psydii

+1 for getting something to move the air - its why clothes dry so fast on a breezy day. We are lucky and have a new build with an MVHR system. Placing clothes racks in parallel to the air flow is the most effective way for us to dry most things within 12hrs and jeans etc. within 18.

TBH A Team is an UnifiedGroup, so you are using Exchange Online, even if that isn't where your user mailboxes are stored. If you really want to use the microsoftteams module though, you just need to tweak script, swapping out add-UnifiedGroupLinks for add-teamuser edit: ninja'd

Looks like firmware on those updated in August... maybe try the reverse of the advice and roll it back? Don't forget to roll it forward again if it doesn't fix the problem. That said, if Google are engaged, they maybe pushing telemetry and experimental drivers on your chromebook to troubleshoot - so changing the network firmware out from under them may disrupt their investigation.

When did you last update the firmware on your Wifi APs? Every so often we see this sort of thing (though we are mainly Windows) after there have been windows / driver updates or a new model of laptop on to the wifi. For us, when we see this sort of thing, wifi ap firmware update fixes the issue. That said, we usually have been running / testing the devices for a month or two before we try the firmware, so if the problem is very new, and your APs are fairly up to date, it may be a month or two before you find a firmware that fixes the problem.

If it is a new device, the CPU generation shouldn't be a problem and be as 'future proof' as an i5. The key things are: To ensure you are buying at least quad-core cpus. Dual Cores are unusable. To use InTune Shared Device profile. To only install Office 365 (or ideally leave configured as webbased apps). To remove *all* 3rd party software particularly anti-malware. If they are going to be shared, use the shared PC profile from Intune. OneDrive Client is then disabled. Do not install Teams, but instead used the web app. The other thing to look out for is the eMMC, there is a variant of eMMC5.1 which is as fast as SATA (theoretically 400Mb/s) and good enough. There is a more common variant that, to put it charitably, is not. http://www.edugeek.net/forums/windows/219803-64gb-storage-enough.html#post1882223

We've got a couple of older NQTs (50's+) this year who have recently retrained to be teachers. They are both instantly fluent with interactive panels, (better at it than the ex ICT AST, who as DH brought these new panels into the school). They navigate Word, Excel, PowerPoint, SIMS and SharePoint like they've been doing their whole lives. They make it look effortless. It puts many of the teachers in their 20's and early 30's to shame. The last time we had a cohort of staff who were (more or less) all as technically competent as these two was back in 2012. Something is broken.

Seems to be fixed for us today.

We nailed this down by having STP enabled, but making sure edge ports are configured with PortFast (so they come up as quickly as clients need) and BPDU guard so they shutdown if a BPDU packet is seen arriving. On the oldest switches of questionable spanning tree reliability edge ports have 'loop detect/protect' enabled instead which provides similar functionality. We haven't had a issue since* *Well except when our Aruba IAPs very occasionally slip into mesh mode and suddenly all sorts of absolute insanity ensues, because I haven't figured out the correct settings for ports connecting to IAPs, and they bridge to other IAPs and thus create looped trunk ports. LOL.

When you are seeing the sorts of problem you have - I would expect that the problem will jump out at you. To 'get gud' just take a capture on an isolated switch with only a couple of hosts to see a baseline for normal. Then compare it to a capture from your live network - the anomalous traffic will likely be *REALY* obvious. After that google is your friend. (its like differentiating a riot on Oxford Street from normal busy weekend shopping day)

Further to @KK20 script snippet: https://wicher.co.uk/onedrive-site-collection-administrators/ To do this for future account you need to pre-provisioning Onedrive for users: https://docs.microsoft.com/en-us/onedrive/pre-provision-accounts?redirectSourcePath=%252fen-us%252farticle%252fpre-provision-onedrive-for-users-in-your-organization-ceef6623-f54f-404d-8ee3-3ce1e338db07 and during that process apply the Site Owners. We have a group that is empty that we can add people to on the occasion we need to grant this sort of global access. If we were going to be fancy, we'd also have a group per user so we could selectively target who gets additional access to what. That said, as is often the case, having Salamander do all this for you is really the better answer.

Your wired speeds are reduced to 150Mb/s when the Chromebook are all online? If so, stick Wireshark on the lan and see what is happening. My guess would be some broadcast/multicast traffic flooding. Meraki APs can also capture wire and wireless-side traffic as pcap files which can be imported into Wireshark for review.

Good shout. But it made no difference to us, and today things appear to have got materially worse with a swathe of missing contacts.

We've got a Circle that seems to work well enough. Its not got the flexibility of a roll-your-own system. So far meets our needs. Anytime I look into what alternatives I could set up, it reminds me why at work we offload the technical problem to LGfL.

Yup. They just closed my tickets with incorrect activities logged. They only started to take action when our Business Manager logged a ticket and then they made us do some 'hail Mary' type nonsense in SIMS (I mean validate membership has its place and all, but if every other sync is working... sims probably isn't the problem).... they then tried to fob them off, until we requested a refund on the text messages sent in error due to this problem. Now "an engineer is assigned to the case". However, the problem persists. Either this is a problem for relatively few customers, or GroupCall's customer base has collapsed and they have only two customers left, with a part time support chap and an engineer who is not familiar with the platform.

Microsoft are releasing Remote Help for Microsoft Education A1 through A5 customers. https://admin.microsoft.com/Adminportal/Home?ref=MessageCenter/:/messages/MC414475 Message Summary Updated August 18, 2022: We have updated this message to ensure visibility to impacted organizations. The body of the message has not changed. Introduction In mid-to-end of September 2022, we plan to release remote help in Microsoft Endpoint Manager specifically suited for school districts using Microsoft Intune. This secure, cloud-based remote assistance tool includes capabilities to enable group admins to resolve Windows technical issues in real-time with faculty and students using enrolled and unenrolled devices in their school environment. This message is associated with Microsoft 365 Roadmap ID 88504 When this will happen: The capability for remote help will be available to organizations as part of their Microsoft 365 A1 for Devices, Microsoft 365 A1 Legacy, Microsoft 365 Education A3, or Microsoft 365 Education A5 subscriptions in mid-to-end of September. Additional add-on licenses are not required. This means that if you have one of the licenses mentioned above, remote help will be provided to you at no additional cost. How this will affect your organization: Remote help is not on by default. As an administrator, you will need to use the full Microsoft Endpoint Manager admin center experience to enable remote help for your tenant and manage the settings and permissions. Once you enable remote help, these are the capabilities it provides: Role-based access control (RBAC) and permissions to define who is authorized to support which user or groups of users. Elevation to allow group admins to use local administrative privileges to troubleshoot a faculty member's or student's device, or elevation if permissions are required. Compliance warnings to help protect the school from security risks, alerts are displayed to the group admin if a device is out of compliance and may introduce a security risk to the school. Reporting to identify recurring issues and potentially suspicious activity. What you need to do to prepare: Remote help will be included in your Intune for Education licenses: Microsoft 365 A1 Legacy Microsoft 365 A1 for Devices Microsoft 365 Education A5 Microsoft 365 Education A3 Additional Information: Blog announcing remote help for commercial customers: Remote help: enterprise-grade assistance tool now available Remote help documentation

@sigma does your netsweeper have "piracy and copyright theft" as a category?

@PaddyNewman 501602 and 501603

Wonderful. Wonderful. They are not blocked for us either. Though I will say that I'm finding that the movies are in an entertainment category - so perhaps create a test rule blocking that category?

We're on netsweeper though another provider. Could you share an example so we can check against our config?

We found this in lockdown. A student needed me to unwind it. Was a bit on the busy side, so didn't get to it for a while. After a couple of weeks they gently chased me up, then sent through a step by step instructions with screen shots and a pointer to this setting to stop it happening again. They'd set up an evaluation E5 tenant for the purpose. Really should have employed them TBH.

Same way you eat an elephant.

Worth checking that the patch leads have the fibre type printed on it an that it matches the fibre that runs between the cabinets.

Could you not have a chat with the AD/AAD/365 identity team to find out what they might advise?

Hi, Hoping there is a neat solution after ignoring this for about five years.... We would like to setup a batch of new devices set up as Intune Shared PCs. User will log on with their AzureAD accounts (UPN being identical across AD and AAD sync'd using AzureAD Connect - so kerberos authentication should be available) and the users should be able to print to any Windows Printer shared from our print server (to which they have access). We have done similar before but without the ability to print (an acceptable limitation at the time) Now we need to print. Our print server in on prem and hosts Papercut (which we keep up to date). We need to deploy the Windows Printers to these devices, and ideally allow the students to add a printer should they be using a device in a location where one of those three printers is not available. Students generally don't charge to an account, but as an extension exercise we would like to move to the same/similar config for staff where they *do* charge to various accounts. At the moment in AD/GP there is just one configuration applies to all staff and students, with some filtering on group membership around sensitive printers. When we have had to issue Intune devices 1:1 and needed printing, we have had to set up mobility print and install (as admin, by hand) a special client on the laptops and have the user with us so they can enter their credentials to authenticate to papercut/print server at set up time. This is "fine"ish when its maybe a user a week, but wont scale to hundreds/thousands of users. Any advice/links to how-to guide would be appreciated. P.