User Profile
AndrewT
Iron Contributor
Joined Sep 24, 2018
User Widgets
Recent Discussions
Re: Security Baseline Profile – Internet Explorer Settings
The IE policies would still affect Edge if the website is running in IE mode, as well as any apps you have that might be using the WebBrowser Control which is also based on IE Another area which I am pretty sure where they are used by Edge more directly is for Security Zones which are still used in Edge for some specific scenarios. There is a good blog post here that talks about it - https://textslashplain.com/2020/01/30/security-zones-in-edge/ I finished working on a Policy refresh for 24H2 for my environment. I decided to implement the Internet Explorer Baseline Policies as per the template as a precaution, but also use the Edge Policies to Disable IE mode (since fortunately we dont have any sites that require it in our environment)161Views1like1CommentRe: Updating curl.exe on Windows servers
PalmerEldritch Daniel Stenberg the main developer behind cURL has addressed this in a blog post here - https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl-exe/ The TLDR is that manually modifying files inside the system folder is not supported and may cause future updates to fail. Microsoft has supposably shipped an updated cURL.exe in the April 2023 Cumulative. Update - are you still seeing a vulnerable version with the latest updates installed?76KViews0likes4CommentsRe: WUfB Notification Log files
ThanksDavid_Guyer We run the same policies on all our other PCs (including my main PC) they don't experience the issues. I am pretty confident the policies and WUfB are working as expected and the user is not remembering they got the notifications. Or maybe we have a a full-screen app in that environment that could be interfering with them. Being able to look at the log files would give a more definitive way for me to be able to prove which notifications they actually got. I did some extra research and found this article which describes some additional ETL log files to look at. I will figure out how to look through them for more info, and if I get stuck will log a support case 👍3KViews0likes0CommentsWUfB Notification Log files
Hi Team In the middle of last year I moved my company to WUfB and it has been an overwhelming positive experience - we're seeing much improved update compliance and a better user experience! From time to time I do have users claiming that they are getting rebooted without warning. Are there any logs on the Windows 10 side that show what notifications were shown to the user and what action they clicked? When these things happen I want to be able to built up a timeline of the notifications that they should of seen and at what time to help me understand what the issue might be. AndrewSolved3KViews1like3CommentsRe: Reserve Manager enabled with Low Disk Space block
Thanks for replying Aria. I didn't submit this issue anywhere else. 11% of our Windows 10 fleet are still showing as blocked by this safeguard hold for the 1909 to 20H2 upgrade according to Update Insights. I am just working through upgrading our other machines for now. If the hold is still in place in a couple of months once I'm finished I can still work around the issue by disabling reserved storage which should release the hold. It still would be great to have it listed on the release health dashboard!5.1KViews0likes0CommentsReserve Manager enabled with Low Disk Space block
Hi Servicing Gurus We are starting to plan to upgrade our fleet from 1909 to 20H2 using WUfB. From the Log Analytics I am finding the a decent number of our workstations are blocked with safeguard hold ID 29745406. Looking through the Appraiser Data, this seems to be caused by the system drive have less than 30GB free and SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager\PassedPolicy being set to 1 (meaning that reserved storage is enabled). Other computers that we have piloted the upgrade to that have low free disk have prompted the user to perform a disk cleanup or connect an external hard drive, but with this block they are not offered the update at all. I have enabled the "Disable safeguards for Feature Updates" policy on a test machine and it was able to complete the upgrade fine without any apparent issue. I thought one of the major benefits of reserved storage would be the ability for Feature Updates to be able to be work more successfully because it could reclaim disk space from the reserved storage. But it seems the way the block is set up it is preventing it completely? Is there an issue with Reserved Storage and upgrades at the moment that Microsoft is currently blocking the upgrades for? Or is there a problem here? Thanks5.4KViews0likes2CommentsRe: how to find record dns in zone not use ?
You need to enable DNS Debug logging, this will log all DNS queries to a text file, you can then look through the file to see if the record was queried by any client https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc776361(v=ws.10)?redirectedfrom=MSDN797Views0likes0Comments
Recent Blog Articles
No content to show