arron

The big plus for us though was that it took our server side profile folder from ~90GB down to ~ 15GB.

We have a network share for the UE-V templates and the profile data itself. I had to do a bit of fiddling to get the clients to load from the network copy of the templates though, as in setting the GPOs in a certain way and adding a scheduled task to get the computers to refresh their data. I used the GPO setting "Computer configuration -> administrative templates -> system -> user profiles -> only allow local profiles" to override our roaming profile settings on the computers where i wanted to test UE-V, as UE-V gets seen as local profile as far as windows is concerned. I also used the policy "Computer configuration -> administrative templates -> system -> user profiles -> delete user profiles older than the specified number of days on system restart" to force the profiles to stay fresh.

Office 2016: https://gallery.technet.microsoft.com/Authored-Office-2016-32-0dc05cd8

We swapped to using registry to redirect the start menu a while ago, i believe due to it seeming to not work at all via the folder redirection settings. That combined with a start layout policy is how we handle our start menus.

UE-V here. Used to use roaming profiles, so much space was saved by moving off of it.

We've got the latest CU merged into the wim that we use to do an upgrade and the one for fresh installs, the Lockscreen applies without issue.

You could try moving the computer to an OU with applocker disabled and then back again. It might reset it maybe.

Thats fair enough, however the start menu was causing an error popup every time it loaded in any way until dllhost.exe was excluded. On a side note, random things haven't worked properly on fresh installs for a while due to the drivers being incompatible with 1607+ code integrity requirements (link). I gave up on the "block Internet" group a while ago for one, i also haven't seen it work properly with blocking websites on chrome for a while either. I dont know exactly what the driver "ImperoInjDrv64.sys" does, but it hasn't loaded on any fresh install of our computers since the release of 1607 due to windows code integrity requirements blocking it. Disabling secure boot on a computer causes it to load properly, as the earlier link suggests.

Those who are still having issues, have you excluded "dllhost.exe" from injections? As I had to do that to stop a different error. I'm just wondering if that doing that makes a difference. Deployed 1703 with 6.0.79 to a large number of computers without this error occurring yet.

I can't really help you much other than to say that our 1073 installs, fresh and upgrades, both have working applocker.

I haven't seen it again since upgrading to 6.0.79, while on 6.0.42 i could log off and on a couple of times and cause it.

Which Version would that be?

I do believe it does all types of profiles. For us that isnt an issue as we have computers which are always used for roaming profiles and others that are always used for local, with no crossover. So we can get away with it... others may not be able to.

Thanks, that fixed it here as well. I've set the setting "Delete user profiles older than a specified number of days" to "1" so if a local profile does corrupt, the user can just use a different computer for one day until the original one deletes the profile.

This post describes how to get it working: http://www.edugeek.net/forums/smoothwall-direct-support/154791-connect-chromebook-expected.html

Yes, register loading speed was the most noticeable change for us.

We went from 2008 -> 2014 and we are running it in 2012 mode at the moment. We have changed it a few times while its in use with no effect, it seems to apply the new settings on queries made after the change without effecting previous queries.

Go to SQL server 2014 management studio -> find your sims database -> right click properties -> options (top left of properties) -> compatibility mode -> sql server 2012. It can be done while the database is in use and no you don't need to touch FMS.

I tried it myself out of curiosity. They gave us 5 patches as well... they also "defragged" (reindexed) our database that made it better until it was under load again. They currently have a copy of our database that they are looking at to try and work it out.

Ours is also doing the same, seeing the email address but not linking it to our AD accounts so its not getting any groups.

Just an FYI, we found that our sims ran slower after upgrading from sql 2008 to sql 2014. We found that we had to change the compatibility level to sql 2012 for it to return to its previous speed.

Try "gpupdate /force" on an account that hasn't updated then logoff and back on.

It installs fine here... though we have net 3.5 installed which tends to be why we don't have problems.

Here's what we use to control the windows 8 start menu layout.. Startup: c:\windows\system32\attrib.exe "c:\Users\Default\AppData\Local\Microsoft\Windows\appsFolder.itemdata-ms" -R echo f | xcopy "\\server\netlogon\start menus\Pinned_Items\appsFolder.itemdata-ms" "c:\Users\Default\AppData\Local\Microsoft\Windows\appsFolder.itemdata-ms" /D /Y c:\windows\system32\attrib.exe "c:\Users\Default\AppData\Local\Microsoft\Windows\appsFolder.itemdata-ms" +R Users GPO: administrive templates -> start menu and taskbar -> Remove drag-and-drop and context menus on the Start Menu user registry entry: key path - HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce name - Allow start menu updating type - REG_SZ data - c:\windows\system32\attrib.exe "%USERPROFILE%\appdata\local\microsoft\windows\appsfolder.itemdata-ms" -R logon script: copy "\\server\netlogon\start menus\Pinned_Items\appsFolder.itemdata-ms" "%userprofile%\AppData\Local\Microsoft\Windows\appsFolder.itemdata-ms" /Y Now i shall explain it all. The startup block copies the network version of your start menu layout to the "default user" in windows. This means that any newly created profiles will get this layout applied. The issue is that windows always replaces this file when it creates a new user, so you have to set the file as read only to prevent this. That is why the startup block removes the read only, updates the file, then marks it as read only again. Note: if you have not run this command then you will not see the file as it does not exist by default. The user GPO setting is what prevents the user from being able to edit the layout, however it also means no "run as administrator" option on the start menu. If you want to prevent the start menu background being changed, i believe you have to disable control panel access. The registry setting removes the read only setting from the copy of the file within the users profile (as when windows copies the file over, the permissions are maintained), allowing you to maintain the layout via the following login script. The login script copies the current layout to users profiles so they always have the up to date version on login. To create/update the layout you just have a test computer in an OU with the "Remove drag-and-drop and context menus on the Start Menu" setting disabled so you can edit the layout. Then you just log off, browse to the user profile of the account you used and copy the file from the profile to your network location. Also, incase any of you using roaming profiles have noticed that the file is stored in the "local" folder, windows copies it to the roaming folder on logoff and then back again on logon.

That can be done. You have to have a folder that all computers can access (like netlogon) and then some xcopy + group policy file permissions and you have a start menu that only you can modify which updates on user login.