arron

The big plus for us though was that it took our server side profile folder from ~90GB down to ~ 15GB.

We have a network share for the UE-V templates and the profile data itself. I had to do a bit of fiddling to get the clients to load from the network copy of the templates though, as in setting the GPOs in a certain way and adding a scheduled task to get the computers to refresh their data. I used the GPO setting "Computer configuration -> administrative templates -> system -> user profiles -> only allow local profiles" to override our roaming profile settings on the computers where i wanted to test UE-V, as UE-V gets seen as local profile as far as windows is concerned. I also used the policy "Computer configuration -> administrative templates -> system -> user profiles -> delete user profiles older than the specified number of days on system restart" to force the profiles to stay fresh.

Office 2016: https://gallery.technet.microsoft.com/Authored-Office-2016-32-0dc05cd8

We swapped to using registry to redirect the start menu a while ago, i believe due to it seeming to not work at all via the folder redirection settings. That combined with a start layout policy is how we handle our start menus.

UE-V here. Used to use roaming profiles, so much space was saved by moving off of it.

We've got the latest CU merged into the wim that we use to do an upgrade and the one for fresh installs, the Lockscreen applies without issue.

You could try moving the computer to an OU with applocker disabled and then back again. It might reset it maybe.

Thats fair enough, however the start menu was causing an error popup every time it loaded in any way until dllhost.exe was excluded. On a side note, random things haven't worked properly on fresh installs for a while due to the drivers being incompatible with 1607+ code integrity requirements (link). I gave up on the "block Internet" group a while ago for one, i also haven't seen it work properly with blocking websites on chrome for a while either. I dont know exactly what the driver "ImperoInjDrv64.sys" does, but it hasn't loaded on any fresh install of our computers since the release of 1607 due to windows code integrity requirements blocking it. Disabling secure boot on a computer causes it to load properly, as the earlier link suggests.

Those who are still having issues, have you excluded "dllhost.exe" from injections? As I had to do that to stop a different error. I'm just wondering if that doing that makes a difference. Deployed 1703 with 6.0.79 to a large number of computers without this error occurring yet.

I can't really help you much other than to say that our 1073 installs, fresh and upgrades, both have working applocker.

I haven't seen it again since upgrading to 6.0.79, while on 6.0.42 i could log off and on a couple of times and cause it.

Which Version would that be?

I do believe it does all types of profiles. For us that isnt an issue as we have computers which are always used for roaming profiles and others that are always used for local, with no crossover. So we can get away with it... others may not be able to.

Thanks, that fixed it here as well. I've set the setting "Delete user profiles older than a specified number of days" to "1" so if a local profile does corrupt, the user can just use a different computer for one day until the original one deletes the profile.

This post describes how to get it working: http://www.edugeek.net/forums/smoothwall-direct-support/154791-connect-chromebook-expected.html