Arcolite

Deployment is very easy. If you're using Win10 1607 or 1703 then UE-V in included by default. It just needs switching on with a few GPO settings. We used it with combined with Mandatory Profiles on our Win7 deployment to improve login times and give a roaming like experience while being immune to the usual roaming profile issues. In theory, it should be quicker as it only syncs/loads application settings when that application is run, compared to regular profiles which has to download and apply the entire profile hive. With our Win10 deployment however, I'm experimenting using Local Profiles (with a custom Default User profile on NETLOGON) with UE-V syncing the changes between devices. These local profiles will be removed when they reach 30 days old via a DelProf2 scheduled task set to run on machine inactivity. So far this appears to result in a slow initial login (profile creation) but all subsequent logins are practically instant (apart from drive and printer mapping). With Roaming Profiles soon becoming a depreciated feature and with things like Enterprise State Migration and UE-V already in place, it feels like Microsoft is gently pushing us away from the old concepts of roaming/mandatory profiles.

Same, the sign-in box appears, but you can just skip it. It's not required.

I guess policies are different elsewhere, but here - if it needs to be done as the user, the user has to be present. We never access a users session without them being either on the phone with us, or stood next to us. We would never remote into someones machine without them accepting the request (our VNC config had a prompt the users had to click) even if they had asked us to do it. They need to be there. If it can't be fixed over MSRA/RDP then they either need to come to our office (Laptop users) or we'd schedule a time to visit them. We function very much like a corporate environment in that regard.

Out of interest, why use VNC? Don't get me wrong, it was great when there was no alternative - but since Vista there are been built in tools that work just as well. For the last 8 years we've been using the built in Remote Assistance for helping users and regular Remote Desktop for administration when needed. Both work flawlessly and require very little configuration and no deployment.

Ah nice, I didn't know about the --wait switch. I cheated a threw together a quick AutoIt .exe which called the main installer and then waited for the new process to end before exiting. Run("vs_community.exe --add Microsoft.VisualStudio.Workload.CoreEditor --add Microsoft.VisualStudio.Workload.ManagedDesktop --add Microsoft.VisualStudio.Workload.NativeDesktop --add Microsoft.VisualStudio.Workload.Universal --includeRecommended --passive --norestart") Sleep(10000) While ProcessExists("vs_community.exe") WEnd Sleep(10000) While ProcessExists("vs_setup_bootstrapper.exe") WEnd Sleep(10000) While ProcessExists("vs_installershell.exe") WEnd

I've just tested our setup with a test student and can confirm that I'm seeing no issues with saving projects to UNC/Redirected paths. VS picks up the HomeShare path fine (our DFS path to the Users HomeShare) and saves without any issues.

Gah! That'll teach me for using my phone. Stupid auto-correct. Could have been worse though I guess!

Hard to say. Our upgrade is from VS 2013 Community on our Citrix VDI environment to VS 2017 Community locally installed on the workstations so most of our feedback has been mostly focused on that. The majority of our Students are already using 2017 at home and have been pestering us to upgrade. I'm not expecting any issues.

We've rolled out VS 2017 Community to our ICT Suites this year (along with 1703). I don't recall having any issues saving to our network locations during my own testing and also from testing by students. I'll have to double check just in case something was missed. We use Folder Redirection on My Documents, but also map the same location in AD using the regular HomeDrive stuff.

We tend to disable the account at the end of their contract (end of August usually). The account is left in this state for a month, after which it's either removed or exported to a PST (depending on the users role). For key roles, I try to keep things segmented off into sub mailboxes (Trips@ or Exams@) therefore if someone leaves, only the sub mailbox needs to change hands, not the user mailbox. In theory...can lead a house to water and all that...

Can't help with that one I'm afraid. I haven't tested Chrome with UE-V yet. We're deploying Chrome because Edge is a bit poo, but neither Edge nor Chrome will store passwords. Our Staff leave their machines unlocked too often and we've had evidence of Students accessing things they shouldn't via saved credentials. Sorry, you'll have to remember them from now on (SMT decision, not mine, but I completely agree!).

TeamViewer here too. Running on my Office desktop just in case I need to nip onto the network and do something out of hours (rarely happens thankfully!).

I've decided against mandatory profiles for Win10. Instead I've opted for a preconfigured Default User profile at install time, with all machines configured to use local profiles only with the now built-in UE-V capturing preferences between devices. The local profiles are removed from ICT Suites, Trolleys and Classrooms by a delprof2 startup script when the profile reaches 30 days old, leaving Staff Laptops and Office machines with profiles intact. This gives all users the experience of roaming profiles with none of the overheads (profile resets and the hassle of creating the mandatory). Repeat logins on the same machine are far quicker in my testing than I found mandatory to be. From what I understand, Local Profiles plus UE-V or Enterprise State Roaming (UWP only) is now the Microsoft approved method of retaining User Preferences in the modern Windows environment.

I haven't seen it mentioned earlier in this thread, but for anyone else who uses the of the Unattend.xml, please note that this is broken in 1703 pre June 2017. There's a fix for it in the June 2017 Cumulative Update - https://support.microsoft.com/en-in/help/4022716/windows-10-update-kb4022716 I'm currently slip-streaming the July update into our media so we can resume building our more complicated departmental images. That serves me right for not slip-streaming anything new since May.

I've seen this too, but I haven't started to explore the reason. My brief research of things to try appear to point towards Windows 10 installing the AppX packages during logon. Customising the Default User profile seems to solve the issue https://4sysops.com/archives/improving-windows-10-logon-time/

It still says that the Standard version is limited to 5 techs on that page.

I haven't tried via a proxy so I can't really help with that, however, have you looked at creating a "full" offline installer? We took this route as we felt it was more efficient than each machine downloading the full client each time. There's a very easy KB for it https://community.sophos.com/kb/en-us/121318 You'll probably still need some degree of internet comms during the install, however the initial hit will be lower.

We're not looking to ban access at all. At worst, we're looking to delay the delivery of emails sent out of hours so that staff don't get stressed by a ping on the phone from late night email just before they go to bed. At the moment (the the purpose of the thread) we're only looking to gather information on how prolific out of hour use is. We may find it's a non-issue. As a department, ICT Support have got Office 365 and WIndows 10 rollout this summer - we've got better things to do. This is by request of our SMT (most of them anyway...) following feedback from the Common Room committee. While I agree it's up to the individual, some people can't help themselves. I could name half a dozen of our facility who are working unhealthy hours and have/will crash if they aren't careful. Without naming the school - we're a very high pressure environment (top performing oxbridge independent school, not that it isn't high pressure elsewhere!). Our staff are under a lot of pressure and as a school our SMT feel a responsibility to the well being of Staff and wants to ensure they're doing as much as they can to support that. The end result may just be stronger communication of expectations out of hours - however, they want to gather infomation before putting effort into fixing a problem that might not exist.

Our SMT are behind the request. We have six members of our SMT, each having a different role. Our SMT member who is responsible for Staff is the driver behind this. Out of the remaining five, three are also backing them, one is wavering and one is completely against it. There's always one...

We're interested in removing the potential stress of late night emails and the pressure to answer them. Based on feedback from Staff, this happens quite frequently. I've see instances of a few staff members sending emails out after midnight and then resuming again from 5-6am the morning. That's neither healthy for the sender(s) or the recipient(s). I think the point that a fair few of our Staff seem to forget (despite being told by the SMT), we're a school, not a 24/7 business operation. There is no expectation for answering email outside of work hours. So we're interesting in gathering information to see how prolific this type of email usage is and if there's something we need to put in place - either through re-emphasizing the School Policy, or if we have to, forcefully via the Exchange Server. One thing we're debating implementing is that after say 10pm at night, any email you send to internal mailboxes gets delayed and will not be delivered until 7am the next morning. We haven't even implemented it yet and already we're getting push back from certain SMT members who want a get-out from something that doesn't even exist yet! Myself personally, I haven't got work email on my phone and I only check email when I'm sat at my desk. It's a non-issue for me.

We're looking to capture data from our Staff users to see how bad our out of hours email usage may be. Currently, we're still in Hybrid Exchange mode with some users On-Prem (Exchange 2010) and others Off-Prem (Office 365). What would be the best way to collating email usage times? The only way I've thought of so far would be to export message tracking logs from both and working something out with those. Any other suggestions?

I haven't used it yet myself, but OpenShot (OpenShot Video Editor | Simple, powerful, and free video editor for Linux!) has been recommended to us in the past. Personally, I'm holding out for the VLC Movie Creator (VLMC, open source video editor - VideoLAN).

We've considered SCCM in the past but the configuration overhead always put management off, which is why we went down the KACE route - all in one solution with less configuration. From the looks of things we have a setup key for "System Center 2012 with SP2 - ConfigMgr and EndpointProtection" on MS VLSC, so we're may already have it, just unused.

How well does the software deployment work? We currently use a Dell KACE appliance for Inventory, Assets, Software Deployment and Helpdesk. Lansweeper appears to do all the same, but in some cases better (agentless for a start!) and significantly cheaper.

en-GB off MSDN - en-gb_windows_10_education_version_1703_updated_march_2017_x64_dvd_10195585.iso As I test, I've put together a basic answer file - just with a few bits. On 1607, this is fully unattended but on 1703 it prompts for confirmation on the Language. en-gb en-gb en-gb en-gb true 3 true true GMT Standard Time blahblahblah false ICT Support Local Administrator ICT Support Administrators ICTSupport blahblahblah false SCHOOLNAME SCHOOLNAME 1 KMSKEY * SCHOOLNAME SCHOOLNAME GMT Standard Time blahblahblah false true 1 ICTSupport true SCHOOLNAME SCHOOLNAME true en-US en-US en-gb en-gb en-gb en-US