psydii

A bug that's been there since the dawn of time. Use the Active Directory Administrative Centre instead.

IME with OVS if you go past 90 days you have to set up new agreements, so if you had some benefit from a long running pricing, you'd loose that, but otherwise there aren't problems. I'm not sure what the grace period for 365 licences (I've seen things that indicate you can operate normally for 90 days before everything gets disabled, and others that indicate that everything gets disabled at 30 days, and deleted at 90) but that the ultimate sanction is "we delete your Tennent and all of your data" has kept me more focused on getting the renewals through on the anniversary of the agreement.

Its been a while since I looked but I think you need to use the advanced auditing tools: https://docs.microsoft.com/en-us/archive/blogs/askds/global-object-access-auditing-is-magic https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/audit-policy-recommendations

Last time I checked (a long time ago) the funding made it difficult to build IT suites large enough to have 30 computers around the edge and non IT desks in the middle. However this arrangement is best since the teach can see all students and their screens in one glance, without having to break their 'flow' by clicking around in software. All suites where this is not possible have worse behaviour and more kit gets damaged. It is also a challenge for 1:1 arrangements - you have to persuade the teacher to do a lot of teaching from the back of the room. (very easy to do if you already have complete buy-in, really hard to do if you have teachers more rigid in their ways)

Private Relay? https://support.apple.com/en-gb/HT212614

Are you syncing live Logic Pro X projects via the OneDrive Client? (i.e. they are working on the project on the local copy that is sync'd by the OneDrive Client, and *not* on a copy of the project that they manually copy back to SharePoint each lesson). If so can you confirm they open without errors on the next machine?

::looks at 3 top 10 hits that were mostly produced in our mac/logic based studio:: Ok, so the chap that did that now used pro tools and now has many more top 40 hits to his name, but the grassroots-to-riches path is well trodden and Logic is very much a part of that. Also we are running current versions of Logic, despite not having paid *anything* for nearly a decade. If you go all in (FCX LPX), and take a multi-refresh-cycle view, macs for media and music are quite possibly better value for money.

Then I would go for the two step process using group membership filtering. The script determines if the file doesn't exist and adds the computer to the group. On next boot or gpo update after a kerberos ticket refresh the group-filtered policy will apply. If you need it to fire immediately, you could force the Kerberos ticket and policy refresh in the script. Another script in your filtered GPO could remove the computer from the group if its a one-shot type of thing.

WMI filters on GPO's are not a great idea if you need boots and logons to be reasonably swift. What is the GPO going to do? Perhaps there is another way of evaluating whether the computer needs to apply it? EDIT Depending on what you are trying to do, Group Policy Preferences with Item Level Targeting may be better? / EDIT In a world with out GPP / ILT, I'd have done it this way: A GPO with a script that fires on all computers and runs in the context of the computer at user logon (delayed start so it doesn't impact logon times), that adds the computer to a group if the file does not exist, and then the GPO filters by group membership. You would need to give domain computers update/manage rights to the group. This way may still be faster to execute at boot/logon on the devices that either WMI and ILT.

preacher

I came to the conclusion that generally this is a bad idea. We've gone with one site per group requiring access with a Hub page to allow for those who need some level of spatial navigation across all folders. If you really need to go down that route... this code might help you scripting it. (it sets per user, however I'm sure it would be fairly easy to do per group) # Create per user folder in SharePoint Site connect-azuread Connect-SPOService https://TENANTNAME-admin.sharepoint.com $SiteName = "SITENAME" $Group = "GROUPNAME" $SiteAbsoluteURL = "https://TENANTNAME.sharepoint.com/sites/" + $SiteName $SiteRelativeURL = "/sites/" + $SiteName $listname = "Student Work" $listnameAsRelativeURL = "/" + $listname $FolderServerRelativeURL = $SiteRelativeURL + $listnameAsRelativeURL Connect-PnPOnline -Url $SiteAbsoluteURL -UseWebLogin new-pnplist -Title $listname -Template DocumentLibrary -OnQuickLaunch $UserList = (Get-AzureADGroup -SearchString $group|Get-AzureADGroupMember) foreach ($user in $UserList) { #write-host $user.givenname $user.surname $studentFolderName = $user.givenname + " " + $user.surname $targetFolder = $FolderServerRelativeURL + "/" + $studentFolderName Write-Host $studentFolderName Write-Host $user.UserPrincipalName Add-PnPFolder -name $studentFolderName -Folder $listnameAsRelativeURL #write-host "Set-PnPFolderPermission -List"+ $listname +"-Identity " + $targetFolder +"-AddRole edit -User " + $user.UserPrincipalName "-ClearExisting" Set-PnPFolderPermission -List $listname -Identity $targetFolder -AddRole edit -User $user.UserPrincipalName -ClearExisting } This is basically what the Teams Assignment tool does when it provisions student folders.

Counter point https://www.discountcommunications.co.uk/acatalog/Un-Branded_Om1_8c_Swa_Fibre_Per_M.html Though 3-08 meaning om3 8 core makes sense. I have been advised in the past that without explicit OMx branding you really shouldn't trust the fibre to meet any particular spec. That advice came from a company that wasn't selling me fibre*, but wanted to make sure that who ever was supplied infrastructure that their services could depend upon. *They did resell another companies cabling install services, but they weren't chasing that lead with us.

Things I'm sad I'm not watching: Amazon's adaption of the Culture novels

Use the waffle. This video, actually explains the functionality - I think over all its an improvement. https://support.microsoft.com/en-us/office/get-started-at-office-com-91b69f9c-9410-4eba-8b4f-8dab3efa43d1

They removed ‘OneDrive’ for us, sort of replacing it with My Files. Absolute disaster. Key terminologies embedded in our userbase. Such unnecessary confusion. Also don’t recall seeing this on the roadmap. Pretty unimpressed with them retiring the Office name too. Though this is more a marketing problem for them than a practical one for us. That said, perhaps in the long term, users shouldn’t have to know about OneDrive or SharePoint, and the whole thing ends up under a single navigable unified name space with a common root.

Aruba IAPs expanded from 4 to 90, and then moved them under Airwave. TBH for a small installation the built in IAP management is fine. Great support so far. (a few RMAs and 1 firmware/software issue). Documentation superb. Peer support forums pretty solid too. 4x4 would be my recommended minimum - gives you enough diversity to handle the slower lower end devices without bringing the whole thing to a crawl.

Like all MDMs it’s based around a protocol and schema designed to manage mobile phones from 2008. It (like all MDMs) does a poor job at the multiple edge cases that Group Policy and SCCM excel at. As long as you do what the designers (who clearly never managed enterprise desktops before they made some architectural decisions) expect it is “fine” (c.f. “OFSTED satisfactory”) That said, have found autopilot to fail 1/6th of the time, and it isn’t good at multipurpose devices (devices whose purpose/restrictions need to change based on the context of the user logging on) so it feels to me too that there is something broken. Incidentally has anyone looked at the abomination that is Microsoft Powershell Graph API? Hand crafting URLs anyone? Urgh. It like Microsoft have forgotten all they learned 1990-2010. It genuinely reminds me the abomination that was Perl for Win32!

The cost of HE/Charity equivalents of Schools' MIS are 10-100 times those schools are used to paying. This why school MIS are inflexible, and if you aren't paying 100's of thousands per year of the software, you *likely* aren't paying for a competent SQL DBA either. And the worst thing that could happen to a database is for somebody who does not realise their limitations goes in with an update query. That said, an onsite DB is your data on your disks. It is a lot easier for a 3rd party to migrate everything out of that, vs some limited API provided by the out going supplier. To which I think is what the OP is alluding. Why would you want to bring across legacy data? Analytics. You need historical data to draw trend lines. Sometimes you want a report that you hadn't thought of from last years data. THe quality of data is dramatically better everywhere I look compared to ten years ago. Back then just abandoning data was fine because it was argued to be garbage. It is harder to make that case today. *I had a competent DBA/Developer on my team once. Proved multiple times that bugs in the application code were causing the errors from the database. Without them, SLT would have accepted the vendors assertion that it was our server hardware/ windows installations that were at fault.

Has anyone actually read the "scrollwap text" contract? 30 pages! I find it difficult to believe that most schools can be sure to what they have just signed up.

We view this differently to your DPO. All teachers are responsible for all students in the school and may at any given moment have to work with students who are not in their timetabled classes. They should therefore have access to all but the most sensitive data for all students. They may not just go trawling through records without a legitimate purpose. To do so would be a breach of data protection principals and professional standards.

It is.

Bingeing Daredevil and Jessica Jones before they leave Netflix at the end of the month.

Two thoughts: a per device charge based on the amount of hours per year you already can estimate. Or a per pupil allocation with an hours equivalent clearly stated, showing and shortfall/overshoot on a per school basis. Liaise with all the schools (including their finance and their education and local tech it leads) showing the two models. Get some feedback and then run them in parallel (the two new models for reference, the current model as the live system) for a year to see what the numbers look like. Meet quarterly with the schools to show them how each one stack up. I would suggest that you need to work with people who are fully bought in to the Trust, since unless you are offering a dramatic improvement from the perspective of front line staff, their will be considerable levels of politics to handle. Local politics is best dealt with by local people. Get feedback and tweak as necessary. Then in year two move to the model that works the best. For breakages, definitely charge the schools and include that in your quarterly report. Each school should see the full report, so they can benchmark their performance/costs against other schools in the trust.

Step 1: Make sure you set a strong password (14+ characters) on the account(s) Step 2: Run autologon (https://docs.microsoft.com/en-us/sysinternals/downloads/autologon) on each computer. Step 3: Do the things you need to do. Step 4: Run autologon again to disable it. Extension exercise (to help you move from novice to master): Read the documentation for autologon and understand what LSA secrets means. Then use procmon (https://docs.microsoft.com/en-us/sysinternals/downloads/procmon) to watch what registry key autologon.exe sets. Finally then use a GPP Registry setting to enable/disable, but make wise choices based on your learning about LSA Secrets. (related: https://docs.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/turn-on-automatic-logon) Do not under any circumstance put the password into a Group Policy or script. The kids will find it and abuse it.

For what it’s worth our details came through to a contact capita had for us back in 2001.