This message was deleted.
# _general
s
This message was deleted.
n
I use a local GPO in my image (OS layer) to defer feature updates for as long as possible; I can provide the exact one tomorrow. Furthermore, I use the old school Microsoft troubleshooter app that lets you hide specific Windows Updates. Works perfectly in case you're really far behind on your build, as well as when you want to prevent specific updates and drivers from installing. Used it a few weeks ago when somebody mentioned XenServer drivers showing up.
And again, I can provide that tomorrow. MS pulled that app years ago from their site.
r
Ok Nick. Thanks man.
n
LTSC FTW! I run 1809 LTSC for my pooled desktops. My users don't need cortana / app store crap. As a side note, I remember reading years ago (although it may have changed) that both Citrix / VMW rec'd LTSC for desktops. Server OS is LTSC essentially so why MS says to not use it on anything buy an ATM or medical equipment is beyond me.
r
Yea, That is what I am used to. I will have to talk to them and see if it's an option. I know 21h2 has a new LTSC. But for now, I have to roll with what they have.
This SAC EOL dates are crazy. The OS is only good for like a year or so if that.
n
i got a basic gold image for 21h2, however the kms keys are all jacked up - see here----https://www.reddit.com/r/sysadmin/comments/plq1hw/heads_up_windows_server_2022_kms_host_keys_seem/
@Ray Davis yea SAC is designed to keep VDI engineers employed and busy. It's nuts
r
On the reddit post, I seen the same thing last week. I assumed someone didn't pay the bill or it was to new. But good to know what I seen wasn't just me.
n
Definitely stick with the fall updates - longer support.
r
Ok thanks man.
n
From a build perspective using SAC should make no odds if it's automated (not sure if it is). If they are non-persistent, automatic Windows's updates should be turned off. It's even more important to automate as much of the Gold Build, so when the Feature Update drops you rebuild the Gold Image. Autumn (I'm English) Enterprise edition gives you 30mths worth of support. Oh and Microsoft don't support O365 (ProPlus) on the LTSC
👍 1
n
office 2021 ltsc is supported on w10 21h2 using xml based setup scripts though.
👍 1
n
@Ray Davis: Here's that GPO I mentioned:
👍 1
And for blocking specific updates:
👍 1
You can hide updates, as well as show hidden updates (in case you wanted to install them later).
👍 1
r
Thanks guys for all the feedback and help. I'm not sure if it's automated or not. Starting a new position and preparing myself from going from one environment to another. Thanks Nick for the screenshot and the tool. I have another question. Typically I run citrix optimizer on LTSC and some extra tuning in the image. But being they are SAC I was curious if you guy apply the MS VDI best practices to your golden images? I may be over thinking it. I know the MS optimizer that came out will set all this in the golden image. My thought was to test the MS one , then come back and see what Citrix Optimizer says. Then Apply both if needed. Link is here that goes over it. https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-vdi-recommendations
The SAC seems overly bloated and basically I'm trying to understand all the running requirements to get it to run smooth. I may be over thinking it a lot. If so set me straight lol.
@Nick Panaccio That tool is brilliant.
n
Personally, I would stick with the citrix optimizer. all changes are blessed by MS I was told by martin at a cugc meeting. I've heard the others the vmware osot is way too aggressive.
r
Yea, I agree. That is what I use a lot. I just was comparing the Link to CTX Optimizer and see some differences. I will play around in my lab and just poke around at it. I totally forgot there is 2 Nicks on this thread.
Automation is the next thing I am going to look at. If the new place will allow packer that is what I will start with. The building stuff manually is for the birds.
n
Use the Citrix one, the MS one breaks things from memory with some weird error related to a language service.
If you are running the Win10 Multi-session they've a few optimations built in to cope with the in built UWP (if you don't remove them that is) at login.
n
Yeah, I stick with Citrix Optimizer. MS has a lot of settings in their VDI guide that just seem outdated, like ensuring that cameras and mics are disabled.
This thread seemed to have broken my "Threads" section in Slack, crashes every time I go to it now. Thanks Ray!
n
It broke mine too @Nick Panaccio had to force close slack to get it back
n
Didn't work for me the first time, then I saw Slack outages trending on Twitter. Now it's back up without me rebooting the app.
👍 1
r
Ok, thanks for the solid advice guys. I feel like such a noob on the SAC side. Almost like I have to re-learn windows lol.
I get more from this community than ever. Thank you very much.
👍 2