free780

I think the 'Golden Image' is dead. I say no to LTSB as I want students and staff to have Onedrive on demand sync. Windows 10 is far from perfect but is much more secure than Windows 7. I would actually be happy with a monthly image creation as long as it's automated. The Waas model means you have 18 months of support so you need to be careful which versions you skip. You always seem to get a few 1511 or 1703 around. So it will always be messy and a process not a project. You never finish and everything is always updating. Embrace the constant change.

I'd almost say share point site where IT don't have permission. There'll be an audit trial if someone does access it.

Win 10 1709 has a feature to clear the downloads folder. You could always delprof2 old profiles. I'd stay clear of roaming profiles as they are depreciated.

This is where Ems will come in and files will not be able to be emailed to external addresses.

Well ideally you need ACLs between your BYOD Vlans and your domain VLANS. If there are domain joined systems you need to provide to BYOD you can put in a rule in layer 3 for the port required. In an ideal world vlans would exist for your devices and user groups staff and students. Or authenticated firewall rules. I don't think many of us have the capacity to maintain that level of security.

It's like they want to kill 1607. I've had the C:\windows\ccm\temp filling up on 1607.

1800 1607s need to go to 1709 by March. A few 1703 and 1511s around mostly laptop's that are off site a lot. Glad MS have extended support for 1511. I think you'll always be in a mixed state of versions. I could probably write a process now.

This is what WUDO is used for. Content gets shared by PCs within your network by default on Win 10 education. Or force Bits. I'm not sure how WUDO behaves behind proxy servers.

If you deploy a store app via SCCM it just asks the user to install. So not great. It depends if your a school or college. You could leave it open but with the store for business. Sounds like Ms want to use progressive Web apps rather than native apps so it may go away in time.

Been using Edge since 1709. It's slightly slower than Chrome. I was hoping the Application Guard feature in 1709 would work on the education sku. It doesn't only the enterprise version. I think it still makes sense for IE to be the default unless you want to maintain the enterprise list.

Are the distribution lists meant for staff. You could change the Gal students are pointed to.

Gets even more fun trying not to override users customisations after a upgrade.

Unless you push out lnk files to the all users start menu you will get the gaps. Most start layouts I've seen just have office and edge/IE/Chrome for this reason.

This was an issue in 1511 if you had the c drive hidden. It was to do with spotlight search. I had to find reg keys to disable it. I thought it was resolved in 1607. The store will reach out for updates and the Ms solution is WUDO rather than WSUS. If clients are failing due to WUDO behind a proxy it may be why your seeing so much traffic. You can switch WUDO to use bits instead. Each client will download app updates from the Internet but at least they succeed.

It's a string from the message property in Get-winevent.

Hi I'm struggling with trying to select a filename from a full path using regex in powershell. Anybody know what it is?

If you pay for Azure App Proxy you can enable 2 factor authentication.

https://blogs.technet.microsoft.com/wsus/2017/05/05/demystifying-dual-scan/ If you have certain WUfB policies configured it can trigger the WUAgent to retrieve 1709 even if you are using WSUS.

Live Times as well. The first bus app doesn't seem to do that.

Won't you have to be a share point admin of each Onedrive. Then webdav connections. Sounds like a powershell job.

Are you using MDT with SCCM, if so there's a pause script.

Don't know why they don't just let you push it out via WSUS,/SUP. Or ship 1709 with an up to date Onedrive client.

No luck. May try these sets and leave the defaults in terms of Onedrive. https://support.office.com/en-gb/article/The-OneDrive-sync-client-update-process-2f748bc6-6f01-4406-a791-ec047f066d6d

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\AllowedApplications Stores the entries. I did try: But this would need to run as a script on every boot up. MS need more documentation. If Defender could just 'phone home' that would be better.

I think you have to have the cloud /maps enabled and not blocked. The list in Group Policy would be a pain to maintain. If it could use the Applocker policy that would be good.