Deployment of Java 8u172 to Windows Staff Service

We shall be deploying Java 8 Update 172 to the Windows Staff Service (Windows 7 and 10) beginning next Tuesday.

The rollout plan is:-

  • ITS and Careers – 25th Sept
  • Professional Services – 8th Oct
  • Schools A-M – 11th Oct
  • All Staff – 17th Oct

The user will be offered the update each day until the installation is successfully completed. For the first two weeks the installation can be postpone if the timing is inconvenient. After two weeks the installation becomes mandatory.

CAN I GET MORE INFORMATION AND HELP?

Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Upgrade of Oracle Java from version 7 to 8 on 22 computers where users formally used Discover Plus

A number of machines have been prevented from updating to Java 8 because the user need to use an obsolete Oracle web application called Discover Plus. The student systems team have confirmed that this application is no longer required and that these machines can now be updated. The machines are mostly in the Academic Registry.

They will be updated from 7am on Friday 3rd August.

CAN I GET MORE INFORMATION AND HELP?

 Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Update to Wireless Drivers on Windows Services

As part of the ongoing Wireless Refresh project, we are updating wireless drivers on the Windows Services (Windows 7 and 10)  to the latest versions available.

The update takes less than 5 minutes. It can be postponed if the timing is inconvenient to the user.

The rollout schedule is as follows:-

  • Professional Services – Tue 22nd May
  • Schools A-M – Fri 25th May
  • All Windows Service –  Thu 31st May

CAN I GET MORE INFORMATION AND HELP?

Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Synaptic drivers on HP laptops on Windows Services

We now intend to complete the update of the Synaptic Touchpad drivers on the Windows Services (Windows 7 and 10). Owing a technical issue this update as withdrawn on 20th February. Since then it has not been possible to resume the update due to sickness, industrial action and annual leave.

This update removes a potential security vulnerability.

The rollout is as follows:-

  • Monday 16th April – Windows 10 laptops & all HP Spectre XT laptops
  • Wednesday 18th April – Windows 7 machines (except HP Spectre XT laptops)

CAN I GET MORE INFORMATION AND HELP?

 Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Change to Office365 Pro Plus activation on Windows staff PCs

The activation method for Office365 Pro Plus (a.k.a. Office 2016) on Windows 7 and Windows 10 staff PCs is being changed.

Using the current method (shared activation), Office applications can only be launched when connected to the internet. We are therefore changing Office365 Pro Plus installation on staff PCs to use user-based activation. This will activate Office in the name of the first user to use it on a PC.

Should this result in a user exceeding their maximum number of Office activations (10), instructions for deactivating computers they no longer used are available at http://www.lboro.ac.uk/services/it/staff/365/faqs/.

PCs which have Visio or Project installed already use this activation method. Lab PCs are not affected by this change.

What will the user see?

The change itself is silent and does not require or cause open Office applications to be closed. The first time a user launches an Office application after the change they will be asked to accept a license agreement. After that, neither that user nor any other user on that PC will see any prompts resulting from this change.

Timescale:

The change is being rolled out with the following schedule:

13/03/18 – IT staff, IT Services and Careers

15/03/18 – Professional Services

20/03/18 – Schools beginning with A – M

22/03/18 – Everyone else

This change has already been made in new Office installations installed during Task Sequences or via Software Center.

CAN I GET MORE INFORMATION AND HELP?

 Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Cyber Essential Group Policy Blocking

Introduction

Due to the Cyber Essential certification, a group policy has been created in order to prevent file types from running from certain locations. This can cause existing installed Programs or new installations to be blocked.

Link: – http://www.lboro.ac.uk/it/staff/specialist/security/cyber/

The group policy is now only linked to Staff

Name: – IT-EUC-Win-Nessus-Staff

If software is already installed or new software is required to install, the following messages may pop-up for the end user….

When the blocked message is displayed, it will write a ‘Warning SoftwareRestrictionPolicies’ to the Event Viewer
e.g.
Access to C:\Users\username\AppData\Local\Temp\7zSD349.tmp\setup-stub.exe has been restricted by your Administrator by location with policy rule {5b564272-ae6a-4dc5-8066-cd68438edece} placed on path C:\Users\ccgjh\AppData\Local\Temp\7z*\*.exe.

You can use this message to identify what file is being blocked and by what rule

File: – C:\Users\username\AppData\Local\Temp\7zSD349.tmp\setup-stub.exe
Restriction: – C:\Users\ccgjh\AppData\Local\Temp\7z*\*.exe

Logging a case

If you experience this issue, identify from the message or event viewer which file is being blocked and add to a case and pass to EUC

Files blocked in the downloads folder

When software is downloaded in to the downloads folder, they are blocked from running. This is to ensure the end-user is confident that they have selected to install software they have downloaded from a 3rd party source.

Moving the file from the downloads folder to the desktop or OneDrive will stop that particular restriction. Please not however that if the installation files require to be run from an additional blocked location such as %localAppData% then the file will still be blocked and a case for EUC will have to be raised.

Update to Synaptic drivers on Windows Services

A researcher has discovered a Keylogger in all versions of the Synaptics Touchpad Driver have been bundled in with HP laptops. The keylogger was turned off by default, but could be turned on with a registry change.

HP have issued new versions for the drivers which have had the keylogger removed. We need to roll these out to the Windows Staff services. Unfortunately, this update requires two reboots: one after the removal of the old drivers and again after the new driver is installed. While this may be annoying to users, it is an unfortunate result of the way Synaptics have written the installer and uninstaller.

The schedule for the rollout is as follows

Mon 22rd Jan – IT Services and Careers

Tue 23rd Jan – All Professional Services

Wed 24th Jan – Professional Services and Schools A-M

Thurs 25th Jan – All W7 and W10 Staff

Please report any issues or queries regarding this to the IT Service Desk on x222333 orIT.Services@lboro.ac.uk.

Changes to Windows 10 and Windows 7 Task Sequences Friday 12th January – Complete

This work has now been completed. All Task Sequences are now available again.

The latest versions of the Windows 10 Task Sequences are as follows:

  • In-Place Upgrade – 1703 v1.2
  • Provisioning – 1703 v1.3
  • Re-Image 1703 v1.5

All Windows 10 and Windows 7 Task Sequences, encompassing staff, labs and In-Place Upgrades, will be updated during the Task Sequence at risk period. It is therefore recommended that you do not image, provision or in-place upgrade any machines at this time.

We will inform you when the work has been completed.

This change is to update the Sassafras client installed in the Task Sequences, as well as some minor housekeeping. The Sassafras client is being upgraded on existing machines by a separate deployment.

Timescale:

12/01/18 – 08:30am-09:30am