free780

Is wsus 1 in proxy exceptions? Also I would use the fqdn.

I used the setup. exe created by the Cc Packager. I used SCCM to remove the old version and install the new version. Several programmes if running like outlook etc will prevent it from working.

Also if your not the 1st user to log on after a power on. If you use standby the prefetch will already have be prepped.

Defender with 1709 features turned on. Really you need device guard or Applocker these days.

With WSUS/SUP have a target group/collection with a ADR with a few days delay. If OK then approve to a manual ADR for the rest of your clients. You can write a script to wake out of hours. Force machines to wake and reboot early in the morning forcing log offs. This is all based on moving to standby.

I'd consider getting away from WOL. You can have a scheduled task that will wake your PCs.

You could bitlocker your server but keep a recovery key separate from AD somewhere secure. Just in case.

I bet they need to be azure AD joined.

If app v or remote app works on 10 S. It could make sense, you do need intune though.

Either will do it.

Run procmon and get it to query processes with virus total.

The SAC has an 18 month support period. You can skip feature updates. To be honest the pain isn't the new features, group policy etc. It's getting your PCs to wake out of hours and upgrade.

I believe c:\Windows\SysWOW64\OneDriveSetup.exe runs on first logon and downloads the latest onedrive.exe. Its a per user install. The legacy older OneDrive for business isn't being actively developed so I'd avoid that.

Roll on 2020... https://www.blog.google/products/chrome/saying-goodbye-flash-chrome/

High Sierra is not ready for anywhere.

Are these laptops on the domain? Are the IP ranges in your Ad sites? Unless you manually add the ranges into the boundaries SCCM will struggle. By default it pulls in the AD Sites.

And very expensive.

Or come to the conclusion that not every device in your environment is on the same version of Windows 10. It's a shift in mindset LTSB is meant more for PCs in hospitals or power stations. WaaS will at some point be used to EOL hardware. If you "choose" Microsoft software I would be surprised under Microsoft 365 that LTSB isn't included.

It's all a cloud storage conspiracy!

Anybody moved their personal stuff to MS?

Roaming profiles are depreciated but MS haven't documented this. Switch to local profiles with UEV.

Can your byod device reach CRL sites?

Try and only select the products you need and tick the run wsus cleanup wizard.

Windows 10 SAC why delay the invertible?

Sounds like you need SCCM. Ideally everything should silently install. If not you can re package as an msi but it can get messy if you capture the wrong files/reg keys.