Mac – PaperCut – PCClient – running as LaunchD instead of login

Starting PCClient as a LaunchAgent instead of as a “login item” may help speed up user login …

See the not at:
http://www.papercut.com/kb/Main/MacClientStartupWithLaunchd

Posted in Labs | Tagged , | Comments Off on Mac – PaperCut – PCClient – running as LaunchD instead of login

Windows 10 – Update Blog

A pretty good blog of Windows 10 updates is at:
https://blogs.windows.com/windowsexperience/2016/05/10/announcing-windows-10-insider-preview-build-14342/#31Zq2yELkheC9HyV.99

Posted in Labs, Software | Tagged | Comments Off on Windows 10 – Update Blog

Windows 10 – Windows Update Delivery Optimization – OFF !

Under Windows Updates “Advanced Options” then “Choose How Updates are delivered” and you get to “Updates from more then one place”

Apparently, now, Microsoft believes it is wise to allow random PCs on the internet to distribute windows updates. Here is their information about this option: http://windows.microsoft.com/en-us/windows-10/windows-update-delivery-optimization-faq

I am much less trusting of random PCs on the inter-webs so, I have turned this new “feature” off.

Posted in Labs | Tagged , | Comments Off on Windows 10 – Windows Update Delivery Optimization – OFF !

Windows 10 – Group Policies related to security and privacy

See the extensive list of Windows 10 group policies for privacy at:
https://4sysops.com/archives/windows-10-privacy-all-group-policy-settings/#prevent-the-usage-of-onedrive-for-file-storage

Posted in Labs | Tagged , , | Comments Off on Windows 10 – Group Policies related to security and privacy

Windows 10 – Prepare a system for cloning/Imagining with CopyProfile


My steps to prepare a Windows 10 system for cloning/imaging with COPYPROFILE:

Note: I make no claim that this is the recommended Microsoft way, I can only say this process worked for me!

  • I used a clean install on a formatted hard drive (custom install)
  • I choose the LTSB “servicing branch” for my highly controlled/managed computer lab environment. See the different servicing branches of windows 10 at: https://technet.microsoft.com/en-us/itpro/windows/manage/introduction-to-windows-10-servicing
  • I created a new windows 10 sysprep file from scratch that included the “COPYPROFILE” setting. (Specifically, I did’t have success using an upgraded windows 7 answer file. To create the sysprep answer file I used the windows 10 ADK and my windows 10 install media from step 1)
  • After I did the clean windows install, I installed the drivers for my hardware and then set the computer “sleep” value to never sleep, finally I let the computer sit for a week collecting windows updates. (I found the default “sleep” value is very low and in my experience that sleep state was preventing windows updates from completing! )
  • I created three administrative accounts. One for post-deployment automated scripts and management control. Another account for manual “admin” access when needed. The third admin account I used to create the default user profile so this was my “profile” account.
  • I logged into the “profile” admin account and set it up how I wanted the default user account to be. Config the start menu settings, pinned apps on the start menu and task bar, add icons to the desktop, change application settings like Chrome settings, etc.
  • I created a non-syspreped backup of my system on a device that I can use to quickly restore from. (i.e external usb 3 drive) It always takes a few tries before I get my sysprep answer file quite right and a bad sysprep file almost always causes an un-bootable system.
  • BEFORE syspreping the computer I do a complete shutdown. Not just log off or restart. I shut it all the way down. This was somewhat important in previous versions of windows, however, I now believe it might be a critical step for windows 10 to avoid a corrupted user profiles for any account you had logged into since the last full shutdown. I believe windows 10 has changed the way user profiles stay resident in memory after logouts and even during reboots.
  • After a complete shutdown, I restart and ONLY log into the “profile” administrative account. I opened an administrative command prompt, change directory to the sysprep directory and run sysprep. To do these two steps I use the commands in the admin command prompt:

    cd sysprep
    sysprep /generalize /oobe /shutdown /unattend:c:\windows\system32\sysprep\unattend.xml

    (You’ll need to change the sysprep command to point to your answer file. I’m not sure if it can live in any other directory. Also, remember the sysprep answer file is a vector for hacking, so you should do something to remove the sysprep answer file from your systems after you deploy your image …)

  • Sysprep completes by shutting down the system and I am now ready to capture an syspreped image.
Posted in Labs | Tagged , | Comments Off on Windows 10 – Prepare a system for cloning/Imagining with CopyProfile

Windows 10 – Sideload windows store apps

On the lab/classroom image I need to disable the windows app store from allowing random individuals to install random apps. However, there may be a time when I need to install a windows app store app and, of course, there’s an answer for that …. it’s called “sideloading” …. Details can be found at: https://msdn.microsoft.com/en-us/library/windows/hardware/dn938326%28v=vs.85%29.aspx

Posted in Labs, Software | Tagged | Comments Off on Windows 10 – Sideload windows store apps

Windows – Self-extracting installer with auto-install

With the application WinRar from: http://www.rarlab.com/

Select files, right click and select Add to Archive
Use Browse.. to create the archive in the folder above
Change Archive Format to Zip
Enable Create Archive Format
Select Advanced tab
Select SFX Options
Select Setup tab
Enter setup.exe or msiexec /i xxx.msi into the Run after Extraction field ( No quotes or other stuff … )
Select Modes tab
Enable Unpack to temporary folder
Select text and Icon tab
Enter a more appropriate title for your task
Select OK
Select OK

This was mostly swiped from the bottom of:
http://stackoverflow.com/questions/27904532/how-do-i-make-a-self-extract-and-running-installer

Posted in Labs, Software | Tagged , | Comments Off on Windows – Self-extracting installer with auto-install

Adobe – Photoshop – crashes but not in remote login session

Found an issue where Photoshop would crash after loading but only when using the computer directly. If remoted into the computer Photoshop worked fine. That indicated a display driver issue. I tested at the local computer by putting the display adapter in basic VGA mode and photoshop worked.

The “Fix” — stolen from web forum below …

go to device manager again and put the graphics driver in VGA mode. You can do it by choosing “Browse my computer for driver software” and then select “let me choose option” select standard VGA from the list Then go to ” Control Panel\All Control Panel Items\Programs and Features” and uninstall AMD catalyst control centre. Once it is done, go to AMD website and choose auto detect feature to detect you GPU from “http://support.amd.com/us/gpudownload/windows/Pages/auto_detect.aspx”. Once you find the updated drivers install them and check whether the issue is fixed or not. You can also use this link to uninstall AMD catalyst “http://support.amd.com/us/gpudownload/windows/Pages/catalyst-uninstall-utility.aspx”.

Then restart ….

See details at:
https://forums.adobe.com/thread/1295044

Posted in Labs, Software | Tagged , | Comments Off on Adobe – Photoshop – crashes but not in remote login session

Windows 10 – Force a specific Lock screen

Yet another useful group policy at:
Computer Config – Policies – Administrative Template – Control Panel – Personalization
Force a specific default lock screen (See note below about creating file)
and
Prevent changing lock screen image

Note: Remember to create the image and save it to something like:
c:\windows\web\screen\williamslogin.jpg
Then when you enable the force policy you need to point to the file above.

This is specifically useful in the lab environment to give people information BEFORE they log in.

For details see:
http://www.grouppolicy.biz/2012/11/how-to-use-group-policy-to-change-the-default-lock-screen-image-in-windows-8/

Posted in Labs | Tagged , | Comments Off on Windows 10 – Force a specific Lock screen

Windows 10 – All Apps control

It appears that we can turn off the default “All Apps” view in the new windows 10 start menu with the policy at:
User Config – Policies – Administrative Template – Start Menu and Task bar –
Remove All Programs list from the Start menu

It appears that you can “remove” the default list and keep only the specific items you pin there.

Specifically the helpful group policy wording is:

“This policy setting allows you to remove the All Programs list from the Start menu.

If you enable this policy setting, the “All Programs” item is removed from the simple Start menu. The Start Screen will show the All Apps view, but it will only contain items that are pinned to start.

If you disable or do not configure this policy setting, the “All Programs” item remains on the simple Start menu.”

I found this on the longer list of Windows 10 Start Menu policies at:
https://technet.microsoft.com/en-us/library/mt484191%28v=vs.85%29.aspx

Posted in Labs | Tagged , | Comments Off on Windows 10 – All Apps control