User Profile
Bruce_McDonald
Copper Contributor
Joined Jan 17, 2019
User Widgets
Recent Discussions
Re: Automatic Update fails - Task Sequence issue?
Can confirm this does not work. I was on my machine (with WAC on it) and ran this task a few times - none of which actually did anything. The app eventually updated itself but I could not tell when it completed. Also remember seeing a bunch of errors in that script - pointing to files that do no exist on the system drive. I did not keep any screencaps of that - but that PS Task script needs work.1KViews0likes0CommentsChange local account password and WAC stops working?
Have had WAC (latest release) working perfectly for the last 3 weeks on a newly built Windows 10 ENT 20H2 desktop. I am using WAC to manage a small business workgroup environment. Today - I updated my local account password on this machine - and suddenly WAC can no longer fire up at all. When I click the WAC icon on the start menu - I do get the prompt to select an existing Windows Admin Center client certificate followed by this message in MS Edge (91.0.864.37) " You are not authorized to view this page. If you recently updated Windows Admin Center, you may need to restart your browser, and then refresh the page" No amount of restarting the browser, clearing cache or refreshing the page does anything. I checked the certificate - it appears to be valid with no issues. While I have no idea what my local account password has to do with this - clearly something is bent out of shape. Anyone have any idea what is going on or where I might start to look to adjust my credentials for WAC? EDIT: As much as I did not want to - I see that 2103.2 became available and I had to do a reinstall - looks like that did the trick. But JEEZ - what is the deal here? The reinstall wiped all my machines and I need to redo the whole layout. As an "enterprise" tool - I do not see the point to this tool if you cannot easily export and reimport a machine list - it sure would have come in handy in this case. Cheers B1.4KViews0likes0CommentsRe: Do the Group Policy templates actually work for stopping/controlling Microsoft Edge Updates?
azeigler Andy Would also like some insight into what the Edge "About Edge" dialog is doing once that GP/Reg edit you suggested has been placed. During testing this week - I see that the dialog now displays a different, more confusing message: This now indicates that "something" is happening and to come back in a bit and see what it is. When I come back into "About Microsoft Edge" 5 minutes or 10 minutes or any minutes after - the same message appears - yet the version of Edge installed does not change. So - while the GP setting seems to work - it would just be nice if the user was told straight up that the updates are "Managed By your Organization" like this: I also found out today that this message above only appears if Edge is running on a domain connected device. All of my user machines are in a workgroup and do not display this message. Cheers Bruce2.8KViews1like0CommentsRe: Do the Group Policy templates actually work for stopping/controlling Microsoft Edge Updates?
azeigler Andy Appreciate the update - but does the logic apply to a "non-domain" joined machine? I manage several small business layouts and there are no domains present. And - what does this setting do if a user chooses "About Microsoft Edge" from Help and Feedback under the main menu on the right. This action kicks in the upgrade mechanism and I need to close that vector as well. Please advise. Cheers Bruce2.9KViews0likes0CommentsRe: Do the Group Policy templates actually work for stopping/controlling Microsoft Edge Updates?
Fawkes Appreciate the info and update. While I may consider letting Edge update itself in the future - it needs some maturity and historical context before I would consider it. All you need is one dicey update to wreak havoc. Would rather be safe than sorry. Having full control of the app update cadence is well established here and would most certainly apply to vetting major items like the web browser. Hoping that the enterprise team can shed some light on what is happening here so I can sort this out quickly. Should not really be this difficult. By way of contrast - Chrome is super easy to control and has a specific set of policies that just work all of the time. Cheers B2.9KViews1like3CommentsRe: Do the Group Policy templates actually work for stopping/controlling Microsoft Edge Updates?
Deleted Thanks for the update! I am finding it very odd that there is not a lot of guidance on this subject. You would think there would be a simple article somewhere on the web saying "make the following settings and Edge is under control" 🙂 OR - every other admin worldwide has either figured it out OR is letting Edge update itself automatically and not worrying about auto updates. Edge for Business (the browser itself) is very very good - if I can get the update cadence reeled in a bit for my users - that would just about make it perfect. Cheers Bruce3KViews0likes5CommentsDo the Group Policy templates actually work for stopping/controlling Microsoft Edge Updates?
Hello I am current testing MS Edge for Business with the specific goal of controlling the update cadence for the Stable channel. I want complete control on when these updates are applied and ONLY deploy them in a small business environment via WSUS or ManageEngine Desktop Central. I have downloaded the current policy files for Edge Business and studied the update attributes and items found here: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-update-policies#updatedefault But I have some serious concerns about the validity of these group policy templates. I have been unable to determine the exact policy combination to get the updates to stop while continuing to allow Edge's default payloads to be enabled (3 Services and 2 scheduled tasks that appear in Task Scheduler) after a standard install OR an update? I have been testing this a lot for weeks now and in a stock install of Edge for Business - either a new install OR an update to an existing install - the installer adds (AND reactivates if disabled) the following services: It also adds (and re-enables if disabled) the following tasks into Task Scheduler as well: MicrosoftEdgeUpdateTaskMachineCore MicrosoftEdgeUpdateTaskMachineUA These 5 items – if present and enabled – would seem to allow Edge to update itself like it would in a consumer environment - by itself - every hour on the hour regardless of any GP that may be enabled., The only way I have found to exert any control over the updates is to set these policies (Via GPEDIT) And then run a standalone PS script that actually DELETES the scheduled tasks and disables two of the three services. But I should not have to do this much work. Q: Does the group policy (Update policy override setting) actually override/stop the activity of these 3 services and 2 tasks? While I always believed that GP should be the law - I am skeptical if these services and tasks are actually taken out of the equation with the GP (Update Policy Override) enabled. And even with all this extra work - if a user goes and opens the "..." menu in the upper right and then choose Settings->Help and Feedback->About Edge - Edge will then attempt update itself here as well - which I also do not want my users to be able to do. Ideally what I really want is this to display if a user attempts to select "About Edge": Appreciate any update on how to completely control the Edge Update cycle and have the system ignore these tasks and services that it places on the machine during each update. Cheers BruceSolved3.5KViews0likes7Comments
Recent Blog Articles
No content to show