free780

If you go from standby not cold power off and have SSDs it shouldn't be too bad. First login is always longer. So don't delete profiles too quickly. It depends on use case.

So $500 as you need a keyboard. So about £380. It's only going to be a 1:1 device with the lower storage option. Most education organisations want shared devices like Chromebooks. I like Office 365 but Microsoft seem intent on forcing education to 1:1 if they are invested fully in Office 365 and intune.

Some of the apps E.G Microsoft Edge are system level provisioned apps. They do install per user. Check %userprofile%\appdata\local\packages The shortcuts are added to the database the start menu uses. Some can be deleted from %userprofile%\appdata\roaming\microsoft\windows\start menu\programs I don't think you can do it for edge,settings etc. Microsoft is pushing the store platform in Windows 10.

I've had this issue with Windows 10 and it stops SCCM software updates. Thought it was a post upgrade issue. I did a script to remediate and a configuration item to detect it. May try procmon and seeing if defender is putting a lock on the file.

The best way is to run a powershell script when the image is applied. Then you just have to remove-appxprovisionedpackage. It's best to just install office in your image. Maybe Adobe CC or any other large pieces of software. #saynotoltsc

A lot of faith in indexing then. What happens if it's an encrypted office file. Then I guess it's secure as long as the password isn't letmein.

I've been using PM,ARD. But found both not as good as GPO,SCCM on the Windows side. I've gone to a bash script to do the initial setup. I tested SCCM but the detection rules were to sensitive for applications and the user needs to trigger the install. When only 1% of your environmental is Mac's it's hard to justify the time and budget for them.

Does zuludesk do any AD integration ?

Well SCCM/Intune can do a lot with Mac's if you do a lot of work. Be aware you have to find all the settings you want and they will be per machine no per user AFAIK.

Unless the LA block Office365 domains. Had this with other 3rd parties before.

On the Office 365 side you can lock down files even via a sync via WIP. You can do it via SCCM as well if your not on office 365 though it won't work on personal devices.

Is your external DNS up to date? Can you reach the server in a browser externally?

Adobe are wanting to move education away from serial licencing to user licensing. Currently you need a user sync tool to sync your AD or upload users via CSV. You need to do some procmon to see which files are changed for the settings you want to push out, then test that Photoshop etc don't overwrite the files.

If you can the files that the Adobe programs store settings. You could GPP them into each users profile before they start the programs. As for current users you risk them losing settings if GPP overwrite them. If there is a way with an Adobe account you may have to look at federated users using Azure/Gsuite/ADFS and configure SSO.

I don't think they will. I think it will become more aimed at 1:1 like iPads. Having spent the last few days attempting to speed up the OneDrive setup and do folder redirection. It's actually a lot easier being GDPR compliant with your data in Office 365 but the mentality is 1:1 . How this change can happen in education with budgets as they are is anyones guess. I still wouldn't deploy LTSC due to new security features in 1709 and 1803.

I did get to the point with MDT and hyper v of a scheduled task that created a fresh VM with a ISO from MDT that created a fresh image. My hope was to have a monthly or every other month image. Though you do need to test that all software is installed etc. I believe Office/Silver light/.net Updates can not be injected into wim files. A build and capture is still needed despite Microsoft wanting to move to upgrades and resets.

Only time I've disabled it is when your sending multicast traffic as most networks aren't configured for ipv6 igmp. A MDT/SCCM server for example.

I'd stay clear of any 3rd party AV when using Windows 10. But granted not everyone can make that change to defender. If you can replicate the issue try running procmon and review the results.

Anyone tried clearing the per user firewall rules created by modern applications? I've seen this in server 2016 RDS where many users have logged on. The RDS hosts do not have impero installed. Granted the build is on par with LTSC 1607.

I found this issue with 1607 on PCs without impero. Traced the issue to the per user firewall rules created on first login. Looks like roaming profiles are deprecated. You can also get issues with modern apps and roaming profiles/ user profile disks.

Which build of Windows 10 do you have deployed? Which profile type are you using?

I did it as ascript type: Install: vlc-3.0.1-win32.exe /S Uninstall: C:\Program Files\VideoLAN\VLC\uninstall.exe /S Tick Run as 32bit on 64bit OS'. Detection Method: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player String: DisplayVersion Tick The reg key is associated with a 32bit application on 64 bit OS'. Value: 3.0.1

This is an interesting approach. https://www.scip.ch/en/?labs.20150507 I guess the real question is not blocking powershell but if a user can do get-childitem HKLM: | out-file c:\users%username%\onedrive - %org%\regdump.txt then he same is possible in vbscript. The real question is locking down what the user can do not how they do it.

If it follows the teams client it updates in the user context. Even though it's a MSI on machine level.

Or you try and move away from file explorer entirely. However this means if you use anything other than Office your stuck with a slow webdav connection. The OneDrive client can run setup with a GUI so the user can see it's setting up. Until a laptop per staff/student is purchased you can't really get around the issue.