free780

You need to use setup.exe - - silent. Ideally you need SCCM. However if your brave use startup scripts or scheduled tasks. Be sure to give the deployment share the correct permissions.

It's a shame AUSST can't just update to the newest version and Adobe do some Admxs for settings. Well you can dream I guess.

I have my 2019 versions ready. I really don't want to deploy until the Summer. Though I may get pushed.

As @rosslaing said you need SCCM and the store setup and your users syncd to AzureAD. Also your PCs need to be hybrid joined ideally comanaged. If you push out via intune it doesn't trigger policy on login. The UWP model was developed with 1:1 devices in mind where users install apps they need.

Smoothwall thought the zip file was a virus when I tried to download it.

If you manually type the UPN does it autologin?

So for BYOD I guess interception is a no go.

Depends if you have SCCM in place. You can unprovision with SCCM. Or you have to runa nlogon/logoff script with Remove-Package.

I guess eventually it will all be tied up with a Microsoft 365 subscription per user. Based on the knowledge worker count. Logically the government should increase funding to help with the cost increase if they are not going to renegotiate a better deal. I wouldn't be surprised if the non subscription based licencing is more expensive than subscriptions to try and move more organisations to the cloud. I still think moving to Gsuite doesn't prepare students for the real world as many companies choose Office 365 or stay on prem.

You really need SCCM with the education store setup. This requires azuread and as connect in most cases. You can provision Onenote on machine level. You have to create the app by using the store licensing location in the console. UWP apps if installed manually have to be installed per user if they come from the store.

Have you checked the applocker section in event viewer. The default rules enable all uwp apps that are signed. Roaming Profiles can also break the start menu in 1607 which is the same as LTSC.

Or install fiddler and set 127.0.0.1:8888 in proxy.xml. Its quicker than waiting for exam companies non exsitant technical support.

I think I needed to use a registry setting for desktop Outlook to achieve this.

Would you really change though. It would be so painful moving away from MS 365.

I had SfB on prem in the past. Works great for 1:1 office users. Shared phones are a different story. Basically involved creating a contact/AD account for each shared phone. It depends on use. Something to bear in mind it also depends what your users are used to with the current solution.

I've got it rolled out to about 1500 devices.

You can use the Windows Update for Business group policy settings to delay updates. You can have AD Groups of PCs to have a fast ring and a slow ring. Bandwidth may be the issue though which MS claim Delivery Optimization can help with. I'm not convinced.

Interesting. Do you know something certain about Chrome's future we don't? I'm assuming the extension will work with the new Edge eventually. This won't help with the android situation of blocking https interception.

You need to setup a SharePoint team site. It gives you he same features as Onedrive but you can grant access for a group of users. The easiest way now is to create a Microsoft Team which will create a SharePoint team site.

Test, test, test. Don't deploy a requred task sequence to the all systems collection. https://m.slashdot.org/story/202159

I have some for staff and student devices. Then broken down to desktops and laptops for staff and student. When I'm deploying a new app I create a collection called Install . Then deploy to that collection. I have rules based on the PC name for these collections. I keep queries for each room. In terms of if you should use SUP instead of standalone WSUS. I think it comes down to maintainence windows. You can do this with SCCM SUP but it's harder with standalone WSUS. If you are updating Office 365 Proplus using a SUP is necessary. These days WSUS is a pain due to the app pool memory. Updates have got a lot bigger and the WUA is doing some more complex stuff than when it was originally designed. If you have the bandwidth and don't mind losing some control. Windows Update for Business might work.

Pearson Pop isn't that bad. It presumes you have admin rights to update the client. Why they couldn't have a service do this on the client? Secure Assess is not as bad as some other exam software I've seen. Your issues seem to be more the application than the connectivity.

I wouldn't change the default install location. If you are using an intercepting proxy on your subnet gateways you can just allow the domain. If you are using a managed proxy setting you can use GPP to replace the proxy.xml file with your proxy. The domain needs to be allowed unauthenticated and without https intervention. Make sure this is the case for CRL domains as well. You can add a certificate rule into applocker for BTL to allow it to update as any user. If you are using Impero or similar you need to exclude the exes from injection. If also exclude the folder and processes from your antivirus. Failing all ghat run procmon and see if you can work out where is failing. Sometimes it installs SQL CE if the version isn't correct as it was installed for another piece of software. You may need to test on a clean Windows 10 PC. Exam software is poor. It is designed with the assumption of dedicated testing rooms with dedicated PCs and some software presumes admin rights.

Or use powershell to delete the key.

You could try running procmon on the client to find the issue.