StevieM

Both very good. The reveal in Oldboy is just horrific. Don't bother with Lady Vengeance, though; it's not a patch on Mr Vengeance. Good to see some World Cinema offerings on this thread. I might start posting more of my own recent watches.

Do you mean that you want to change the default web browser for all users? If so, this is what I did. Change the default programs on the admin account and export the results to an xml file using PowerShell. Dism /Online /Export-DefaultAppAssociations:\\[file location]\AppAssoc.xml Then, configure GPO to point to it. Computer Configuration/Administrative Templates/Windows Components/File Explorer/Set a default associations configurations file It doesn't work the first time the user logs on, as the registry keys haven't been created before the policy applies, but it works every time they log on after that. I'm sure someone else may have a better answer, but I hope this helps. EDIT: I did this on Windows 10 Education not LTSB, but it should work the same way... I think!

If you email Hitachi, they will send you a replacement mirror motor free of charge.

So it's L L Lnd now, then?

You ain't kidding! What started as £5 a month with Tesco has escalated to >£40 a month (almost twice as much as my own life insurance that would pay off my mortgage!). OK, so she's 15 now, but there is a claim limit of £2000 on her policy. It really does feel like I'm throwing good money after bad, but I can't bring myself to cancel it now. I dread to think how much more it would go up if I ever had to make a claim.

1 hour and 10 minutes to go before the little angles go home. I'll probably be an hour or so behind them. All the best, everyone! Have a great Christmas and a fantastic 2017!

Ironically, it's one of a very few of @DaveP's posts that isn't blocked for me, although the second one is.

Great news, and long overdue! Just make sure you've got a browser tab available for Edugeek.

I'm learning all the time!

Thanks, @sted. That sounds good. I'll look into it.

Thanks, @PyROm. I've just looked into that, but I'm not sure that it would work. Wouldn't it apply the same user settings regardless of who logged on? Even if I used the merge option, the computer's GPO would always take priority in a conflict. For example, if I wanted Control Panel removed from the Classic Shell Start menu for students, it would also be removed for administrators. Is there someway I could combine this with Security Filtering, perhaps? (Just when I think I'm starting to get my head around AD/GP, I realise that I've got SOOOO much to learn. )

Thanks to @Michael and everyone else for their input on this topic. I've pretty much got W10 working exactly as I want in my test environment (apart from the inability to lock down Edge as much as I'd like). This will be great when we upgrade one of our suites in the New Year. However, my test user GPOs don't apply properly to our current Windows 7 computers, which neither have nor need the Classic Shell Start Menu. Since logging on with a test user account, the desktop and start menu folders no longer redirect when new users log in. I've had to do a system restore to an earlier date in order to fix it. So the question is, how do I apply GPOs so that they only affect computers in the W10 OU, but are also dependent upon the type of user that logs in, i.e. student, teacher, administrator? Am I making sense?

Don't think there was one last year either, was there? We had a mini-madvent the year before, though. As long as we get the annual S(%)ocktober shenanigans, I think we'll have to accept that they still have their boring everyday jobs to do.

'XYZZY'

Yes. It looks like I'm going to have to reconfigure permissions on all shared folders that need restricted access. The annoying thing is that these permissions have been in place for years (since before I ever started working here) and the same folders have never been accessible before. File Explorer and Internet Explorer both show the error message "Accessing the [%] resource has been disallowed" when I try to access them using the file:// protocol. It's only Edge* that allows access to them on our system. (*We don't have any browsers other than IE and Edge installed currently.)

I've also been able to use the file protocol to navigate to a network folder that the user doesn't have permission to access any other way than through Edge.

I'm currently using the 'Hide specified drives' policy restricting drive c only. I'm sure we had issues with software not working properly in the past when we used the Prevent Access to C. It's a bit worrying to me that when I try to access c: from file manager or IE, I get the pop-up message 'Accessing the resource c: has been disallowed', but when I do it in Edge a new File Explorer window opens with the whole drive available. @dry - I'm not using AppLocker at the moment but it comes to something when you have to consider blocking a core app in order to make the system more secure.

Personally, I wouldn't be happy allowing anyone near system batch files or PowerShell or the Registry Editor. There have also been discussions on here about people disabling UAC It seems pointless having group policies to prevent users accessing certain areas of a system if a core element of the OS provides access via the backdoor.

I am in the process of configuring a W10 image suitable for use by teachers and students. I have locked it down so that they are unable to browse the C: drive, through File Explorer or Internet Explorer. However, I have discovered that Edge allows all users to access the C: drive using the http://file:/// prefix. They are unable to add, delete or modify files, but they do have free access to navigate around the OS files and open them. I even managed to open a PowerShell session. Could a few others test this and see if it's just something I've done wrong? This could have major security implications if it isn't.

We've used Equitrac to manage print accounts for a good few years, but it's only when we upgraded our MFPs a few years ago and incorporated Follow Me that has really made a difference to our printing costs. I thought I'd get it in the neck from staff because they would have to log-in to the MFP to release prints, but they took to it straight away. No more abandoned prints lying around for days and they love the fact they can just press Print and collect it from either of the connected machines. Happy days.

Does this really mean: ? Well, I went to collect my watch from the jeweller on Saturday morning to find a note attached reading simply, 'Return to place of purchase'.

It's arrived already. I got in from work and it had been posted through my letterbox. Looks really nice and I'm even more convinced it is the same as my dad's old one. Unfortunately, it really doesn't suit me. I've got proper girly wrists (7" circumference!) and the face covers the entire width. Even on the shortest setting, the strap only just fits. Oh, well. It was more of a nostalgia purchase anyway.

Wow! Had an 'order despatched' email by 12.10 for delivery next Monday or Tuesday. I just hope it doesn't cost an arm and a leg to have the battery replaced.

The black-faced one looks uncannily like a watch my dad used to have when I was little. So much so I think it must be the same one. They may not have been sold over here, as @Dos_Box says, but my uncle was in the Merchant Navy and brought all kinds of things back from his travels. I wonder... I'm tempted to buy one for reasons of nostalgia alone. The only thing that is putting me off is the statement: Does this really mean: ? Edit: Temp...tation... too... strong. Unable to... resist. Buy... now... Checkout success!

Closet watch? Is that a bit like a pocket watch but BIGGER?