Forum Widgets
Latest Discussions
Deploy 802.1x Policies to Windows 10 Devices using traditional management tools
Hi Folks, We've been asked to implement 802.1x endpoint policies to Windows 10 devices using traditional tools such as AD, GPO etc.. Has anyone achieved this and is it a possibility? Thanks and much appreciate any helpful information!Recurring Work or School Account Sign-In Error Notifications (Hybrid-Joined Devices)
We're seeing a recurring issue where users receive frequent notifications from Windows saying, “There is a problem with your work or school account”, prompting them to sign in. However, when they attempt to sign in to resolve it, the process fails—despite everything else seemingly working fine (e.g., no impact on Teams, Outlook, or other M365 services). All affected devices are hybrid Azure AD-joined (on-prem AD + Entra ID). This has been occurring across both Windows 10 and Windows 11 machines, including recent test deployments. Using dsregcmd /status, I noticed the following in the logs: SSO: Invalid Grant AADSTS7000022: VSM Binding Key missing from Ticket Granting Ticket Request Additionally, Azure AD Connect was found to be running an outdated version, which might be a factor—but I’m not certain if this is the root cause. Has anyone encountered this before or found a reliable fix? Appreciate any insight![On demand] Let's talk Windows and Intune
Microsoft Technical Takeoff started off with candid, unique insights on today's device, update, security, and management landscape. Watch Let's talk Windows and Intune – now on demand – and join the conversation at https://aka.ms/LetsTalkWindowsAndIntune. For more free technical skilling on the latest in Windows, Windows in the cloud, and Microsoft Intune, view the full Microsoft Technical Takeoff session list.Problematic, uninstallable program? Here's how to break it
Let's say a program aint doing ya much good, and is actually working against you. You try to uninstall it, but for some reason, you can't! Never fear, here's the solution. Find the program's EXE file. Open it in Notepad. Press Control + A to select all the text, and then press Backspace. This will destroy the EXE and render it unopenable. Press Control + S to save it. Check to make sure the EXE is for sure busted by attempting to open it (In File Explorer, double-click the EXE, or right-click and select "Open"). If it worked, it should say this: If it does, you're done! 👍 Has this helped you? Leave a comment!Getting to the bottom of it: Remote Computer Management\Storage\Disk Management - SOLVED
I just wanted to share a solution to a challenging, poorly documented issue (as far as my research found). 3 parts to allow managing a remote system with Computer Management\Storage\Disk Management: On both systems (one you are trying to manage, and the one you are on), enable firewall rule group Remote Volume Access (I turned on rules only for Domain profile) On both systems (again, one you are using and your target system) need to have Virtual Disk Service started (or at least set to Automatic Startup, I believe default is Manual) On the system YOU (the manager) are on, you probably need to ensure that somehow, someway, the TARGET COMPUTER ACCOUNT (it's DOMAIN computer account) has, on YOUR SYSTEM, the User Logon Right Access this computer from the network. I achieved this by adding the target system to my local system's Remote Desktop Users group, because that and Administrators are the only two groups granted this URA by the "MSFT Windows 10 2020 - Computer" baseline GPO. BOOM! Totally works to a remote system now. In my case, both systems are Windows 10 2004. You probably wouldn't want to add "Domain Computers" permanently to all your IT Techs' PCs as Remote Desktop Users, but you could add them temporarily just when you need to remote disk manage something for a ticket, then remove it. Cheers!
Windows 11 Enterprise 24H2 (64 bits) show up as "Windows 10 Enterprise 2009" release
Hi Everyone Actually, I have issue with Windows 11 Enterprise 24H2 (64 bits) Display 2009 windows 10 from Version reg key from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion I Hope there's Hotfix for this issue because am suffering with other system monitoring my EnvironmentWindows 10 21H2 and Windows 11 21H2 both show up as "2009" release
I'm not real sure where to post this, so will try here. I have noticed that for both Windows 10 - 21H2 and Windows 11 - 21H2, the "ReleaseID" value in the Registry is incorrectly shown as "2009". (We are using Windows 10/11 Enterprise.) This is located at this key in the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion We rely on inventorying this value to determine which computers have which "Feature Update" installed, and therefore, which computers we still need to update. Has Microsoft migrated away from using this value to indicate which Feature Update is installed? Do we need to change our approach to look at the "DisplayVersion" instead of the "ReleaseID"? Or some other value in the registry? Also, Windows 11 has another issue. In the same registry key location, the "ProductName" value is listed as "Windows 10 Enterprise", which of course is incorrect. Are others seeing these same results with these items? Anyone heard if Microsoft has plans to fix these issues?
Windows Servers Uptime Report using PowerShell
Hi Folks, A customer has mix of Windows servers (2012, 2016, 2019) on-premises environment. Customer needs to generate a report via PowerShell about the availability of servers. During my search I found a script on this link and its modified version is attached. Please note, this script reads windows events and based on that produces result. There is a problem where I need help, this script doesn't run against list of servers via a CSV file or a text file and we suspect it is not producing correct result. Can somebody please review this script and help us with the right syntax or what is missing here? Thanks in advance.
Missing a GPO setting for Notifications
I'm looking for GPO setting that will prevent our users from turning off Notifications. The requirement is that notifications are Enabled and the user cannot turn this off. At the moment they can turn it on and off at will and I cannot find a setting to prevent this. the only one I have found is to turn it off [Turn off toast notifications] which is not desired. Am I missing something or does this need to be a feature request?
WuFB GPO options missing
I'm running into a problem where the Windows Update for Business options do not appear under Windows Update in the GPME. I just installed the Windows 11 24H2 ADMX files today on our Central Store but still don't see them. But according to this MS article, it should still be an option? https://learn.microsoft.com/en-us/windows/deployment/update/waas-wufb-group-policy
