How do you deal with supply Teachers on Teams.

[Rob_D]

Morning Guys,

 

Like a lot of people, we've moved into using Office 365 and Teams to deliver teaching and are hoping to move into using Office 365 more in the future. But the issue with Supply teachers needing Teams access is starting to come up.

So, like the title says, how do you handle setting them up. Given we don't normally know about them until the last minute, is there any way around us having to go in manually give them access to all their classes? Or any way to streamline the process?

 

Thanks!

[Oaktech]

Unsure if you're a secondary, but we have a yeargroup supply accounts for our primary which is given out to the incoming supply by reception which has access to all the classes in a year and the passwords are changed daily at 5pm by my technician to something generated by dinopass and re-notified to reception. We're trying to find a way to change the password on a schedule but we we haven't tried that hard so far.

[Rob_D]

Unsure if you're a secondary, but we have a yeargroup supply accounts for our primary which is given out to the incoming supply by reception which has access to all the classes in a year and the passwords are changed daily at 5pm by my technician to something generated by dinopass and re-notified to reception. We're trying to find a way to change the password on a schedule but we we haven't tried that hard so far.

 

Thanks for getting back to me.FYI, we're a reasonably large secondary (1500 students).

Historically we've set up unique accounts for all the supplies that come in for security/auditing reasons, but it's something to think about.

[Davit2005]

Unsure if you're a secondary, but we have a yeargroup supply accounts for our primary which is given out to the incoming supply by reception which has access to all the classes in a year and the passwords are changed daily at 5pm by my technician to something generated by dinopass and re-notified to reception. We're trying to find a way to change the password on a schedule but we we haven't tried that hard so far.

 

If they are AD accounts you could prob do a PowerShell script on a schedule to change the password to a random password then email that password to reception.

 

Even if they are jus accounts based in Azure AD should still be possible.

Edited June 23, 2021 by Davit2005

[Oaktech]

If they are AD accounts you could prob do a PowerShell script on a schedule to change the password to a random password then email that password to reception.

 

Even if they are jus accounts based in Azure AD should still be possible.

 

 

The sticking point is the Azure acounts.

 

The on prem AD ones are done, as you say, automatically via 2 powershell scripts. One which which actually changes them and emails it to the office staff, and one that generates a TXT file for the first one with the password based on the DinoPass simple API and an uncommon date format.

[Oaktech]

The sticking point is the Azure acounts.

 

The on prem AD ones are done, as you say, automatically via 2 powershell scripts. One which which actually changes them and emails it to the office staff, and one that generates a TXT file for the first one with the password based on the DinoPass simple API and an uncommon date format.

 

And while we've been talking I've squished the 2 scripts into one... Might be useful as a start point for someone. I'm having issues calling the Azure AD module to get something like this to work in't cloud.

 

### Generates a request via the DinoPass API for a random simple password
$Password_Part1 = Invoke-WebRequest -Uri https://www.dinopass.com/password/simple | Select-Object -ExpandProperty content
### Generates a date in day-2digitmonth-4digityear
$Password_Part2 = Get-Date -format "dd-MM-yyyy"
### Concatenates the 2 into one variable
$Password_Complete ="$Password_Part1$Password_Part2"
### Writes the output to text file
$Password_Complete | Out-File C:\YourFileLocation\value.txt
### Resets the specified account password to the value contained within $Password_Complete
Set-ADAccountPassword -Identity UserName -Reset -NewPassword (ConvertTo-SecureString -AsPlainText "$Password_Complete" -Force)
### Emails the new password
### Email address to send from 
$username = "[email protected]"
### Email Password
$Password = "ComplexEmailPassword"
### Converts plaintext password above to a secure string
$Password = ConvertTo-SecureString -String $Password -AsPlainText -Force
### Creates a credential object to call later
$cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username, $Password
### Specifies email subject
$subject = 'Alert: New Password'
### Specifies Email body
$body = $Password_Complete

### Splatting with Hash Table

$hash = @{

To = '[email protected]'
From = $username
Subject = $subject
Body = $body
BodyAsHtml = $true
SmtpServer = 'smtp.office365.com'
UseSSL = $true
Credential = $cred
Port = 587

}

### Sends Mail
Send-MailMessage @hash -WarningAction Ignore

[Jcx500]

We have locked down cover accounts per year group Edited June 23, 2021 by Jcx500