Gilly2003

Thought I would add what worked in for me. I am deploying some Windows 10 Pro machines and the methods in this dont give the same results as what the orginal poster gets. What I ended up having to do to disable store (as well as all of its apps) was apply a software restriciton policy. Computer Config > Polocies > Windows Settings > Securtiy Settings > Software Restriciton Policies and in additonal rules folder create a new path rule to disallow the following: %programfiles%\WindowsApps\Microsoft.* You can of course use the app name you are looking to disable i.e. Microsoft.WindowsStore* The "*" is the most important part as the text after this is the version number, without it as soon as a new update is installed fo rthat app it will be enabled again. Apologiese if already stated already in this thread, I didnt read all 9 pages fully........ You will have to deploy a custom start menu XML via GPO however as everything still remains in there but cannot be run. Hope it helps someone in future.

Hi all, Apologies in advance for such a simple question however I believe I am over thinking what I really need. I have been set with the task of simply creating a RPi terminal that have firefox to broswe an internal site. Simple. I went down the root of using the RPi Thin Client OS Project which is really good but the instructions on how to lock it down are lacking and I am now thinking what I am trying to do with it is simply overkill. As I say I only need to run run firefox, the users must not be able to install more apps, access network folders etc etc Can someone confirm if using the RPi Thin Client project is right for my scenario or simply overkill? Any help would be greatly appreciated

Right, I bite the bullet and called in a engineer from a local IT company, after two hours he was as stumped as me and there is no other option but to reinstall the OS. So I guess I am now rebuilding the server, luckily I was able to put all in a caddy and copy the hyper v machines off it as well as the entire program files directory. Hopefully my mcafee can be salvaged from this as I really don't want to be rebuilding our ePO server. Thanks for the help guys

Its an HP Proliant Gen9 DL60, its runs the HP smart array in RAID 1 config. Its sees the drives a the array no problem. Just found this, not sure if it will help me as I am not 100% regarding this new HP smart management system: When an HP Dynamic Smart Array B140i RAID controller is enabled on a server and RAID mode is disabled in the UEFI System Utilities, then the drives will be listed as AHCI drives or HP H220i drives and the RAID controller is not found in POST or device manager. When RAID mode is enabled, the drives will appear as HP Dynamic Smart Array B140i controller drives. rrrrr - I am going to try your option shortly once I find the controller driver for this

I cant access any other drives on the disks that aren't X No option to go to a last known config either.

Last known good confiig has saved me a few times, if not a system restore or worse yet, a backup from a tape or whatever media you use to backup. Yes I thought it would be due to RAID but unsure as to where to start as haven't come across this before, unfortunately no UPS as our current is saturated and we are awaiting some work to be done on a circuit breaker and a nice new shiny UPS to power 100% of the room. sfc/scannow - I tried this however everytime it is run it says there is an automatic reapir pending and to reboot but it loops system repair cant continue, it boots me in to the automatic system repair where it first asks for keyboard layout then gives me some options to reset, refresh and advanced options. Strange though when I run cmd and try to change directory to the c drive it doesnt let me (stays in X) and doesnt give an error as to why, also when it boots it picks up a random IP address and on our DHCP server the host name is completely different It is sounding like the RAID is the issue but does anyone know how to go about this?

Hi all, Hoping someone can really help with this. We had an unexpected power failure, this server upon reboot goes straight in to Windows Repair. I got in to cmd and tried a number of chkdsk commands however it is claiming the disk is write protected. I also tried a refresh (keeps files, refreshes OS) and it claims "the drive the windows installation is on is locked". Hope someone can help?

well we have just yesterday signed off on a complete virtualisation project which will bring all our servers up to 2012r2 OS's I will keep this in mind I have got the primary DC back up and going thankfully after 7 hours of work but I just wasnt sure what all was meant to happen with the second DC when primary failed. Thanks for clearing it up guys much appreciated

okay forget the last reply then, didnt see your 3rd in time I cant run a split as our IP pool is typically running with only 20-25 free (on a good day) Yes the second DC is in the DNS records to be used if primary DNS is not available

thanks win is there no way of replicating the dhcp service on both servers or is a "split scope" the best way we have a number of static IP's obviously for other servers, devices... so if I wasnt able to get our primary DC back up I wouldof had to manually put these static settings in to the new DHCP server

Hi, hoping someone can shed some light on this for me. Long story short I had to take down our primary domain controller (PDC is server 2008r2) because of a virus I have a secondary domain controller (replication of AD) which should of, or I would have assumed, kicked in to continue authenticating users. Now we have a short DHCP lease of 1 hour so naturally during the time there was no dhcp server as its a service on our PDC However i still thought servers and some devices would of still seen the default gateway especially if they were set to a static IP? Out of our 4 IT computers only one remained to be able to RDP to servers, but no internet connection and the other 3 couldn't do either. I cant work out why as it isnt set to a static IP... Maybe I need an explanation as to what a secondary/replicating domain controller actually does as the whole thing has confused me and I now don't know if what happened was correct or not.

Thanks all, this worked and will help in the short term. Now to get the silly content filtering to work correctly

Hi all, I have one PC which any domain user can log in to but I want to block internet use on it for anyone who logs in. We use a sonic wall setup but I am not familiar with its workings, only to know that whoever set it up did so with no knowledge either because the groups on it do not work. Is it best to just create a GPO and drop the users in to an OU with it applied or is anyone proficient enough in sonciwall to point me on how to set this up. I still need to have access to sites locally on the PC and preferably I would like to allow access to at least 2/3 external sites but all other internet browsing blocked. Hope someone can help. Thanks

Hi all, I've decided I would like to upgrade my home server, currently an HP Proliant Microserver N40L. I run it as a full VMware ESXi host, my primary VM on it is a Server 2012R2 Essentials which mainly is used for media streaming via Plex to the smart TV's around the house. At the beginning I never really considered backups/redundant drives as it began only as a play toy but now that it has become an integral part of the house I would like to upgrade the hardware with some backup solution. Looking in to things I have three options: - Go to a QNAP (which I know little about) - Get the latest HP Proliant Microserver resulting in scrapping VMware and running redundant drives - Stick with my current solution and find a small NAS to attach and move media to thus giving me a redundant drive solution Hoping someone on here can provide some info on the above or if they have any idea's of their own please share Thanks in advance

As above

tried running it in both to no result any other idea's?

I have tried this and I am still getting the message when importing modules I am running release 379893 which is .net framework v4.5.2

Anyone come across this before: PS C:\> Import-Module AdmPwd.PS Import-Module : Could not load file or assembly 'file:///C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AdmPwd.PS\A dmPwd.PS.dll' or one of its dependencies. This assembly is built by a runtime newer than the currently loaded runtime a nd cannot be loaded. At line:1 char:14 + Import-Module <<<< AdmPwd.PS + CategoryInfo : NotSpecified: ( [import-Module], BadImageFormatException + FullyQualifiedErrorId : System.BadImageFormatException,Microsoft.PowerShell.Commands.ImportModuleCommand Dont see a solution online for it anywhere?

Yes I'm looking to create a local user with administrator rights on all domain devices so LAPS seems to be the best bet Thanks for the help guys :) Much appreciated

So in short, LAPS must be installed on all domain computers/laptops/servers and managed through a singular install on the primary DC? My problem is I don't have a deployment server to run a site install

Hi all, Does anyone know whats the best way to deploy a local admin account throughout your domain? Obviously when I Google it, answers point to a GPO with Computer config > preferences > control panel > local users and groups however I have read many comments below these articles stating that Microsoft patched this approach due to security (plus I tried it and it doesn't work) Any help would be greatly appreciated

I'm in Northern Ireland, but will ship any where to UK and Ireland

Hi all, Was having a good clear out and found my old Cisco 877 Router (not the wireless one) Served me well in its time for a good VPN, maybe someone would have some use for it again as its in full working order. PSU included. Cisco 870 Series Integrated Services Routers for Small Offices - Cisco Not sure what to ask for and open to offers, would be happy with £20. Will accept paypal so both buyer and I are safe. Any queries do ask.

Sorry, we are all one domain. the current server in coal replicates off the primary DC in HQ however i will be replacing the current coal server with the new 2012 server and I am basically asking how to prepare it as much as I can in HQ so as to make it a straight swap when i decommission the current in coal sorry, maybe i didnt explain it properly I am an aspiring system admin so abit of a newbie... In my head I was adding the AD DS role which prompts me to then add a Dc role and launches the wizard for me to do so, i then get the error about DNS and parent zone. But I am beginning to think I need to delegate DNS privilege to this new server before promoting it to a DC?

The FQDN name on the deployment configuration screen already has the domain filled in? Unless I am confusing the FQDN as also being the domain name? The coal server can see the primary DC and browse its files etc so I am not sure as to how to proceed.