Bart's Weblog

Just a blog…

Archive for the ‘Windows 10’ Category

SearchOCR.admx error after importing Windows 1803 ADMX files

Posted by bartvdw on 2727/0505/2018

After you import Windows 1803 ADMX files, you’ll get an error about ‘searchocr.admx’:

Resource ‘$(string.Win7Only)’ referenced in attribute displayName could not be found.
File %path_sysvol%\…\Policies\PolicyDefinitions\searchocr.admx, line 12, column 69

It appears that the Windows 1803 ADMX files do contain a newer version of the ‘SearchOCR.adml’ file, but not of the ADMX itself, which breaks the functionality. Although editing the ADML file can solve the issue, here some other options:

  • Copy back the ADML from your backup (you backup your ‘PolicyDefintions’ prior updating, right?)
  • Copy the ADML from Windows 1511 ADMX files
  • Install ‘Windows TIFF IFilter’ (TIFFIFilter) on a Windows10/Server 2016 and fetch the ADMX/ADML from there
  • Remove both the ADMX and ADML at once if you haven’t got GPO’s for Windows TIFF Filter

According to a post somewhere there are some other ‘orphaned’ ADML files as well, need to have a closer look at those later.

Microsoft published a KB for this on May 22, 2018.

References

“Resource ‘$(string id=Win7Only)’ referenced in attribute displayName could not be found” error when you open gpedit.msc in Windows
https://support.microsoft.com/en-us/help/4292332/error-when-you-open-gpedit-msc-in-windows

How to fix SearchOCS.ADMX Error after upgrade to Windows 1803 ADMX files
https://www.grouppolicy.biz/2018/05/how-to-fix-searchocs-admx-error-after-upgrade-to-windows-1803-admx-files/

Administrative Templates (.admx) for Windows 10
https://www.microsoft.com/en-us/download/details.aspx?id=48257

Advertisements

Posted in Active Directory, ADMX, GPO, Group Policy, Microsoft, Windows, Windows 10, Windows Server 2016 | Leave a Comment »

Quick post: Windows 10 1511 will no longer receive security updates

Posted by bartvdw on 1111/1010/2017

Update 27/11/2017: Microsoft will be providing updates to address critical and important security issues until April 2018 for Windows 10 1511 builds, but only for Enterprise and Educational SKU’s. See: https://blogs.technet.microsoft.com/windowsitpro/2017/11/14/progressing-windows-as-a-service/

Update 01/05/2018: Included build numbers for 1709 and 1803 releases. Will transform this post to a page shortly. Also updated the Get-ADComputer filtering to include on Windows 10 (build 14393 will also return Windows Server 2016) and the -Property parameters to speed up the search. Corrected build number 1703 (typo).

 

Well that was known well advance, but now it’s really there (10/10/2017): Windows 10 1511 will no longer receive security updates…

MS link: https://support.microsoft.com/en-us/help/4035050/windows-10-version-1511-will-no-longer-receive-security-updates

 

That means, if you haven’t done so yet, it’s advised to check your environment. Normally you already invested time to upgrade these build versions, but I like to double check things now and then.

  1. Your deployment solution (if you haven’t got one… ;-))
  2. Active Directory

 

For the first it’s difficult to collect all possibilities as I mainly work with Symantec Altiris (ITMS), but for AD it’s really straight forward.

 

PowerShell query for all Windows 10 builds before 1607:

Get-ADComputer -Filter {OperatingSystem -like "Windows 10*" -and OperatingSystemVersion -like "10.0 (10*"} -Property Name,OperatingSystem,OperatingSystemVersion | FT Name,OperatingSystem,OperatingSystemVersion -Wrap –Auto

 

Query for all Windows 10 build 1511 specific:

Get-ADComputer -Filter {OperatingSystem -like "Windows 10*" -and OperatingSystemVersion -eq "10.0 (10586)"} -Property Name,OperatingSystem,OperatingSystemVersion | FT Name,OperatingSystem,OperatingSystemVersion -Wrap –Auto

 

Build version translations:

  • 1511 = 10586
  • 1607 = 14393
  • 1703 = 15063
  • 1709 = 16299
  • 1803 = 17134

 

References

Inventorying Computers with AD PowerShell – https://blogs.technet.microsoft.com/askds/2010/02/04/inventorying-computers-with-ad-powershell/

Windows 10 and Windows Server update history – https://support.microsoft.com/en-us/help/4043454

Posted in Active Directory, PowerShell, Windows 10 | Leave a Comment »