jthompson

WUFB works for servers in terms of the actual updating, GPO options, etc., but the reporting side of things (aka "Windows Update for Businsess reports") only shows client systems, not servers. To monitor/report your servers' updates, you'd have to work out some other way. Our inventory system (GLPI) collects OS details which includes the OS build number, so we can determine the status of the monthly cumulative updates from that. For instance, the build number for Server 2022 with the most recent CU applied (Feb 2025) is 20348.3207, whereas the previous month's build was 20348.3091. Another option is Azure Update Manager for your on-prem servers, using Azure Arc to get them to appear in Azure. That used to be free for on-prem servers, but now isn't. In terms of Win10 and keeping it from updateing to 11, set up some WMI filters in Group Policy and have a Win10 WUFB GPO scoped to the Win10 WMI filter, and a Win11 WUFB GPO scoped to the Win11 WMI filter. The key option in the GPO(s) is going to be "Computer Configuration → Policies → Administrative Templates → Windows Components → Windows Update → Windows Update for Business → Select the target Feature Update version". Set that accordingly in your Win10 and Win11 WUFB GPOs and you should be golden. For the WMI filters, use: Windows 10 Namespace: root\CIMv2 Query: select * from Win32_OperatingSystem where ((Version like "10.0.1%") and (ProductType="1")) Windows 11 Namespace: root\CIMv2 Query: select * from Win32_OperatingSystem where ((Version like "10.0.2%") and (ProductType="1"))

If it were me, I'd still want to focus on finding a calendar ID. I'd run something with gam to export lists of calendars of all users. Depending on how much your users are power using Calendar, you might not have too many extra calendars that aren't primary user calendars or Classroom calendars

Find the calendar ID and attack it from that direction. The calendar in which the event resides may have been created by that member of staff, and has lived on after they left. Find out which calendar it is and whether it still serves any purpose. If you can gain ownership of that calendar you can kill it, or just kill the problem event.

In Google Workspace, I have Region for storing data at rest set to Europe. To what extent does that solve this hypothetical?

I think 'unsupported' means that they can introduce an update without necessarily having to consider whether Windows will still be stable/bootable on your computer. I don't think it's any more complicated than that.

Don't do a DOGE.

Find out what you've actually got, and what roles/apps any servers are running. Find out the extent of the documentation, and get a sense of whether it's useful. Get your head around the backups (jobs, schedules, reports, alerts). Don't change anything, unless you know what it's doing and why it's the way it is (Chesterton's Fence principle?).

So not so much Schrodinger's cat as Schrodinger's clause?

Assuming that this is in reference to the "Windows Update for Business reports" dashboard, in the past I think you needed to include a organisation GUID in the GPO for your devices, but I don't think that's required any longer. If your devices are hybrid joined, I think it's just a case of setting these options and letting the hybrid-joined stuff do its work.

Have you tested whether GPP printer deployment works reliably for you under computer configuration? If so, then that would rule out DNS. If it's patchy as you say, might that be due to computers not completing driver installation during user login?

As much as SIMS has a direction of travel, hosted to on-prem isn't it, so support from ESS is going to be pointedly reluctant I should think. I'm fairly sure that you'll need their support to achieve it, though, especially if you've not looked after a SIMS server before. Personally, I can't think of anything I'd want to take on less than a SIMS server. Bringing email back on-prem is probably the only thing that beats it!

My counts were illustrative examples. My real output prompted me to remove some old computer objects that haven't been used for a few years!

Can't resist Get-ADComputer -Filter { Enabled -eq $True } -Properties OperatingSystem, OperatingSystemVersion | Group-Object -Property OperatingSystem, OperatingSystemVersion | Sort-Object Name | Format-Table -Property Name, Count That will give you output like: Name Count ---- ----- Windows 10 Education, 10.0 (19045) 123 Windows 11 Education, 10.0 (22631) 456 Windows 11 Education, 10.0 (26100) 789 Windows Server 2019 Datacenter, 10.0 (17763) 4 Windows Server 2019 Standard, 10.0 (17763) 5 Windows Server 2022 Standard, 10.0 (20348) 6

Just because a child is exposed to touchscreen devices and apps since before they were vocal or walking, it doesn't mean that their human brain is going to develop in some new way to 'handle it' as it might develop to handle certain foods or personal interactions (i.e. more natural experiences). A child that is brought up to be regulated by means of a smartphone is a child that isn't able to regulate themselves (at least not very well). Yes, that means parenting has to be very mindful of that trap, but declaring that it's all on parents is not going to get anywhere. Even with something that's not so new and unknown, like ultra-processed foods, you have to look to the industry to both apportion blame and to drive change.

It at least makes a change from edu software packages that are like "Oh, you want to use this behind a proxy? Umm..."

We use a script to find any duplicate display names (all are in the form of Firstname Surname) and add a suitably unambiguous tag to the display name to differentiate as required. E.g. "Jo Bloggs【Year 9】" "Jo Bloggs【Staff】" The biggest issue for us on this front was always staff mixing up the email groups for a student cohort, its corresponding year team and its corresponding list of form tutors. We've had to very carefully name the student cohort groups to not include the word "year" in either the display name or the group address, and not use the word "cohort" when naming staff groups. That's to make the naming of the student and staff groups mutually exclusive, to mimise the chance of an email intended for the year 10 tutors or the year 10 year team from being sent to all of the year 10 students.

IMHO, if we're handing out blame for a crisis in young people's wellbeing, the lion's share of it should be directed at the ravenous, predatory social media industry which has deliberatly calibrated itself for maximising the holding of attention.

Thanks for the reminder RE: LTSC 2019. I'd forgotten about that! RE: firmware updates on older hardware, if you've got the latest version on, even if that's 7 years old, it's "up to date", no? Not arguing that it's an okay position to be in, but in terms of Cyber Essentials, is there anything to disqualify there?

Win10 LTSC will only give you another 15 months (until Jan 2027) after 22H2 goes EOL. IIRC Cyber Essentials doesn't ask about whether your hardware is supported, or whether your software is supported for your specific hardware, only whether your software is supported and up to date (i.e. high and critical updates within 14 days). Running Win11 on hardware that's not on MS's list, provided it's still a current version and is receiving the latest monthlies, is arguably compliant to my mind. Correct me if I'm wrong, please. RE: the OP, anyone suggesting you can just carry on without being able to keep pace with the monthlies needs to GTFO, so no, not an overreaction.

We've got a few central things where we've added some AI stuff using the OpenAI PAYG API, rather than using a full end-user license. Where you've got e.g. a centrally shared spreadsheet that needs a bit if AI processing in it on behalf of everyone else, that's the most cost-effective way. That would be the case with the Gemini API, too, I believe. The cost can be a much lower order of magnitude, depending on your requirements. Whilst that probably doesn't help the OP, I thought it might be worth throwing in a mention for using the PAYG APIs, in case that helps anyone out.

Eric Migicovsky (Pebble founder) is planning to make new Pebble watches! Since no other kinds of smartwatch have ever appealed to me, this is an exciting development. https://repebble.com/

Whilst not in the 40k setting, Warhammer Underworlds might be worth exploring for a school club. I've never played it (I don't go for the fantasy stuff) but I believe the play time is more like 20-30 minutes, you only need a few models and no terrain pieces. For 40k, I suspect the aforementioned Combat Patrol mode is the best option. It's designed as the introductory game mode, with prescribed armies and loadouts (literally out of the box) and not needing a full 6'x4' table. I think it's played without needing the faction-specific Codex book(s), too. The Warhammer Alliance setup ought to be worth exploring, but if you've got kids who are aleady tooled up with armies and accessories, then they may want a more full-fat experience. The good thing about school is that tables aren't in short supply, so perhaps get a nice fancy 6'x4' game mat for them to play on (e.g. https://www.gamemat.eu/en/battle-mats/6-x4-battle-mats/).

Investors Worried AI Could Leave Shred Of Humanity Intact https://theonion.com/investors-worried-ai-could-leave-shred-of-humanity-inta-1850257921/

You probably want to use Get-AppxProvisionedPackage and Remove-AppxProvisionedPackage as well as or instead of.

Alas, my Pebble 2 hardware died long ago.