psydii

The only limits I am aware of are documented here: https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-limits#receiving-and-sending-limits 10,000 recipient per user per day with a rate limiter of 30 messages per minute. There is also a limit on the number of messages a mailbox can receive per hour, so that is why I asked about the archive mailbox. I find it very hard to understand where or how 1000 messages would cause you to trip a tenant level limit! Do keep us posted.

Upgrade SIMS* and Papercut no problem. *planned this one carefully, shutdown the server before the taking the 'backup of last resort'. Powered on and then dismounted databases etc to ensure it wasn't in use during the upgrade etc etc We've even done an 'in-place' upgrade of SQL Server, again planning is everything.

Unless it is a DC, in which case the roll-back plan must be to delete it and build a new one. A snapshot restore of a DC is nothing but pain anguish and a potential forest rebuild Also, as well as Exchange server, you should not in-place upgrade a server with Azure AD Connect installed. If you do AADC stops auto-updating. You should check the upgrade plan for each service running (NPS, DHCP, Certificate Services etc.) and make sure 3rd party software is compatible with he target version.

It also comes with some of the larger M365 packages.

Do you have a rule that archives all mail to a single mailbox?

That sounds fine. Not entirely sure why you have that security group at all though*. Given the available facts (1 its working, 2 only the HM is a member and it isn't a member of anything else, 3, only one share makes use of it in its acls) best leave it alone. If the HM on their mac can't access files and folders in shares you wouldn't expect them too (for example C$ or "IT Tech's share") then you've not got the issue that the OP had where it sound like they have "everyone/full control" on all shares and file/folder permissions, using only Group Policy to limit what Windows/explorer would present to the user. *Just remembered: once upon a time macos/osx needed to be able to have access to the parent folder before it could mount a subfolder to which it had an appropriate NTFS read/write ACE. Been a while since I thought about it, not sure if that is still a requirement.

https://www.gov.uk/government/consultations/data-a-new-direction

This looks like bad news: https://techcommunity.microsoft.com/t5/intune-customer-success/updates-to-the-windows-autopilot-sign-in-and-deployment/ba-p/2848452

There is no way that any one system does each of those things as well as the individual parts did. - Who owned the project and persuaded the various stakeholders to make the compromises necessary for the success of the wider project? Don't get me wrong - the end result overall, I'm sure, is better than the sum of the previous parts - but the Timetabler and HR/Line Managers (for example) might feel that their toolset has taken a step back. Genuinely interested to hear how the people side of this was handled.

Let an Apple partner lead this, they will provide the training and user support, and also steer you (or more importantly the SLT Sponsor) away from bits of the ecosystem/technology that might otherwise cause friction.

How many users? How many buildings? The networking costs are likely way lower than you think - particularly if you are moving from predominantly wired desktops to wireless devices. What do you actually do in Windows? - moving to iOS is quite the change. It is easier if you are a 365 school as the Microsoft tools work way better on iOS than the Google ones, also you get filtering options with 365 E5. I would talk to Albion if i were you - they can make this happen and can assist financing such that over a reasonable horizon the costs of going apple is competitive with a Windows based economy. While relentlessly pro Apple (obviously) this series of posts is worth reading to get a feel of the ecosystem. https://9to5mac.com/guides/apple-at-work/

Dangerously I had a moment to idly consider students photographing each other in the course of creating their digital portfolios. This happens quite a lot, and is always conventual (students don't get photographed if they don't want to be!) , but what should the paper trail for this look like? Does anybody have any example photo release / consent forms for this? Would a blanket form for the entire course be acceptable or would we need to get consent per session? The photographing of each other is basically a given and has been for nearly two decades of running the course, so I would expect that would would need only one form per student, and they are of course be able to withdraw consent at any time.

We're looking a the paid for service BulbApp. It costs less per student per year than cost of providing colour printing to the course.

Footballers are already paid. The sport is sponsored. Where does this money come from?

Legitimate interest? Also the gambling firms sponsor the sport, so there may well be a contractual angle here too. Prediction: paperwork will improve, firms will be held more accountable for the accuracy of the data. No footballer gets paid for their data.

Use your mobile?

Also be aware that, in the onedrive/sharepoint based system, recordings expire after 60 days: https://portal.office.com/adminportal/home/?ref=MessageCenter/:/messages/MC274188

We've seen something similar on the 315 model too. Occasionally it just stalled out. Updating to latest firmware seems to resolve it. The capacity of the AP is really dependent upon the capabilities of the devices connecting. In capacity testing a few years ago we had no problem with 120 devices across six rooms and three aps, simulating a the start of a lesson using roaming (uncached!) profiles. These were mostly 1x1 ac devices with around quarter being 2x2 ac. What I have noticed is sometimes performance characteristic will change after driver / windows updates. This has been true over the Trapeze, Meru and now Aruba networks I have looked after. It may also be worth just looking in on the console to see if there are any DFS events or other interference going on.

Yeah. This is same issue that has nerfed YouTube. It is interesting that the policy has been implemented so quickly, across alphabet they haven’t had time to figure out how to let schools make their own risk assessed decisions. I’d love to know what spooked the entire global googleplex so comprehensively.

It's gambling. It's basically unregulated. Only put in what you can afford to loose. Maybe it will pan out and you'll be the digital equivalent of the landed gentry. Maybe you'll end up with nothing. The Big Banks are either extremely sceptical or hedging their bets. Many prohibit transactions relating to crypto, and have banned borrowing to invest. They have regulatory responsibility to their customers, so need to be careful. That said they are institutionally amoral so they will bet both ways if they can. So some are taking a position so they can win. (that is protect their customers capital and make lots and lots of money). Much of the finance world works because nobody looks too closely at why things are priced as they are. (Or if someone does look closely, its because they will win if the value of that something goes down) There are two outcome here: At some point some big players are going to find themselves too invested in crypto and they will start talking it up, and the collapse of crypto will be a systematic/existential threat, or more and more institutions will move against crypto blocking crypto holders to convert it to traditional capital, eliminating its value. Note that real people lose real money, and 'too big to fail' banks/institutions still go pop occasionally. People are wiped out by this sort of thing. I believe that crypto's fatal flaw is the cost of a trade - it is astronomical. Finance/Computing experts who have been lukewarm were sceptical of the figures being put about earlier this year (https://www.dailymail.co.uk/news/article-9358737/How-cryptocurrency-uses-electricity-transaction-method.html), but then did the numbers and realised it to be a reasonable estimation. This is not sustainable, and there is *no* viable method for bringing these costs down - the ever increasing complexity of blockchain calculations is baked into the system as a fundamental feature. The flaw is systemic, and will be in no small part why China is taking an agressive stance against them. China is going to win the next 100+ years in terms of global dominance, I'd bet with them. That said if you are young (<30) and have few thousand to invest, putting a few hundred into crypto is probably a wise bet - the younger you are the more risks you can take with your capital. How much risk you should accept is a matter between you and your (regulated) personal financial adviser.

Papercut is definitely the right way to go However you probably want a solution this week. Can you put the pin and username in a csv and then query this from a logon scripts that pushes it into the relevant registry setting on the computer? You could use some variation of the code her: https://stackoverflow.com/questions/34256949/lookup-value-in-csv-and-return-value-from-2nd-column (with 'username' and 'pin' replacing 'server' and 'collection') and combine it with the technique here :https://devblogs.microsoft.com/scripting/update-or-add-registry-key-value-with-powershell/

I have just come across this little titbit: if your print servers are 2019+ then type 3 drivers work for GPP deployment of printers with point and print restrictions applied. If they are 2016 or earlier, they do/might not. Its buried in this blog post https://www.mdmandgpanswers.com/blogs/view-blog/the-ultimate-guide-to-printnightmare-and-overcoming-it Apologies if this was already stated here, a quick forum search didn't indicate that is was.

I'm not sure what the underlying logic is, nor the justification for this implementation, but Google seem pretty solidly set on pushing forward with the roll out. I'd guess there is some larger CP issue they are trying to get ahead of. Hopefully they'll refine the implementation in the coming months to give Workplace accounts marked as over 18 access again.

I'd be tempted to have a back-up admin account on the box in case there is some problem and you need somebody onsite to lay hands on the box. Rather than DHCP you should be to add a second IP to the machine, and verify that you can remote in via that IP, then change the primary IP. (IPv4 TCP/IP Properties->Advanced->Add)

Microsoft E5 is worth a look - you get an awful lot of capabilities including a webfilter and the ability to add more complex rules based on custom indictors if needed. It also works on iOS, Andriod and Linux too, there is also a Chrome plugin. If you need any of the other capabilities of E5 (such as windows/office licences, GDPR supporting eDiscovery, Telephone/ Conference calls etc) and already pay for seperately for 3rd party products, you might find Microsoft 365 E5 is the cheapest option. Another alternative that I think shows promise (but haven't used) is Diladele: https://www.diladele.com/