Appx deployment service

[Wright, John M]

It looks like MS is pushing a change to change the Appx service start type to automatic.  Makes me think I should already be thinking of a GPO to push it back to manual/triggered.

 

If anyone has thoughts on this, I’d like to hear them.

 

https://www.neowin.net/news/microsoft-makes-potential-cpu-ram-disk-hogging-feature-default-on-windows-11-25h2-24h2/

 

--

John Wright

IT Support Specialist

1800 Old Bluegrass Avenue, Louisville, KY 40215

502.708.9953

Please submit IT requests to Hazelwoo...@bluegrass.org

24 Hour Helpline 1.800.928.8000

  

CONFIDENTIALITY NOTICE: This message contains confidential information and is intended only for the individual(s) addressed in the message. If you are not the named addressee, you should not disseminate, distribute, or copy this e-mail. If you are not the intended recipient, you are notified that disclosing, distributing, or copying this e-mail is strictly prohibited.

 

[Hammer, Erich F]

We have long disabled Location Services via GPO for privacy reasons. Quite recently, I've gotten reports that some USB printers are suddenly showing as "offline", and those users are getting messages about needing to enable location services when they try to connect to the printer.

I haven't started troubleshooting, but it seems very strange the multiple folks with USB printers would report that they aren't working AND that they are getting location services messages. Does Win11 want/require Location Services be enable to print to a local, USB printer? Did this change recently? If so, is there any way around it? (and WHY would they do that?!)

Thanks,
Erich

[Philip Elder]

Big Brother wants to track usage now.

Philip Elder MCTS
Senior Technical Architect
Microsoft High Availability MVP
MPECS Inc.
E-mail: Phili...@mpecsinc.ca
Phone: +1 (780) 458-2028
Web: www.mpecsinc.com
Blog: blog.mpecsinc.com
Twitter: Twitter.com/MPECSInc
Skype: MPECSInc.

Please note: Although we may sometimes respond to email, text and phone calls instantly at all hours of the day, our regular business hours are 8:00 AM - 5:00 PM, Monday thru Friday.

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/LV3PR04MB91687EB9595C5F5A6817356DCC9EA%40LV3PR04MB9168.namprd04.prod.outlook.com.

[Counts CPA Subscriptions]

My concern would be tracking content printing.

Jim

James C. Counts II, CPA CTFA
P.O. Box 369, Hemet, CA 92546-0369
Cell Phone: 951.306.7882
Fax: No Fax
Email: ja...@countscpa.com
Not for mail (trouble with porch
Pirates) but can be used
for delivery services only:
655 Deardorff Dr
Hemet, CA 92544

Editor of TaxTalkNews
Group Email Addresses
• Post: TaxTa...@groups.io
• Subscribe: TaxTalkNew...@groups.io

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/f746300892b84a70bef32a9fc34cca72%40MPECSInc.Ca.

[Philip Elder]

We'd set up a block at the edge/router for the group of IPs that get assigned to printers. No way they're getting out. Period.

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/BYAPR06MB41816F8ECD02DF6C8743BAA3B39FA%40BYAPR06MB4181.namprd06.prod.outlook.com.

[Sharon Tirosh]

Wouldn’t you need to block the PC that the drivers are installed on?
These are USB connected printers that want the PC to enable location services.

Sharon

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/476d962ac4224304a99246ce60558b52%40MPECSInc.Ca.

[James Iversen]

Legislatures across the country are requiring 3-d printers phone home for updates and compliance with statutes. Like this one in NY https://www.governor.ny.gov/news/keeping-new-yorkers-safe-governor-hochul-announces-nation-leading-proposals-crack-down-3d#:~:text=Enhancing%20New%20York's%20Nation%20Leading%20Gun%20Laws&text=Create%20a%20first%2Din%2Dthe,creating%20firearms%20and%20component%20parts.

Why should we think regular printers won’t be used to monitor for instructions on how to assemble contraband? Will eventually require some kind of token to print anything. It’s not just about the greenies preventing deforestation. 

Sent from my iPhone

On Jan 30, 2026, at 6:56 PM, Philip Elder <Phili...@mpecsinc.ca> wrote:

We'd set up a block at the edge/router for the group of IPs that get assigned to printers. No way they're getting out. Period.

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/476d962ac4224304a99246ce60558b52%40MPECSInc.Ca.

[Philip Elder]

We don't plug printers in via USB we've never had any real good experience when set up that way. We always set up a network version of the printer.

We could probably do a pCAP to see if there is shenanigans going on there but that's not really high on the To Do List right now.

At this point in the game, one should assume (yeah, yeah) that _all_ devices are evil/hostile and set up accordingly.

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/A6BA5FAFF106864C82363A457BE9522F026574B027%40SISSBS01.sis.local.

[Markus Klocker]

Do you use the installer or the plain driver?
I only saw that issue with the installer!
We have location disabled too and with drivers only no problem so far
except local admins complaining :).

    Markus

[Philip Elder]

We only use the brief driver setup for all printers.

Also, NOTE: Make sure to use the V4 driver!

If the printer is too old to have a V4 driver then run its print server, and any other V3 based printers, in a separate VM.

For Print Spooler stability I highly recommend not mixing V3 and V4 drivers especially for Remote Desktop farms.

Philip Elder MCTS
Senior Technical Architect
Microsoft High Availability MVP
MPECS Inc.
E-mail: Phili...@mpecsinc.ca
Phone: +1 (780) 458-2028
Web: www.mpecsinc.com
Blog: blog.mpecsinc.com
Twitter: Twitter.com/MPECSInc
Skype: MPECSInc.

Please note: Although we may sometimes respond to email, text and phone calls instantly at all hours of the day, our regular business hours are 8:00 AM - 5:00 PM, Monday thru Friday.


-----Original Message-----

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/80260990-c177-409d-b552-71a002b65b03%40univie.ac.at.