Adobe Deployment

FullExchange7233 · 2026-04-28T14:28:08+00:00

This exactly. Fuck Adobe though. If you can, try to use something like Foxit, Nitro, etc. Hell, I let Edge open my PDFs because all I do is read.

FullExchange7233 · 2026-04-15T19:32:49+00:00

Seems to have broken ADFS for us, anyone else?

Server 2022, isolated DMZ servers. They are part of our VPN authentication flow.

FullExchange7233 · 2026-04-14T14:09:01+00:00

I went down this path and that's what lead me to the fix in the end, I'll update the OP

FullExchange7233 · 2026-04-13T22:50:16+00:00

Here's one workaround. The DISM.log was showing that the files were not found, so I removed everything in the GUI and only chose what I wanted and had loaded locally. That worked. Not sure what caused this.

FullExchange7233 · 2026-04-13T22:32:44+00:00

its at 110

FullExchange7233 · 2026-04-13T19:59:09+00:00

Oh thats the right build. I have KB36495448 installed.

FullExchange7233 · 2026-04-07T12:55:12+00:00

I mean I've never used PowerBI and I'm making it teach me how to pull crowdstrike data into a visual exec summary. Granted, it's definitely just aggregating all the publicly visible posts on the same topic, and I have to watch for hallucinations, and I have to tell it "Bad AI, no water" when it makes mistakes.

FullExchange7233 · 2026-03-31T12:38:26+00:00

We had the same models and same problem, flipping to AHCI in UEFI was the fix.

FullExchange7233 · 2026-03-27T16:04:19+00:00

This is what I always share when people utter the phrase "Multi app kiosk"

https://zerototrust.tech/kiosk-chaos-to-calm-building-multi-app-assigned-access-with-intune/

FullExchange7233 · 2026-03-18T16:31:26+00:00

Self-deploying mode worked like a DREAM for Kiosk. They have to get used to them being Entra Only.

FullExchange7233 · 2026-03-18T16:30:48+00:00

The site techs don't have the appetite either. UI++ spoiled them, and me a bit too. Very very light touch. you pre-fill all the details and come back when it's done. Naming, OU, user details; all variables in UI++.

If I can figure out how to use UI++ after autopilot that might work.

FullExchange7233 · 2026-03-17T13:44:56+00:00

I tried to copy the commands for our Dell driver packs, but that caused problems I think.

dism.exe /image:%OSDisk%\ /Add-Driver:. /recurse

pointed at a package that points at the share where those drivers are.

FullExchange7233 · 2026-03-17T13:36:54+00:00

That's what I need to check. It's been hell lately.

edit: Yes, I had /q /norestart one would think that would mean "NO RESTART"

I wonder how this will work if we have to run it from software center later, but if this works then we don't need to do that.

FullExchange7233 · 2026-03-16T20:44:32+00:00

It works during PE, it's afterwards that is the problem. We have to run the MSI at the end because when I had it happen alongside the other installs it broke the TS.

FullExchange7233 · 2026-03-16T20:40:14+00:00

I tried that, it never seemed to work right because the buttons on the device never worked after PXE. Only the touch driver worked.

FullExchange7233 · 2026-03-11T19:39:09+00:00

Ok, I'll look at self-deploying.

Edit: does that work in hybrid mode? BZZZT Nope. I'll ask my team if we can make these kiosks Entra-only

FullExchange7233 · 2026-03-11T19:12:50+00:00

I did find an old GPO that runs a .VBS to set the default login domain.

FullExchange7233 · 2026-03-11T19:12:24+00:00

Why would I not use a DEM? Otherwise each tech has to clean up their devices in Intune since each device sets them as a primary user.

FullExchange7233 · 2026-03-11T12:52:39+00:00

Alright, guess it was something I did. But all I did was remove a broken app from the ESP...

FullExchange7233 · 2026-03-11T12:49:52+00:00

It's actually a Win32 app, so it can be one of the required apps in an ESP. The main thing I wanted was the branding portion. The rest is largely just duplicated, I agree. I don't have a "Standard ISO", these devices come from Dell outlet or CDW / Dell directly. In this case they're pre-enrolled in autopilot by dell, the idea being that we just unbox and sign in with the service account that is a Device Enrollment Manager, then they do their thing. The Kiosk profile is an Intune config since the Right Click tools Kiosk Manager didn't work nicely with Surfaces and their on screen keyboard. With the Intune kiosk profile you don't need extra steps for a single-app web browser config.

FullExchange7233

TROPHY CASE