georgeescott

Yep, there is! HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Services\NlaSvc\Parameters\Internet Although I think Microsoft’s IPv6 Web probe, IPv4 and IPv6 DNS Probes are down as they don’t even work when I’m on my home internet connection, yet if I set the probes to Firefox/OpenDNS probes, it works perfectly fine. I’ve logged a ticket with MS to see if this is broken on their end.

https://superuser.com/questions/1618647/connected-to-the-internet-but-windows-10-says-no-internet the WindowsSpyBlocker tool mentioned in this article is helpful in finding out why Windows wasn’t detecting the connection, as an alternative to turning it off

We have the ABTutor client as a default Application during our ConfigMgr task sequence and have various Adobe CC apps install based on device collection membership afterwards without issues. I assume you’ve built the CC package from the Adobe Admin Console, then use the .msi via GPO instead of setup.exe? What version of ABTutor are you running? Are there any CC install log files after it fails? https://helpx.adobe.com/uk/creative-cloud/kb/troubleshoot-install-logs-cc.html#silent_install

We use a VGA splitter on monitor 1 for the interactive board and main display, then monitor 2 is the monitor the teachers do 'private' work on that doesn't get shown. Had no complaints. Not sure we've ever been able to get monitor 2 working for mirroring/interactivity on our BenQ boards. Any reason why it has to be monitor 2?

I was recently reviewing our DelProf scripts as we were getting a lot of reports of SSD's filling up with profiles. I also found that script on Microsoft Communities, which was also posted in the comments on the DelProf2 site https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/. Helge mentions at the top of that page about UWP apps not being supported as Windows locks some of the databases/registry keys. We're running DelProf2 as a startup script and restart workstations daily to reduce any instances where files might be locked that would prevent the profile being fully deleted. But we do often get "Could not delete key . Error: Access is denied." in the DelProf2 logs. As far as I can tell, we've not had any profile issues though. I got in touch with Helge on Twitter and he said: It's unlikely that Delprof2 will ever get an update to resolve the NTUSER.dat date modified issue. But the script from Microsoft Communities works well to work around it. I've made a few tweaks to the script, but this has allowed us to use the /d: switch across our entire Trust reliably. We run this before we run DelProf2. <# .SYNOPSIS =========================================================================== Filename: NTUSER.dat Date Modified Fix.ps1 Created by: Darrell Jividen @SSUtech Updated by: George Escott @[u]georgeescott[/u] Updated on: 26/01/2023 =========================================================================== .DESCRIPTION Used to set the NTUSER.DAT last modified date to the last modified date of the users UsrClass.dat file so that it's correct. Windows cumulative updates alter the NTUSER.DAT last modified date to be more recent that it actually is. This breaks some profile deletion tools / scripts that rely on this date to remove cached profiles based on age. .NOTES To be used as a scheduled task or startup script. https://techcommunity.microsoft.com/t5/windows-deployment/issue-with-date-modified-for-ntuser-dat/m-p/102438/page/2 https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/ #> # https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_preference_variables?view=powershell-7.3#erroractionpreference $ErrorActionPreference = "SilentlyContinue" # C:\Users folder $Path = "$env:systemdrive\Users" # Exclude user folders $ExcludedUsers = @('Default','Public','Administrator') $UserFolders = $Path | Get-ChildItem -Directory -Exclude $ExcludedUsers # Check each user profile folder and update the NTUSER.dat date modified time if # it's different from UsrClass.dat ForEach ( $UserFolder in $UserFolders ){ $Username = $UserFolder.Name # Do not proceed unless both NTUSER.DAT and UsrClass.dat exist if ( (Test-Path "$Path\$Username\NTUSER.DAT") -and (Test-Path "$Path\$Username\AppData\Local\Microsoft\Windows\UsrClass.dat") ){ # Get Last Modified time for the NTUSER.DAT file $NTUSERDat = Get-Item "$Path\$Username\NTUSER.DAT" -Force $NTUSERDatLastModified = $NTUSERDat.LastWriteTime Write-Host "$Username - NTUSER.DAT Last Modified: $NTUSERDatLastModified" # Get Last Modified time for the UsrClass.dat file $UsrClassDat = Get-Item "$Path\$Username\AppData\Local\Microsoft\Windows\UsrClass.dat" -force $UsrClassDatLastModified = $UsrClassDat.LastWriteTime Write-Host "$Username - UsrClass.dat Last Modified: $UsrClassDatLastModified" # Set the NTUSER.DAT Last Modified time to the same time as the UsrClass.dat file if ( $NTUSERDatLastModified -ne $UsrClassDatLastModified ){ $NTUSERDat.LastWriteTime = $UsrClassDatLastModified Write-Host "$Username - NTUSER.dat Last Modified date updated to match UsrClass.dat" } else { Write-Host "$Username - NTUSER.dat Last Modified date already matches UsrClass.dat" } $NTUSERDat = $null $UsrClassDat = $null Write-Host "" } }

Looking in to going full Intune ourselves, but based on the comments here, Windows 11 SE isn't going to be a Chromebook-killer! Nor good for shared devices. Hybrid might be the way forward..

Yes, hex. E.g. 0x384 (decimal 900).

We had this exact error as well intermittently occur for different computers and different users. We also have a 'Delete All' item before the printer mapping happens. This is what fixed 95% of our printer issues with the '00x80070057 The parameter is incorrect' error. Setting the print server location to be FQDN in the GPO. However, we still had some issues with printers not mapping with the same error after this. After a lot of troubleshooting, i stumbled upon two posts: http://www.edugeek.net/forums/windows-10/183649-windows-10-printers-keep-coming-back.html and https://serverfault.com/questions/1082240/where-are-these-printers-coming-from-in-devices-and-printers. We have student mandatory profiles which are cleared by the 'Delete user profiles older than a specified number of days on system restart' GPO as well as Delprof running regularly. It turns out that neither of these clear out the 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider' key, which gets filled up with GUIDS of users/printers when you map a shared printer that has 'Render print jobs on client computers' (otherwise known as Client Side Rendering) enabled. Setting the following registry keys on our workstations computer policies resolved the remaining 5% of issues: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider] "InactiveGuidPrinterAge"=dword:00000384 "ActiveGuidPrinterAge"=dword:00000384 "InactiveGuidPrinterTrim"=dword:00000384 "RemovePrintersAtLogoff"=dword:00000001 It's hard to find any documentation on the exact purpose of these keys though as Microsoft have removed it all from their site.

You'll also need to add ID 27964 to block the 'Editor' button on the 'Review' tab in Word

I had to disable the 'Editor' on the 'Review' tab in Word for our exam accounts this week! I found the latest Office Fluent UI Command Identifiers for Office 365 (https://github.com/OfficeDev/office-fluent-ui-command-identifiers/tree/master/Office%20365/Semi-Annual). In that repository there is 'wordcontrols.xlsx'. In that document, you can add a filter to the 'Tab' column to 'TabReviewWord' and filter the 'Group/Context Menu Name' to 'GroupProofing'. In there, you'll find the controls for the 'Proofing' section on the 'Review' tab of Word. There's a 'Control Name' of 'WritingAssistanceCheckDocument' with a 'Policy ID' of 27964. This is the ID that disabled the Editor button. You can then add this ID to User Configuration\Policies\Administrative Templates\Microsoft Word 2016\Collaboration Settings\Customizable Error Messages\Disable Items in User Interface\Custom\Disable commands. We use the other ID's from this post: http://www.edugeek.net/forums/office-software/181129-disable-spellcheck-word-2016-a.html too.

Hmm interesting… 1. Open file explorer 2. Right click and go to new -> shortcut 3. Enter in UNC path of another student, click next 4. Give the shortcut a name 5. Create it 6. Double-click on it and see if you can get to it as the test student

Yeah definitely sounds more like a permissions issue. If the permissions were set correctly they wouldn’t be able to access the other student folders regardless of method. As a test student, if you create a shortcut in file explorer to the UNC path of a different student, can you access it via the shortcut? You can also check permissions with the ‘effective access’ tab in the advanced security settings in the properties of the other students folder and see if your test student has access.

Do you mean the UNC path? Sounds more like a folder/share permissions issue if they can access other students work? Are they accessing C:\Users\ or a file server that’s hosting student home drives via Chrome? They can still do the same through Windows by just creating a shortcut to the folder path if you’ve restricted them from typing UNC paths in the File Explorer address bar. Do you have an example of a file:// path they’re accessing?

Why do you need to block local file access? Just for PDF’s? You can use the Chrome policy setting ‘Block access to a list of URLs’ to block ‘file://*’: https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::URLBlacklist&Language=en-gb.

You can use GPP preferences to either ‘delete all’, delete specific printers, or set it to ‘replace’ and set it to be removed if it no longer applies in item-level targeting.

At a previous school, we set a randomised password for students and they couldn’t change it. Teachers were given access to a list so there was no need for password related excuses to not do their work, or to leave the classroom. In another school I worked at, students could set their password but select staff had delegated access to reset student passwords. I’m sure some students wrote theirs down in their planner but we never told them to do so. The AUP listed never writing passwords down which they all accepted. Why do teachers need the passwords? If it’s to access work, a technical solution may be an option to access student files.

I’d start here https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-tls-guidance-part-1-getting-ready-for-tls-1-2/ba-p/607649 following the official guidance on making sure TLS is enabled. Look at setting up SPF/DKIM/DMARC too as this lowers the chances of emails being detected as spam.

Assuming it’s not in ASM, doing this will supervise it to Apple Configurator, not Jamf. What we’ve done for iPads that aren’t already in ASM from our reseller is to either contact them retrospectively to get them to add it in, or: 1. Manually enrol the iPad in Configurator and tick the box to add it to ASM. Hopefully it should succeed at this point assuming no filtering is getting in the way and it’ll be listed in ASM 2. In ASM, change the assigned MDM from Apple Configurator to Jamf for that iPad 3. Make sure You’ve setup Jamf Automated Device Enrollment profiles and set it as default or assigned it to the iPad 3. Erase/prepare the iPad and automatic enrolment should pick up the MDM

1) We lease our iMacs with Academia and we’re able to send them back the wireless keyboards/mice and they give us wired ones in return. Non-fixed/wired peripherals go walkies too easily. 2) We have both OneDrive and a NAS for our iMacs. We get students to save locally and then make copies at the end of the lesson as direct save isn’t officially supported: https://support.apple.com/en-us/HT203954. I’m hoping to look at Mac OneDrive Known Folder Move (KfM) soon so I’d be interested to see if that effectively makes a copy of locally data automatically without the students needing to, or if it’s still broken. 3) Using JAMF. Although it’s the most popular, it’s behind on features compared with some cheaper competitors.

We had this as well when we in-place upgraded. The drivers seemed like they reinstalled themselves from windows update and those that weren’t explicitly in an upgrade/servicing driver update for 21H2 got uninstalled even if one listed as being 1909 worked perfectly fine.

Do you have any computer based exams? We have AAT exams that use the PSI Bridge Secure Browser and that explicitly prevents the use of OneDrive running for the exam. Exam accounts won’t be able to use the native OneDrive client. There’s also some exam software that requires a Windows server to run from e.g. Pearson or ACCA CBE.

That’s the same command I have for 3.10. What happens if you run the same install command locally without the quiet flag. Any errors shown?

I’ve tried scanning from PaperCut to a document library within a SharePoint site before and haven’t been able to get it to work. The comment Brenda made originates from their documentation: https://www.papercut.com/help/manuals/ng-mf/applicationserver/device-mf-scanning-configure/. It seems to suggest it is possible, and I’ve tried the exact format documented there but it didn’t work for me. I also logged a ticket with Sharp who support our PaperCut and they said it wasn’t possible..

https://github.com/R-Smith/vmPing

Nope. You’ll have to create a new one with the correct type and migrate the content across I’m afraid. Worth voting on the feedback request for this functionality though: https://feedbackportal.microsoft.com/feedback/idea/c4f9b264-272e-ec11-b6e6-00224827bbc2