munkey

I un shared it from the file server, so run fsmgmt.msc on the file server, under shares find the one right click and stop sharing Have a ganders as to what's under the registry location "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" to see if there are any blanks as that's where known folder locations are defined, although not sure why it's removed the path all together as I've not seen folder redirection do this. If it is blank and is happening to every machine a workaround could be a login script to set the missing registry value

If the users are already redirected to OD rather then onprem storage is there a need to share the onprem profiles still? - You could set NTFS permissions to read only but no-one should be accessing it if redirection is working correctly unless I'm misunderstanding it After our OD migration we just kept the file server spinning but only un-shared the user profiles location. If there was anything that failed to migrate they got in contact with IT but there wasn't a single ticket raised in the end. After a couple of terms this was captured to tape backup anyway so could be wiped from the server

Pretty sure its a https inspection thing, do you use the WatchGuard as your filtering appliance or another service? We had to make sure inspection was disabled for the domain education.minecraft.net otherwise students couldn't download maps (none of the thumbnails loaded for the download buttons)

Yup we used iBoss for 3 years and when there were downloads around 2gb it would fail in exactly the same way... If I recall correctly our AV (Sophos) caused havoc with it, even when the AV's web inspection features were disabled iBoss wouldn't behave right. My memory gets foggy here but I think we created a script to force kill the AV's "web protection" service upon machine boot - something to do with the WFP drivers clashing. It didn't solve everything but it tied us over until the renewal where we moved away from the product all together due to its reliability issues I'm not familiar with Defender but maybe disable it completely on a test machine?

Hi all, We got a batch of Windows 11 Surface Go laptops so as per routine we re-imaged them with MDT to Windows 10 Ent 22H2 and even after doing "diskpart clean", the fresh Windows 10 install comes defaulted into S mode before doing any updates etc. This is the first time I've seen S mode being forced on when using our image which has been applied on 100s of installs with no issues like this on previous batches. Has Microsoft now enforced S mode to be enabled at a hardware level or something? its very frustrating as these are take-home student devices with the MS Store is disabled so getting manual access to the machines is difficult once handed out. Thanks

We use the locked print functionality but no directory integration, if that's the same thing - I'll have a play with locked print disabled at some point and see how I get on. Unfortunately this is a requirement as the printers are few and far between so can be located several floors away, if there are sensitive documents being printed students could easily wonder off with it.

Hi All, We run a small print setup using the classic print server and GP to deploy network printers. When printing from Windows store apps (such as Photos, Snip & Sketch etc) the print queue gets jammed and the print spool files need to be manually deleted from the server so people can continue printing. I've tried updating the Ricoh PCL6 v4 drivers to the latest version and even installed directly on the machine as a test, this made no odds. I then tried installing the Ricoh print driver utility (also a Windows store app) - this didn't jam the print queue but the document failed to print all together. As far as I can tell the Windows store apps don't use the system print driver but some Microsoft generic thing which not only lacks many printing features it doesn't even work. Is there any way of making the store apps use system print drivers, or any workaround? Thanks

As an alternative you may be able to use AppLocker to restrict Windows packaged apps from running https://ccmexec.com/2015/08/blocking-built-in-apps-in-windows-10-using-applocker/

Hi, We have a bunch of Windows 10 20H2 laptops with Outlook 2016 installed and wish to make use of autodiscover to streamline the user's setup. The laptops are AAD joint (synced from on premises DC) and managed by InTune, we use Exchange online with autodiscover on the on prem desktop PCs which works a charm with almost zero interaction to get a user setup on a new email profile. On our AAD joint laptops the Outlook wizard stops at the enter in details step where autodiscover would normally kick in. Other settings worth mentioning is SSO is enabled in AAD sync settings, we have modern authentication enabled, the autodiscover domain appears to have no issues, I have placed the PreferLocalXML..xml manually. Is there anything I am overlooking? Thanks in advance

Sorry for the dumb question but just so I don't make this mistake again, in practice, how does planning for technology look? At the moment staff request devices, apps and whatever misc tech, if that involves money it needs the seal of approval from SMT, then I go do it. What should happen?

Alrighty, so according to Airwatch support I had to add every existing app as a "public" app and assign it to the same groups so they are in parallel with the main app library pulled from ASM. This stops the Airwatch from issuing a remove app command - then we can seamlessly delete the old token and add the new, remove the public apps and supposedly the licences and all that jive will be the same as before the migration. Sounds OK right? But a large number of apps we still use has now been since removed from the app store or replaced with a different identifier so I cannot add them into the public apps section (or re-install them when the tokens swap over). I got a quarter way through and realised i'd have to speak to the departments to find alternatives as there were no like-for-like replacements... and that's as far as I got given everything else that's going on, excuse the rant but I'm not sure what i'm doing wrong but bringing managed iPads into school has been nothing but an absolute pain in the .

I had something identical and it ended up being a very specific combination of software not agreeing with each other. We had iBoss plus Sophos AV plus Windows Defender going into some deadlock on login occasionally. Anything notable in the event viewer?

I'd like to move away from Airwatch as iPads are now a bane to manage - Since that's the only MDM i've used I assumed it was "the way it is" Any comments on Lightspeed/Jamf/others?

I am told by their support AirWatch can only accept one VPP token. To add the new token means clearing the old one and when I do so it warns all deployed apps will be removed. We had issues when we tried to merge the apps from our two VPP accounts into AW... ended up cutting our losses and just binning one of our VPP accounts.

Just though i'd throw an update out there. I ended up raising a ticket to Apple & AirWatch, turns out this is expected behavior and we need to uninstall every single app on every iPad so Apple Schools Manager "absorbs" the spare licenses, then add the new app sync token to AirWatch and re-install every single app again. Given we normally have a 30% failure rate in the uptake of apps from Airwatch resulting in the iPad being factory reset so it sounds like a job for the Christmas holidays to me after i've collected everyone's device in (ouch)