Jokrr

Hi All, Have attached the OSDCloud setup doc. For the enrolment script and app registration here is a good starting point The autopilot setup is fairly straight forward have done a brief outline below: Create a dynamic device group and use the below dynamic rule to add the devices with the appropriate group tag to the group (Replacing GroupTag with the correct tag) (device.devicePhysicalIds -any _ -eq "[OrderID]:GroupTag") then create a deployment profile and assign it to the device group. Our specific setup is 4 dynamic groups per school (Staff 1-2-1, Staff Shared, Student 1-2-1, Student Shared) I would also recommend setting up device categories and filters from the get go as it makes granular assignment of apps/policies much easier also helps to keep the environment tidy instead of using groups for e.g. IT Suites Hope that helps Edugeek_OSDCloud.pdf

We have gone through 2 iterations of intune/autopilot imaging and enrollment at our MAT the original method was a Windows 11 USB and manually running the get-windowsautopilotinfo script to upload the device to autopilot and add to a static device group which had the relevant profile assigned. Our V2 method uses a Zero-Touch deployment of OSDCloud to install Windows 11, Drivers (Right now just Dell,HP, Intel Ethernet and Intel WiFi) and copy across our enrollment script which is pretty much Get-WindowsAutopilotInfo with azure app registration and 2 prompts for Grouptag and Asset Tag (Group tag and Asset tag are combined to name device e.g. ABC-1234). The enrollment profiles are now based on dynamic groups which use the grouptag to assign devices which has proven a lot faster and easier for the techs. The process now looks pretty much like below: Device is PXE booted to OSDCloud (Averages about 15 minutes for device to be imaged) Tech runs the enrollment script and reboots the device after the script finishes Tech then either pre-provision with autopilot (Win Key x5) or logs into the device (user-driven join) and waits for ESP to complete Device is basically ready to go after ESP the only thing the tech needs to do is change the primary user to the correct staff/student or make sure the primary user is blank if its a shared device It took a fair bit of testing to get it to its current state but feedback has been great from the techs. Happy to share the setup doc I made if you'd like?

Another +1 for SnipeIT we host on digital ocean for our MAT it costs something silly like £3-4 a month and puts us in a much better position compared to the spreadsheets we was using before. Its also really customisable happy to give an overview of our setup.

Good point! Going to add some extras to keep in the server room as cold spares.

Hi All, A secondary school has joined our trust and their network is in need of a refresh I was originally looking at Aruba kit but looks to be out of reach budget wise so considering Unifi but we've only done relatively small scale deployments in our primary schools so looking for a bit of guidance/sanity check! The schools current network consists of the below: Smoothwall S9 (Filter and Firewall) 2x HP ProCurve 5406ZL (Core Switches) 15x HP ProCurve 2520G-24-PoE 9x HP ProCurve 2610-48 Most of the edge switches have dual SFP links back to the core and all the switches are at max capacity. My current idea is below: Smoothwall S9 (Filter and Firewall) (Kept until renewal then move firewall to the EFG and Filtering to Lightspeed) 1x Unifi WAN Switch RJ45 2x Unifi Enterprise Fortress Gateway (Shadow Mode) (For the time being just doing routing/vlan management and management of the switches via Network ) 2x Unifi Hi-Capacity Aggregation 30x Unifi Pro Max 48 PoE The idea is to improve the existing resilience, bring the school up to a 10Gig backbone and add some extra capacity to the edge. I think this covers all the bases but if anyone has any guidance or spots any issues let me know I would greatly appreciate it!

We are looking for a way to track usage of an IT Suite to make a case that is needs to be made bookable as it currently has some of the better machines in the school but is only timetabled for 1 lesson a week and not available for booking when it isn't tabled to a class. So really just looking for a way to track logins and show that IT Suite X is being used XX% of the time whilst IT Suite Y is only being X% of the time to make the case to SLT as we are currently relying on a laptop trolley full of some incredibly old devices for the subjects that realistically would need access to an IT Suite. Hope this makes sense!

Hi All, One of the primary schools in our trust is still on a CC4 Network (Moving to intune over summer!) I am currently having an issue where the RMStaff (T:) shared drive dissapears if the user account is added to a security group which maps the winpool drive (M:) the temporary fix that the site lead implemented is adding the affected user to the local administrators group which then allows the T: drive to map correctly obviously its not a great fix to keep in place! I have reviewed permissions on the shares, the registry policies and location drive mappings and I can't see anything which would cause the drive to not map so kind of just reaching out for any ideas or if i've missed anything obvious