Serverless School

[paulkerton]

Which ones would you recommend?

 

We looked at Arbor but with training costs it worked out more expensive than hosted SIMS, plus we'd upset the secretary who is in (probably) her final year at the school after many many years using SIMS.

 

Our LA also buy Capita licenses so it's part of our budget. I'm not really involved in that side of things though.

 

Also, we use FMS and I couldn't find a suitable alternative to that. Again, we've got staff who have used it for many many years, so we'd only switch if something is considerably better and cheaper.

 

Apart from the copying and pasting hassle, the hosted SIMS works completely fine.

We use Bromcom, and we're really pleased with it.

The thing is, both SIMS .net and FMS are due to be replaced anyway (eventually, let's not get into that can of worms!) so you really should be doing some due dilligence on the replacement of both very soon regardless.

[j224]

We use Bromcom, and we're really pleased with it.

The thing is, both SIMS .net and FMS are due to be replaced anyway (eventually, let's not get into that can of worms!) so you really should be doing some due dilligence on the replacement of both very soon regardless.

Yeah, the hosted SIMS is a stop-gap really. We were going to see how the new SIMS turns out (if it ever arrives) and then weigh up the competition at that point.

 

I'll have a look at Bromcom.

[Primus]

Yeah, the hosted SIMS is a stop-gap really. We were going to see how the new SIMS turns out (if it ever arrives) and then weigh up the competition at that point.

 

I'll have a look at Bromcom.

 

I'm sure by 2030 SIMS will have their new cloud based solution out

[ChrisS]

How are people handling Windows Deployment in the serverless model?

[Norphy]

I think the short answer will be that they're not; they'd be moving onto systems like Intune and Autopilot to provision Windows devices out of the box. Similar to DEP for apple devices.

[chaplic]

I built a MDT solution that joins Azure AD chiefly because I thought deployment of all the apps would take quite a while and not all the laptops had drivers. 2004 seems to have a lot more drivers built in and I've not needed to use it. Just boot from a win10 USB, sign in in, rename it, add it to a couple of groups and let intune do its thing.

[HereIGoAgain2601]

Printing - we use Printix and this links in with our Papercut hosted in Azure

 

Authentication - Just use Azure. We use AD for authentication such as Papercut etc but all machines authenticated to AzureAD

 

 

Forgive me if I’m being a bit simple. How would we authenticate a machine to azure for logging on for example?

 

We use one drive and SharePoint for everything and have AD connect set up with hybrid join. Currently only licensing AD Premium P1 and Intune

 

However we can only authenticate the machines to an onside DC. Where are we going wrong? Would be happy to use the new auto pilot but have to say not found out how we could actually turn it on and get rid of SCCM for imaging.

 

If we were to get rid of on premise AD how does this work?

 

Thanks

[snagrat]

Machines are joined to AzureAD. Users login using Office 365 credentials, which are synced from local AD (AADConnect)

 

For us AutoPilot adds the machine to AzureAD.

 

If you are looking to keep SCCM then you may need a hybrid setup. We didn’t bother and just went full Intune managed.

 

We don’t image machine anymore. Unbox, turn on, let AutoPilot run and then user logs in. Apps then get deployed.

 

If we need to image anything, we just build from Windows 10 USB image.

[HereIGoAgain2601]

Thanks will try and join direct to azure AD have never done this before always done it to on prem

 

Not too fussed about keeping SCCM be easier if we can get intune and azure AD up and running properly.

[HereIGoAgain2601]

What do you guys do in terms of restrictions and policies that would normally be GPO if you are joining straight to Azure?

[snagrat]

You create restrictions via Intune and deploy to Devices/Users

 

Configuration Policies I believe they are called.

 

It is limited compared to GPO but we feel it restricts as much as you really need. For example, hiding c: is possible only via a Powershell script and users can still browse to it via cmd or the address bar. But we don’t mind this as they can’t then save anything there as they are standard users.

[jblackburnHWGA]

Machines are joined to AzureAD. Users login using Office 365 credentials, which are synced from local AD (AADConnect)

 

For us AutoPilot adds the machine to AzureAD.

 

If you are looking to keep SCCM then you may need a hybrid setup. We didn’t bother and just went full Intune managed.

 

We don’t image machine anymore. Unbox, turn on, let AutoPilot run and then user logs in. Apps then get deployed.

 

If we need to image anything, we just build from Windows 10 USB image.

 

Snagrat how do you license Windows 10 for a device that doesn't come with one, like an old laptop? I'm assuming if you only have A3 licenses and you can no longer use VLSC for keys. Are they just accessible from somewhere else like 365 admin console then you do a manual activation with a script?

[snagrat]

We still license through OVS-ES so the MAK keys.

 

The in Intune there is a configuration policy to upgrade the client to EDU SKU and enter the MAK key.

 

As soon as a Pro device joins AzureAD it is updated to EDU and activated