DJ-1701

Note: Unfortunately you can't download 11.4 though.

Excellent @Arthur! Thanks very much as always, I'll give it a go. Haha, thanks. Just in case anyone else is interested, this the the result of my audit so far on a few machines of applications that would have been blocked for modifying/creating files in user profiles... C:\Program Files (x86)\CyberLink\PowerDVD12\OLRSubmission\OLRStateCheck.exe C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe C:\Program Files (x86)\Microsoft Office\Office16\POWERPNT.EXE C:\Program Files (x86)\SMART Technologies\Education Software\Notebook.exe C:\Program Files\7-Zip\7zG.exe C:\Program Files\SIMS\SIMS .net\Pulsar.exe C:\Windows\SysWOW64\cmd.exe The last one was part of an installation I was running which includes copying a shortcut to the public desktop.

Also asked the question about how to use the GPO here https://answers.microsoft.com/en-us/windows/forum/windows_10-security/controlled-folder-access-configure-allowed/43f3bedd-e245-4b03-80ac-79bbcaafebf5?tm=1509998935329

Intel and AMD?! What next, Cats and Dogs best friends?! Apple, Google and Microsoft living in peace?! PC and Console gamers being sociable to one another?! Half Life 3 confirmed?!

You mean you lost your authenticator?

To find out which applications have been blocked from running (or will be blocked from running if you are currently in audit mode), you can filter the event log by Event Logs: Microsoft-Windows-Windows Defender/Operational,Microsoft-Windows-Windows Defender/WHC Event IDs: 1123,1124,5007 IDs 1123 and 1124 appear to be the helpful ones here. Still not exactly sure what information it wants me to put in what field of the GPO though...

I use a different script... but as this was submitted by @Arthur, I am sure this is top notch, just like all his other helpful tips. http://www.edugeek.net/forums/windows-10/165029-how-get-rid-candy-crush-soda-saga-other-windows-10-start-menu-junk-good-11.html#post1620538

I may be being daft, but I can't find any examples of the Configure allowed applications policy in use.

Good point, yes it does, though you will have to scan through the Event logs on the computers to pick up this information.

Just a word to the wise. I tried to enable this the other day, but certain things broke, such as running reports on SIMS (Pulsar.exe was blocked from modifying the Documents folder) and some custom SCCM software deployments interacting with the Desktop. So looks like a bit of planning is needed before releasing to the masses. Personally I haven't got my head around the 'Administrative Templates/Windows Components/Windows Defender Antivirus/Windows Defender Exploit Guard/Controlled Folder Access/Configure allowed applications' policy yet, as I haven't seen an example of how to set one and my tests haven't been successful as of yet. So might be worth waiting for some examples come out of how to use it first.

It seems SCCM was pretty hot on reinstalling removed updates. Changed settings to not deply 4011165 and 4011166, ensured they where not set to deploy, rebooted the problematic machines and removed the updates again. Fingers crossed.

Try opening these ports on Windows Defender Firewall for your subnet: 52965:TCP (SIMS Solus-3-DS) 52966:TCP (SIMS Solus-3-Agent) 8739:TCP (SIMS Solus-3-Agent-UI) And allowing this program: C:\Program Files\Solus3\AgentService\Sims.Solus3.Agent.UI.exe

That is the silly thing... by default YouTube is disallowed on the gfl. You either have to unfilter it or use the staff proxy bypass... so why force changes if people have allowed access manually... especially with no notification.

Series 1 was interesting, but I did had trouble staying with it's slow pace at times. Season 2, episode 1 I have paused a couple of times, no real pull to get me to continue watching though.

Bah... now there is another one that has the issue... not sure why.

Interesting... I just got a 503 on Exa... but @Boredguy did not on SWGfL and was able to access the site... odd.

Just happened again here.

What about no mods? Don't hit me. 😉

^^^ This! ^^^ Though seriously... This!!

Looks like https://www.avivacommunityfund.co.uk/MyInitiative/GuestRegistration/CreateAccount is getting hammered. Haven't been able to create an account to place any votes.

I just found out that my love's Church Community Centre is on here... https://community-fund.aviva.co.uk/voting/project/view/17-3169. Certainly an admirable goal.

This sounds more sketchy then most FOIs... IANAL, but with my understanding of the English language... they may have 'a right to specify their preferred means of communication', but that is a preferred means of communication, not the only way, and not forced upon. It doesn't demand that you have to use the form to reply. It asks you not to, but it may not be possible to reply on the site anyway.

Once you move a computer to a different OU and on that computer run the command gpupdate /Force, it will start to apply the policies that are associated with the new location and certain registry and file settings are updated. Note: You may have to reboot the machine for some of these policies to take effect though.

For anything lower than Windows 10 as a client I am sure you do need Enterprise. Not sure about Windows 10, know it works for the Education version though. You might want to look at Always on VPN, as this appears to be a newer technology that is believed to be replacing DirectAccess.

That's the annoying thing about any new device... that's why I wait a little while before getting one after release... that and the queues die down... that and to raise money from a Go Fund Me page save the money up.