_techie_

Interesting you mention a 30 second delay - we had this with the latest version of the extension on Windows. They did give us a workaround however, which seems to work. With the SSO, are you expecting the Smoothwall browser app to just sign in without prompts - and identifying the user correctly? We are getting a prompt when launching Smoothwall browser, to open authenticator app which prompts to sign into entra (not proper SSO IMHO). Whilst not terrible - it doesn't really perform as proper SSO - like the extension in Edge on Windows. I guess I am just impatient perhaps. Your plist file is close to my working version so thats good news.

SAND Academies Trust - https://www.sandmat.uk/ Closing Date 11:59pm, 26th Mar 2025 The Role The role will involve on-site visits to provide support to end users where required, and for planned maintenance and improvements to infrastructure. End user support will be provided via the Service Desk using a ticketing system, utilising remote assistance tools where possible. Further details are available in the job description. As a shared IT Service covering multiple sites, you will be expected to hold a full driving licence and have access to a vehicle. We offer a hybrid working pattern, with four days per week on-site, and one day remote, although you must live within a commutable distance of the schools. The Trust We are passionate that every child deserves the very best education. As a partnership we will: improve outcomes, opportunities and life chances for children and young people, offer more / wider support for their families and share and develop staff expertise. https://mynewterm.com/jobs/17239/EDV-2025-SAT-32329

Yes please! I will try your version of the Smoothwall Browser config if you can provide it!

Do you mean that Safari picks up the SSO, or Smoothwall browser? What is your App Config looking like on the Smoothwall browser end? Are you installing the company portal on Shared devices? The company portal doesn't seem to work as when prompted to install a management profile, it fails. Is this even necessary? Since we had enrolled them as supervised, why the additional layer of management? Thanks

I found doing any TLS inspection on traffic destined for Senso's servers caused issues. Specifying URL's and ports in your firewall, and setting them to be not TLS inspected helped massively. If you have a firewall that can do traffic priority, setting it to live/video/realtime helps speed up the initial connection massively. There are still some issues with the product, don't get me wrong, but the above really helps. Thanks Mark

Hi. Does SSO on Intune managed shared iPads ever work? I am trying to improve experience with SSO on Apple's version of Shared iPads: The iPads are setup using an enrollment profile that is declared as shared with: 1) No User Affinity 2) Users must login to the device using a UPN/email address and password for the first time, then can setup a 6 digit iPad pass code thats tied to their school apple ID. 3) Our Apple School Tenant is federated against our M365 Tenant. Apparently according to Microsoft's documentation, just the Microsoft Authenticator App is required to achieve SSO, and their M365 Apps such as Outlook, Powerpoint, OneDrive and Teams etc (VPP versions) should just work, due to them being MSAL apps. So far, this doesn't seem to work! Users are prompted again, to enter their email address when opening any of the above apps. I have also enabled the attached policy, following the Microsoft documentation, but even with or without this, it doesn't seem to work. Any ideas? Thanks

What setting do I need in Intune to lock iOS Devices to one WiFi network? Cheers

Hi. Not getting that far sadly, the drive fills up. Might try on a smaller sub-section. I'm thinking that StorageSense isn't kicking in properly to manage the storage yet. I'll re-test and come back to you. Thanks

Hi. We have a newly onboarded school as part of our MAT, which we have setup a Team for. We have private channels with members assigned to them. When syncing a larger number of files, we are experiencing local storage filling up on the client computers to the point that the device becomes unusable. For the time being we have advised no Teams syncing at present. However in testing I am still getting the same issue. There seems to be a disconnect in the OneDrive client, and the users profile size.. Profile shows 2.0GB for example, whilst 500GB drive is full, all under SANDMAT. It initially takes a while to do the processing on 100,000+ files. We have files on demand enabled, I'm not sure why its caching such a large number of files, and filling the local storage. Once the drive fills up, the OneDrive client refuses to continue processing any files (well obvs!). Any ideas? Am I missing something on Intune/Team setup for the channels? The general channel with a few files in worked fine... Thanks

I am trying to use the online method of Get-WindowsAutoPilotInfo (using the -Online) switch, but current policy dictates that all global admin users have security key only as the only method for 2FA, which I would agree is good security practice. However 2FA prompts initiated by powershell commands currently don't always support FIDO2 MFA support. We are using AutoPilotOOBE module at Windows OOBE/Setup, however I have tried running Get-WindowsAutoPilotInfo.ps1 -Online within a running version of Windows 10 to get the Sign in Prompt, but get stuck at the 2FA part of the process with a window that continually loops at "Working". Is anyone else in the same situation, and how have you implemented a work-around? I can only think of having a single named location (the office at work) to possibly allow a second method for 2FA (such as Authenticator App) for directory admins only for Intune/Autopilot App. Looking for some guidance here, as using the CSV method is a little slow... Cheers

Remote desktop with HTML5 gateway to a RDS Farm - We use Parallels for Remote access for staff anyway, so just bolt onto this...

The Templates settings then administrative templates seem to work way more reliably for me too, I've been designing an updated set of configurations using them and it seems way more reliable....

Yes, disabling the Senso service improves matters instantly! I will try the fix on one machine EDIT - their powershell command seems to fix it. We are waiting however - Senso need to fix their stuff

Hi. We have had several (but not everyone) reporting that outlook is performing slowly. This seems to be affecting users more with outlook in non-cached mode, but I have had users on the same laptop/workstation on InTune reporting the same issue. I experienced the same issue myself approx 45 mins ago, but had to close Access down in order to delete my OST file.... Once done, and re-created my profile, everything is now working as expected. We are a smoothwall school btw, and apparently not the only one having problems! Anyone else?

My colleague started work on it before I started. It's been disappointing I must say comparative to things like Mosyle.