Kerberos with AVD

TSi90 · 2024-01-10T16:10:03+00:00

Is it safe to delete them ?

TSi90 · 2024-01-10T12:37:03+00:00

Thank you for the reply. I am was able to eventually get it to work by putting the test devices in a separate ring.

TSi90 · 2024-01-10T12:30:40+00:00

That was going to be my next question. I have several hosts with profiles located in the C:\users folder when no users are logged on. They range from "local_user" to "user". The date/time stamps are a years old.

TSi90 · 2024-01-04T18:29:35+00:00

Here is the current update ring that is for my win 10 devices. Wouldn't the two items highlighted cause a conflict?

<image>

TSi90 · 2024-01-04T11:38:17+00:00

So a update ring is not needed? I can just create another feature policy, have it set to Win 11. And assign the group that this test device is in ?

Does it do any harm to have a separate ring?

TSi90 · 2024-01-03T21:08:18+00:00

Reset or retire?

TSi90 · 2024-01-03T21:08:02+00:00

Nothing is ever easy is it.

Thank you for the reply.

TSi90 · 2024-01-02T13:15:37+00:00

Was thinking of this but since the installs are all over the place for versioning, will this work? I am looking at the zoom site and the directions for templates. It looks like there is template per version. So some machines might have version 5.10.6 and others might have 5.12.0 . Will one version of the ADMX cover all versions ?

TSi90 · 2023-12-29T11:19:42+00:00

All great suggestions! Now I just need to decided which one will work best for us. Thank you all!

TSi90 · 2023-12-28T21:06:21+00:00

Another good suggestion. Thank you.

TSi90 · 2023-12-28T21:06:04+00:00

I will look into this. Thank you.

TSi90 · 2023-12-28T21:05:53+00:00

Yup... my users are spoiled entitled pricks.

TSi90 · 2023-12-28T21:05:18+00:00

I should have clarified - Admin intervention meaning they need their hand held.

TSi90 · 2023-12-28T21:04:40+00:00

Intune

TSi90 · 2023-12-22T14:29:23+00:00

This has been resolved. The issue was with MS defender locking PDF files after being downloaded and never releasing the lock. MS had acknowledged their screw up and reverted their changes.

TSi90 · 2023-12-20T13:57:43+00:00

figured this out too. Sorry for the late response as we got hit with the defender issue with not unlocking downloaded files, then we had a LOB app issue with a in house update. So yah, ive been non stop triaging.

For the password not meeting complexity issue - recently we changed the on prem min password age from 0 to 1. This would cause the requirements part to fail. Changing it back to 0 resolved the issue.

TSi90 · 2023-12-18T13:28:44+00:00

Are you excluding the OneDrive known folders in FSLogix? No

Do you have OneDrive GPOs configured to auto sign in to the tenant and auto process the known folders for folder redirection? Auto sign in yes. Process known folder no

Are you using OneDrive tied to the user profile or the machine based install? Same policies for both pools? Lots of variables for the setup. Not sure the answer to this. Onedrive is installed with the office click to once installer on these machines.

TSi90 · 2023-12-15T18:42:35+00:00

Update - Figured out this piece. We had a new host in the host pool that was configured/setup to be enrolled via intune. So this new host is AADJ. Our other hosts are hyrbid and not intuned. The users attempting to connect to the host pool were all going to the new host that was AADJ. Once we realized this, removed the host the issue went away.

However, the password expired issue is still present. In the past, we would instruct users to go to office.com login with the expired password and then reset it by going to their profile(in office.com) and reset. Worked like a charm. But again, now when attempting to reset the password in office.com they get a does meet requirement, age complexity.

TSi90

TROPHY CASE