Search the Community

Hello all, GitHub: https://github.com/captainqwerty/AutomatedOutlookSignature The above GitHub link is a modified version of a script I wrote to automate the creation of users Outlook signatures at work using details from their Active Directory account and as these details are checked at each logon it is dynamic towards changes such as job title. I have made the script a little more complex than the version we use in our environment. I have more checks for values in active directory in this version. It checks for each address element (PoBox, Street, zip code etc.), mobile, telephone, home phone (which we use for direct dial numbers), website and email, if any of these are blank in active directory the script will simply not add them to the HTML signature output so it is pretty flexible for different environments. Rather than heavily comment the script I have decided to cover it in detail in the readme, which I am in the process of writing so this will update over the next few days as I keep adding details to it but feel free to jump in and take a look and start using it 😊 If you have any questions and/or would like help altering it more for your own environment please feel free to ask in here / PM me. I have wrote the basics of the ReadMe on GitHub however I will be covering the script in more detail on there over the next few days. Here is an example of a generated email signature: Currently only tested on Outlook 2016 and Outlook 2019/O365 as that is what is in our environment, please feel free to modify the registry keys in the script to get it working on older versions of Outlook and I will happily amend the script with checks to work with more version 😊 I recommend setting the script in Group Policy as a PowerShell Logon Script. The main caveat is the users needs to have opened Outlook at least once before the script will work. So usually it goes, user logs in, opens Outlook, logs off and back on again and from then on, the signature will be displayed in all new emails and replies and if active directory details are changed such as job title, name (for example getting married) or work address etc. Once changed in AD they will update next logon. To modify this script, you only need basic PowerShell and HTML knowledge although I am more than happy to help you get the HTML to layout a signature how you desire for your own use, so please feel free to ask in thread and PM me. For those of you that are comfortable with GitHub please feel free to raise issues if you see any or suggest improvements. The reason I decided to use a script rather than Mail-Flow rules in Exchange is the undesired affects that occurred when using Mail-Flow rules: our users didn’t like the fact they couldn’t see their signature while writing emails; it was near impossible to get the signature to be applied to reply emails without just being pinned to the bottom of the thread and; it would repeat the signature at the bottom of the email over and over again and if you used a rule to detect it and not put it on again you only got the one signature at the very bottom of the message thread and not in replies. I personally found that there was not a great deal of information out there on how to control users Outlook signatures and products out there can be pricey especially for smaller businesses so I after I got this working I figured I would to share it you you guys and gals! I hope someone finds it useful Thanks everyone, QwertyMash

Hi all, I just wanted to share a script i have created for anybody having issues with the papercut print client randomly closing and not running. This is a major issue if you are using account selection or scripting that produces popups like me. I have therefore created the attached vbs script and assigned it as a schedualed task to check if its running and lauch it if not. I use the triggers for every 5 minuets, on logon and resume from standby. Under windows 10 you will also need to add an AppLocker rule to allow this to run. My staff laptops leave the school with teachers so I also have the script copy to the local macine with GPP (papercut programs folder as it will be blocked from running in the root C: drive) The only thing you will need to modify is the print server hostname on line 28 and the papercut installation path if you are using an older version of papercut which resides its client in Programs Files (x86), everthing else should work as is but that is down to you to check before deployment. The script will also work to launch the client at user logon (some code is simply here for testing and development at this stage) PapercutClientCheck.vbs

Hi, Little bit stuck here! Please see the picture from a command prompt when doing a gpupdate. It does the same error when trying to force it to. Nothing has changed on the network lately and this has all of a sudden started. Some of the policies now are starting to play up for some strange reason! 1. Any ideas why it may have started? 2. What's the fix! Thanks as always!

We are trying to prevent our users from running various commands that we don't specifically approve. We have implemented Applocker, but that doesn't prevent the user from running commands beginning with rundll32.exe or regsrv32.exe. In previous versions of Windows the group policy setting "Remove Run menu from Start Menu" was sufficient. But in Windows 10, when a user starts typing any command in search, even with that GP setting enforced, the command runs. Is there any way to prevent this? It is a significant security issue, and I am surprised that Windows 10, which is generally more secure, in this issue is actually less so. If not, is there at least a way I can prevent access to the search field? I've already found it on the task bar (even if I set it to "hidden", the user can switch it back to "show search icon" or "show search box"), in the alphabetical list of programs (under "Search") and via the Windows+S and Windows+Q hotkeys. I tried renaming the folder C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy That did disable the search function entirely, but it went too far for our needs. It would prevent the users from running their programs from the Start Menu. For example, they couldn't just start typing "Word" and have Microsoft Word open. Any ideas will be welcome. Thanks! David

Hi To take control of what add-ons are enabled in IE for our users and ensure the ones we want are enabled, we have started using the CLSID of the add-on and Gropu policy to manage them following this guide: https://technet.microsoft.com/en-us/library/dn454941.aspx However once this has been setup, all of the add-ons that we list show up as incompatible when a student logs on and they do not run. I'm fairly sure that this is being caused by another GP setting somewhere but not sure which one. Has anyone come across this? Thanks Andy

Hey guys So we use System Center (damn American spelling) 2012 DPM to do our tape backups. I have installed this on a new server and everything is going well until I try and protect a machine. When expanding the disks DPM throws an error stating that; DPM cannot access mount points under the path NO_PARAM because the SYSTEM account has been denied permission. (ID:6012). Now, the path NO_PARAM..... what? It dosent make any sense and no amount of googling has brought me any joy. The error details tell me to grant SYSTEM access to allow list folder contents and read for items in the specified path. SYSTEM has access to the entire disk by default. This happens on all servers and is preventing the use of the software. I'm thinking that there must be a GPO or something which is being applied which would deny SYSTEM access to the local drives, I cannot for the life of me think what setting this might be and was wondering if anyone has come across this before?

I am running Windows 7 Workstations and Windows Server 2016 Datacenter Domain Controller. I am using group policy to manage printers on my workstations. When I push out these policies it will apply to most of the PCs in a classroom but not all. I have had this issue with multiple group policies in the past and can never workout why they aren't applying. As far as I can see there is no pattern, it is never the same PCs that policies dont apply. Does anyone know any reasons why policies wouldn't apply. James Taylor ICT Technician

We are currenlty testing windows 10 GPOs in our test lab. On our windows 7 machines with 7 only GPOs (WMI filters), users are unable to access the local machines disk via \\computername\c$ (C: is hidden in file explorer) or any other location for that matter eg \\file-server\d$ as they get a pop saying that its disabled. On the windows 10 machines, users are able to access the local machines c:\ in file explorer via \\computername\c$ (C: is hidden in file explorer) and when trying to access a server share eg \\file-server\d$ as they get confirm your user credentials (which they don't have.) sure i'm just over looking a gpo here but can't see the forest because of the trees! Anybody got any pointers please?

Hi all We have an issue whereby we have created a start layout in Windows 10 1803. We have exported the layout via Powershell and set the users to use this layout. USER CONFIGURATION>POLICIES>ADMINISTRATIVE TEMPLATES>START MENU AND TASKBAR>START LAYOUT This works fine. However another issue that we have is that Windows 10 likes to use Edge as the default PDF viewer. Additionally if this default app is changed it likes to give users the opportunity to select which app to use. We need to use Adobe Reader for this rather than Microsoft Edge due to some of the functionality. I have managed to fix this issue by creating a further xml to set the default app to Adobe Reader. COMPUTER CONFIGURATION>POLICIES>ADMINISTRATIVE TEMPLATES>WINDOWS COMPONENTS>FILE EXPLORER>SET THE DEFAULT ASSOCIATIONS CONFIGURATION FILE This also works fine. The problem arises that by using the Default Associations File, it stops the start menu layout file from working. I have tried merging all into one file, but that doesn't seem logical and doesn't work. Does anyone know if there is a limitation to how many xml files you can apply via GPO. If so is it one, and the reason this isn't working? Anyone had the same issue and know any way around it?

Hi Guys, Wondering if anyone has experienced this. All PCS on the domain get this message upon bootup. Applying {FC491EF1-C4AA-4CE1-B329-414B101DB823} policy. The policy hangs for up to 3-4 mins depending on processor speed. I have used Event Viewer Group Policy event logs to narrow it down to the Applocker GPO. I can't see anything else on Event Viewer that suggests that the GPO timed out or if there is an error. This is the only GPO that takes quite a long time and as we have older PCS up to 10 years, this is having a performance impact upon computer startup. Would appreciate anyone's thoughts. Thank you, Jack

Can we have two fined grained password Policies with same precedence. Thanks in advance

Hey So it seems group policy has broken on our server. Even creating a temporary user this error still occurs. I have attached an image As you can see, it shows there are no items to view and I can't get any furtherWould anyone know a fix? I have tried reinstalling the group policy role but didn't fix it Thanks

We are recruiting a 2nd line Service Desk Engineer for a leading IT managed service provider in the education sector! Could this be you? This is a permanent position in the Surbiton / Kingston Area with an excellent salary of up to £38,000! Apply today! Role Overview Responsible for managing the day-to-day essentials of a service desk and collaborating with other engineers to ensure fast and reliable ticket resolution as well as this you will be escalation point for 1st/2nd line. As directed by the management, you will also provide support and maintenance to client sites, maintaining the company's excellent reputation. Responsibilities: · Provide hardware, software, and peripheral support for workstations and ICT equipment. · Escalations: Advanced troubleshooting of issues that 1st/2nd line cannot resolve. · Group Policy GPO. · M365 troubleshooting, ie mail flow issues. · Ability to create new WDS/MDT build images/sequences and add applications. · Working on mini projects. · Offering first- and second-line technical support to customers, mostly remotely, but also on-site when required. · Configure email accounts and manage network-wide settings. · Maintaining, updating, and supporting various ICT networks. · Keep management informed about client requests for supplies and products. · Create system-specific projects with open-source software. · Install new PCs & other equipment as necessary. · Provide support to school administrators and users regarding the school's IT systems. · The installation, configuration and maintenance of antivirus software. Requirements: · Experience working in a similar IT Support environment with a school or educational setting. · Working knowledge of MDMs: MS Intune, Meraki device manager, Jamf School, Apple School Manager. · Excellent understanding of Windows Server 2012 R2, 2016 and 2019, Active Directory, GPO, DHCP, DNS, Win10 / Win 11 / Mac OSX / iOS, Google Workspace for Education, Microsoft 365, Azure, Hyper-V and VMWare ESXi. · Experienced in network communications and network switching hardware - diagnosing faults, configuring switches, and designing topologies efficiently. · Excellent communication skills. We will be attending the Bett Show London this week, reach out to me to set up a confidential meeting over a coffee! Apply or call today! Please Note - We have multiple IT Support Technician / Senior Engineering and Network Manager roles open in the West / South West / South East and East London areas - Contact us today to find out more! Permanent and Contract roles available. Ravi Patel Managing Director GreatFind Recruitment Tel- 07904 015757 Email - [email protected] For our latest vacancies visit - http://www.greatfindrecruitment.com Follow us on LinkedIn - https://www.linkedin.com/company/greatfind-recruitment/ **APPROVED**

Hi all. I am currently having some problems configuring a forced Bitlocker USB encryption policy. On the GPO, I have set 'Deny write access to removable drives not protected by BitLocker' to enabled (computer side) which is working correctly, and does require the user to encrypt their drive before using it. However, I am looking for a way to set this policy so that staff are required to encrypt their memory sticks, but students do not need to and can use them freely. I can't see anything on the user side of the policy, does anyone know of a way to do this or has set something similar before? Thanks in advance!

Please can anyone save me from having to re-image?! I have 30 new ssd drive BGN wifi laptops connecting to our new wifi nicely in the library. Now all of a sudden 12 of them are stuck at the interactive logon screen that users have to click OK to continue to logon screen. When you click OK after boot for the first time, it appears as though it is continuing for a couple of seconds and then flashes back to the same screen. Safe mode is fine?! I have even removed the policy from the domain to test and all other machines are not showing this screen now; the laptops however are still getting stuck on it. i know not how to progress here. Any help greatly appreciated as to how others would troubleshoot this. Thanks all!

Hello everyone, After using RM CC3 with Windows 2003 and XP for the last 14 years, we are now about the start building a brand new network! Applause!!!! We are awaiting licences for Windows Server 2012 R2, and will be building the virtual server/s very soon. We cannot start the big change over until the summer (which gives us 5 weeks to install the network, change over PC's to Win7 about 210, 80 of these will be brand new) but some things we can get started with. One thing we want to get done now are the Group Policies, we obviously have our current ones for 2003 and XP (Not sure if I could export these to 2012) which may not include some policy settings but does anyone know where you can get pre-configured GPO's for schools/education from Microsoft or similar for Windows 7? We have decided not to go for Windows 8 just yet! I have started to create my own, but I am unsure for some settings and would like to at least compare my own to someone else's as I go along as this is the first time I have ever done anything like this. Ideally if Microsoft provide one that is pre-configured for schools that does the basics to stop the students changing settings etc that you can tweak to your own need that would be awesome. Any help would be greatly received.

Hi all, First, some context. I'm in a university environment, under a central IT department. For the most part I have control over the School's image, Group policy, and physical hardware. Not so much when it comes to an network infrastructure and network services. Now, for my question. I have a mobile laptop lab, which instructors borrow when their class needs the laptops. During exams the instructors ask if the internet can be disabled so ensure student integrity. I need a quick way to disable the internet access while still allowing connection to some network shares. Most people say configuring a proxy in Group policy or something like that but I rather something along the lines of a script that I can run to "turn it off" and script to "turn it back on." Because the laptops are wireless, group policy timing can be finicky and I only need to turn it off for a few hours at most. Any ideas? Thx

Is there a real way of setting a global desktop for all students? All the desktops currently have a mixture of software, but some generic software is on them all. I want to be able to send out a global, LOCKED desktop for all the students with shortcuts to the generic software. So for example, all the Serif software would be in a folder called 'Serif' on the desktop, for easy access. What is the best way of doing this? Bearing in mind, some students may have altered their desktops already, and I want these to be reset.