Update to the Windows 10 Staff Task Sequence on 25/01/19

The Windows 10 Staff Task Sequences will be updated on Friday 25th January. The Task Sequence will be at risk during this period. It is therefore recommended that you do not attempt to image any Windows 10 staff computers at this time.

The following change will be made….

Add Step to reset USB Hubs just before reboot out of WinPE. This is necessary if the Dell DA300 USB-C Mobile Adapter is being used for imaging. The step is only applied to when imaging the following Dell devices:

 Latitude 3390
 Latitude 5290
 XPS 13 9365
 XPS 13 9370

Please note we do not advise imaging computers via a docking station. For the listed machines we recommend using the Dell DA200 or DA300 Adapters.

The McAfee Agent will also be updated to version 5.5.0.447 at the same time.

TIMESCALE

25/01/19 – 08:00am-10:00 am

CAN I GET MORE INFORMATION AND HELP?
Please contact our Service Desk at it.services@lboro.ac.uk for more information

Configuration Manager Unavailable – 19/12/2018 AM

The RAID Controller battery in sccm-lu1-store has failed and needs replacing. This server contains all the source files for software, images, software updates etc. At present this is causing slower write speeds from the software source location to the Distribution Points.
We advise not imaging or downloading applications from the Software Centre during this time.

If the time scales change or we encounter any problems after testing then a further correspondence will be sent out.

Timescale: – 19/12/2018 11:00am 13:00pm approx.

CAN I GET MORE INFORMATION AND HELP?

Please contact our Service Desk at it.services@lboro.ac.uk for more information.

November 2018 Task Sequence Media

The new November 2018 Task Sequence media has been created and can be found in the following location: –
\\ws2.lboro.ac.uk\DesktopResource\Windows\TaskSequenceMedia\ TS_Media_Nov18.zip

Documentation – “\\ws2.lboro.ac.uk\DesktopResource\Windows\TaskSequenceMedia\Create an SCCM WinPE disk or USB Flash Drive.docx”

Existing USB media will have to be updated. PXE imaging will work as normal.

CAN I GET MORE INFORMATION AND HELP?

Please contact our Service Desk at it.services@lboro.ac.uk for more information.

Cyber Essential Group Policy Blocking

Introduction

Due to the Cyber Essential certification, a group policy has been created in order to prevent file types from running from certain locations. This can cause existing installed Programs or new installations to be blocked.

Link: – http://www.lboro.ac.uk/it/staff/specialist/security/cyber/

The group policy is now only linked to Staff

Name: – IT-EUC-Win-Nessus-Staff

If software is already installed or new software is required to install, the following messages may pop-up for the end user….

When the blocked message is displayed, it will write a ‘Warning SoftwareRestrictionPolicies’ to the Event Viewer
e.g.
Access to C:\Users\username\AppData\Local\Temp\7zSD349.tmp\setup-stub.exe has been restricted by your Administrator by location with policy rule {5b564272-ae6a-4dc5-8066-cd68438edece} placed on path C:\Users\ccgjh\AppData\Local\Temp\7z*\*.exe.

You can use this message to identify what file is being blocked and by what rule

File: – C:\Users\username\AppData\Local\Temp\7zSD349.tmp\setup-stub.exe
Restriction: – C:\Users\ccgjh\AppData\Local\Temp\7z*\*.exe

Logging a case

If you experience this issue, identify from the message or event viewer which file is being blocked and add to a case and pass to EUC

Files blocked in the downloads folder

When software is downloaded in to the downloads folder, they are blocked from running. This is to ensure the end-user is confident that they have selected to install software they have downloaded from a 3rd party source.

Moving the file from the downloads folder to the desktop or OneDrive will stop that particular restriction. Please not however that if the installation files require to be run from an additional blocked location such as %localAppData% then the file will still be blocked and a case for EUC will have to be raised.

Upgrade Configuration Manager Current Branch to 1710

Reminder of Configuration Manager Upgrade to 1710 on 01/2 Februray 2018 inclusive.

Configuration Manager will be unavailable due to an upgrade to version 1710. This upgrade is to resolve current issues and add additional functionality.

During this time, you will not be able to provision, reimage or upgrade PCs. You may not be able to install software from the Software Centre or receive new software or patches.

After the upgrade the service will need to be tested and then you will have to re-create any Task Sequence media. I will send out a further correspondence once the upgrade has been successful.

Adobe Acrobat DC Staff Deployment

Adobe Acrobat DC will be deployed across campus following the schedule below. The deployment is mandatory as Adobe Acrobat DC was previously deployed as a postponable deployment.

Deployment dates.

21/09/2016 IT Services
26/09/2016 Support
30/09/2016 External
05/10/2016 BE / DS / SR / PS / SC / AE
10/10/2016 All Staff

This mandatory installation can take up to 15 minutes to install.

Imaging the NUCS

If you are imaging the NUCs and are not presented with the password prompt before the list of Task Sequences then please re-format your USB Drive and copy over the Task Sequence files again.

If you notice that the image gets stuck on the setup Windowsfirst run stage then reboot the PC and the Task Sequence will continue.

Live Task Sequence Change

The Live Task Sequence has now been updated to allow remote reimaging of staff computers on the Windows 7 service. For further information on this new facility please refer to the Knowledge Base Article KB0011192. We welcome any feedback on this facility via the Service Desk.

SCCM-Distro5 almost full

Please delete any intermediary images that you no longer require, especially those distributed via sccm-distro5. The images volume on distro5 is over 95% full and this may cause problems to those members of IT staff who are still completing their images.

Thank you.