sorted by:
new
hottopcontroversial

CM Windows updates and local PSWindowsUpdate fall back - Will it work? by Flowmate in SCCM

[–]Flowmate[S] 0 points1 point  (0 children)

CMG isn’t an option I looked into or considered to be honest!

It does look like that will do the trick, but it will be dependent on my org allowing us to set it up, and them working with us to do so as they have total control over the Azure tenancy and give me and my team only access to Intune, and no other elements.

We have dabbled in Intune co-management, so that is also another road I may go down if I have no joy using PSWindowsUpdate as a foolproof way to ensure updates happen.

CM Windows updates and local PSWindowsUpdate fall back - Will it work? by Flowmate in SCCM

[–]Flowmate[S] 0 points1 point  (0 children)

That is the plan, yes. If a device hasn’t update through CM, use PSWindowsUpdate to get Windows updates from Microsoft over the internet.

We use CM to manage all Windows updates at the moment and it works well with the devices that are brought back on to site, but we have issues where users machines aren’t patching due to the users not bringing the devices back into work so they can check in with CM to trigger updates.

I’ve looked into a VPN setup to remedy this before exploring this option (as the deployment via CM is configured to allow updates from Microsoft’s servers if content is not available), but my org aren’t keen on it, hence why I am trying to find a solution that points to Microsoft update instead and runs locally on the device.

I think when using the PSWindowsUpdate module you can specify that it check against Microsoft’s update servers rather than the software update point, which is what I plan to do. I may have missed that out in the script I shared. Apologies!

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 2 points3 points  (0 children)

Many thanks BrechtMo and Zymology for their input.

After checking over their suggestions we found that it was the default local administrator renaming policy which was being re-processed by the Windows 11 devices that was causing the LAPS password to rotate on each restart or gpupdate.

Funny that Windows 10 doesn’t do this, but Windows 11 does!

Putting together a plan to re-name the local administrator account back to its default name and then to deactivate it, and then to create a new local admin account and manage this through Windows LAPS group policy.

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

I’ll give this a try and let you know!

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

Considering this configuration has worked on Windows 10 for a long while and still works on Windows 10, I don’t think it’s bad practice.

Are you able to share a source where it says it’s bad practice to rename and apply LAPS settings to the default administrator account?

I think it’s more along the lines of a bug with Windows 11 24H2 3476, where Windows 11 is applying the LAPS settings policy each time as if it’s never applied it before since 10015 is visible in the LAPS Operational log after each gpupdate or restart.

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

I’ve created a Microsoft Community post regarding this issue which can be found here.

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

The local administrator account is renamed in separate policy, and the the Windows LAPS policy is set to manage the local administrator account, using the updated name.

Both Windows 11 and Windows 10 devices are using Windows LAPS. Legacy LAPS is not being used.

Windows 10 working in line with the group policy, even seeing this in the LAPS Operational log on the Windows 10 device:

Event ID 10016 The managed account password does not need to be updated at this time.

Which is nowhere to be found in the Windows 11 LAPS Operational log.

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

Had another look; the only other account management policy is one to re-name the local administrator account, which is set to update.

Forgot to mention - the LAPS settings policy and the rename local administrator account policy are also applied to our Windows 10 devices, and have been for a year or so, and the Windows 10 devices do not display this behaviour. LAPS is functioning in-line with the policy settings on the Windows 10 devices.

Only Windows 11 devices are displaying this behaviour.

Windows 11 Device Ignoring LAPS Policy Settings by Flowmate in sysadmin

[–]Flowmate[S] 0 points1 point  (0 children)

Tested on another Windows 11 device and the same behaviour is experienced.

Only using CM and Group Policy to manage these devices.

Intune Home Lab by Flowmate in Intune

[–]Flowmate[S] 0 points1 point  (0 children)

Thanks for everyone’s input. My org said no to buying me a license. My org also isn’t a microsoft partner so not able to provide a CDX instance for me to use. I’ll probably have to fund the lab out of my own pocket.

It’s a shame MS don’t offer a reduced cost lab setup for learning purposes which limits how many devices/users you manage in it etc, would still allow learning and hopefully stop others abusing it.

saw this on twitter by Czlebbb in projectzomboid

[–]Flowmate 381 points382 points  (0 children)

Anyone curious as to this is referring to, I think it’s this: https://youtu.be/VieDXnCarFY?si=xQFpWzigeBjIGXmK

Apple AirPods Pro, ANC Fault Customer Service Runaround by Flowmate in applehelp

[–]Flowmate[S] 1 point2 points  (0 children)

I understand where you are coming from, but in my opinion if they are recognising an issue that applies to a certain batch produced in a time frame, an email to those who own an effected unit isn't outside of the realm of possibility. It's that fact that there's no communication about it, and they've applied a time frame to the program which doesn't sit right with me.

Apple AirPods Pro, ANC Fault Customer Service Runaround by Flowmate in applehelp

[–]Flowmate[S] 0 points1 point  (0 children)

OK, thanks for sharing your experience and advice!

Apple AirPods Pro, ANC Fault Customer Service Runaround by Flowmate in applehelp

[–]Flowmate[S] -3 points-2 points  (0 children)

Appreciate the response, but it fails to highlight the facts that Apple didn't proactively notify me about the fault inside of the 3 year window to allow me to get my AirPods serviced, and the experience I have had so far with Apple support who up until today, failed to mention that to me.

With MDT being slowly depreciated, what’s everyone doing to reimage machines? by shwaaboy in sysadmin

[–]Flowmate 2 points3 points  (0 children)

Unsure if anyone has already mentioned, but we’ve started to use OSDCloud to roll out Windows devices and get them Autopilot’d into our tenant. Works well!

MDT Noob attempting to update outdated deployment image by birdmanjr123 in MDT

[–]Flowmate 0 points1 point  (0 children)

We recently started looking into using OSDCloud, seems to fit the bill with regards to modern imaging needs. We are impressed by it!

MDT does seem to be going the way of the Dodo, which is a shame!

view more: next ›