meakjoe

Yes I set it up this year and a couple of year ago on another network, both using Smoothwall. I did it a bit differently and had 2 VLANs both terminating on the Smoothwall, one 'External' and the other 'Internal'. That way you can set up firewall rules on the Smoothwall to be more granular and only allow access to certain internal servers/services. The port forward then forwards the 2 ports on the external side to the server IP for external connectivity. All seems to work pretty well so far.

Do you use UEV at all? We had a similar case where some of the paths weren't mapped correctly I think in the UEV templates. Removing the templates or disabling UEV resolved the issue.

My rule is set to any source and any destination IPs, going from any internal to any external interface

Setting up QUIC to Ensure That Web Traffic Is Filtered – Knowledge Base (smoothwall.com)

If you want to be really cheeky, just go to the web address endpoint that the RDP file connects to and append /webclient to the address to reach the HTML5 page, which I assume is what they're going to be moving to? Remote Desktop Web Client (sims.co.uk)

Try the below, this should just pin Edge to the taskbar, with an empty start menu. It should be a starting point. xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1">

Virtual Machine Queues (VMQ) on Broadcom adaptors?

It looks like you've got it correct in your example above, within the CustomTaskBarLayoutCollection. Only issue I found was that the links have to point to a shortcut within the Start Menu folder, rather than the path to the actual .exe. Alternatively, you can link to the AppID which is a more global option and not path dependant, so chrome can be targeted with the following... You can get a full list of AppIDs from opening a powershell window and running get-startapps

Drop this bit of code in above the CustomTaskbarLayoutCollection to achieve the desired result. The key is you need to define the section with nothing inside of it, rather than just not defining the section at all which will revert back to the OS default as currently displayed.

Something you could try is creating the bootable media to an .iso file and then using Rufus to write it to the USB stick.

We had UE-V for a couple of years, but for the amount of work to set up and maintain it, the actual number of settings that roamed wasn't really worth it. We also found that it slowed down MS Office upon opening, unless the UE-V template was set to asynchronous. We've just recently disabled it and I don't think any users have noticed any difference, apart from programs opening quicker. If you would like roaming settings, then look at FS Logix which Microsoft purchased a few years ago, and is normally included as part of licensing I think. This store user profiles in a .vhdx on a server allowing the profiles to be streamed rather than uploaded and downloaded. You will need a fair amount of spare on site storage for this though as they can end up being fairly large files.

Is this an in place upgrade that you're doing? I've also noticed that on some of the machines that I've done, and I think they were going from 1803 -> 20H2, but the 1903 -> 20H2 seemed to be unaffected.

Nope just get a 404 error, or something else to say no response.

I've used a Gen2 Hyper-V before, booting into UEFI PXE boot with SCCM with no problems. Think SCCM uses WDS as its pxe boot provider.

Thanks for that, you've run that for your environment I take it? When you create a new PowerPoint file from the online version of PowerPoint, does it set the proofing to English U.K automatically?