Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

PyROm

Members
  • Posts

    661
  • Joined

Everything posted by PyROm

  1. We get this as well, although im not sure it is classic start menu that is the cause, as trying to launch any programs also gives us the same error on pc`s that are doing it (before reboot).
  2. Forgot to add, when we run sysprep we specify the xml file, I dont know if this is needed if using the default unattend.xml name. sysprep.exe /generalize /oobe /shutdown /unattend:unattend.xml
  3. Second try with right quotes, doesnt let me edit for some reason.. We use a minimal sysprep file to get through oobe... en-GB en-GB en-GB en-GB true true true true true 1 !password hash removed! false temp_user administrators temp_user * GMT Standard Time 1 net user administrator /active:yes We then have a file c:\Windows\Setup\scripts\SetupComplete.cmd which windows autoruns after install (just create folder if needed and put file in there, no need to make reg changes etc.) net user temp_user /delete bcdedit /set recoveryenabled NO sc config FOGService start= delayed-auto shutdown -t 300 -r This deletes the temporary user created in sysprep, disables the recovery console/partition, changes the fog client to start automatically (the latest versions of fog client should be set to disabled before imaging as it can cause problems if not, although havent run into any myself) and reboots the machine after 5 minutes (so fog client loads and starts rename/domain join process).
  4. Do you create a user in your answer file? If not you can get this error. When the error is on screen press shift+f10 to get a cmd prompt, reenable administrator account using net user, then reboot and see if it works.
  5. We use Computer>Adminastrative templates>classic shell>classic start menu>Menu items for classic menu with one column to configure links outside the programs folder. it is a multiline box that defines all links... from the help in the gpo
  6. We use rufus for 64 bit windows 10, not tried it with 32-bit. You need to make sure you have changed the parition scheme drop down to "gpt scheme for uefi", leaving it as "mbr scheme for bios or uefi" doesnt seem to make a uefi installer.
  7. Put the user settings for windows 10 in a computer gpo, in the w10 ou, and enable loopback processing.
  8. Thanks for the replies, I have a pack of microfibre cloths at home, will bring them in and give it a try, do people wash them after use, eg in a washing machine, or rinse them etc?
  9. Here we have to regularly clean montors, getting through a lot of tissue from wiping them dry to avoid streaks and dealing with cramp from fiddling about trying to rub streaks off. I was just wondering if anyone had tried a window vac for such as job? and if so would it be worth looking at one for this job?
  10. Have you just got the classic shell start menu installed, or all of classic shell (including the explorer replacement)?
  11. We are a secondary school and have Read only access. The teachers normally get students to email in their work for marking. The reasons we don’t have full access is:- - Some teachers are bad with touchpads/mice and have a habit of dragging folders into each other (and they can never remember which one they dragged it into), which could be bad if they dragged one students folder into another students. - Ransomware wise, it stops a teachers laptop/BYOD device/login wiping out all your students My Documents, which although presumably could be restored, has a time implication that may affect GCSE work (ie. can’t work for a lesson or 2 while files are being restored). - We have had it where a student accused a teacher of deleting work out of their folder, the student claimed they had done the work but it was now not there and the teacher must have deleted it, the student threatened the teacher with a formal complaint from their parents if they didn’t "redo" the work for them. Luckily we were read only so the teacher couldn’t have done it and so any complaint they could make would be dismissed. - We havent had this one but, if a student guesses a teachers password or gets on a teachers pc/laptop that they left logged in and hasnt locked then they could put all sorts of nasty stuff in students home folders, or even just delete them all, and the evidence would all point to the teacher. They may have a specific reason though so would ask what the reason is (probably ask SLT from the point of view of trying to solve the teachers problem in a better way) so you could offer a workaround.
  12. on windows 10 education 1607 with all the updates.
  13. I have just had a similar problem, I made Internet explorer the default and used dism to export the xml config. I then set it to use that in gpo and the computers just seem to ignore it, tried storing it on a network share and the root of C: just to see if that made a difference. In the end I've just ended up importing the config file back into to pc`s manually with dism.
  14. We were having a big slow down resulting in the service start errors, black screens etc. We use Impero as well. What we found was the GFI Languard process update32.exe was constantly thrashing the harddrive, GFI Languard being what powers Impero patch management. By removing the computer from the patch management profiles and telling impero to force uninstall patch management agent on the windows 10 pc`s we got them working normally again.
  15. I should add that one of the users pointed out that their iphones and tablets still connected fine to their router, just the work laptop wouldnt, however deleting and letting them reconnect on their laptop still fixed it for them.
  16. We have had this the last couple of days, but with Windows 7 computers. It looks like BT put out a firmware update to their routers which kept the same ssid etc but changed something about the connection, deleting their home wifi connection (in manage wireless connections) and getting them to reconnect when they went home fixed it for them.
  17. PyROm

    BETT Parking

    Excel says parking is £15 for 24 hours in their carparks, so not bad. Is traffic always bad down there or if we got there early ie. 7am woul dwe avaoid most of traffic?
  18. PyROm

    BETT Parking

    I am trying to get 3 of us down to BETT this year and the train prices are going to be bad (£500 return, off peak), so looking at driving down. I was wondering if people who had previously been knew what the parking was like, ie. is there plenty or will it all be full on the days of the BETT show?
  19. Thanks for that, changed the policy to replace and it works. I misunderstood the technet article and assumed that replace would only work if there were competing entries in the computer gpo.
  20. Thanks for the reply, I actually want to stop all user policys from applying to the laptops in the specific group. I have tried loopback processing and it doesnt seem to have made a difference. Im not trying to replace existing policys with computer ones, I just want no policys applied (apart from the directaccess settings, but can work that out after blocking all policys).
  21. I am experimenting with direct access for teachers laptops. At the moment staff have full administrator rights to their laptops and the laptops arnt on the domain. To use the direct access I have to join them to the domain. I have created a new OU called direct access and blocked inheritance to that folder, putting all direct access laptops in that folder. I have linked the direct access clients gpo to that folder. The problem I have is that I wish to block all gpo`s other then the ones directly in the folder, to make the laptops as close to what they already have as possible (I intend on making them local admins). Our AD is divided up into 2 main branches, users and computers with all the user gpos in the users branch and all the computer gpos in the computer branch. Blocking inheritance on the direct access folder works to block the computer gpos but not user gpos. I have created a group, added the direct access laptop to that group and denied applying group policy to group on all the user gpos, however this has not worked. User gpos are still applying. Any ideas?
  22. I'm not using MDT however I am noticing that since the 1607 update whenever windows update gets to the download stage about half the services on the machine crash/stop. This can be seen in event viewer->system. I have tried blank installs etc. the problems seem to start when joining a domain. I have a batch of laptops that aren't domain joined but have the same wsus settings via gpedit and they work fine.
  23. We currently use ClaroRead SE (A cut down version of their full product). It was £495 for a perpetual site license (Scroll to the bottom of their licensing page for school prices). We have run exams for 2 years now with it and it seems to work well. We have 1 locked down user account which we log all the pc`s into before the exam, with just a Claroread shortcut and the exam paper on the desktop. Our main problem has been trying to explain to teachers preparing mock exams that a photocopy is an image and not writing, therefore it cannot be read (I'm not getting into the complexities of OCR).
  24. We have a separate user account that has 2 calendars in it that we share through the share calendar option in outlook (it emails them with a button to press to add the calendar to their own list of calendars). We have a public calendar which is published to the website via WebDAV as an .ics (publish function built into outlook) and accessed via a php script on the website, only a few staff have edit rights to this one. We also have a private calendar that all staff have editor rights to (which is not published).
  25. We are a one site school with 2 file servers. We use dfsr to replicate files between them live and dfsn to handle auto failover (both managed from same mmc). Dfsn would let you setup costs/priorities etc for which servers users default to eg. Site a uses server a, however you need to consider shared areas and if 2 users save altered versions of the same file at the same time on 2 different servers, as file locking (nateively) only works on the local server. We arnt a good example for you on that, as we are one site we just default all shared areas to the same server, maintaining file locks.
×
×
  • Create New...