free780

No. The issue is with Adobe not building in pass thru authentication or a way of injecting your domain into their software.

You can create your own solution using powershell and the graph. The correct SQL View and powershell can create a Team.

With quick assist be aware of these issues. 1. You can't have the UAC prompt in the secure desktop. Correct this GPO setting for your laptops before they leave site. 2. No copy and paste between client and host. Other than that its fine.

I would not allow RDP without 2FA or an organisation owned device. You can buy Ericom Access Now and put it behind N app Proxy to force 2FA. 2FA with NPS and RDS GW is messy and doesn't prompt on screen but is necessary. Also for improved performance make sure UDP 3391 is allowed inbound to your gateway and from the gateway to the RDS hosts.

It's a shame that it doesn't do pass through authentication like Office. I wish Adobe software did it.

I've also gone through server 2016 and 2019 on RDS. Usually the modern apps haven't installed into the users profile in appdata/local/packages. Sometimes the App Rediness service needs restarting. I also wrote a PS script to force the apps to install on every login as when using UPD or FSLogix the OS stores user installed apps info per host.

Well I had 8 times before Christmas of the internet hoping down. I'm now trying to get away from VM after 13 years! How on earth do you put a dB on the public Internet anyway? Change management? Common sense?

You could use a startup script or scheduled task run as SYSTEM. Give domain computers read access to the share. Write a powershell script to detect c++ 2013 in HLKM\Software\Microsoft\Windows\CurrentVersion\Uninstall. If it's not present install. You could write to a text file where domain comouters have write access to keep track of where its installed successfully. Sounds painful these days without SCCM.

The only way I could see it being done was to have a master mac where the files are manually downloaded. Then script the files or a large package. I ended up giving the lecturer admin on the macs as I don't have the time to download samples. Also if any drivers get downloaded I'm assuming they need admin rights to install. It's a shame apple don't provide a command line tool to update the samples you could run as root.

Yep hybrid join, SCCM. You can target app deployments per device. I have Whiteboard pushed out. Read Write have a store app as well so the licensing s tied to AzureAD.

I already have the root CA cert on macs. I used a script to bind with SSL enabled. They no longer log as insecure LDAP binds. The LDAP change is probably not going to happen until June/July but more logging will be available after the March CU.

There is also a tracking of folder and files within per user buried in Program Files\Windows Apps I believe. I had to script a fix for some broken start menus on Server 2016.

Or even Office 365 Proplus.

Can you just use conditional access to block the Skype app?

This gives you control if you want to pilot new versions etc. I'm copying the override files to point to an internal server. You need to adjust the server and share values where there are <>s. Also RemoteUpdateManager needs to be kept up to date as with the Creative Cloud Desktop App. #LoggingStart-Transcript -Path "C:\Temp\logs\adobe_cc_update.log" -Append -Force -Verbose#Get Versions after a manual update check$versions = Get-ChildItem -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall | Get-ItemProperty | Select-Object DisplayName,DisplayVersion,PSPath | Where-Object -Property DisplayName -Like Adobe* | Sort-Object -Property DisplayName -Verboseforeach ($version in $versions){write-host $version.DisplayName $version.DisplayVersion -Verbose}#ProductionVersions$productionversion_aftereffects = "16.1.2"$productionversion_audition = "12.1"$productionversion_animate = "19.2.1"$productionversion_dreamweaver = "19.2"$productionversion_illustrator = "23.0.3"$productionversion_incopy = "12.0"$productionversion_indesign = "14.0.2"$productionversion_lightroom = "8.2.1"$productionversion_mediaencoder = "13.1.3"$productionversion_photoshop = "20.0.5"$productionversion_prempro = "13.1.3"$productionversion_premrush = "1.1"#Copy Overrides to point to internal RUM ServerCopy-Item "\\\\AdobeUpdater.Overrides" "C:\ProgramData\Adobe\AAMUpdater\1.0\AdobeUpdater.Overrides" -Force -VerboseCopy-Item "\\\\AdobeUpdater.Overrides" "C:\Program Files (x86)\Common Files\Adobe\UpdaterResources\AdobeUpdater.Overrides" -Force -Verbose#After Effects CC - AEFT$versioninstalled_aftereffects = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AEFT* | select-object -Expandproperty DisplayVersionif ($versioninstalled_aftereffects -ne $null -and $versioninstalled_aftereffects -lt $productionversion_aftereffects){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=AEFT"}#Audition CC - AUDT$versioninstalled_audition = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AUDT* | select-object -Expandproperty DisplayVersionif ($versioninstalled_audition -ne $null -and $versioninstalled_audition -lt $productionversion_audition){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=AUDT"}#Animate CC and Mobile Device Packaging$versioninstalled_animate = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FLPR* | select-object -Expandproperty DisplayVersionif ($versioninstalled_animate -ne $null -and $versioninstalled_animate -lt $productionversion_animate){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=FLPR"}#Dreamweaver CC$versioninstalled_dreamweaver = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DRWV* | select-object -Expandproperty DisplayVersionif ($versioninstalled_dreamweaver -ne $null -and $versioninstalled_dreamweaver -lt $productionversion_dreamweaver){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=DRWV"}#Illustrator CC$versioninstalled_illustrator = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ILST* | select-object -Expandproperty DisplayVersionif ($versioninstalled_illustrator -ne $null -and $versioninstalled_illustrator -lt $productionversion_illustrator){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=ILST"} #check#InCopy CC$versioninstalled_incopy = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AICY* | select-object -Expandproperty DisplayVersionif ($versioninstalled_incopy -ne $null -and$versioninstalled_incopy -lt $productionversion_incopy){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=AICY"}#InDesign CC$versioninstalled_indesign = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IDSN* | select-object -Expandproperty DisplayVersionif ($versioninstalled_indesign -ne $null -and $versioninstalled_indesign -lt $productionversion_indesign){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=IDSN"}#Lightroom CC - Will switch to Named user licensing if updated action set to list$versioninstalled_lightroom = Get-ItemProperty -Path "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LRCC*" -ErrorAction Continue | select-object -Expandproperty DisplayVersionif ($versioninstalled_lightroom -ne $null -and $versioninstalled_lightroom -lt $productionversion_lightroom){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=LTRM -action=list"}#Media Encoder CC$versioninstalled_mediaencoder = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AME* | select-object -Expandproperty DisplayVersionif ($versioninstalled_mediaencoder -ne $null -and $versioninstalled_mediaencoder -lt $productionversion_mediaencoder){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=AME"}#Photoshop CC$versioninstalled_photoshop = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PHSP* | select-object -Expandproperty DisplayVersionif ($versioninstalled_photoshop -ne $null -and $versioninstalled_photoshop -lt $productionversion_photoshop){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=PHSP"}#Premiere Pro CC$versioninstalled_prempro = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PPRO* | select-object -Expandproperty DisplayVersionif ($versioninstalled_prempro -ne $null -and $versioninstalled_prempro -lt $productionversion_prempro){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=PPRO"}#Premiere Rush CC$versioninstalled_premrush = Get-ItemProperty -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\RUSH* | select-object -Expandproperty DisplayVersionif ($versioninstalled_premrush -ne $null -and $versioninstalled_premrush -lt $productionversion_premrush){ Start-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -ArgumentList "--productVersions=RUSH"}Get-Content -Path "C:\Windows\Temp\RemoteUpdateManager.log" -ErrorAction SilentlyContinue -Verbose#Stop LoggingStop-Transcript This script just updates with less control but I've tried to detect if the device is on prem or not. I also found Acrobat and Reader were not updating so Adobe Support suggested adding --productVersions=RDR#19.0". You also need to adjust the server names in <> to your environment. #Update CC 2019 AppsStart-Transcript -Path "C:\Temp\logs\adobe_cc_update.log" -Append -Force -Verbose#Get Versions$versions = Get-ChildItem -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall | Get-ItemProperty | Select-Object DisplayName,DisplayVersion,PSPath | Where-Object -Property DisplayName -Like Adobe* | Sort-Object -Property DisplayName -Verboseforeach ($version in $versions){write-host $version.DisplayName $version.DisplayVersion -Verbose}#On Premif (Test-Connection "" -Count "3" -ErrorAction "SilentlyContinue" -Verbose){#Copy Overrides to point to internal RUM ServerCopy-Item "\\\\AdobeUpdater.Overrides" "C:\ProgramData\Adobe\AAMUpdater\1.0\AdobeUpdater.Overrides" -Force -VerboseCopy-Item "\\\\AdobeUpdater.Overrides" "C:\Program Files (x86)\Common Files\Adobe\UpdaterResources\AdobeUpdater.Overrides" -Force -VerboseWrite-Host "Starting Remote Update Manager (OnPrem)" -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -ArgumentList "--productVersions=RDR#18.0" -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -ArgumentList "--productVersions=RDR#19.0" -Verbose}else {#Not On PremRemove-Item "C:\ProgramData\Adobe\AAMUpdater\1.0\AdobeUpdater.Overrides" -Force -VerboseRemove-Item "C:\Program Files (x86)\Common Files\Adobe\UpdaterResources\AdobeUpdater.Overrides" -Force -VerboseWrite-Host "Starting Remote Update Manager" -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -ArgumentList "--productVersions=RDR#18.0" -VerboseStart-Process -Wait "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -NoNewWindow -ArgumentList "--productVersions=RDR#19.0" -Verbose}Stop-Transcript -Verbose

Intresting. I can not get them to work with Mojave and Jamf. I'm not going to Catalina due to the cert requirements. I think you have to script it. I was looking at this but it looks like I need to sign the pkg.

As soon as possible! I have a script that detects which CC Apps are installed and starts the command line updater for that product run nightly. I also have a AUSST server. Due to how many security holes Adobe software has mainly Acrobat/Reader I though it was wise. I now need laptops to update in and out of the network without interrupting the user.

Mixed content.

The origin of the software. https://www.btl.com/

Also check to see if its making requests to MS domains. It may be 407ing against the proxy.

Disable the indexing service?

Or use psexec to run as SYSTEM account like SCCM does.

And it uses flash which EOL at the end of 2020. Make sure you've whitelisted the domain it uses and the CRLs. If possible use a transparent proxy as it works better. Whitelist the exes and the folder in AV/Impero etc. Run procmon when running an update to check what's going on. Sometimes SQL CE can be version specific so can collide with other versions installed.

FTE is the older method. Microsoft is moving to EQU. Basically anyone who uses a PC needs to be licenced. Ideally Microsoft A3. Then you get DBL Office 365 Proplus and an exclusion for conditional access for MFA, intune, AzureAD Security etc. Yes there is a cost but eventually MS will want everyone to move to M365.

Sorry I meant in the context of this announcement. https://techcommunity.microsoft.com/t5/surface-hub/basic-authentication-retirement-for-legacy-protocols-in-exchange/m-p/871839