Adsy2010's questions

My organisation has made the leap from 1607 LTS to 1909 Enterprise and without changing any share permissions or GPO's, all custom made non microsoft U-EV templates have stopped working. The main one I am testing with is Chrome currently.

Things I have tried:

• I have changed the schema from 2013A to 2012 in line with the microsoft ones
• I have removed version numbers for the product
• I have rescanned chromes file and registry locations and recreated the U-EV template
• I have explicitly added the encoding line to the XML declaration
• I have checked with a basic microsoft application (notepad) that using the process tags works outside application tags

I reckon this is going to be permissions somewhere down the line but figuring out what is not easy at this stage.

Event viewer gives me cryptic information at best:

Error 1509 - An error occured in the ApplySettingsTemplateCatalogUtility

I can only guess this is part of the issue and there are no other warnings or errors to go with it...

Any ideas or recommendations would be great. I have read somewhere that due to chrome opening multiple instances it might be possible that U-EV is not attached to the right instance?

EDIT:

So I have found that SOME custom applications work fine still so this is looking more like a chrome U-EV issue.

This is the message I receive when it attempts to save ANYTHING for the chrome U-EV policy:

Changes to the user settings cannot upload to the settings storage location 
because an earlier error occurred while downloading the settings package for
the settings location template "GoogleChrome".

So far, this issue occurs on 3 different systems. Windows 10, Server 2012 and Server 2016 (I suspect this is also the case on windows 8 as server 2012 is basically the same thing but not used it).

State:

• GPO enabled for UAC
• GPO set UAC to never notify
• User is in groups BUILTIN\Adminstrators, Domain Admins, Administrators
• Domain Admins are a member of the local machine administrators group

Issue:

Running application by double clicking, for example an MSI file which requires admin priveleges, file attempts to run and fails.

Run application by right clicking and choosing run as administrator, message states administrative priveleges required to run as administrator

The following also does not work: runas /user:DOMAIN\ADMINUSER application

Temporary resolution (not good enough):

Run command prompt as administrator (why this allows to be run as administrator I have no idea). Run file.

If I can find a common application to test with, I will post it in an edit.

I have done a fair amount of searching and have only come up with a single solution which, in my view, is not granular enough.

I am looking for a user configuration GPO for Edge to set homepages based on the users logging in. So far, all I have been able to find is a computer configuration. Is there a reg hack I can use instead to apply this per user rather than machine?

There is a number of switches available under a setting in windows 10 called "Choose which folders appear on Start". I find them very handy but by default only Settings is switched on. I would like to be able to modify this default setting and push it out to other users on the domain via a GPO. I have scoured the administrative templates folder on GP to find a setting that does this in both computer and user configuration but have come up with nothing.

• Is this settable by an administrative template?
• Is it set by a registry entry?
• Is it built into the NTUser.dat registry hive as an entry?

The domain uses roaming profiles and mandatory profiles. Any suggestions as to where I can find them?

Hello to this community!

Recently we have been starting to research and setup a deployment for Windows 10 and use roaming profiles. Mandatory profiles are used for some users.

Our old environment is Windows 7 and we may be running a hybrid environment for a period of time between Windows 7 and Windows 10. The mandatory profiles however for Windows 7 do not login on Windows 10 and vice versa. Is there a way to select a profile based on the operating system on the machine for the user?

It's a single domain environment with 2000 users so testing is key. Any advice or suggestions are welcome too!