psydii

Strange. We had our scanners stop for Exchange 2013 after the last update, though we messed with certificates at the same time. Changing the port the scanners were using to 587 fixed it. Not sure what actually caused them to stop when everything looks the same.

Those on LGfL get a good number of meraki licences for ‘free’. This covers us for non-windows devices.

Can somebody post links for more videos where this is happening?

Is this not what Apple Classroom does? https://www.apple.com/uk/education/k12/teaching-tools/

No, but I'm going to try to persuade the other half to get the Pro. She's the photographer of the household and we have some milestones coming up, so it would be nice to get the best photos possible (without breaking out the DSLR). Our phones are almost 4 years old at this point so I'm probably upgrading before we get to iPhone 15.

We use groups to manage licences. Leavers get put into a special leavers group that gives them an A1 licence, and a extended attribute modified to record the date they left. When an account has been a leaver for an appropriate period of time we remove it from the licence group. At this point we also remove most metadata from the user object, but leave it in existence in case their are any resources that continue to exist that they have touched (getting a UUID instead of a username is a pain). We have a lot of students and staff who return after a year or two absence and they always appreciate getting hooked up into their old account.

For simplicity though, we link tickets of the type 'request' to assets and CIs for most quick and dirty changes. All tickets are linked to an Asset or CI, so we have a history of what has happened across everything. Using the more powerful CMDB piece for more wide reaching or structured changes.

Its part of our Service Desk (which for historic reasons is SysAid). we have a drastically simplified template from the defaults (because we dont have a six person ITIL compliant process). The challenge is identifying the Configuration Items. In a classroom, there is a computer, a connection box, a projector, a board and speakers. There is also the cable loom, and network sockets. Does one treat that as a single item 'classroom av setup in room xx' but for software pushed to the subcomponents (e.g. the computer or the Andriod in the TV) - should that be booked against the specific device CI or the collection CI? There isn't really a good answer - we tend to go for the individual items that make up a room, but also have the room as a CI with the items linked to it so we can browse what has occurred in a room from the CMDB. We have a documentation repository, and service record reference numbers are in each document relating to changes made. If that is we actually have time to do it properly. Which we often don't, but we are better at it than we were. Our CIs are a combination or all the assets in the asset database, all users and groups, all group policy objects, and mdm settings, all software (Sysaid knows all software installed, but for CI purposes you have to select software you care about to import into the CMDB), Services, Servers (software), and a few school processes that are so heavily dependant on IT that we had a hand in designing them.

Its a known undocumented feature. http://www.edugeek.net/forums/mis-systems/221118-reports-using-old-data-files-onedrive.html

By your school's policy who is responsible for reporting breaches? This is their problem. Put it in writing to them and leave it well alone. I've edited this post from how it may appear on the homepage. I kind of misread a couple of replies here. Initially I also wrote: "If they don't do it you must" I would advise that you call your union for support before bypassing your DPO and going against what the LA DPO has advised. I now realise the the "you" meant "your employer", so the call your union bit is unnecessary, however you are aware of the breach and may disagree with the DPO's assessment, so it is probably worth bouncing this off your Union for advice in case things come unstuck later.

Give them until tomorrow, then start to ask for escalation - nearly two weeks is not acceptable. I suspect the mailbox is toast and needs to be recreated. It might help them if you made them aware that there was no critical mail in the mailbox - but it is critical that the user now gets access to mail in general.

I mean, those errors sound like the mailbox has got lost while being migrated between databases. Might be a hardware failure in ExchangeOnline damaged the mailbox and preventing it from moving properly before they decommissioned the database hosting it..... unless by some chance you mailboxes get created in on prem exchange and then migrated to the cloud? How long have you had the ticket open with MS?

Have they tried in the App and via teams.microsoft.com? We've noticed that teams occasionally doesn't seem to load all the memberships as expected. Sometimes removing and re-adding to the impacted Teams kicks it into life.

Haven't reviewed it in a while, but we set permissions on the local folder to allow self-updating, but then use AppLocker to restrict execution there to appropriately signed exe's

Wow and there I was thinking we spent a lot on our radios. ::boggles::

Yes. Its a terrible idea. The two way radios are completely independent of all other IT / Comms and *JUST WORK*. Sometimes the LAN/Wifi is down Sometimes the 'internet' (router/broadband) is down. Sometime Android crashes or needs a reboot (updates etc) Sometimes there are 4G/5G signal black spots. Sometimes 3-5G goes down. The two way radios *NEVER* go down. Also: Battery life Device life (a decent radio will easily last 15 years+ if not too badly abused) While their most common use here *could* be done with Android based PTT software... their role in an emergency situation makes higher levels of technology a risk not worth introducing. Android (and iOS) are fundamentally unsuited to any real-time mission critical task, we all do it though. But when that "mission critical" task has lives on the line, the ability to seamlessly have independence from all other communication and technological systems in the event of an emergency is required. *When I was taking over the two way radios, I thought about it, it seemed like a cool idea, and one with immediate cost savings. When Teams came along I thought some more. I sketched out how it would work, and realised that nothing was as good as the two way radios, and I didn't want the worry of how they system would perform in an emergency.

Its an IT thing here. It was a facilities thing, but the BSF LEP refused to own it despite needing it. It went to the Finance office, and then to local IT as soon as IT was brought back in house because it was more IT than Finance. It has a specific allocation within the 'IT Budget'. We outsource the break-fix and ofcom licence renewals. We just track/purchase the assets, and ensure maintenance schedule is followed.

Could you not use 365's built in capabilities for this? https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training?view=o365-worldwide

The example vbs quoted does not solve the problem described in this thread. These scripts call the Point and Print system which is what is now broken by the latest MS update. However a VBS equivalent to the PowerShell listed previously does exist in: C:\Windows\System32\Printing_Admin_Scripts\en-US More info here: https://ss64.com/nt/prnmngr.html Again the key is to create a local printer whose PORT has the name of \\print_server_fqdn\PrinterShare

Yeah but metrics can be misleading. Mail merges save *so* much time, but may only be occasionally run. Jumping around the hoops 365 puts in the way requires me to get involved three or four times a year, instead of it being a purely office admin task. I doubt very much if the cost of my time is a metric that MS measure.

The solution we have found to this is to build a trained team who parse the larger results sets and filter them down in eDiscovery. The biggest one was for a legal discovery, 3 people took five days, and then another three days with two people going back and forward with the solicitors to finalise. The tools have got much better since then.

Uncomfortable truth: 120Gb is too small for shared devices in a traditional AD set up. The cost to upgrade (assuming 2.5" SSD or similar) is worth it in improved productivity for user and preventing IT spending time (at 2K+ per year) on a Sisyphean task. The fix is to spend money, or to move to pure Intune managed shared devices which keep profiles pretty much ephemeral. You may not have the budget for it, but the Head can find it they understand how important it is.

The functionality between the non-subscription app and the per-user-per-month licenced app in this regard are the same. Neither can use mail merge sources that are purely stored in SharePoint/OneDrive. The file has to be synced into the OneDrive client, which means the local path is hard coded into the word doc, which means a mail merge set up by one user cannot be used by another. Hopefully Microsoft will fix this soon (perhaps with PowerAutomate and Fluid on the back/front ends). The advantage to moving to subscription, is that if you were licenced for the standalone product you wouldn't get the new functionality until you manually upgraded. Not sure this particular issue is on any public roadmap though.

There are three groups per SharePoint site: Owners Members Visitors We make our AD "all staff" group a member of visitors on all staff related sites. We make the departmental AD group 'members' and the HoD/Admin person a member of the Owner group. This ensures we never need to touch the site permissions again. However this does not play so well with modern Office 365 Groups (aka universal groups). For these we skip the ad departmental/HoD piece and just use Teams/Office365 groups UI to add members - we can use the ad groups initially - but these just get expanded to list the current members and future changes are all manual.

Which is a massive regression- word should never have lost this ability - its pretty fundamental to most business uses. I mean by all means make it powered by powerautomate in the background. But the UX should be that it starts from, and looks and feels like the app we are in (Word).