meakjoe

Yes I set it up this year and a couple of year ago on another network, both using Smoothwall. I did it a bit differently and had 2 VLANs both terminating on the Smoothwall, one 'External' and the other 'Internal'. That way you can set up firewall rules on the Smoothwall to be more granular and only allow access to certain internal servers/services. The port forward then forwards the 2 ports on the external side to the server IP for external connectivity. All seems to work pretty well so far.

Do you use UEV at all? We had a similar case where some of the paths weren't mapped correctly I think in the UEV templates. Removing the templates or disabling UEV resolved the issue.

My rule is set to any source and any destination IPs, going from any internal to any external interface

Setting up QUIC to Ensure That Web Traffic Is Filtered – Knowledge Base (smoothwall.com)

If you want to be really cheeky, just go to the web address endpoint that the RDP file connects to and append /webclient to the address to reach the HTML5 page, which I assume is what they're going to be moving to? Remote Desktop Web Client (sims.co.uk)

Try the below, this should just pin Edge to the taskbar, with an empty start menu. It should be a starting point. xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1">

Virtual Machine Queues (VMQ) on Broadcom adaptors?

It looks like you've got it correct in your example above, within the CustomTaskBarLayoutCollection. Only issue I found was that the links have to point to a shortcut within the Start Menu folder, rather than the path to the actual .exe. Alternatively, you can link to the AppID which is a more global option and not path dependant, so chrome can be targeted with the following... You can get a full list of AppIDs from opening a powershell window and running get-startapps

Drop this bit of code in above the CustomTaskbarLayoutCollection to achieve the desired result. The key is you need to define the section with nothing inside of it, rather than just not defining the section at all which will revert back to the OS default as currently displayed.

Something you could try is creating the bootable media to an .iso file and then using Rufus to write it to the USB stick.

We had UE-V for a couple of years, but for the amount of work to set up and maintain it, the actual number of settings that roamed wasn't really worth it. We also found that it slowed down MS Office upon opening, unless the UE-V template was set to asynchronous. We've just recently disabled it and I don't think any users have noticed any difference, apart from programs opening quicker. If you would like roaming settings, then look at FS Logix which Microsoft purchased a few years ago, and is normally included as part of licensing I think. This store user profiles in a .vhdx on a server allowing the profiles to be streamed rather than uploaded and downloaded. You will need a fair amount of spare on site storage for this though as they can end up being fairly large files.

Is this an in place upgrade that you're doing? I've also noticed that on some of the machines that I've done, and I think they were going from 1803 -> 20H2, but the 1903 -> 20H2 seemed to be unaffected.

Nope just get a 404 error, or something else to say no response.

I've used a Gen2 Hyper-V before, booting into UEFI PXE boot with SCCM with no problems. Think SCCM uses WDS as its pxe boot provider.

Thanks for that, you've run that for your environment I take it? When you create a new PowerPoint file from the online version of PowerPoint, does it set the proofing to English U.K automatically?

I had an issue similar to this with Lenovo Android tablets and EXAs certificate through Intune not working properly. If you right clicked on the certificate from a PC and opened the cert with notepad, it was all mumbo jumbo and not a proper certificate format like they normally are with a 'BEGIN REQUEST' and 'END REQUEST'. Importing the cert to a PC and exporting as a Base-64 certificate then displayed it as the right format through Notepad, and worked succesfully on the Android tablets. Might be worth trying.

Nope that doesn't work either, its the Online version that I'm trying to set. Its quite annoying as even if you create a PowerPoint within the installed Office, which is set to UK with GPO, then sync it to OneDrive, it changes to US when opened online. Changed every language setting I can find, including browser and Windows to UK but to no effect.

Thank you, that's all set to English UK which I had to do from the AD attribute. Even with that all set correctly a new PowerPoint created in OneDrive is set to English US which is not what we want.

Has anyone else experienced this issue?

Hi all, Has anyone had any luck setting the default language for the online versions of PowerPoint/Word etc? I've tried setting the preferredlanguage attribute for the AD user to en-gb and syncing that to 365, also set the OneDrive for Business regional/languauge settings to English UK. After changing all that, when I create a new PowerPoint, it straight away says English US for the default proofing language. Any help appreciated.

This is the guide I followed which worked perfectly, scroll down until you hit the Device Authentication section. Tutorial – Deploy Always On VPN | Alex Ø. T. Hansen (tofte-it.dk)

Have you got the Certificate Template set up on your Certificate Authority correctly, with the Security Group containing your computers selected to 'Auto-Enroll' on the machine certificate?

We have it working with Office 2019 perfectly at our site. Reasoning we went for 2019 over 365 is that users with MFA had to manually sign in to use the 365 version, whereas we could activate 2019 with a key so that they could at least open the program with no prompts, and then sign into OneDrive and approve the MFA challenge if they wanted to use that. We have SSO configured with AD Connect so it signs them in automatically on browsers, as well as Teams/Office etc.

SSTP is Windows only I believe, you'll have to set up your VPN server to accept other auth methods I should think.

Depending on how you have set it up, you may also need to import your CA root certificate onto the iPad. When I've set AoVPN up before, you set a Root CA with Powershell for IKEv2 connections so that only devices with the Root CA installed can connect.