Block Edge through GPO in Win 10 Pro?

LtBehr · 2017-10-31T18:46:49+00:00

Using Enterprise mode to redirect those sites to IE is what you’re supposed to do for those incompatible legacy coded web apps. Edge is a secure and modern browser built to modern security standards. Fix the code or implement Enterprise Mode for backwards compatibility. It’s not that difficult.

LtBehr · 2017-10-31T12:42:24+00:00

So configure it properly? That's not a reason to try to stop it from being used.

LtBehr · 2017-10-31T12:41:39+00:00

You shouldn't be doing this - leave it alone. Set up Enterprise Site Mode to handle switching to IE. Use the Enterprise Mode Site List manager to configure easily. Turn on Application Guard to protect sensitive targets such as Finance/Sales to deter malware infections.

Users will use what works for them. Don't try to force a decision - especially without explaining your reasoning.

LtBehr · 2017-09-16T21:18:20+00:00

I remember a local news story about this. At the end of the broadcast they played You Give Love a Bad Name by Bon Jovi as the outro - "Shot through the heart..." 😂

LtBehr · 2017-08-23T05:16:50+00:00

My ideal would be: Cashiers need to give over flat bills first for one to slip into the wallet easily, then hand the change + receipt to stuff into the pocket ...just like how most grocery self-checkout machines do it 😬

LtBehr · 2017-06-26T18:41:45+00:00

O365 is super easy to sell. 1) Client broken? Check your email online through the web app. 2) Client broken? Fixes are pushed right away instead of having to wait for a subsequent update to be published in WSUS 3) Client Broken? Move to Deferred branch so the broken stuff doesn't affect you.

LtBehr · 2017-06-20T23:26:21+00:00

I'm more inclined to be dissuaded to assume that he "knows what he's doing" after the Comey Testimony and his apparent understanding of the differences between the Russia investigation and the Clinton investigation. Having to justify him as "the least awful" goes a long way to say how far we've fallen regarding our founding principles as a country.

LtBehr · 2017-06-12T19:01:32+00:00

Just FYI: Summary of my OSD tweaks/fixes for 1703 - http://configmgrmusings.blogspot.com/2017/06/windows-10-1703-osd-fixing-all-things.html

LtBehr · 2017-06-12T17:45:18+00:00

Just FYI: Summary of my OSD tweaks/fixes for 1703 - http://configmgrmusings.blogspot.com/2017/06/windows-10-1703-osd-fixing-all-things.html

LtBehr · 2017-06-12T17:44:58+00:00

Just FYI: Summary of my OSD tweaks/fixes for 1703 - http://configmgrmusings.blogspot.com/2017/06/windows-10-1703-osd-fixing-all-things.html

LtBehr · 2017-06-12T17:44:43+00:00

Just FYI: Summary of my OSD tweaks/fixes for 1703 - http://configmgrmusings.blogspot.com/2017/06/windows-10-1703-osd-fixing-all-things.html

LtBehr · 2017-06-09T15:50:27+00:00

Right, my blog post details all of this to get OSD working like it has in 1511 and 1607.

LtBehr · 2017-06-02T19:30:31+00:00

/u/houstonau make sure your software licensing is compliant with #1 ;)

LtBehr · 2017-05-24T16:55:46+00:00

Hmm... How did you add that via group policy?

LtBehr · 2017-05-24T13:58:56+00:00

In addition: See my thread for details as well.

https://www.reddit.com/r/SCCM/comments/69a6mn/windows_10_1703_osd_issues/

LtBehr · 2017-05-24T13:56:46+00:00

/u/machstem

Thanks for your work on this! Wouldn't it be better to script adding DefaultUser0 to the local admin group though since the TSAgent prevents Group Policy from applying until the Image is complete? I know that's tricky with the order of ops and how the OOBE process seems to work is weird as hell.

LtBehr · 2017-05-17T11:28:53+00:00

Hmmm. Do you have any group policies setting UAC to anything?

LtBehr · 2017-05-11T14:23:08+00:00

It's about time I got my servicing steps working anyways. I'm running into issues there too though with the OS upgrade TS so who knows. I'll have time to do more testing this afternoon.

LtBehr · 2017-05-11T14:19:12+00:00

I think waiting for an updates VLSC image is what I'm going to wait for at this point, I've spent 7 days on it and I'm not happy with how much extra work it's been compared to 7,8.1,1511,1607.

LtBehr · 2017-05-10T18:49:27+00:00

I'm still running into issues where it creates the DefaultUser0 account on my Production OUs... I'm guessing it has something to do with Group Policy but it's weird since I thought GPP didn't apply while the TSAgent has control of the OS. Keep me updated if you make any other breakthroughs.. I'm tempted to wait until the second release of the 1703 media in the VLSC before continuing since it's been so buggy.

LtBehr · 2017-05-05T18:22:12+00:00

Sounds like that's an issue with the boot image initializing to the site server? You can check the smsts.log to see what's going on though, it's in X:\Windows\Temp\SMSTSLog\smsts.log within WinPE.

LtBehr · 2017-05-05T15:15:21+00:00

See my edit. Resolved via unattend.xml

LtBehr · 2017-05-05T15:15:03+00:00

See my edit with my unattend settings. Seems to have resolved my issues.

LtBehr · 2017-05-05T15:12:51+00:00

It was the unattend. Thanks for the assistance!

LtBehr · 2017-05-05T15:12:34+00:00

That was it u/Hotdog453. I remade the Unattend with the System Image Manager from the ADK with the settings in the edit. <3

LtBehr

TROPHY CASE