chazzy2501

I'm setting up a 1709 win 10 edu build for summer deployment. I'm using applocker for the first time (I've used SRP in the past) I've enabled the service created the default rules and set enforcement. One of the default install rules allows admin users to install from anywhere. This is not working as expected and blocks my domain admin user from installing programs from a network path. The error in the event log reads: "is not permitted software restriction policy" (but I have none set, checked gpresult) is that normal for an applocker events? I've redundantly added the network path as an allow rule for installers but this didn't help... [now deleted] the error 1007 "...only allows installation of unrestricted items..." "the authorization level returned....was 0x0"

So have you upgraded your subscription? it says you need the e3 subscription. The unlimited subscription I get is only A1 (same reason I cant use the E5 sub security and compliance > data governance > supervision policies)

I have the us-16-xg I'm not aware of any inter vlan routing on any unify switch? I was under the impression that you had to get the USG-PRO (which I have but cannot use as it HAS to be the default gateway) which is a router on a stick

I always buy the 5 year support at pos it usually only costs another 10% and can reduce the TCO (as I use 5 year refreshes on critical hardware)

yes, I'm also interested, if I could have keywords looked at (say in attachments) that would alert the sender (or SMT) if any sensitive documents are being sent externally. and any other policies would be nice.

ohh, that's a way better solution.

use direct access (as it's free) or VPN from windows server 2012+ over ssl. I can't see them blocking SSL.

Unifi have wifi access points that can also do PA duties... the.. Ubiquiti UniFi UAP AC EDU

ha! I have one at home, it's still 100% I use it as the guest tablet. Also in the landing as a virtual fireplace this xmas.

no optical drives! I see your teachers have evolved.. I like the 14" laptops better

I have upgraded 640G1 with sata Kingston 120SSDs. No issues. Using WDS with 8.1 custom image but not MDT.

The xbox one s is a great value option. You can get them for sub £200 with a controller (controller can be used on your gaming PC via Bluetooth) and minecraft (which could also be used in Windows). They have 4k HDR support for Blu-ray and streaming services like Netflix and amazon (also atmos sound). This may not be needed now but it's nice to have the option, simply as a media player it could justify it's price.

I've just done it on my workstation, I added file explorer to my start and exported the xml to the local c drive folder, no issues. I'm using 1703 64bit education edition. EDIT: I wasn't elevated. EDIT2:

urgh, I've just done this. Disable all then allow specifics. I had trouble allowing .lnk files. (those you have to exclude on a machine and user level, I think because I use rollback gpo policies) if you want to allow exe's on mapped drives you have to actually allow the UNC path not the mapped path. This was too allow microbits (which means allow usb sticks, which means files could be copied to the c drive and executed even if you don't allow usb execution and have file filtering on doc storage) ((you can't stop c drive access btw, the old 127 trick poo))

The LG has the dual HDR standards, supports Netflix and Amazon video in 4k (nice have) also has Bluetooth for headsets good for personal listening in a busy room or for flexible placement of a sound bar. EDIT: it also has 3x HDMI 2.0b ports and the only one of the four with HD freesat.

just an FYI and you probably do not have this issue but a display port cables limit is 3 meters (for max bandwidth) 1080p@144 maybe too much if you were using a 5 meter cable. (and maybe a cheap cable) for testing you (an I'll assume a lot now) could enable multiple monitor mode in the bios and use the intel igp to test the monitor to help isolate the issue. (if you are intel and have dp on the mainboard)

try and browse to the UNC path of the mapped drive and see if you can connect, also read the event logs it'll say why it couldn't. Sometimes connectivity issues like not having fast start on the Network switch means that the PC doesn't have a proper network connection whilst booting (and maybe logon) but by the time you get to it, it does. You can disable fast login for testing.

NTFS to limit access to the folders and then they can password protect office documents that will encrypt them. This should check enough boxes.

well, I turned off the local exchange and this didn't help. When I remove the direct access features (on guest internet) outlook works fine. maybe a dns issue?

in a domestic setting, my Father (on bt fiber) was getting terrible internet, after I plugged him in it was amazing. (80+) He has 10 plus devices and is surrounded by other wifi. The only conclusion was that because some fool neighbour had off set his 2.4ghz channels (not 1,6,11) the APs were unable to share the airwaves. This crippled most of his equipment that saw a strong signal but was unaware that it was polluted. He's buying more 5ghz dongles!

no the cert is good but is for the external name not the internal.

I'm seeing an issue with remote users (teachers going home) where outlook 2013 is unable to connect. I see a certificate warning that lists the local domain exchange server... all mailboxes are in the cloud. now I can only assume that the duff certificate is being provided by the local exchange server as its "exchangeserver.domainname.local" and exchange certs can't use the .local so of course it's invalid. I'll assume this is a direct access issue, although I'm seeing strange results from my autodiscover. (just a redirect to office365 ip addresses.) edit: ok so the cert source has the "exchangeserver.domainname.local" instead of the "mail.internetdomain.sch.uk"

too late now but disable multicore enhancement, it is sometimes enabled when you use XMP for your memory and allows a slight OC that can prove unstable in certain workloads. (yes on non-k CPUs).

ok, I'd hardwire a laptop to the switch and run 3 pings 1 to the nearest ap, 1 to the corresponding POE switch (management) and 1 to a server (for transfer testing). I'd then start connecting laptops (near to the local AP) and see which device starts to lag out first. Are you using WPA2 with AES/CCMP only (best performance) and any VLANS? Have you tried data rate control. (I use it to prevent legacy devices connecting (so have minimums of 18mbit))

although we don't have those boards I've seen 2 things affect our boards. 1, surface contamination and 2, local interference. Look for wifi or dect phones, security camera or badly earthed devices and broken psus. also some newer energy saving strip lights as well. basically start unplugging devices nearby or move the board for testing to rule out environmental factors.