AdamK

Hi All, I’ve not quite figured out which settings completely resolved the problem in the end but I am reluctant to start taking settings out at the moment. To begin with, most of the traffic we saw was going to the following two addresses: Sci1-1.am.microsoft.com Sci2-1.am.microsoft.com This pretty much disappeared after disabling Spotlight and the lock screen. This took our traffic down to pretty much half. After that, we started seeing a lot of traffic to h6.msn.com. I think enabling the “Restrict Internet communication” setting or enabling the Map policies below killed traffic to that site. Here is a pretty graph: Here are the policies I applied. Computer Configuration Administrative Templates Control Panel/Personalization Do not display the lock screen – Enabled Windows Components/Maps Turn off Automatic Download and Update of Map Data – Enabled Turn off unsolicited network traffic on the Offline Maps settings page – Enabled Windows Components/Store Disable all apps from Windows Store – Enabled Turn off Automatic Download and Install of updates – Enabled Turn off the offer to update to the latest version of Windows – Enabled Turn off the Store application – Enabled User Configuration Administrative Templates One Drive (I downloaded an ADMX for One Drive for Business) Configure machine to receive updates after consumer production – Disabled Start Menu and Taskbar/Notifications Turn off notifications network usage – Enabled Turn off tile notifications – Enabled System/Internet Communication Management Restrict Internet communication – Enabled (This automatically enables the settings in Internet Communication settings) System/Internet Communication Management/Internet Communication settings Turn off access to the Store – Enabled Turn off downloading of print drivers over HTTP – Enabled Turn off handwriting personalization data sharing – Enabled Turn off handwriting recognition error reporting – Enabled Turn off Help Experience Improvement Program – Enabled Turn off Help Ratings – Enabled Turn off Internet download for Web publishing and online ordering wizards – Enabled Turn off Internet File Association service – Enabled Turn off printing over HTTP – Enabled Turn off the "Order Prints" picture task – Enabled Turn off the "Publish to Web" task for files and folders – Enabled Turn off the Windows Messenger Customer Experience Improvement Program – Enabled Turn off Windows Movie Maker automatic codec downloads – Enabled Turn off Windows Movie Maker online Web links – Enabled Turn off Windows Movie Maker saving to online video hosting provider – Enabled Turn off Windows Online – Enabled Windows Components/Cloud Content (Disabling Spotlight made a big difference) Configure Windows spotlight on lock screen – Disabled Do not suggest third-party content in Windows spotlight – Enabled Turn off all Windows spotlight features – Enabled Windows Components/Store Turn off the offer to update to the latest version of Windows – Enabled Turn off the Store application – Enabled I've also noticed that Windows 10 doesn't always apply the policies properly and I've had to manually do a gpupdate on several computers a couple times for them to kick in. Once the last few policies started to kick in I did notice the traffic to h6.msn.com go down quite a bit. I hope this helps you guys. Regards, Adam

Just noticed the edit where you added the relevant post that I'm assuming helped point you in the right direction to fixing the 3 sites you had problems at this week. So, am I right in assuming you are happy to use information from this community to help make you a living, but unwilling to share vital information with this community that might completely solve someones problem?

I actually disabled WUDO the other day and although it made a difference, it didn't completely resolve the issue as it's not the only service that likes to automatically update in the background. I think I have finally resolved the issue but I'm giving it 24 hours to make sure. I have however seen all activity to h6.msn.com disappear and speed tests went from 0.5 Mbs to 90Mbs. Don't worry though guys, I'm not here to make a living from my fellow colleagues. I'll let you guys know what I've discovered tomorrow or Friday.

Hi, This might be because the policies are being applied after the login has completed. If you haven't done so, I would disable Fast Logon. This can be done by enabling "Always wait for the network at computer startup and logon" under Computer Configuration -> Administrative Templates\System\Logon More information here: https://technet.microsoft.com/en-us/magazine/gg486839.aspx I have to have this policy enabled for Folder Redirection as if I don't have it applied, it does the folder redirection on the second login.

We've set group policy to set updates to be manually downloaded and installed by an administrator. The traffic logs don't show continuous connections to windows update. We tested this by updating a machine to see what address it connects to and it's definitely not the addresses that are swamping the network.

HI, I've added them policies in now and will see how it goes. I've also found this article on the Microsoft website, so I've gone through applying some of the policies mentioned in that: https://technet.microsoft.com/en-gb/itpro/windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services

I couldn't see any service related to Spotlight, but I'm pretty sure I've disabled spotlight and that another service is now causing the high bandwidth... The policies are pushed out via group policy, so are therefore applied after being added to the domain and moved to the correct container.

The above article only resolves half of the problem. Spotlight doesn't seem to be connecting to the following sites: microsoftaik.azure.net h6.msn.com store-images.s-microsoft.com store-images.microsoft.com

Hi, I'm experiencing the same problem. I have managed to half the bandwidth usage over the past day by monitoring the proxy and finding which sites the data is being pulled from then researching based on that. I have so far found that disabling spotlight makes a big difference. From the looks of things spotlight is trying to download content but due to lockdown restrictions is unable to save or install the content, so it therefore tries again. Only problem is that some of the content seems to be rather large. Multiply that by how ever many computers are trying to do the same thing and you end up with very crap internet... In group policy, go to User Configuration -> Administrative Templates -> Windows Components -> Cloud Content Set Configure Windows Spotlight on Lock Screen to Disabled Set Do not suggest third-part content in Windows spotlight to enabled Set Turn off all Windows spotlight features to enabled I also disabled the lock screen too through Computer Configuration -> Administrative Templates -> Control Panel -> Personalization -> Do not display the lock screen If anyone else has been able to resolve this completely, I'd love to know what you did. Since doing the above, we are getting a load of traffic to the following addresses: microsoftaik.azure.net h6.msn.com store-images.s-microsoft.com store-images.microsoft.com

I've tested it using going through https and I still get the same problem. It worked fine on a previous version though.

I've got the same problem too. I posted about it last week but not found a solution yet. Let me know if you manage to get it working. Adam

You don't add %homedrive% to the target box. The target box is to do with where the page will load, for example, if you leave it blank it will open up in the same page. If you put something in there it will open the page in a different tab or window. The home drive mapping needs to be lower down the setup page in the same place you would set up a mapping for any other drive. I hope this helps. Adam

Hi, I can access api.asmx and it gives me the following list: CheckFile Delete List ListDrives NewFolder Save Search Unzip UploadFile ZIP So I'm assuming that's correct. Adam

Hi, I've already done that. I have the following mappings set up: %homedir% \\moe\Departments$ \\moe\StaffResources$ All of the mappings appear in the Basic Version, just not the Extended Version. Adam

In AD the users do have their home drive mapped through the profile tab, but I don't think the silverlight version of HAP uses that. I think it just uses the same mapping settings as the basic version. Adam

Hi, I've got HAP up and running but I'm having trouble with the silverlight version of the My School Files section. Please see the below image to see what I happens when I go to the Extended Version: I have checked/done the following: .XAP is in the MIME Types Using SSL Silverlight is installed on the server Silverlight addon is installed on the clients Tried using multiple computers with Firefox, Chrome and IE The basic version works fine, so I don't think it is anything to do with the mappings. Does anyone have any ideas about what I'm missing/doing wrong? Adam

Thanks for the transparent PNGs, but do you have them without the corners cut off from where the circles go? I'm using a square background for mine and it doesn't look right with parts cut off.

I've checked permissions and they seem fine. The same user is able to upload documents, pdfs, scripts, etc and can delete them without error. It just seems to bring up errors when handling the deletion of image files. If I go into the share on the network and change the file extension to not be an image, then I can delete the file. If I change a .doc file to a .jpg I can't delete it, but if I change it back to .doc I can. So I'm fairly sure its not permissions thats the problem. Does anyone else have the same issue, or is it just me? Adam

Hi, I've recently setup HAP and I'm doing a bit of testing. I've noticed on my setup that I can't delete image files. All other files delete fine, its just images. So far I have tested with png, jpg and gif. Could anyone point out where this problem might of come from? I have attached a screenshot of the error: http://www.handsworth.bham.sch.uk/hap/del-img-error.png Adam

I think they are planning on bringing out dual screen support in the next expansion: EVE Online | EVE Insider | Forums

Hollie is the author ;-)

No problem, I've done the same before! Adam

If your using Windows, Yes. Unix based systems use $USER, $HOME, etc, etc Adam

Hi, I'm trying to redirect the Safari download folder to a students home share using Workgroup Manager. I have imported com.apple.Safari into the preferences and I'm editing the "DownloadsPath" with the location. However, I want to use an enviroment variable in the path. The location of the users home share mount is: /Volumes/username$ I have tried the following paths with no success: /Volumes/$USER\$ /Volumes/${USER}$ Does anyone know if its possible to do? Adam

We don't have sharepoint here, so wouldn't be able to do that. I had a look at the Moodle SMB Share, but it didn't seem to want to connect to their homes. Might have another look at it when I get a minute. Let me know if you have any success with it. Also going to take a look at Remote Access Solution - Homepage Cheers, Adam