Re: [mssms] MS Office x86 or x64

[Sherry Kissinger]

Same; x86 for the majority.  However, if you have some really deep Excel
experts, they might want Excel 64; I seem to recall some Excel expert
saying how x64 excel is much better for some things they needed to do with
it.

On Wed, Jan 10, 2018 at 8:32 PM, Adam Juelich  wrote:

> The general recommendation is x86 due to Add-ins and such.  If you can
> make x64 work, more power to you, but it's generally not recommended
> because most run into an issue that requires them to pedal back.
>
> On Wed, Jan 10, 2018 at 3:37 PM, Mike Murray  wrote:
>
>> It's been a while since I revisited this, but is 32-bit MS Office still
>> the safer bet in enterprise (instead of 64)?
>>
>>
>>
>>
>>
>> Best Regards,
>>
>>
>>
>> Mike Murray
>>
>> Desktop Engineer/IT Consultant - IT Support Services
>>
>> California State University, Chico
>>
>> 530.898.4357 <(530)%20898-4357>
>> mmur...@csuchico.edu
>>
>>
>>
>> Remember, Chico State will NEVER ask you for your password via email!
>>
>> For more information about recognizing phishing scam emails go to:
>> http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml
>>
>>
>>
>>
>
>


-- 
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blog: http://mnscug.org/blogs/sherry-kissinger

Re: [mssms] MS Office x86 or x64

[Adam Juelich]

The general recommendation is x86 due to Add-ins and such.  If you can make
x64 work, more power to you, but it's generally not recommended because
most run into an issue that requires them to pedal back.

On Wed, Jan 10, 2018 at 3:37 PM, Mike Murray  wrote:

> It's been a while since I revisited this, but is 32-bit MS Office still
> the safer bet in enterprise (instead of 64)?
>
>
>
>
>
> Best Regards,
>
>
>
> Mike Murray
>
> Desktop Engineer/IT Consultant - IT Support Services
>
> California State University, Chico
>
> 530.898.4357 <(530)%20898-4357>
> mmur...@csuchico.edu
>
>
>
> Remember, Chico State will NEVER ask you for your password via email!
>
> For more information about recognizing phishing scam emails go to:
> http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml
>
>
>
>

RE: [mssms] RE: Confused - Spectre / Meltdown

[Aaron Czechowski]

An update. The KB will be revised. The memory management registry keys are for 
enabling protections on server only; they are not required on the client. You 
don't generally need to modify these registry keys on client OS.

Also, we released a configuration baseline with Microsoft-signed content to 
help verify: 
https://gallery.technet.microsoft.com/Speculation-Execution-Side-1483f621
We'll update our blog soon

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Dam, Bryan
Sent: Tuesday, 9 January, 2018 14:45
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Confused - Spectre / Meltdown

My testing this afternoon would seem to confirm that the Memory Management keys 
are not needed on Windows 10.  At least as far as the detection script is to be 
trusted.  The result of the script was the same whether the keys didn't exist 
(the initial state) or if they were set to enabled.  If you specifically set 
them to disabled then the script reported the device vulnerable.


   Bryan

From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on behalf 
of Adam Juelich [acjuel...@gmail.com]
Sent: Tuesday, January 09, 2018 12:06 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Confused - Spectre / Meltdown
Workstation:

  1.  Registry Key set by A/V (or manually set based on A/V guidance)
  2.  Windows Update
  3.  BIOS/Firmware Update from vendor
Server:

  1.  Registry Key set by A/V (or manually set based on A/V guidance)
  2.  Window Update
  3.  Push Registry Keys (2 needed, the third is for Hypver-V Hosts - I believe)

 *   Test and monitor performance impact

  1.  BIOS/Firmware Update from vendor

That is my understanding thus far...

Good thing we have nothing else to do ;-)


On Tue, Jan 9, 2018 at 10:48 AM, Brian Illner 
> wrote:
My understanding was that those keys were just for the ServerOS?

I have a Dell laptop that I completed all the tasks for and it does not have 
the memory management keys and yet it shows as all green in SpeculationControl?

Come on MS, your information is changing hourly as each team contradicts the 
other

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

[cid:image001.jpg@01D38A2A.18D777F0]

Visit 
canalinsurance.com
 for news and information.

[cid:image002.jpg@01D38A2A.18D777F0]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Kent, Mark
Sent: Tuesday, January 9, 2018 11:00 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Confused - Spectre / Meltdown

Yeah I see them at the bottom of 

[mssms] MS Office x86 or x64

[Mike Murray]

It's been a while since I revisited this, but is 32-bit MS Office still the 
safer bet in enterprise (instead of 64)?


Best Regards,

Mike Murray
Desktop Engineer/IT Consultant - IT Support Services
California State University, Chico
530.898.4357
mmur...@csuchico.edu

Remember, Chico State will NEVER ask you for your password via email!
For more information about recognizing phishing scam emails go to: 
http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml

RE: [mssms] What's the best way to deploy BIOS updates with SCCM these days?

[Mike Murray]

Another cool option:

http://www.scconfigmgr.com/2017/06/02/modern-bios-management-using-web-services-during-osd-with-configmgr/

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian Illner
Sent: Wednesday, January 10, 2018 7:02 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?


https://miketerrill.net/2017/09/10/configuration-manager-dynamic-drivers-bios-management-with-total-control-part-1/


BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

[cid:image001.jpg@01D38A07.1C18D530]

Visit canalinsurance.com for news and information.

[cid:image002.jpg@01D38A07.1C18D530]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Hyatt, Dewayne
Sent: Wednesday, January 10, 2018 9:42 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?

I have had reasonable success using the SCUP catalog from our OEM (we are 
mostly Dell). Dell also has an application called Dell Command – Update that 
will handle BIOS updates gracefully on systems with Bitlocker. Maybe Lenovo has 
some similar offerings?

Good luck!

Dewayne

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Whitcher
Sent: Wednesday, January 10, 2018 9:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?

Searching online, I see various posts on deploying bios updates as an 
Application, a package w/ custom script, and as a task sequence.  What's the 
best method for this currently?

I'm working primarily with Lenovo sytems, if that makes a difference.

Steve

RE: [mssms] What's the best way to deploy BIOS updates with SCCM these days?

[Brian Illner]

https://miketerrill.net/2017/09/10/configuration-manager-dynamic-drivers-bios-management-with-total-control-part-1/


BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

[cid:image001.jpg@01D389FA.0545DBD0]

Visit canalinsurance.com for news and information.

[cid:image002.jpg@01D389FA.0545DBD0]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hyatt, Dewayne
Sent: Wednesday, January 10, 2018 9:42 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?

I have had reasonable success using the SCUP catalog from our OEM (we are 
mostly Dell). Dell also has an application called Dell Command – Update that 
will handle BIOS updates gracefully on systems with Bitlocker. Maybe Lenovo has 
some similar offerings?

Good luck!

Dewayne

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Whitcher
Sent: Wednesday, January 10, 2018 9:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?

Searching online, I see various posts on deploying bios updates as an 
Application, a package w/ custom script, and as a task sequence.  What's the 
best method for this currently?

I'm working primarily with Lenovo sytems, if that makes a difference.

Steve

RE: [mssms] What's the best way to deploy BIOS updates with SCCM these days?

[Hyatt, Dewayne]

I have had reasonable success using the SCUP catalog from our OEM (we are 
mostly Dell). Dell also has an application called Dell Command – Update that 
will handle BIOS updates gracefully on systems with Bitlocker. Maybe Lenovo has 
some similar offerings?

Good luck!

Dewayne

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Steve Whitcher
Sent: Wednesday, January 10, 2018 9:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] What's the best way to deploy BIOS updates with SCCM these 
days?

Searching online, I see various posts on deploying bios updates as an 
Application, a package w/ custom script, and as a task sequence.  What's the 
best method for this currently?

I'm working primarily with Lenovo sytems, if that makes a difference.

Steve

[mssms] What's the best way to deploy BIOS updates with SCCM these days?

[Steve Whitcher]

Searching online, I see various posts on deploying bios updates as an
Application, a package w/ custom script, and as a task sequence.  What's
the best method for this currently?

I'm working primarily with Lenovo sytems, if that makes a difference.

Steve