that is correct - but if you set the following - Computer Configuration > Administrative Templates > System/User Profiles > Delete user profiles older than a specified number of day on system restart to 1 then no profile should be on the device for longer than a day.

Have a look here: http://www.edugeek.net/forums/windows-10/173356-we-cant-sign-into-your-account-redstone.html We had this problem on a couple of devices and found that if we set the following - Computer Configuration > Administrative Templates > System/User Profiles > Delete cached copies of roaming profiles to "Not Configured" it did indeed fix the issue.

@Sheridan, Sorry I am not running server 2008 r2 so cannot confirm this but I have heard that WSUS 3.0 SP2 on 2008 r2 cannot update Windows 10: https://blogs.technet.microsoft.com/wsus/2016/01/22/for-those-on-wsus-3-0-sp2-or-sbs-2011/ But as I say I am not on server 2008 r2 so cannot confirm (Sorry).