Caffeine11

Thank you everyone for taking the time to reply. I was looking at a golden image because being a school we have a lot of software and I found it easier to setup a user profile as I wanted it and then use defprof to copy that profile to the default profile as there were a lot of registry settings to find if I wanted to use group policy. However, Windows 10 and the Windows Store are now making things a lot more difficult. There also seem to be mixed views about using sysprep and copyprofile with Windows 10. However, I have installed MDT and I am beginning to think that using it and group policy may save more time in the longer term. Our machines come with the OS pre installed so I am looking at just installing applications as MDT will deal with exe files. I used the custom task sequence as I like to try and understand what is happening and the post OS task sequence has a lot of steps that I don't understand yet. Currently, my task only has three steps, disable UAC, install applications, and enable UAC. It works until there is a reboot when it stops at the login screen. If I log in manually and rerun litetouch.vbs it continues. I am currently searching for a resolution to this issue. When litetouch runs, it asks me for the password for the local admin account so I was assuming it would auto logon with that and then continue running the script.

We are trying to make a golden image of Windows 10. According to the internet, we should: use a virtual machine use audit mode don't join the pc to a domain disable windows update as updates, particularly feature updates, can cause sysprep to fail disable windows store as windows store updates can cause sysprep to fail Are you advised to do anything else when trying to produce a golden image of windows 10?

I have found that if you double click the image to enlarge it, it will then copy and paste into Word.

In Chrome, right click, copy image. In Word 2010, right click, paste, nothing happens. After a bit of internet searching, this appears to be a chrome issue (a quick test with IE worked as expected). It will work if you paste into Microsoft Paint and then copy/paste into Word or if you paste special and pick device independent bitmap. However, we would like to keep it as simple as possible as we are a primary school. Goggle support just said it was a windows issue. Is there a fix for this?

OK. Thank you.

I am testing WDT. I have got Windows 10 1809 and have created a Windows PE USB stick. When I boot from the USB stick, I get asked a series of questions: On the first screen (Welcome), the keyboard layout is US not UK. On another screen (Locale and Time), the language settings and time zone are all US. I want to see all the screens but I want to change the default answers on some of them. For example, on Locale and Time, I want the language settings and time zone to be UK. Where are these settings stored in MDT? Secondly, when the OS is installed, the window is named "IT Organisation". I presume I can change this to our school name?

Thank you everyone for taking the time to reply. I will have a look at your suggestions.

I am the sole IT person for a federation of two primary schools and I am looking for recommendations for software that could make my life easier. We have Windows Server 2012 r2 and are currently using: Windows 10 deployment, images using Window Deployment Services. It's OK as I decided on one image for all the machines. Deploying Software, using Active Directory. It's OK if you have an msi. Have heard good things about PDQ Deploy. Don't know the educational pricing yet. Deploying Updates, using WSUS. I am also interested in the following: Network Monitoring. None. At the moment, I have no idea where the bottlenecks in our network are. We are looking at replacing our wifi at both sites this year which is also an opportunity to look at the network switches in our cabinets. My understanding is that if we get switches that support it, we can get software that will monitor our network and show us how it is performing. Is it worth it? Does it give you stats you can understand or is it for network gurus only? Ticketing System, don't have one. Telephone calls, notes on my desk, email. We recently started using CPOMS and our SENCO is really pleased because their workload can now be "seen" by the number of cases on the system. I am wondering if a ticketing system would quantify what I do. Secondly, has a ticketing system helped you prioritise your jobs effectively? It would need to be something simple like, name, location, item affected, description of fault. The ticketing system from Spiceworks seems to be a popular choice. Something that included an FAQ section and/or how to videos would be useful. We use Google Apps for Education. Has anyone used any of the ticketing systems in their Market Place? Office 365. We are using Google Apps for Education. However, just about everybody seems to be using the free for schools version of Office 365, Microsoft Teams etc. Has anyone moved from Google to Office 365? Worth the effort? Easier to manage? However, we use custom fonts in Word that match our handwriting scheme. Obviously you can save to One Drive but I assume the file would not display correctly when opened in the cloud version of Word. Google Classroom. Does the job. The main issue we have had is getting users onto classroom on their own device. Once they are on we are OK. With Covid, there are lots of suppliers offering "easy to use" online learning platforms but surely the problem is getting the user on in the first place. Has your learning platform been easy for users to access? A bit off topic as it is hardware: Chromebooks. We are using desktops/laptops and ipads. Are Chromebooks easier to manage? The reason I am asking is that we are still using a lot of software that will not load on a Chromebook. However, as more things move to the cloud, this is less of a problem. Finally, if this is in the wrong topic or too much for one post, let me know.

I have been looking at various how tos on the Internet and various forum posts and I am still confused. In a nutshell, on a Windows 10 laptop, if I choose Check online for updates from Microsoft Update, I am getting updates that do not seem to be in WSUS. In Options, Products and Classifications, under the Classifications tab, Internet searches suggest that you tick them all except drivers. The confusion is under products. We only have Windows 10 on laptops and desktops and the earliest version on site is 1809 so do I just tick everything for version 1809 and later? Secondly, in Computers, if I choose a particular computer and then click Updates Needed, I get a report listing the updates needed. I can click on Not Approved and approve the update but I only seem to be able to do this one update at time. Is there a quicker way of doing this? If I go to Updates, and do Unapproved failed or needed on just about every Update View I can think of, I am getting no updates needing approval. Is this because my choices under Products and Classifications are wrong?

We have DFE Windows devices with Cisco Umbrella installed so the Internet is filtered for pupils isolating at home. The licensing for Cisco Umbrella is not per device but is a site licence. The last time our school was closed, only a small number of parents requested a device. Can anyone recommend a filtering solution for Windows that is charged on a per device basis?

Here is an update. A have been testing AC2 with Mosyle only to discover that if you use AC2, the user can remove the MDM profile so that is a no go for us. According to what I have read about Apple School Manager, I can use AC2 to add devices with iOS 11 or higher but again, the user has 30 days to remove the MDM profile so we would have to hold them back for 30 days. Finally, to use iOS 14 with AC2 and Profile Manager, we will have to update to Catalina but I think this is the only way to get an MDM profile that cannot be removed. It appears that you are forced to buy your iPads from an Apple Authorised Reseller if you want all the features of your MDM to work. Therefore, since we have only 9 new iPads to worry about, we have set them up manually and used Screen Time with a passcode to lock out what we can.

According to what I have very quickly read about Apple School Manager, it only supports devices running iOS 13 or higher? Our iPads are stuck on iOS 9. I am a little confused as it appears to connect to your MDM so what exactly does it do? I am currently installing High Sierra on our server as if I go straight to Catalina, it will apparently wipe my server data. There is apparently an upgrade path from High Sierra to Catalina. However, I will be checking if I can still manage iOS 9 before going any further. There is not a lot I can do with iOS 9 but it is better then physically having to go to the iPad to do it. We only have 9 pads running iOS 14 so I have emailed Mosyle to see if I can manually add them to their MDM as they appear to be the only company to offer a free version and this may be the quickest option. Since I have only unboxed one ipad for testing, I am also considering asking the Dfe if I can return them at our cost and get the ready to go laptops instead.

Thank you, I will have a look at them.

We have never had DEP. Because we are a primary with relatively few ipads, we just used Configurator 1. We then had to use Configurator 2 and I am still trying to get my head around working with blueprints. We got Profile Manager because it was a one off payment instead of a high installation fee followed by so much per year per device. We have just got some ipads from the Dfe which is why I am dealing with iOS 14. I was busy and should have found the time to go through the Dfe website because the laptops they supply arrive ready to go and I would have advised the school to order them instead. I have spoken to another tech in another school and I am upgrading to Mojave as that will apparently resolve the issue.

We have been using Configurator 2 and Profile Manager to manage our iPads. I have found nothing on the Internet to suggest that iOS 14 does not work with Profile Manager. However, when I use configurator to install my profiles, one will not install, and the device does not appear in Profile Manager but shows as supervised in Configurator. If I manually go to https://servername.domain.local/mydevices I get "the connection is not private, certificate not trusted". Obviously I can choose to continue to the website and I can log in to mydevices and get the option to enroll. I tap enroll and download the profile.I go to Settings, General, Profiles and tap install, then Trust and the install fails with "The server certificate for .../devicemanagement/api/device/mdm_checkin" is invalid. Obviously it is something to do with a certificate which works fine with iOS 12 and under. An Internet search suggests that Apple made some changes to how certificates work in iOS 13.Before I proceed further, can someone please confirm that Profile Manager will work with iOS 14 and the solution is to generate a new certificate. When I connected our first iOS 12 device to Configurator, I was prompted to install some updates. When I connected iOS 14, I was not prompted to install any updates.