Search the Community

Hello, I've been encountering a slowly growing issue of Internet Explorer 10 not picking up our GPO settings for proxy settings etc... any insights as to why and any tips to sort it out?

Am starting to see Google's "trending searches" experimental feature on student computers with no apparent means to turn off. Documented here: https://support.google.com/websearch/thread/55550675

Hi All, We are going to be rolling out chrome to the school, we are looking for a method to disable the ability to go into the "Settings" panel within chrome Any Ideas ? Regards Will

Hi, I have had this problem for a couple of months and its driving me mad. All of our existing machines appear to be running fine on the network but every time I build a new machine it hangs or BSOD's at "Applying your personal settings". I have had this problem on at least 2 different models of PC, possibly 4 (I can't remember now) - Optiplex 760, Optiplex 790 and also possibly on Optiplex 740 and Optiplex 780 (All of our PC's are Dell). But I have the same models working fine on the network, it's only when I try to install/re-install XP. So forgetting everything that I've done in the last couple of months to try fix it because I can't remember everything, here's what's happened in the last two days. I did the following steps on both of the Optiplex 790's at the same time. 1) Set up two Dell Optiplex 790's and installed XP Pro SP3 (using an ISO I downloaded from Microsoft Volume Licensing site). 2) Installed all of the latest drivers (from Dell's website using service tag) except for one of the chipset and the graphics drivers as they needed .NET Framework first. I also upgraded the BIOS at the same time. 3) Installed all available Windows Updates (excluding PowerShell, Windows Search, Browser Choice and Security Essentials or what ever it's called) 4) Installed last two drivers (mentioned in step 2) 6) Formatted D: drive. 5) Installed Adobe Flash Player, Reader and Shockwave from their website. 6) Installed Microsoft Office 2007 Enterprise from CD. 7) Installed Microsoft Updates and installed all of the updates available for Office along with Silverlight 8) Installed a driver from Microsoft Updates. I can't remember the exact name but it was something to do with Intel SOL. (I can probably check the update history if I need to get the name) 9) Installed Adobe CS5 Web Premium from CD. 10) Installed Adobe Acrobat 9 from CD. 11) Joined the computer to our domain and left both machines in the default "Computers" container in AD. 12) Logged in as the domain Administrator account. - At "Applying your personal settings" one machine rebooted (Probably a BSOD but they are set to reboot instead of displaying it by default) and the other just sat on that screen doing nothing for about 17 hours. 13) Logged in as the local Administrator account and enabled UserEnv logging and Winlogon logging, then rebooted. 14) Logged in as domain Administrator account and both machines logged in successfully... :@ 15) Logged out and logged in using my own account (Domain Admins & Administrators). Both machines rebooted. At this point I started using just one of the machines 16) Booted with it set to display any BSOD's instead of rebooting. 17) Logged in with my account and got a BSOD (0xC000021A) 18) Booted the same machine and used msconfig to disable all startup programs (then rebooted). 19) Logged in with my account and this time at "Applying your personal settings" I got a winlogon.exe error saying "The instruction at 0x7c911766 referenced memory at something. The memory could not be read". - When I clicked OK the PC rebooted obviously because winlogon was terminated. 20) On same machine logged in as local Administrator account again. 21) Used msconfig to disable all Non-Microsoft services and rebooted. 22) Logged on with my account and it rebooted again at the same place... As you can see these are clean installs of XP there is no imaging involved and they should only be loading our default policy which is linked to the domain and contains things like password expiry and "Always wait for the network at computer startup and logon". When I originally started having the problem I'm sure I remember that if you managed to get an account to log in by repeatedly deleting the local profile and logging back in until it worked, that account would always be able to log in to that machine in future (or so it appeared). So maybe it could be something to do with generating the user profiles. That's all I can remember right now, may think of other things later. If you need more information just ask Thanks in advance, Dan

For years now I have used mandatory roaming profiles for 99.9% of my users. These have worked great as the staff and students are constantly moving machines. We use these in combination with folder redirection and we redirect all the possible folders to the users home share. This has worked great but now that more and more things require user customisations such as Windows Store Apps and cloud services like GoogleDrive (which doesn’t support even standard roaming profiles) I now need to develop this solution. I'm fine with giving users as much freedom as possible, the only reason I used mandatory profiles was to improve reliability. How on earth do you get a nice, reliable and low overhead profile system whilst still giving users the freedom to customise as they wish. I've used standard roaming profiles but they seem to slow down after a while and we've played with UEV but that doesn’t support everything. I'm not really asking for the answer but more asking what do you do? Thanks

Hello Wondering if anyone could help, we are struggling to block the settings button within chrome for all students. We have previously used the Block access to a list of URL's within Group Policy but this is no longer working (Any of the blocked URL's) Is there another GP that we can enable to disable the settings button? OS : W10 Chrome Version : 111.0.5563.66

Does anyone know where I can get decent help for a PM issue I'm having? Just upgraded our server hardware (mac) and OS. Running Big Sur on the server and Catalina on our clients. Using PM to set restrictions etc. Have 43 Macs. All bar five are working fine. The five that aren't simply refuse to pick up/receive the settings configs from the groups they are in. This is an excerpt of an email I have sent to my Mac guy (who is not available atm) explaining what I have tried: DNS is correct on all of them - they can ping both IP and DNS names for the server and their own names They have all been rebuilt at least twice. . They are added to PM and have the trust and Remote Management profile/certs installed. I have manually removed and re-added these more times than I can count. If I look at a working Mac (one with the settings applied) I can see all the relevant settings from each group appearing in the profiles section. For those not working there are no settings profiles appearing. I have even gone as far as to physically change known working network cables etc to try and troubleshoot.. I have also tried to manually download and installed the settings via the download option in Profile Manager. For most of these settings the download button is greyed out, so this doesn't work anyway but there is one setting that allows downloads. Problem is when I try to install the setting, I get an error message: This profile must originate from a user approved MDM server Getting desperate now... I have done some googling and I see mentions of PHP logs and APNS logs but I have neither of those on the server despite turning on the APNS bit using commands found on the web.. I really don't know enough about Macs to take this any further so if there's anyone out there with any insight or who can direct me to someone who may know something please respond!!!

Hi All, I was wondering if some of you could help , i have a number of features I would like to remove from Windows 10 before deploying it to a test area. I would like to remove the following : Access to the Settings Application Remove Settings from the Start Menu Disable First Logon Screen for All users Let me know if you know of anyway to do this using GPO's or Scripts , desperately trying to get a test Win 10 image together in the next couple of weeks. Thanks in advance

Hi all, Having problems with some machines in which certain accounts cannot browse the Internet. As far as I can work out, this is related to Proxy Settings not applying. This is also related mainly to some 'Exam Accounts' that we use - but it has popped up elsewhere at random in the domain. This is normally fixed with a quick restart - the 'Exam Accounts' still don't connect after a reboot. The only additional group policy settings that apply to these accounts are default profiles and drive maps. Everything else is identical to a generic 'ManagedUsers' GPO, in which the proxy setting is applied through the Polices/Windows Settings/Internet Explorer Maintenance/Proxy Settings. RSOP shows the policy has succeeded. GP logs on the client show that the GPO has applied. winsock resets will temporarily solve the problem. I'm seeing some wpad traffic broadcasts on wireshark but autoconfig proxy settings are set to disabled. Getting pretty stuck. Any help appreciated! I'm sure I've forgotten plenty of detail, let me know. Tom Windows Server 2008 R2 DC's Windows 7 Professional 64bit clients Roaming profiles on clients with folder redirection to samba services

Hi, I want to set a link to the languages settings (where the spell check settings are) so the user can get there easily (rather than explain how to navigate there or type the URL in), but using href="chrome://settings/languages" Chrome just goes to "about:blank". Any ideas?

Hi folks, We've just reached capacity on our server due to WSUS and its crazy Gb's worth of updates. I just wondered if you could provide me with a step by step on how to move the directory onto an external hard drive we have purchased just for this. Thanks in advance x

I look after well over 300 iPads now. All different models and across a large site. 200 are managed by Apple Config 2 and Meraki. The rest I'm attempting to manage through ASM so I don't have to have accounts set up for any of them. The consistent problem I've got no matter which MDM I've tried, is that I am unable to hide the 'Settings' app. Does anyone know if this is possible? If you try and hide it then all the settings you have push to the iPad then go and nothing is restricted. Yet if you leave it people attempt to attach them to their own Hotspots or remove the profile and restrictions. Possibly driving me crazy trying to get an answer for this.

Hello, Sorry if this is in the wrong place. We are currently using Apples MDM for to manage our iPads and iPhones and have been looking into some of the custom settings which you can apply. Does anyone know a way of forcing Find my iPhone to be turned on and also the "Send last location?" Thanks,

Hi. I wish to enable the feature to highlight the mouse pointer by pressing the CTRL key, I can set this in control panel for myself but not for other non admin users who do not have access to the control panel. Is there anyway I can enable this feature via local group policy. Thanks

Hi All, Just trying to get a few things sorted for our deployment of Windows 7 this summer. Using a few test machines to try things up and identify any niggles. One that I can't seem to sort is the Regional Settings. Although I set this in the the unattend.xml its not applying properly when someone logs on and is defaulting to US. I have tried setting this as a Group Policy. At the moment all of our servers are 2003 but we use Admin Tools on Windows to connect to AD/GP etc. The way that I have tried is going to User Configuration --> Preferences --> Control Panel Settings --> Regional Options and creating a new 'Regional Options'. When I go to set the options all of them are underlined red, which if I understand correctly means that they will not apply. (See below) It has this on every setting that you can set in every tab. Does anybody know why this is doing it? Is it because we are using Server 2003? Here is a view of the defined settings in the GP if it helps :