mjhardisty

GPO Is: User Config > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 10 > Advanced > Security > Do not save encrypted pages to disk

The results report will provide you any errors in processing Group Policy, will show you any delays in processing policies, which policies were applied and denied, etc.

In your lab environment/server hat about creating a template VM in Hyper-V - can you then delete the existing machines and then clone the template VM overnight?

Have you executed a Group Policy Results report on the device for a user?

OK, so a search for C:, or entering C: into the start menu will access it?

Good afternoon all. Has anyone any experience with InTune and restricting access to local drives for a potential student policy? We obviously want to restrict access, but allow students the ability to use the OneDrive Files-on-Demand client. Has anyone implemented this successfully?

There is a nice section on the Learn website: https://learn.microsoft.com/en-us/azure/lab-services/classroom-labs-scenarios The Learn environment has its own sandbox so you can learn how to setup and configure VMs.

Doesn't look like there is a regex facility in the search ... https://learn.microsoft.com/en-us/sharepoint/governance/searching-and-using-keywords-in-the-ediscovery-center Its worth giving the space option a try, though it may disregard it in the actual query.

I think you can force install of Windows 11 onto any incompatible device from an ISO build. As @hellgate24 says, I would think you get an unsupported message in Windows Update. It may also mean that future updates may not apply and incompatibility with the new security features that Windows 11 delivers. Going forward it will be an issue for all schools who have to upgrade their estates to be compatible before Windows 10 EoL in 2025.

OK, so does the same code update another folder in "Shared Documents" not General? ie. "Shared Documents/Test" And if you create a folder in "General" can you update that using the same code, i.e "Shared Documents/General/Test"? General might be protected or work differently since its a special folder.

I've done: $targetFolderBind = Resolve-PnPFolder -SiteRelativePath "$sharepoint_folder/$folder_name" Then done: Set-PnpFolderPermission -List $sharepoint_folder -Identity $targetFolderBind -User "XX@XX" -AddRole "Read"

But you can in the root of the Shared Document folder? That's where my command works OK. I'll run some test code to see if I can get it to work.

The licence is Microsoft 365 A5 which gives the required Azure AD Plan 2. https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/microsoft-365-education Just make sure those teachers aren't being counted in your standard A3 or whatever licencing so you aren't paying twice. Then its down to lab costs!

Started to look at Azure Labs. I think going forward this would be the safest and best option for teaching and learning. https://azure.microsoft.com/en-us/products/lab-services/ Teachers would need an A5 licence, but they come with 40 free student licences. The machines are isolated from your network, but have O365 authentication, can be built from a default image, have access to the internet so students could use GitHub or OneDrive or whatever to access their files. Teachers have control of machines, so can spin up more machines, reset them, etc, etc. The cost of running a classroom over a year is around £500 - all depends on the number of machines and have often they are "active".

I agree with nicholab. A school in our MAT has just started to look at implementing computing. The safest and easiest way would be to spin up a lab environment for students in Azure. https://azure.microsoft.com/en-us/products/lab-services/ Completely isolated from your network, they can still access Github or whatever to setup projects, access OneDrive Files-on-Demand, etc. Teachers can control classrooms, machines can be wiped and rebuilt/reset quickly and students can log into them from home too and continue to work and experiment. I think a paid A5 licence is required for the teacher, but that comes with 40 free student licences. The cost of running a class size lab I think would come out around £500/year.

Is there no facility in the schools MIS to do this? SIMS InTouch for example? Another alternative might be to use Office365 if available to setup an email enabled security group and fire out a Microsoft Form?

What are you using to image? SCCM? Could a PowerShell script be written at the end of the task sequence?

I use Set-PnpFolderPermission command to update permissions on folders within a SharePoint document library without issue.

have you tried resetting the Windows Update components and software stores? net stop wuauserv net stop cryptSvc net stop bits net stop msiserver Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old Ren C:\Windows\System32\catroot2 Catroot2.old net start wuauserv net start cryptSvc net start bits net start msiserver Then giving it another go? There is also the Windows Update troubleshooter available.

Or try disabling and re-enabling the network adapter in Windows and see if the correct connectivity is resumed.

We do not allow students to lock computers, but restart/shutdown is then available on the login screen. Depending on your environment, switch user could cause performance issues over time in ever decreasing resources. Our acceptable use policy is clear to students that they are responsible for their own logins and should log out when the PC is not in use.

It'll certainly run Roblox at 1000FPS!

Yes, the start binary will need to be stored where it is accessible.

We've had a few fail this way - raised it with Microsoft Surface support and they replaced them - worth a shot.

Also ensure that any exceptionables are banned on your student file server by turning on File Screening in File Server Resource Management.