Search the Community

Just before christmas my team looked at the various versions of Windows 10 and decided ENT LTSB was the best option for our schools. The cut-down look was great, and easiest to sell on to teachers as its just an updated Win7. But this week a teacher asked me "where is the photo viewer?".... Urm.... Turns out "Photo Viewer" is not enabled, you can do a registry fix to bring it back. But that made us realise that the new Photo app wasnt present, or the calculator, or any remote option of sideloading apps in the future. (I think it is possible to load apps to LTSB, but its not officially supported so we will be avoiding this.) As a result, we need to rethink our deployments. I am looking at whether Education or Enterprise is best for schools, what do you think? I think Education seems the best bet Sadly though during our time trials LTSB was under 2 minutes for initial login, but Education was 3-4minutes for initial login. So this is going to annoy the pupils without a doubt! How is everyone deploying apps btw?

Hi, I'm relatively new to preparing images in general and I'm still figuring my way around the ADK. I've made an answer file according to the documentation, but theres clearly something I've missed as Windows Setup is still requiring input (language, locale, etc). I hope this is the current forum, but feel free to move it if it's incorrect. The image was prepared from WinPE tool from a Windows 10 Enterprise Embedded [LTSB] reference machine. The answer file was written using WSIM from the ADK toolkit. It's called "Autounattend.xml" and it's in the root directory of the installation media. This is my answer file and it's paired to a Windows 10 Enterprise LTSB: https://pastebin.com/xWXsQn3B (as it's too long).

Our school is moving toward Apple tech (from Windows) and I would like, as far as possible, to reduce the number of different technologies that have to interact. So I'm keen to embrace Apple everywhere as far as it will go. We have fibre backbone across the campus, and I want to create a wireless network capable of handling up to 500 iPads, across 200 locations (boarding houses, classrooms, common areas etc). I'm aware that everyone will chip in with their favourite network technology, but I can't find anyone who's used Apple Airport Extremes on any large scale. There may be good reasons for that, which I'd like to hear about. The final network I want to move to is: A minimal windows-based wired network for admin staff, a small component of wired macbooks and iMacs, and the majority on Apple ipads, using wireless. Different vendors happily tout the brilliance of their products, and the weaknesses of the competition. I'm hoping someone out there has tried Apple Airport Extremes in the real world and can give me some advice from their experience. 1. Does Apple Airport scale in any way, or is it, like the rest of Apple, for home use in small networks? 2. I want to avoid the complexity of having controllers, vlans, etc. 3. We have a mac mini server, which I've been told is adequate to manage 500 iPads. Would it also cope with running RADIUS, 200-odd APs etc? 4. Will the wireless networks scale to running Apple TV? (I'm aware of the chatty nature of bonjour, but would hope that Apple tech on an Apple network would work. Unfortunately, I haven't had a good experience trying to get answers from Apple themselves. They haven't got a clue about the demands of education on IT Infrastructure.

Hi all, We've been having an ongoing fight with machines with trying to get them to respect what we're setting up, either through ignoring GPOs or just changing behaviour. Students: Our students use Mandatory profiles. We did have an issue last year where Chrome did not work, due to an issue with it interacting with a cryptographic service, but that has been resolved. All machines are now running Windows 10 1809, Enterprise. Intended behaviour: A student logs in, receives the shared mandatory profile. Does work, signs out. Machines delete the user profile on log-off. Policy in place to delete user profiles older than 1 day, to catch any others. Roughly six months ago, on 1803, this worked. Actual behaviour: A student logs in, receives the shared mandatory profile. Does work, signs out. The profile stays on the machine (200MB each, minimum). On logging in again, it uses that profile. If there is ever an issue with that profile, it prevents them logging in with a "Group Policy" error - "Cannot load profile", which means their profile must be manually removed from the registry. The issues we're running into are students not being able to log in (due to the profile error), machine hard drives filling up and students saving work to the machine, rather than network storage (we can't redirect Documents/Appdata due to Creative Cloud throwing a wobbly). Policies configured for the profiles: Public Key Policies/Certificate Path Validation Settings/Stores[url="http://www.edugeek.net/"]hide[/url] [TABLE="class: info"] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [/TR] [TR] [TD]Allow user trusted root Certificate Authorities (CAs) to be used to validate certificates[/TD] [TD]Disabled[/TD] [/TR] [TR] [TD]Allow users to trust peer trust certificates[/TD] [TD]Enabled[/TD] [/TR] [TR] [TD]Peer trust certificate purposes:[/TD] [TD]Client Authentication; Secure Email; Encrypting File System[/TD] [/TR] [TR] [TD]Root CAs that client computers can trust:[/TD] [TD]Third-Party Root Certification Authorities and Enterprise Root Certification Authorities[/TD] [/TR] [TR] [TD]For certificate-based authentication of users and computers, along with CAs that are registered in Active Directory, the client computer must use should also use user principal name (UPN) constraint compliant CAs[/TD] [/TR] [TR] [TD]Disabled[/TD] [/TR] [/TABLE] System/User Profiles[url="http://www.edugeek.net/"]hide[/url] [TABLE="class: info3"] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Add the Administrators security group to roaming user profiles[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD]Delete cached copies of roaming profiles[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD]Delete user profiles older than a specified number of days on system restart[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD="colspan: 3"] [TABLE="class: subtable_frame"] [TR] [TD]Delete user profiles older than (days)[/TD] [TD]1[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Do not forcefully unload the users registry at user logoff[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [TR] [TD]Do not log users on with temporary profiles[/TD] [/TR] [TR] [TD]Enabled[/TD] [/TR] [/TABLE] Staff members: Staff members use Roaming profiles and have a separate set of User OUs and Machine OUs. On first logon, with no network profile, the Start Menu (list of programs, not tiles, redirected via GPO) appears as expected. On second logon, or a logon to a new machine, the Start Menu only contains the automatically-added programs (Mixed Reality, Photos, Cortana...). Deleting the NTUSER.dat file from the staff member resolves the issue as long as they are using machines they have a profile on. Going to a new machine requires the deletion again. Folder Redirection is set up for all document folders and libraries, to their Network Home Drive. ExcludeProfileDirs is set up with "AppData\Local;AppData\LocalLow;$Recycle.Bin". Unfortunately I'm at a loss on where to go next, for both issues. Students were fixed and working, and as far as I can see should work ("Delete user profiles older than 1 day" is pretty explicit...). Staff members, everything I try to look up leads me to issues about the Tiles, which we do configure, but I'm much less concerned about. Has anyone encountered these before, or have any idea where to go from here? I've heard rumblings around Roaming and Mandatory profiles being phased out for... something else, but I've never seen anything explicit on what to do instead - running without profiles just fills the local drives. Many thanks!

Hi All, I have an issue with SCCM 2012 after migrating it to a new server. I have set up ADRs for Endpoint and Windows Updates and syncing software updates works fine (no errors in SCCM logs). The only thing is, when I look in the WSUS console, it says '0 updates approved' and there are thousands waiting for approval. I thought the whole point of ADRs was that they were supposed to handle this? The same goes for my Endpoint ADR. I have set up an auto approval rule in WSUS too (not sure if this is wise - I was just desperate). Has anyone got any suggestions? I can post up any logs if required. Thanks and a happy new year to you all.

Hello everyone, I have an unusual issue trying to sequence Algodoo which is a piece of free physics software we are trying to use in school. I can sequence it but when I try adding it to the App-V Management Server so it can be deployed, I am receiving an error message: "The package Algo Physics was not added. An unexpected error occurred while calling AppX Com API. Error: 0x80080205 - The Appx package's block map is invalid. (Exception from HRESULT: 0x80080205)." I have sequence a completely different application using the same sequencing VM (restored to a clean state) and these packages add successfully. So I can only think that it is something within the software (file path, filename that's a reserved word??). The Sequencer version is: App-V 5.1 March 2017 Service running on Windows 7 SP1 x86 (I have also tried my x64 sequencer VM with identical version of the sequencer to no avail) Any help/advice would be greatly appreciated. Many thanks!

Hello everyone. This is my first post so I'm sorry if this turns up in the wrong location! I am currently designing an MSI installer to Install Windows Essentials 2012 (Movie maker only) via group policy and I have used various software packages to provide solutions for this. However Every MSI package I create will run but the process named' Windows Essential Installer 2012 (32 Bit)' closes shortly after. Is there anyone that has created such application that I could implement that works? Many thanks to all.

When we moved over from our CC3 network to a vanilla network SUccessMaker Enterprise 1.3 had to be installed on a seperate server. Luckily before our support contract lapsed I grabbed everything I could from the Support website. As others have pointed out on here, it is annoying having to pay a support contract for a piece of software we have already bought. Anyhow - it comes today to installing it onto some machines. The RM documentation for installing on a standalone workstation is to use the setupnew.exe file. SO I have used this and it all worked. Does anyone know the difference between the setup.exe and the setupnew.exe file? Then I see we are running 1.3 - has anyone updated to 1.4 > 1.5 and then onto 1.6? Did it work? I notice from the SME Canada website SuccessMaker Canada - Support Options that 1.3 is missing. Is this because RM purchased it? Even when we were with RM we never recevied an update from them - not a sausage to upgrade our SME installation. Your experiences are needed and appreciated, Regards GJE

Just taken over a school administered by the Westfield Center. Am deploying new systems and go to sophos EC but all groups are green with a pad lock - not seen this before and am not able to add new PC's to any groups. Any ideas?? Thanks:mad:

Link: Interactive Web Portal Star Trek Enterprise Virtual Tour (Bridges) - Roddenberry Archive

Just wondered if any one has any experience of an online upgrade of server 2008 R2 standard to Enterprise? I've read a few blogs using the command dism? Apparently: dism /online /set-edition:ServerEnterprise /productkey then the product key I've also read you can't do it if its a DC... So has anyone done this, especially if was a DC? Did it work by demoting the DC and they using dism then dcpromo, or am I better off just flattening the server and installing Enterprise? Is there alternatives? Also would this work if I purchased Enterprise and used the product key in dism? Cheers!