hipsterdoofus

Quick update on this. It's been over a week since I deleted that DNS entry and so far, nothing has exploded . I mainly expected if it to affect anything, it would be older servers, but since the keys you register also cover previous versions of the operating systems, I didn't really figure it would hurt, but just glad to have a nice controlled way to do it. Thanks for the assistance!

Ah that makes sense.

Ah okay, yeah I think I had seen this elsewhere. So in other words, I'm just de-commissioning it and pulling out the DNS entry to as needed if I do it that way, correct?

Ah there it is - Okay got it turned off - strangely enough, it will not let me change the startup type - that is greyed out, so if the server were to restart, so would the service. Is there a way around that? Also, reading the description, wouldn't this in theory affect the activation of the server it's running on? That server is still functioning right now as a file server as I get ready to migrate stuff off...

Finally getting back to this, but dumb question - how do you disable the KMS service? I see nothing in services that indicates any kind of service that can be turned off.

From what I can tell, nothing is even using KMS any longer. My latest activations have all be done via VAMT with ADBA. I believe that the newest OS's even cover the older ones. For example, I have a Server 2012R2 server (yes, I'm working to get rid of it). and if I run slmgr.vbs /dlv on it, it shows the Activation object as being an server 2019 activation object in AD. So I guess my next steps would be in theory to disable the KMS server services temporarily to make sure it does not break anything, though I'm still trying to figure out if that is possible...

Potentially could do that - is there a way to tell what all is activated via KMS? When I tried to look, it seems like it only lists the highest level, and not every product that is set up via KMS. I just want to be sure I get everything migrated correctly.

One of my last remaining 2012R2 servers is running KMS. The last few products i activated, I did via ADBA, but I still have some stuff in KMS. Ultimately, I would like to move everything over, but for right now, I would just like to get off the 2012 server. I read some documentation that essentially said, you install the role on the new server, publish it in DNS and then delete the entry for the old server from DNS....but at what point do the keys registered get installed on the new server? It seems like it should be slightly more complicated than was advertised.

I want to say that netsupport manager is what envisionware uses or maybe resells to use with their products. Does that sound right?

I'm not familiar with GDPR (I'm in the US) It looks like several of these could contend. Keep in mind, certainly not wanting this to "monitor" anyone's usage - really only want it as a support tool. I guess there is a fine line though - I'd rather have something that is interactive so as to not have any trust issues, but then again, sometimes the best way to check out an issue is when no one is at that computer.

Well, in some cases RDP doesn't play nice with software running on said computers. Plus, usually when we are connecting to a computer, we are wanting to connect to that session that is open. It would be preferable that we are seeing the same desktop. Sometimes we may be helping someone, but sometimes we may simply be connecting to run something. So because of that, the built in solutions (i don't think) would work. With Remote assistance for example, you can connect to someone's desktop, but you can't elevate, which is done by design. But with Remote desktop, I think we would be connecting to our own session instead of the user on the computer?

Disclaimer: I'm coming in from a public library environment, so my situation is a little different. What if anything do you all use for remote desktop access to computers? We have long used free products for this and they just aren't cutting it anymore. What we have used in the past is basically products that push out a VNC instance to machine and then you connect to it. This works great if you have admin access to the system, but in many cases, the products lag pretty bad even on a good connection, and the one we were using doesn't work right window Windows 10 (especially anniversary edition). Obviously there are paid options such as teamviewer, though I know that would require something to be set up on the other end. I'm interested in our best option to connect remotely unattended if need be. I don't mind a paid option, but certainly prefer lower price and ease of use. Eduucational pricing is always a plus.

Hey all, I'm in a public library environment. Some of you may be much more knowledgeable about blackboard products being in education. We had a patron request we install blackboard collaborate on our public computers so that students could access live lessons from a library. I am looking into the feasibility of this, not knowing a lot about the software. I mean first off, it looks like it uses Java, which makes me a little scared to use it anyway. Unless they use their own sandboxed JRE version, that seems likely to be a problem every time we update Java on our computers. Additionally, from what I can tell, it installs under application date per user. I haven't found yet an install that is for the whole computer. Additionally, we keep our computers fairly locked down via group policy, so I don't know if that would even allow it to run. So I am seeking out information from those of you that may have worked with this to see if it is (easily) possible. Thanks

Yes I have, luckily I figured out the problem. Apparently some recent proxy changes were causing issues because IE on that computer was set to detect settings automatically. So while it was "registering" the number, it was not, apparently, activating against Microsoft. Once we unchecked the auto config in IE, it worked!

Hello all, I'm attempting to add Windows 10 to my KMS server, so I did what all of the guides say and ran slmgr /ipk [key] where [key] was listed as Windows Srv 2012R2 DataCtr/Std KMS for Windows 10. It successfully registered, but when I run slmgr.dlv it doesn't show that KMS is enabled and shows License Status: Notification and that grace time has expired. My server itself is not showing activated, but running slmgr /ato isn't working either. Anyone run into this? Everyone else I'm seeing seems to just be activating with no issues, so I'm having a hard time finding a solution.

Not behind on Windows updates - fully patched, unless there was something that may have been causing this that just got patched this month? I just got my public computers patched thru this month yesterday, but I keep them patched monthly with WSUS. However, if there was something that was patched this month that dealt with this, then I agree, that could be the issue. I haven't had any more of these pop up the last couple of days, but if I do, I will look more carefully at the task and see if it says "who" created the task. Again, I assure you that the users do not have admin rights. Just a plain jane user.

1) No, we are running pro, not enterprise, so we don't have app locker. We use roaming mandatory profiles, so after every use, the profile gets wiped out, but the task created applies to the whole system. 2) I don't have any going on right now to see, but I think they are calling cakebake.dll, but it can't find it. I'm not sure what is creating the task though? 3) It does have a consistent name that includes the system name, could you use a variable in a gpo to delete? for the cakebake one, it makes two tasks called ArcadeCakeBake-$computername and ArcadeCakeMix-$compname. I've been deleting them remotely with powershell but that is more f something to do after the fact rather than preventative. How would you do the GPO way?

I assure you that none of them have admin rights. The users also do not have access to the control panel. It isn't being created by the user manually, rather I think it is something that webcake is doing when downloaded. Again, the dll can't be found afterwards, so I think our AV software catches that, but the task is still made programatically.

Absolutely not! I give no one admin rights! I have quite a few policies on these machines, but apparently a regular user is able to create a task in Win 7.

Hello all. We have been experiencing at our libraries some programs, possibly malware installing. Our antivirus catches them and deletes, however, they are still able to create scheduled tasks that look for certain dll's. What we end up with are annoying messages on those computers until we end the tasks. So far we've had 2 of these that are similar: Cakebake and PopGames. My understanding is that with XP, there was a group policy to prevent task creation, but there isn't with Windows 7. Overall, our computers are quite locked down, but would really like to prevent this from happening. Any suggestions?

Thanks for the reply. In our case, the staff computers are usually more high priority. I am at a library, so our lower priority machines are those, for instance, that are used primarily for a library catalog. Essentially all they do is run a browser. We have used cable ties in the past. The nice thing about the velcro - I think the cost may be higher initially, but the beautiful thing is, you can re-use it! Also, is it just me, or does anyone else wish you could replace business level mice and keyboards by unplugging at the device, rather than having to replace undo the whole cable? We have had a limited number of keyboards in the past that were somewhat like that. They had a short pigtail USB cable that you plugged into an extender, so it was much easier to replace!

Obviously in every case there are budget constraints, etc. But I'm just curious Do you replace a certain number of computers per year based on the budget? Are there certain "lower priority" computers that you simply just wait for them to die? When you replace computers, do you do any type of cable management? The thing that has prompted me to ask this is that what we have done in recent years is replace certain ever 3-4 years based on warranty status. What we then do is take the old computers and replace some other lower priority ones that one run one or two tasks. At issue is the fact that doing this double cycle in the place of a year seems to eat up an crazy amount of time, especially considering that we try to do some decent cable management with velcro strips. At one point, before I knew what I was doing, we had images that were model specific, so it was a big deal to tie a certain type of image to a particular model. Now, though, I use MDT, so this is not an issue. I'm considering on that "lower tier" of computers now, just not doing regular replacements on them and keeping a certain number of spares in case they happen to go out on me. Or if nothing else, letting them go quite a bit longer til replacing them. Just interested in how others handle this.

What about Windows 7?

So that sounds like a way to pay someone else to get rid of computers for you? I guess my question is how to do you "BECOME" a refurbisher and what licensing is involved?

So does that confirm my original assumption that there is no way to mass image computers that you want to "transfer"?