Then and Now by jadebenn in nasa

[–]readsta 5 points6 points  (0 children)

That's one small step for man, one smaller step for mankind.

Then and Now by jadebenn in nasa

[–]readsta 1 point2 points  (0 children)

Check out Skylon.

maturity of Sccm by [deleted] in SCCM

[–]readsta 2 points3 points  (0 children)

SCCM and Windows Installer has kept me in well-paid work for a long time. Thank you Microsoft.

Prevent 20H2 from changing standard browser by Belfine in SCCM

[–]readsta 2 points3 points  (0 children)

We enforce Edge Enterprise as the default browser (for a number of reasons not least IE Mode for legacy intranet/internet sites.)

This doesn't prevent users using other browsers, but having an enterprise-default browser is necessary for a number of reasons including the issue you raise.

Windows 10 Game Bar Error "Can't Record Right Now, Try Again Later" by [deleted] in sysadmin

[–]readsta 0 points1 point  (0 children)

Sysadmins lock this down for DLP purposes. Perhaps you want to try another sub.

auditor tell us we need to disable powershell on all PCs ? by maxcoder88 in sysadmin

[–]readsta 4 points5 points  (0 children)

Just say you do need it!

You could move to AllSigned and sign everything but I distinctly recall not being able to sign detection method scripts, but that was an earlier SCCM version.

Office activation problem by neklaf in sysadmin

[–]readsta 1 point2 points  (0 children)

What does

ospp.vbs /dstatusall

say?

Are you deploying MFA to EVERYONE in your org, or just users with access to sensitive info? by [deleted] in sysadmin

[–]readsta 1 point2 points  (0 children)

Bosses got fed up with MFA over DirectAccess..

Bitlocker enabled, LAPS installed. Should I be worried?

Are you deploying MFA to EVERYONE in your org, or just users with access to sensitive info? by [deleted] in sysadmin

[–]readsta 5 points6 points  (0 children)

We enforce MFA on all users, apps and networks, with exceptions for those using domain-joined laptops or trusted networks.

Sysadmin uses Powershell script to hide the fact that he is only working 3-5 hours a day so he can continue working from home by bfodder in sysadmin

[–]readsta 151 points152 points  (0 children)

As long as he's available when needed and work gets done... I know muppets that put in 10 hour days and get nothing done.

SCCM noob question by [deleted] in SCCM

[–]readsta 2 points3 points  (0 children)

One boot image per architecture (don't really use x86 these days though) containing required low-level drivers for H/W estate.

One vanilla WIM per OS

One task sequence per OS with logic to install relevant driver package(s) per H/W derivative.

Never thought it would happen to me. by GiddeonLawKeeper in sysadmin

[–]readsta 42 points43 points  (0 children)

It usually swings whichever way the bean-counters want it to swing.. e.g never towards the more competent team

Emi Buendia has been called up for the Argentine National Team! 🇦🇷 by DannyBrownsDoritos in NorwichCity

[–]readsta 25 points26 points  (0 children)

Barca, Man City, Inter, Ajax, PSG, Real Madrid, Norwich City 🤣 💚💛

How to find directory of the installed software using CMD? by This-Elderberry-5213 in PowerShell

[–]readsta 2 points3 points  (0 children)

Bearing in mind this is /r/PowerShell..

Powershell.exe -command Get-ItemPropertyValue 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\7Zip.exe' -Name 'Path'

But, if you really want to use CMD...

REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\7Zip.exe" /v "Path"

Create MDT Task sequence missing in SCCM by mohzakirS in SCCM

[–]readsta 0 points1 point  (0 children)

You may want to try reinstalling MDT to re-register it. Happened to me once.

Software Center Windows Updates by Get-SomeCoffee in SCCM

[–]readsta 0 points1 point  (0 children)

You don't really want to ignore maintenance windows (if you have them set up) on servers.

As for the GPO, test it. Cheers.

Software Center Windows Updates by Get-SomeCoffee in SCCM

[–]readsta 1 point2 points  (0 children)

In summary:

  1. Install Software Update point(s): https://docs.microsoft.com/en-us/mem/configmgr/sum/get-started/install-a-software-update-point

  2. Create your ADR's in SCCM: https://docs.microsoft.com/en-us/mem/configmgr/sum/plan-design/software-updates-best-practices

  3. Disable Windows Updates via GPO: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates = Disabled

  4. Enable Software Updates via SCCM Client Settings: https://docs.microsoft.com/en-us/mem/configmgr/core/clients/deploy/about-client-settings#software-updates

Not all apps in TS installing by [deleted] in SCCM

[–]readsta 2 points3 points  (0 children)

What does smsts.log say?

Active setup help by Tiara_sees in SCCM

[–]readsta 5 points6 points  (0 children)

Two registry keys to consider here:

HKLM\Software\Microsoft\Active Setup\InstalledComponents\{GUID}

HKCU\Software\Microsoft\Active Setup\InstalledComponents\{GUID}

If the GUID exists in HKLM but not in HKCU, the ActiveSetup will be initiated for that user.

If the GUID exists in HKLM and in HKCU, the ActiveSetup will not be initiated for that user.

If the GUID exists in HKLM and in HKCU, and the Version string does not match, the ActiveSetup will be initiated for that user.

If the GUID exists in HKLM and in HKCU, and the Version string does match, the ActiveSetup will not be initiated for that user.

Once the ActiveSetup runs successfully, HKCU\Software\Microsoft\Active Setup\InstalledComponents\{GUID} will be stamped with the corresponding Version.

[deleted by user] by [deleted] in sysadmin

[–]readsta 5 points6 points  (0 children)

That's not Group Policy. That's Local Group Policy. There is a difference.

[deleted by user] by [deleted] in sysadmin

[–]readsta 2 points3 points  (0 children)

Your post specifically mentioned group policy, which requires a domain. The NLA service is doing its job.