free780

https://support.microsoft.com/en-us/help/4099950/nic-settings-are-replaced-or-static-ip-address-settings-are-lost-after

You could enforce readonly instead of an outright ban. Sounds like you need cameras to be readonly anyway.

I had to GPP the actual lnk file into the all users start menu.

Came across this today. https://social.technet.microsoft.com/Forums/windowsserver/en-US/3fdfa58b-fe1b-4546-85d2-d43dac9bcc10/black-screen-on-all-new-connections-sessionhost-has-to-be-rebooted-error-1534?forum=winserverTS Even though its to do with Server 2016. The per user firewall rules get created on Win 10 1709. I did some testing with a non-merged firewall policy and clearing out the firewall entries via a Scheduled Task. Seems to improve 1st login speeds.

https://docs.microsoft.com/en-us/MicrosoftTeams/msi-deployment

I've managed to set the default project save location. You need to configure the setting in the options within VS 2017 then export the settings on the location settings. Then GPP the shortcut with /resetsettings .

I'm sure everyone's interception exception lists are getting bigger and bigger. Unless interception is part of the spec of TLS its only a matter of time.

Make sure your SCCM Network Account is configured with read only access to shares and NTFS. Also give domain computers read access.

If you block the domain theres no issue. If you allow it in FE for example you wont be able to block based in keywords etc.

Safeguarding vs security. You'd think enterprise wouldn't be happy about no SSL Interception though. Maybe we will always have TLS 1.2 to support interception.

Reimage to SAC.

Mary Jo Foley also wrote a piece.

Anybody know if there's any truth to this rumour? http://www.brianmadden.com/opinion/Windows-Server-2019-Session-Host-is-dead-Multi-user-Win10-instead

Impero really causes more issues than it solves. Corrupting GPOs. Putting PCs to sleep when SCCM is doing something oran admin is RDP/Powershell'd in. It does feel like a rootkit or malware.

password emailed separately. Does that mean we need to encrypt the email and somehow Pearson need to authenticate?

Could be interesting without Profile Manager. Or maybe a new cloud MDM.

Get on twitter. Start following those who you find giving solutions to your problems. E.g SCCM David James, Johan Aardvick etc.

Isn't it a 1:1 device?

I think ATP requires a subscription to Ems.

Pearson have a secure upload site. However with the need for video I can see bandwidth and storage costs for the exam boards increasing.

Do you mean a required task sequence targeted at a collection?

I think the 1:1 question will keep coming up. Schools/Colleges won't the the budgets despite MS/Google/Apple focusing on this rather than shared devices. More workloads I'll head to the cloud. Filtering will using a transparent proxy with authentication at the connection. More security 2FA,auditing.

Sounds like it's more about labelling all your data and set expires in it. More Azure Information Protection.

Is the ccmcache in the AV exceptions on the client.?

Hope they've updated the RDS desktop experience to be closer to Windows 10 1709 rather than 1607.