JRA

Fairly sure I can get these to consistently apply now as the local admin acct when logged in sees the keys. GP Prefs option just wasn't putting the keys in, but scripting it (batch and .reg file) works ok.

Okay so a freshly imaged PC does have the "Enable" and the "Hopcount" keys in, just that the "Enable" key is set to 1 and should be 0, and the policy should be setting it to 0, it's just not doing it... ...IF the registry of a client PC is viewed remotely from say a DC. IF the registry is viewed as a domain/regular staff user account logging into the PC itself, those two keys and indeed the whole Internet subfolder doesn't even show up. I don't at this point have the first idea what's happening here.

Definitely always worth a look, but yes one of the first things I double-checked. Computer policies applying to computers in OU indeed.

Hi all, Struggling with the common issue in this thread: http://www.edugeek.net/forums/windows-10/216550-windows-10-random-no-internet-issue-5.html#post1855032 I'm not getting my registry changes to apply, having had a nose in the registry: I've set up the two keys from the thread linked above, to apply like this in GP Prefs: If I set it up to Update or Create it doesn't seem to do any good. As you can see from the registry screenshot above it's not creating the \Internet subfolder at all in fact. Event log is very light on details regarding this, and RSOP in the user context won't show machine policies. Logging on as an account with local admin rights however and these keys appear. But restarting the machine and logging back in as a "regular" user these go again. Anyone give me a hand? Thanks much for any help.

Worryingly enough the above reg key hasn't worked for me. Still not seeing the dialogue of machine policies applying when PCs start up and when they do, disconnected "globe of death" bottom right-hand corner. Intermittent ofc. Is it the majority of us getting this or just a few of us?

This is the best thread on Edugeek.

I just read all this. Experiencing what looks to be identical issues on older PCs. Watching like a hawk and sending the good luck vibes @kennysarmy

Oh my word I did it! Used a generator in the end and hacked out the sections I didn't need. Just now first test VM imaged, rejoined and renamed in FOG etc... beaut. Thank you all so much for the patient help there. This had me unhappy but now all better.

Any chance you could post yours up/PM me? Sans passwords ofc.

Folks thank you all so much for the above. Back to it now after a little while. Have a few things to wrestle with but I'm sure this'll have what I need. Cheers much all. :)

Hello out there. Having a do-over of my W10 image and I'm not getting what I'd like from unattend.xml. Using fog, doing what I'd assume is the right thing on it. Basically steps look likw: Install W10 Don't let the VM see internet/network at this stage Get into config mode from the language selection screen Tweak and defrag Windows slightly Make up an unattend.xml and stick it in C:\ and C:\windows\system32\sysprep sysprep.exe /reboot /unattend:C:\unattend.xml (which brings up the sysprep box so I tick "generalise" and ok through it.) Let it reboot, having set fog hovering to catch the image, which I then upload Deploy and test To my point and my tinkering then. I'd like to, after the above: - Have the imaged machine join a specific OU in AD - as in, all newly imaged machines go into an OU called "freshly imaged" or similar. Think I have this right already even... - To NOT log in as any account on restart automatically. - To enable the local admin account. Not necessarily set a password (will eventually use LAPS for that.) ...can anyone steer me to the right things in unattend.xml for all those? I've tried a generator for the options but don't seem able to get it working right. Thanks MUCH in advance and I'll get you a pint after Bett 2021!

Hi all - I'm a bit new to this BUT got a FOG server finally up and working and taking/deploying W10 images! The real icing on the cake will be getting it to deploy and rename/rejoin PCs (ideally have them take their former place in AD or, if not, put them in a little "post-imaged" OU for dragging where they should be.) This could be me either being unfamiliar with sysprep, with the FOG rename/join tool or a combination of some of these! But this is as far as I got. I am fairly sure I have the domain join settings sorted in FOG. Now, here comes the tricky bits I'm stuck on... I install W10 from disc to VM, don't remove much of anything, don't even set up or change the local admin password/account. Will probably do all I can later in GP (has worked alright so far through testing) or make another golden image another time when I'm a bit better at doing things! So, I copy the following two files to the c:\windows\system32\sysprep\ folder on the client, and then I run the following little batch file first: *@echo off delprof2 /q /id:setupuser /i NET USER setupuser /DELETE powercfg -h off rem C:\Support\Tools\Shutup\OOSU10.exe ooshutup10.cfg /quiet del /F c:\windows\system32\sysprep\panther\setupact.log del /F c:\windows\system32\sysprep\panther\setuperr.log del /F c:\windows\system32\sysprep\panther\ie\setupact.log del /F c:\windows\system32\sysprep\panther\ie\setuperr.log del /F "C:\Program Files (x86)\FOG\fog.log" del /F "C:\Program Files (x86)\FOG\token.dat" rem "C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe" reg import C:\Support\Tools\ResetERAgentUUID.reg net stop FOGService sc config FOGService start= disabled sc config EraAgentSvc start= disabled cleanmgr /sagerun:1 defrag c: c:\windows\system32\sysprep\sysprep.exe /oobe /generalize /shutdown /unattend:c:\windows\system32\sysprep\unattend.xml* As you can probably see this deletes a setup user (I don't follow quite why the tutorial I followed puts this step in as the unattend.xml to follow recreates them. This might well be my problem even but idk.) So, unattend.xml looks like: *

Seemed to be a group policy of all things. Move OU or don't elect to rename PC to original name when WDS-ing and all is fine. Okay then computer, whatever makes you happy... Thanks too Cache.

Hi everybody - this I didn't need... My crawling W10 deployment crawls along, but hit a major snag. The golden image we built and tested on a single PC and then VMs from then on. Over the summer we tried one of every sort/generation of PC we have with a W10 disc install just to make sure they'd all run it at least and they did. Tried to deploy it to my first staff test machine and hit the following: Crap. So, tried a slightly different PC and then another, and the same thing. In fact, this now happens to anything that ISN'T the original PC or a VM. Yuck. I'm completely unfamiliar with WDS/MDT and W10 itself but getting there. My kneejerk is to say drivers, is it sensible to proceed that way and try and inject those with MDT? Anyone got any ideas on the best way to start? Thanks everybody.

Just in case Googlers from the future dig this up I had a 'mare getting RDS licensing diagnosis special console permissions manager or whatever Microsoft call whatever it is to work. In short I had the following and fixed it: https://www.tbngconsulting.com/blog/bid/404182/Licensing-mode-for-the-Remote-Desktop-Session-Host-is-not-configured

Found it all, proceeded as you described. I think I did it all right, in the licensing tool that server now has happy green ticks! You're a gentleman thank you very much.

That's smashing - thanks for that! You got any idea where my agreement number would be in the VLSC pages? I'm looking, seems like I've found every number bar that. I'll keep digging too but thanks much.

Thanks for that! So, for the staff one I won't need an External Connector License I'm guessing, as staff and students will use separate ones (with the option of staff using the student one in a crisis but not vice versa.) So I get one of those on top of however many CALs? Thanks for the patience.

Hi all, I need a patient hand. As usual, and again... Had a 'mare in Jan sticking an RDS server up for staff BUT that's now working a treat with Guacamole too. Very happy. Would like to set up a separate RDS for students. So, I imagine I install the roles and configure as before and then I need to get CALS. So, I'd go eg here: https://www.senetic.co.uk/product/R18-05736 , then buy, say 200? We've got 900-odd kids but I don't think there'd be more than 200 on at once, and the issued CALs 'expire' after two months. That right? So I talk to the online CAL reseller and they send me a thingy and I import the things into RDS licensing wossname and all is good then. That also right? If I'm not right can someone patient and kind right me a bit? Thanks everyone.

Sorry took me so long to reply to this but yes I tried ALL of that and more, and more than Sophos support (who have not replied to my ticket) suggested in the first place before telling me I needed to visit each PC. This has been a nightmare and has had huge knock-ons to my personal life too in the time it's taken away from me.

I swear on the eyes of my children I did just that and it's not having it, just stuffing up random Outlook and Access links however it wants and ignoring all of it.

I flippin' well hope so this is awful. And I can't get ANY of them to work now. This is mental, it's just doing what it fancies. Is there some trick to this? Or another way to do it?

Thanks - I had a go at copying this out but it's all one one line. Made this out of it: xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"> rt:DesktopApplicationTile DesktopApplicationLinkPath="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk" Row="2" Column="0" Size="2x2"/> start:DesktopApplicationTile DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk" Row="0" Column="4" Size="1x1"/> Still not working at all though - I'm really not good at this...

...Actually would you mind pasting the text of it? Sorry. Tried to copy it out by hand but I'm still breaking it. :/

You're kind thank you!