psydii

Not helpful to your immediate predicament, but you should be aware that Roaming Profiles are depreciated and some modern part of the Windows/Microsoft ecosystem do not work with them. I'd been a roaming profiles advocate (and the rest of the 'InteliMirror' family since 1999. Leaving them behind when we moved to Windows 10/OneDrive was tough for me. In your case more immediately: I wonder if they have either some *huge* files in their home folder or profile folder, or perhaps thousands of small files . Both can really mess with the Offline Files system and Loading Profiles. Another possibility is that this user is trying to map to network resources (file or print shares) that either no longer exist or that they don't have appropriate access to. If you get to the point where you are willing to sink a lot of time into this, you can use WPT and WPA to see what *exactly* their computer is doing for the entire boot/logon cycle. https://docs.microsoft.com/en-us/windows-hardware/test/wpt/

OS+Divers can evolve to the point of incompatibility with older firmware on APs. Has there been a update to Chrome OS?

Good. I had low low expectations. For the first time, I'd be happy to run an entire school on a sub £500 Windows device (and they are *way* under that, comparable with Chromebooks).

Windows 10 with the shared device profile from intune/endpoint manager on *almost* the same hardware as the chromebooks has been eye opening. As long as they continue to work to keep the bloat out! It would be devastating if in a year or two's time Windows doesn't fit or run extremely well on the Gemini Lake era devices.

Have done good work with both Albion and Trams. Trams is even based south of the river. If I were without any constraints, I would choose Albion. @Brimstone is right about what you will be told.

Time limited call for feedback. It looks like Microsoft are soliciting thoughts and experiences around how we manage the Start Menu:

Just a quick survey: what aspect ratio do you currently have in you classrooms? We have a large number of legacy (4:3) boards, and I'm trying to figure out what to do when we replace projectors ad-hoc, whether to go for 16:10/16:9 and accept the smaller image on the boards, or stick with 4:3. The advantage of 4:3 recently has been that all the PowerPoints prepared for the legacy displays had no trouble at all when we needed to fit them onto 1366x768 netbooks inside a Yeams window, while those PowerPoints prepared assuming 1080p/16:10 aspect ration were almost unusable. But somewhat obviously as we get more teachers from elsewhere, they will have resources prepared designed around the display resolution/aspect ratios they are used to.... So... how do you do it?

I suspect it is the speed at which sims is generating the files in Office apps that is causing bugs in the interaction of the Office Document Cache and OneDrive Client. Until recently there was the Office Upload Center app that was a more user friendly way to clear this problem. https://support.microsoft.com/en-us/topic/delete-your-office-document-cache-b1d3765e-d71b-4bb8-99ca-acd22c42995d#:~:text=Here%27s%20an%20overview%20of%20the%20process%20to%20delete,sync%20operation%20should%20clear%20up%20any%20%22stuck%22%20files. (a clean boot was never required in my experience)

They made a good call with dotnet back in the early 2000's, but never executed on the web version that should have been possible - probably because schools couldn't afford the server infrastructure required to run it. That said a couple of years later the product that is now just referred to as Bromcom started development and that (eSchool) was dotnet based with both client and server-side components. However, I'm not sure how ESS can deliver a decent ROI for their new owners from where they find themselves now, unless they have the most amazing product development and marketing team, and are unconstrained from monopoly concerns. SIMS.NET is a stable, mature product and over time its market share is gradually being consumed by the platform agnostic cloud based alternatives, all of whom have a multi-year head start.

Get competitive quotes - but Aruba Instant Access points come with my recommendations at the moment. Make sure they know who they are bidding against. Set it and forget it. (Well... update the firmware every so often as device drivers evolve). I think Extreme should be pretty good too - they have the people that made great Wifi back when only Aruba, Chantry and Cisco could do it, and now they own Aerohive too.

We've seen this a bit this last term. Resetting the user profile sometimes works. Emptying the recycle bin (even when there's only a word document in there) also sometimes works. Resetting OneDrive sometimes works. Not downloading the initial file through Chrome sometimes works. Updating the OS and/or the CC install sometimes works. Finally, every so often it turns out that the device actually is out of space, and 'scratch disk full' is accurately reporting the issue. Very frustrating

This surprises me. What bit of the system requires that sort of access?

Better than FMS. Fully web based. Not as feature complete as some more mature modern systems. Has come along in the last few years. Our Business Manager took the view that while it didn't have all the features they might want, it had enough that it worked for us. It was also very low cost compared to the competition. As a previous user / system administrator of PS Financials, I love Access's finance software.

Set it and forget it: BT Complete Wifi. If you have kids then the Orbi kits with the ethernet backhaul option also offer content filtering via Circle.

Yep, Its pretty wonderful. Best network I've had since a Chantry + Propagate derived one back in 2006. It is not controller based, so you need to present the appropriate VLANs to the each switch port that has an AP connected. All SSIDs are presented by all APs in a cluster. If you don't have Airwave the telemetry from the APs rolls over in a few minutes - so I would recommend that. Central offers some telemetry retention too, but not as much as you get with Airwave. But other than that it just works. And when we did a bake-off a couple of years ago their recommended AP for our scenario outperformed the other vendors. They are super easy to install and have the limited lifetime warranty that we are used to from the old HP Procurve days.

Really? When I tried to register for the NCSC service, we were told it wasn't for LA schools apparently

I heard capita realised they were in a hole and have just poached the Half Life 3 team to get it out the door.

Or the share permissions - by default they are read only for users.

Step 0: Confirm you have a full backup of the database and the docstorage folders stored on a device not attached to that server.

Use the SharePoint Migration Tool to migrate the folders. You can run it multiple times across the same sets of folders. Then use the two GPO trick you describe. We're quite heavily into laptops and seating plans so people tend to use the same devices over and over again. Also the set of folder they need for say, Music are different tot he set of folders they need for Maths, so not having the music folders instantly available through Explorer when they are on the maths computers isn't much of a problem. Staff each have a dedicated laptop they carry with them. If they ever use a temporary or shared device they just use the web interface to access files.

We just have a shared mailbox and set the permissions on the Calendar folder. People are instructed to add the calendar. The trouble is that while Outlook is a great way of sharing the school calendar it isn't the best way to build it, so the tools that are used to build it are the ones that are kept up to date, and the Outlook version is just another admin task for them to keep up to date, and so it isn't.

Try Sophos Zap. https://support.sophos.com/support/s/article/KB-000038989?language=en_US

This is on my to do list also. This is where I intend to start: https://oliverkieselbach.com/2019/07/02/the-easy-way-to-deploy-device-certificates-with-intune/

This is on my to do list, but this is where I'd start. https://oliverkieselbach.com/2019/07/02/the-easy-way-to-deploy-device-certificates-with-intune/

We had someone step around this so easily. They probed from a country with lax computer security laws, and as soon as they hit the MFA check they jumped to a disreputable UK data center and logged in from there. We got the alert from the MFA/Suspicious Country, but didn't react in time to stop at least one screenful of emails being read.