Search the Community

Hi all, not sure if this has been mentioned here, or if people are experiencing issues with this. I was, and it turned into a real head scratcher. The link below, describes a Windows 11 bug where update policies change from being managed via your MDM, to Local Group Policy (even if you don't have any set) This bug stops updates from being deployed automatically, and pauses updates in a loop (with the option to resume greyed out) The fix is to delete a certain reg key, and then re-sync your device to the MDM you are using. The script is available via the link below. https://www.everything365.online/2024/10/06/kb4023057-sets-mdm-managed-windows-update-policies-to-managed-by-group-policy/

Hi All, We've reimaged most of the pcs round college and some, not all PCs, they're getting the window settings up for work or school when logging in for the first time, these are PCs which are on our network through MCM. Is there a GPO to do this or a registry key that can be deleted to stop this happening for first time login Many Thanks

Morning all, I am just tightening up my windows 11 deployment and noticed that a student user can access .MSC like Computer management and services etc. I have tried blocking this via GPO in a couple of places. 1, User config > Admin templates > System > Don't run specified windows applications.. Have put both the shortcut and main location in this. 2, I have also put this in User Config > Admin templates > Windows components > Microsoft Management console and have disable the snap ins and for extra good measure have disabled Computer management & services but the test profile can still access these. Any suggestions much appreciated? Regards Ross

I have a user who can't arrange their desktop icons in any sensible way - and I haven't been able to come up with a satisfactory fix. Symptom reported: only some icons displaying on laptop, but they reappear when additional monitors are connected. Diagnosis: spacing was hard set in registry to 5500 pixels leaving a very widely spaced grid with space for only about 8 icons on the desktop. Fix: Registry change to 1000 pixels, but still had to turn off auto-arrange and align icons to grid and then manually arrange. Customer was satisfied.... Until a Windows update installed and all of the icons ended up on top of each other in the top left corner. It's a recent Lenovo Yoga, re-imaged with our normal Windows 11 23H2 image. AFAIK all Lenovo stuff has been cleared. We're a Dell shop, but have around 10 Lenovos of same model and image and only one report of this issue. Any suggestions for a permanent fix?

Hi, I've just installed a few windows 11 machines on my network so I can look at rolling this out over the summer. I've been using it for a while myself. Couple of weird things. The network connection always says unauthenticated and it never recognises it as a domain machine for the firewall profile. I've read you can unjoin and rejoin which sometimes fixes it but havent tried it yet... and I've tried resetting the machine password but I get this. Reset-ComputerMachinePassword : Cannot reset the secure channel password for the computer account in the domain. Operation failed with the following exception: The server is not operational. PDQ Inventory doesn't see it online either.. even when I disable the firewall. Probably something simples. Any pointers would be great. Oh.. Windows 11 Edu is the ISO I used with RUFUS so it alters it so it can install on older specs.

Morning, Some staff are moaning about a change to the logoff window where it now asks them if they want to log into a Microsoft account. Before I go hunting, does anyone know off-hand, the GPO to turn this off? CHeers Gareth

Hi all, Has anyone had any experience in using Microsoft Voice Access? We have a copy of TextHelp Read&Write, and the offline dictation works through Voice Access. Seemingly when I try to launch it, it hangs and doesn't launch until much later or when I restart the device - I've been in contact with their support along with countless google searches but nothing to resolve the issue. Is there a known bug with this in 23H2, as a standalone laptop on 24H2 works without any issues. Any help would be appreciated. Thanks

Hi All, This is my first post so forgive me for any rules that I may be breaking. Had a career switch and came into IT approx. 2 years ago. Back then we had desktop units per classroom for the teacher. Over the last 2 years we've got ourselves to a point where now we have "docking monitors" and each staff member has their own laptop. A teacher is expected to go into a room and connect to the docking monitor via USB C and project to the Interactive Panel/Projector via HDMI. As you can imagine, the sheer number of pulling HDMI in and out is causing wear and tear to the port as well as the HDMI. What I'd like is to have 1 USB C which connects to all screens. 2 Solutions: -Buy the following docking station to connect all connections, however be prone to it being disconnected and it being "borrowed" -We have docking monitors which have a "DP out" functionality. I've tried this with a DisplayPort from the Interactive Panel to the docking monitor, however windows doesn't recognise it (even at 30Hz). However it does work for my setup with 2 monitors in the office (maybe length of the 15m cable is the issue) Anyone got any better ideas or tested these ideas out? Thanks Muazzam

I am trying to configure and deploy a taskbar layout at two different sites. Something as simple as this: xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1"> Using GPO on one site I can now get this to work. At the site using Intune pretty sure its not even getting that far. I have a configuration policy that has the following The "Configure Start Pins (User)" is working fine. However not convinced about the "Start Layout (User)" not so sure about - the official MS documentation heavily implies that this should be a reference to an actual file residing somewhere - which would be a paim! However I have seen example where people appear to have just copied the contents of the file into the entry as I have chosen to do. Does this method actually work? Or will I need to make this available somewhere in Sharepoint? If so whats the best way to create a read-only area where I can dump this file and others?

Our VPN is deployed and usually works with credentials already entered. Now we get a pop up when launching the VPN saying action is required and to enter username and password. Any idea? Was working until the last week or so.

Hi All We're trying to deploy the xTools Creative space for our engineering course, does anyone know a way of pushing this out silently there doesn't seem to be any answers on the website or using the /switch /s -s options Thanks

Hi All, Not sure where else to post, but I think I'm going to get the 'welcome to the club' reply as I think this is just the nature of Intune. Whilst I love the concept of being able to cloud manage devices, I've noticed User Policies are inconsistent at best. Some will apply immediately, some will apply after 15 minutes and a second logon. For teachers and admin staff this is less of a concern, typically their devices will be 1:1 and once they have their policies they're sorted, assigning a primary user (I believe) will preconfigure that user to that device. My concern is student machines, with shared suites (no 1:1 scheme) it's rare students will login to the same machine twice so it's safe to assume a fresh login each time. Whilst they're standard users I'm still concerned with their ability to essentially run rampant on machines until policies are applied. What could be some potential resolutions? I've considered looking into co-management but I'd like to steer away from SCCM where possible (That's a beast too intimidating to tame haha). Is it possible to have an AD Hybrid-joined environment where I could potentially use GPOs for user policies? Or am I asking for trouble? Maybe it's best to stick with On Premise after all....

Hi, We have moved to Windows 11 this summer and changed the student profile over to a local profile. However, currently we have terminal on the start menu and struggling to remove it currently. I have tried using this PowerShell script on the PC Start up script but it does not remove it. Get-AppxPackage -AllUsers *WindowsTerminal* | Remove-AppxPackage -AllUsers Has anyone managed to remove it through gpo, registry or scripting? Thanks,

Hi Everyone, I'm just struggling to get my head around this and wondering if you guys have the answer. When I'm trying to create a Media tool to a USB on my windows 11 device it fails instantly to create. However when I use the same device but with Windows 10 on it creates perfectly. Has anyone else had this Issue? I've tried with multiple windows 11 devices and it fails on any of them. Would love to hear if there's a simple fix or if I'm being silly Thank you!

Hi, So we're currently rolling out W11 23H2 and it's been noted that when a user visits a cleanly re-imaged workstation and then uses the same workstation the next lesson after their profile has been wiped using a known and working shutdown PowerShell script via Group Policy, they get asked to sign into M365 Office CTR. After a restart (with their profile wiped again), Office CTR apps load fine and the user is never prompted to sign in again for future use at the same workstation. I'll post more info including some errors & screenshots when back in the office, but just putting the feelers out there to see if anyone on Edugeek has experienced the same? As a comparison, I tried the process on a W10 22H2 PC which I've never logged into before using my test account and Office CTR was normal after a profile wipe. Many thanks

We've been upgrading a few rooms and laptops to 24H2 and have mostly had success apart from one room we've come across where only 4 of 19 PC's upgraded without issue, the rest all failed with the error 0xC1900101-0x40017 Things I have tried: BIOS Update MEI Update Removed local profiles Update the following drivers Audio Drivers Graphic Drivers NIC Drivers HostBridge Reinstalled Chipset driver All still the same

Cant see how I can enable this- have done the usual interactive login options in Group Policy but nothing seems to make a difference. Anyone been able to do this?

OK so we have migrated from windows 10 to windows 11 (bare metal install not in-place upgrade) 23H2 enterprise edition. Now we can’t remote to the client from another client on a different subnet and I’m pulling me hair out, we can Remote from client to client within the same subnet so GPO’s to enable Remote Desktop and firewall to allow are correct but log’s of the receiving firewall show deny! So what I have tried. The original GPO that worked with Win 10 allow RDP. Then tried a firewall rule to allow TCP 3389. Now I have tired firewall rule to allow all TCP ports from the subnet in the IT support office to all clients and still it won’t work! Can anyone suggest anything that I might not have thought of as I could do with some sleep 🤪 Thanks for any help.

This seems to stay on the screen for a while when my Windows laptops boot. Is there anyway to find out what this is? Nothing in SYSVOL\curriculum.local\Policies seems to relate to the name :/

Hello, Is anyone using a PAC File on Windows 10/11. Could anyone share a file with me so i can understand it and write one for us. Also - Where do you save it? We are still with SWGFL... (Looking to move at some point when contract expires) Trying to make life easier for staff so they dont have to turn proxy on and off.. Thanks Newp

This used to work under Windows 10 and according to the Microsoft documentation the process is supposed to be the same for Windows 11 (just it doesn't support changing the Start Menu any more, only the Taskbar layout) but I don't seem to be able to get the taskbar apps layout working for our staff users. Here's what I've got: xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1"> No matter whether I apply this through GPO or Intune though, it doesn't seem to be having any effect. What am I doing wrong? Have Microsoft changed how taskbar management works again and just not told anybody / not updated their documentation?

Morning all, Does anyone know the GPO setting to set a computer keyboard to UK as a Computer setting and not a user setting? The " and the @ have changed places on the logon screen. I've done it as a user, but it needs to be as a computer. Any help appreciated. Gareth

In the good 'ole days we used to redirect all pupils StartMenu Folder to a single location. Making it easy to a) lock down the Start Menu and b) only show the applications we wanted them to use and hide all the "rubbish". now that we are moving to purely an Entra/AzureAD solution it seems that there is no way in Intune to do folder redirection (which make sense for Document, Pictures et al - as they just redirect into OneDrive) but for the StartMenu still need a way to have only a simplefied list showing under "all apps". Have the pinned list working ok just when you click on "all app" there is soo much crap in there - I know there is no way to stop UWA/Modern apps from appearing but the traditional apps like Outlook, Cloud Drive Mapper ... At the moment all I can think of doing is writing a "user" logon script that "resets" their start menu in "%appdata%\Microsoft\Windows\Start Menu\Programs" either by a simple ROBOCOPY from somewhere accessible or a fancy script that just deletes everything and then copies specific files from the "%allusersprofile%\Microsoft\Windows\Start Menu\Programs" Surely there is a better way to do this?

Morning Everyone, Has anyone seen an issue where OneDrive has suddenly gone from FileExplorer on an Autopiloted/InTune device? It can be accessed via Word etc but users cannot access it as a drive. It just went. I've checked OneDrive and it is on the computer. It signs in as the user as expected. Just not showing. Google search showed this has been seen in the wild, but nothing I have tried has brought it back. So - here I am asking. Cheers Gareth