User Profile
RyanSteele-CoV
Iron Contributor
Joined 3 years ago
User Widgets
Recent Discussions
Re: ASR rule blocking execution of OneDriveSetup.exe
Hi Surya_Narayana, and thanks for your detailed reply. However, I note that I am no longer seeing the issue where OneDriveSetup.exe is being blocked from running, even when I run it from a location other than the one you shared and the one I set the exclusion on. I am left to assume that someone at Microsoft has resolved the issue that was causing the legitimate OneDriveSetup.exe installer from being blocked (perhaps after seeing my post?)55Views1like0CommentsRe: Reply to a post not showing up
Hi Allen and JillArmourMicrosoft , I'm happy to see you both active in this thread! However, I can't help but notice you are only replying to others who are reporting a similar issue, and I wanted to make sure you are aware that I still haven't had a response. I look forward to hearing from you!49Views0likes3CommentsASR rule blocking execution of OneDriveSetup.exe
A member of our Service Desk team was working with a user to troubleshoot an issue with the OneDrive sync client on their Windows workstation. As part of their troubleshooting, they uninstalled the client with the intent to re-install it, but when they attempted to run OneDriveSetup.exe, they received an error. It turned out that execution was being blocked by the "Block use of copied or impersonated system tools" Attack Surface Reduction rule. I was able to work around the issue by creating an exception in our Attack Surface Reduction Rules policy, but this situation consumed most of my morning and seriously impacted the productivity of one of our users, so I would like to ensure that it does not happen again. Should I report this as a false positive (per https://learn.microsoft.com/en-us/defender-endpoint/troubleshoot-asr#report-a-false-positive-or-false-negative ), or is this policy somehow working as designed? If it is the latter, what is the correct approach for reinstalling the OneDrive sync client on a machine with this ASR rule applied to it?Solved144Views0likes2CommentsRe: Should "Don't be afraid..." be the title for DNS Scavenging in the Windows Server doco?
Yeah, that's pretty weird. Also, why is this "how-to" article in the "troubleshooting" section? If you feel the urge, you can actually propose this change directly through GitHub, as documented here: Edit Microsoft Learn documentation in the browser - Contributor guide | Microsoft Learn You may find, as I did recently, that your pull request goes ignored for months on end, and the contributor assigned to review your request does not provide any updates. If this is the case, that contributor is in violation of the Microsoft Open Source Code of Conduct, which requires all contributors to be welcoming and respectful. You can report this by sending an email to the email address on that page. If your report is accepted, your pull request may be "escalated" to another contributor, who will ensure it actually gets merged. Don't expect any kind of apology or acknowledgement of wrongdoing, however. After reflecting on my recent experience, I realized that my time can be better spent than performing unappreciated free technical writing labour for a trillion-dollar multinational tech company. Don't let that discourage you, though 🙃 Edit: It looks like the Code of Conduct I linked to is an old version. I believe this one is more current: Code of Conduct for Microsoft open source projects60Views2likes1CommentReply to a post not showing up
I made the following post back on April 16: Bulk deploy the Teams auto start setting | Microsoft Community Hub https://techcommunity.microsoft.com/discussions/microsoftteams/bulk-deploy-the-teams-auto-start-setting/4405048 Today I replied to it and marked my reply as the solution. I received the email notification saying "You've marked your answer to a question as the accepted solution", with the link to my reply: Bulk deploy the Teams auto start setting | Microsoft Community Hub https://techcommunity.microsoft.com/discussions/MicrosoftTeams/bulk-deploy-the-teams-auto-start-setting/4405048/replies/4414778 If I click on that second link, with the replies/4414778 on the end, I see my reply. However, if I click on the first link, I see my original post only, and it says "No replies" underneath it. Moreover, if I try to open that second link in an InPrivate window and sign in with a different account, I get an "Access denied" error. Did I do something wrong?Solved292Views2likes14CommentsRe: Bulk deploy the Teams auto start setting
Having not had a response here, I asked the same question in the Windows Office Hours yesterday. Didn't get a response there either. No big surprise. So, I spent a few hours this afternoon trying to figure out if the potential solution I suggested would work. It does, sort of. The problem is it seems to take over 10 minutes for the Teams app to install in the user's profile after they sign in. As a workaround for that, the command I drop in the RunOnce key runs a PowerShell script that checks every 10 seconds to see whether "ms-teams" is a valid command. Once it is, it runs it. Pretty janky, but better than nothing, maybe? Anyway, here is my Intune remediation detection script: $detected = 0 $defaultRunOncePath = 'Default:\Software\Microsoft\Windows\CurrentVersion\RunOnce' if(-not (Get-ProvisionedAppxPackage -Online | Where-Object { $_.DisplayName -eq "MSTeams" })) { Write-Host 'Teams is not installed' Exit 0 } reg 'load' 'HKU\Default' 'C:\Users\Default\NTUSER.DAT' New-PSDrive -Name 'Default' -PSProvider Registry -Root 'HKU\Default' | Out-Null if(-not (Test-Path -Path 'Default:')) { Write-Error 'Could not load default user registry hive' Exit 0 } if ((Get-Item $defaultRunOncePath -ErrorAction Ignore).Property -contains 'ms-teams') { Write-Host 'The ms-teams reg value already exists in the default user RunOnce' $detected = 1 } else { Write-Host 'The ms-teams reg value was not found in the default user RunOnce' } Remove-PSDrive -Name 'Default' [GC]::Collect() reg 'unload' 'HKU\Default' Exit $detected And here's the remediation script: $defaultRunOncePath = 'Default:\Software\Microsoft\Windows\CurrentVersion\RunOnce' $cmd = @" Powershell -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "& { do {Start-Sleep 10} until (Get-Command ms-teams -ErrorAction SilentlyContinue); Start-Process ms-teams }" "@ reg 'load' 'HKU\Default' 'C:\Users\Default\NTUSER.DAT' New-PSDrive -Name 'Default' -PSProvider Registry -Root 'HKU\Default' | Out-Null if(-not (Test-Path -Path 'Default:')) { Write-Error 'Could not load default user registry hive' Exit 0 } if(-not (Test-Path -Path $defaultRunOncePath)) { New-Item -Path $defaultRunOncePath -Force } Set-ItemProperty -Path $defaultRunOncePath -Name 'ms-teams' -Value $cmd Remove-PSDrive -Name 'Default' [GC]::Collect() reg 'unload' 'HKU\Default' Disclaimer: I haven't actually tried deploying this with Intune yet. I've only run the scripts directly on my machine. Use at your own risk, obviously.0Views0likes0CommentsRe: Did expediting the 2024-08 Quality Updates fail for anyone else?
Well, it took eight months, and I had to beg for help on social media for a member of the product team to intercede on my behalf, but I am told this issue is fixed. Edit: I was lied to. The issue is not fixed, at least not on Windows 10.38Views0likes0CommentsRe: Did expediting the 2024-08 Quality Updates fail for anyone else?
Well, it took eight months, and I had to beg for help on social media for a member of the product team to intercede on my behalf, but I am told this issue is fixed. Edit: I was lied to. The issue is not fixed, at least not on Windows 10.181Views0likes1CommentTech Community navigation broken
I'm not sure when this started, but I've discovered that navigating to a previous page with the Back button in the browser is broken in certain scenarios. Steps to reproduce: Sign in to Home | Microsoft Community Hub Click on your avatar and select Profile. You should now be on your profile page Click on a reply to a post in the list of Recent Discussions Click on the Back button in your browser Expected result: You are back at your profile page Actual result: You are still viewing the post you clicked on in step 3. If you click the Back button a second time, you will be taken to the page you were on before you opened the Tech Community home page. Edit: Further testing reveals this happens specifically when you click on a reply to a post in "Recent Discussions".54Views0likes0CommentsRe: The new tech community is user hostile
I don't think anyone has provided similar feedback thus far I hope "nobody is complaining" isn't the metric by which you are judging success. I agree with much of what DanielNiccoli has said, but I'm not as inclined these days to provide what is effectively free UX consulting services to a trillion-dollar company. And to DanielNiccoli : come and join us at https://www.reddit.com/r/entra/. It provides a much better experience, in my opinion, and you may even get a response to your product question from an actual Microsoft employee, which rarely seems to happen here.55Views2likes1CommentBulk deploy the Teams auto start setting
In the blog post announcing the release of the TeamsBootstrapper.exe utility for deploying the New Teams client for Windows, it references an upcoming "auto start support" feature where the utility could be used to configure Teams to automatically launch when new users sign in for the first time. It's been over a year and there has been no update on this. I posted a comment on the blog post last week but there has been no response. Has this new feature been abandoned? Is there another supported way to do this? (Can I just mount C:\Users\Default\NTUSER.DAT and throw a value in Software\Microsoft\Windows\CurrentVersion\RunOnce pointing to C:\Program Files\WindowsApps\MSTeams_25072.1609.3541.7814_x64__8wekyb3d8bbwe\ms-teams.exe ?)SolvedRe: OneNote vs. OneNote for Windows 10
Still trying to get used to OneNote M365. I've been using the "History > Recent Edits > All pages sorted by date" option (three clicks! ugh!) in place of the missing Recent Notes view. Today, however, it's completely blank. On a hunch, I went in and had a look at the Application log in Event Viewer and sure enough, the Windows Search index got corrupted and is being rebuilt. Recent Notes and Search in OneNote for Windows 10 is still working just fine, of course. Microsoft, if you're listening: please reconsider retiring OneNote for Windows 10. 😥56Views0likes0CommentsOneNote vs. OneNote for Windows 10
I received an email this morning reminding me of the impending end of support for the OneNote for Windows 10 app. As I do periodically when I am reminded about this, I launched the OneNote on Windows (OneNote M365) app and lamented how much less user friendly it is than its doomed cousin. The lack of a "Recent Notes" view is my biggest gripe, but the awkward "pop-over" search comes a close second. The tabs and search result are on an ugly grey background and everything is just slightly too small to read comfortably. Am I the only one?Re: Define Patch Approvals in WSUS but pull patches from Windows Update (Internet)
So is there a way for us to continue to define the approved patches/metadata via WSUS but have the system pull the patches files from the internet (Windows Update) source? Perhaps this is possible with MECM? Yes, if you are managing updates with MECM, it is possible to have your endpoints download the content from Microsoft Update. See the "If software updates are not available on distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates" setting documented at Manually deploy software updates - Configuration Manager | Microsoft Learn. That being said, I would recommend taking a closer look at Windows Update for Business. You can use it alongside Software Updates in MECM. I think you can even use it alongside WSUS by configuring a Scan Source policy: Use Windows Update for Business and Windows Server Update Services (WSUS) together | Microsoft Learn85Views1like0Comments
Recent Blog Articles
No content to show