psydii

We have a department that works that way, because "it makes sense for them". They hate it and everything OneDrive.

I rejigged the order of sentences in the above before posting, the whole lot should have be under the caveat “it seems to me”. I think I did read about how it worked in more detail once but I can’t find it now. We have seating plans for all lessons. This works well for Storage Sense as all users log on to ‘their’ machine once a week/two weeks. I’m not sure we’d have got away with it at all if not for that.

In my experience, the control of storage sense is not granular. Anecdotally: If you open an file it resets the timer on that file to be dehydrated. Also Storage Sense only dehydrates the files of the currently logged on user, so if they don't have a lot of large files to ofload, not much difference will be made to the free space. I believe it only kicks in when it feels the machine is getting low on space, even if its set to run once a day. I see our Photography machines running for months with very little free diskspace - the cycle of students through them seems to be just enough to hold an equilibrium... but unfortunately eventually too many students have too many recent large files and not enough older files to dehydrate and wipe/reload is the fastest way to recover. (usually happens on average every 12 months - but some machines make it 18 months, while others don't last six).

Sounds like a conflict between LACP and VMware IPHash Load balancing.

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2023-exchange-server-security-updates/ba-p/3764224 https://learn.microsoft.com/en-us/microsoft-365/enterprise/exchange-2013-end-of-support?view=o365-worldwide (I'm still running a 2013 box, sorting that out is pretty close to the top of my to do list, but I long ago turned off remote access to the server, all the users are connecting to Exchange Online / Microsoft 365)

Really? It was dead easy a couple of years ago... what trouble are you having?

Apart from when Windows 10 went through a phase of deleteing user profiles during monthly updates (and any data that wasn't redirected) a few years ago, no not seen this. However 99% of the time a folder is empty and there is nothing showing in the various recycle bins the issue for us has been the user *moved* the files instead. That the SharePoint/OneDrive recycle bin is empty suggests to me that they have been moved on the local file system to somewhere still within scope of the sync of the site's folders. That said, there is something in your phrasing that makes me ask: When did these files get put into that folder, and when did that folder get put into OneDrive?

Where are the emails getting caught? We've got transport rules configured in EXO to ensure certain emails get through the spam filters and the focused mailbox feature.

We're on LGfL but have our own NAT/Router/Firewall virtual device in between our lan and the LGFL Firewall internal interface, it lets us do these sorts of things. It also doesn't have the throughput of LGfL's firewall, so we only get 75% of the bandwidth we'd get if we we connected direct to them.

To find out if it is a network problem that you can control you can capture network traffic at the firewall and then run it through wireshark to see if there are lots of retransmitted packets for bromcom and its related services. I am not a bromcom customer, but I believe they use many 3rd parties to provide the functionality of their website - their firewall rules guidance has been referenced in these parts previously). Then the question is it caused by tcp acks not getting out of your network, or them not being received by bromcom? If your router is dropping outbound traffic because the link is saturated, can you use QoS rules to prioritise traffic to bromcom's server at central/egress point on your LAN? (i.e. lower the priority of all other traffic so traffic to bromcom gets priority?) If the device where you can control this is not the actual device connected to the 200Mb link, then you should also enforce a 199Mb/s limit on the external interface of the device which has the QoS rules enforced so that it mimics the bottleneck higher upstream (because the upstream device will probably ignore an Qos flags you may have set internally)

1 Kinda. Cover work here tends to designed with the assumption that it will be a supply teacher with no IT skills or access. Often not true, but it means we didn't have to find a solution to this problem. 2) By setting at least one assignment, a Student Work document library is created where students can save their work securely, and only the teacher and that student can view it. If the work is in Office documents, then the Assessments UI is used for the whole process. If photos, and non-office app documents are in use then the teacher adds a tab to the student work library. 3) Unarchive courses that run with the same teachers/students across multiple years. OR For those specific classes create class Teams 'by hand' with a naming convention that allows you to easily identify whether the course is still live or not. (e.g. 2020-2023 KS3 Mathematics 1 / 2020-2023 KS3 Mathematics 2 / 2020-2023 KS3 Mathematics 3) OR a combination of both, have SDS provision the classes, but rename those that need to span multiple years. 1 Revisited, just asked a passing HoD about this... turns out a somewhat ah-hoc working practice is the HoD (who is obviously in the loop when one of their team are off) just adds the teacher from the coverboard as a teacher of the class. (We have all HoDs as Teachers (owners) of all Class Teams in their subject areas which we did for this specific purpose, but it isn't policy - see my initial answer for this).

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant It is unlikely that a single instance of Azure AD Connect is viable given that they are essentially three separate orgs (i.e. not just separate forests but physically and logically disconnected forests). However.... "Azure AD Connect cloud sync is a new offering hybrid identity.... ...It provides the following benefits: Support for synchronizing to an Azure AD tenant from a multi-forest disconnected Active Directory forest environment: The common scenarios include merger & acquisition (where the acquired company's AD forests are isolated from the parent company's AD forests), and companies that have historically had multiple AD forests." https://learn.microsoft.com/en-us/azure/active-directory/cloud-sync/what-is-cloud-sync

Is this not Exchange Online safe attachments feature scanning the attachments? Its pretty standard these days. You just have to wait a few seconds after the delivery to be able to open the attachment. Might be quite rough in an older version of Outlook that wasn't built with this feature in mind? https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-attachments-about?view=o365-worldwide The obvious solution is to share documents rather than send attachments, as that is pretty much instantaneous. How you frame that suggestion so it lands well, I shall leave as an exercise for the reader.

I wonder if UI designers are getting ahead of themselves as the trend is looking like 16:9 may be on its way out for laptops… https://www.digitaltrends.com/computing/are-16-9-laptops-on-their-way-out/ Having finally got 16:9 screens in all my classrooms, I was caught out when the next batch of laptops we bought were 3:2 1080p I find increasing needs to be run in100% mode rather than 150% in order to leave enough working space when working with larger documents or tabulated data.

ChatGPT has entered the thread.

DNS should be provided by your filtering platform. We have AD DNS, and it forwards to our filter providers DNS service. If we ever got the point where we were removing AD, we'd just point the clients at the servers AD currently uses as its upstream DNS.

There was a glitch in the ipsec stack after January's updates. Seems to be cleared up once you have every server and client up to Feb current.

Plenty of subjects have constraints on where they can teach what due to technical/practical/equipment limitations. Be wary of non-standard, depreciated solutions that people come to rely upon.

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn579255(v=ws.11)#prewindows2000-compatible-access Should be Authenticated Users only, unless your domain dates back to NT4 or earlier and you have some mission critical stuff that was last updated in1996. That said SQL Server and the roots of Cert Services date back this far, so unfortunately: some PKI Admin stuff needs to be members of this group https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn786430(v=ws.11)#delegating-group-permissions as does the the account that runs thr SQL Agent (if you have SQL server in the domain) https://learn.microsoft.com/en-us/sql/ssms/agent/select-an-account-for-the-sql-server-agent-service?view=sql-server-ver16#windows-domain-account-permissions

Of no help, but with sympathy https://twitter.com/DogIsABot/status/1627447766179020801/photo/4

Never* redirect AppData. We moved to requiring seating plans so that apps that had per-computer configuration didn't interrupt lessons. (I've not looked at FXLogic, maybe that would change my mind?)

It's been years since I last used that (GPP is probably better for this). So basic questions first: Did you wait for policies to replicate to all DCs? Have you tried rebooting the workstation? Now onto the guess work, becasue I remember something odd here but it was so long ago. I took a quick loot at https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/description-of-group-policy-restricted-groups and I am wondering: if the setting is empty (i.e. not putting any groups into the local group), perhaps the policy doesn't apply i.e. doesn't remove the group that previously had been put in there? I seem to recall I ended up using GPP to remove specific users / groups from a time when another admin had (long ago) tattoo'd some memberships. It did unfortunately result in error in the event logs when it continued to try to remove the users/groups after its initial success, but at least they were gone.

Microsoft have removed the edition check for applocker functionality, bringing it as far back as Windows 10 2004. https://support.microsoft.com/en-us/topic/kb5024351-removal-of-windows-edition-checks-for-applocker-e3a763c9-6a3e-4d9c-8623-0ffe69046470

I got the "early access" email last night, but have found that the rest of Bing isn't sure 100% of the time that I am not still on the wait list, so a bumpy experience for me so far. Also quite miffed to be joining now when they've slapped a five questions-deep limit on chat.

As long as both ends support a common 802 standard for PoE then they should work. If you are looking for a long term investment, be aware that the latest Wave 6a Wifi access points support the bz standard, I don't know whether this is mandatory, or whether there is loss of performance if they have to fall back to older standards.