If anyone is interest below is the key to rename to remove that "enhancement"
for a clinical use when systems are 24/7. If you use Imprivata you use this on
a type 2 shared system.
'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential
Provider Filters\{CE231077-6891-4336-9D82-7C196AB29F45}'
https://www.mcpvirtualbusinesscard.com/VBCServer/jrose/profile
To: [email protected]
From: [email protected]
Subject: RE: [mssms] RE: windows embedded
Date: Fri, 25 Sep 2015 19:23:18 -0400
We have 300 devices in a clinical setting that is 24/7 using sccm and the write
filters to manage the devices. We had initial issues where we added the sccm
filter to the exclude list which you
can
Not do if your environment is cu3 or higher. These setting were in there prior
to cu3. There are some interesting issues that we cannot send a task sequence
to a thin client and have it function proper. It unlocks normally but locks in
some random timeframe.
We do have some other exclusions we have identified. I can send you all of the
exclusions we use and also some of the sources where I cobbled together what we
have.
I also know how to bypass the account lockout issue. We accept the risk of a
user logging in while its unlocked. Our users are not administrators so there
is no concern there. Feel free to reach out to me if you want more info.
Sent from my Windows Phone
From:
Marable, Mike
Sent:
9/25/2015 9:12 AM
To:
[email protected]
Subject:
[mssms] RE: windows embedded
Yes, we’re getting started with it (W7E) here.
We’ve been told by the hardware vendor that there are “many” issues with SCCM
and the Enhanced Write Filter out of the box and that Microsoft has a number of
SCCM patches for both the server and client sides
that will be needed. The vendor said to open a support case with MS to get
those patches because they are not publicly available.
This is all from the vendor’s mouth. They couldn’t say what the patches were
exactly just that we need to call Microsoft and request them. Nice, right? I
don’t believe our SCCM team has gone to Microsoft
yet about these mysterious patches but I can check.
We are just getting started though, so we’re learning as we go along.
Mike
From: [email protected] [mailto:[email protected]]
On Behalf Of Jimmy Martin
Sent: Friday, September 25, 2015 8:08 AM
To: [email protected]
Subject: [mssms] windows embedded
anyone out there use windows embedded clients (utilizing write filter) with
sccm client in a healthcare setting or other HA type setting? Just looking to
learn through your experience with sccm client and write filter manipulation and
maintenance windows, etc. gotchas…
the part I want to minimize is how when the write filter is disabled and how
the cm client sets the logon screen to being locked in admin only mode…
Jimmy Martin | Engineer | Information
Technology | BMHCC - CORPORATE
Phone: (901) 227-8209 | [email protected]
Opinions expressed above are not necessarily those of Baptist.
This message and any files transmitted with it may contain legally privileged,
confidential, or proprietary information. If you are not the intended recipient
of this message, you are not permitted to use, copy, or forward it, in whole or
in part without
the express consent of the sender. Please notify the sender of the error by
reply email, disregard the foregoing messages, and delete it immediately.
P
Please consider the environment before printing this email...
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be
used for urgent or sensitive issues
