free780

BTL better move away from Flash Player. http://www.btl.com/surpass/secureassess/

They really need the stability update. With fast login times. Hot desking focus to just make Windows faster.

Uh oh... How long before Microsoft Education 365?

That does lower security. If you move to PCs being in standby/hibernate it can cut down on login times as prefetch has already happened. I suspect this is what MS do internally. But you need enterprise level PCs with Windows 10 driver support.

Good points. 1. Azure seems overpriced with very little benefit over on prem. 2. Legacy Win32 apps as MS see them are still used widely and are why Windows has the market dominance. 3. 1st login may be quicker with azure AD and Windows 10 S but Autodesk, Adobe are not going to put there apps in the store. I can't get users to install programmes from the Software Center in SCCM as they are too used to the administrator/user model. As always it's a bit of a mess. 1st login will depend on lots of factors: GPO's l, scripts, Antivirus etc. But 4 mins is too long in a hot-desking environment. Due to the budget pressures now we may see 1:1 with parents contributing to the costs. Buy that does leave schools in needy areas in a vulnerable state.

@Tefters So do MS think everyone is doing 1:1 ? So roaming profiles seem to be depreiciated. UEV will roam settings. So basically back to local profiles as appx seems to break on mandatory. Is it a ploy to move everyone to SSDs?

Are you a school/college/uni? I'm local to @duzzie .

This is why RBA exsits in SCCM. Seems to be an issue of control. Do you lose it but run the risk of mistakes being across your environment?

So currently are you using MDT not intergated with SCCM? Is WSUS standalone as well? As the LEA has been able to deploy the SCCM client they can re-image or push out applications. If you've got a solution that's working it seems risky to put that power in the LEAs hands.

/showthread.php?t=178589 Like it or not Microsoft have moved a lot of GPO settings to enterprise/education only. In terms in 1703. I haven't yet tested it. Are you using loopback to enforce the folder redirection?

...and make login times faster.

MS are moving away from roaming profiles. They would rather you used UEV.

Some UWP apps can be removed via remove-appxpackage or remove-appxprovisionedpacakge powershell command let. However some like edge can't be removed.

On prem domain membership does slow down logons. Windows 10 S only supports azure AD. If we could buy hardware without the crudware in the OEM image autopilot might be sensible. Though still need an intune subscription to push out programs.

https://blogs.technet.microsoft.com/windowsitpro/2017/06/29/modernizing-windows-deployment-with-windows-autopilot/ I can't see SCCM going away anything soon. But MS seem to be going for more subscriptions and cloud. Any thoughts?

Can you view Windowsupdate.log through the c$ share ? I wouldn't force a restart on Server 2003.

Long shot. Any standard hyper-v rules being blocked on Windows firewall on the guest VMs?

I think powercfg has a switch for last source of standby. Not sure about shutdown.

Windows as a service (when we break stuff we fix it fast).

https://support.microsoft.com/en-us/help/4022715/windows-10-update-kb4022715 Just a heads up really. I've encountered this over the last few days. Mainly a City and Guilds site is affected. Have advised users to use chrome. There is a further patch available from MS. Only OS' before Windows 10 supported. https://support.microsoft.com/en-us/help/4032782/a-blank-page-or-404-error-prints-when-you-try-to-print-a-frame-in-inte It does lower security however.

You'd think the patch to counter the SMB1 vulnerability would have been widely deployed now.

I think if you can find the domains you can use it with a unauthenticated proxy. Use fiddler to test.

I guess this is why SMART want you to pay a subscription.

If you go with the Semi-Annual Channel you are very brave.

Most encrypted usb sticks require administrator rights anyway. They need to load a driver. You have to get a tech to 'run as administrator'. Either that or you need the agent/driver/service deployed ahead of time. But most solutions require you to purchase to have this.