Rundc

Morning all, Roughly 70 APs across the the school and we're looking at replacing the current system (Extreme with old AP130s). Failry new to this and with a whole host of different options im wondering what the best way to get 3 quotes for a replacement solution would be, how would you tackle this? Predictive survey and like for like rpelacement? Stump up the cash for an ekahau survey and then send this out for a design to be drawn up? Any help, advice and pointers appreciated Thanks

I've been looking at ours this week, we're at 17Tb, 11Tb of that is users onedrive, we need to start looking at retention policies for ONeDrive and Sharepoint, especially with the school wanting to mve the rest of our storage from on-prem!

We had issues last year with Sophos and Senso, both use a WFP driver and they weren't playing ball... Senso were very helpful in identifying the problem and then working with Sophos to resove it... during that period we disabled the Senso WFP driver

13.5 Year old core here.

Evening all, Anyone got any experience with guest access on Extreme Cloud IQ? The way the system I’ve inherited is implemented doesn’t work for the school! After selecting the guest Wi-Fi network visitors are presented a landing page where they input their email address, they receive and email, reconnect and put the pin in from the email. The biggest problem we have is mobile coverage is poor and Ona regular basis Vitoria can’t access their email from their phone without leaving the building to get reception. Anyone with Extreme or used extreme have any advice other than setting a static password and rotating on a regular basis, which in all honesty I’m not keen on doing! Thanks

Thanks OP for the thread, I'm in the same boat here with a 5412ZL, we've been advised to replace, but considering going down the route of purchasing a spare after reading this thread!

I didn't deploy it using the machine wide installer, I deployed it via the M365 apps package, but my understanding is that the package deploys the machine wide insatller then at each user log on it installs teams, therefore there's a delay. So at the minute if we turn off 'new' teams which is standard for our tenant, bar IT, users will only have 2 apps... is there anyway to prevent the ms teams 'app' being pushed by microsoft, or how do we remove this as part of our deployment or even using a GPO?

This is what i've discoverted this morning, Personal version, school or work then the new school or work. Comments re 23H2 are interesting... I may create a 23H2 image and see what results I get!

No worries! Glad im not the only one, we only have the machine wide insatller and Teams showing in control panel, Im looking for a way to deploy cleanly, for teachers we have a redirected start menu, which I was going to scrap for win11 but now i'm haviong second thoughs as at least we redirect the start menu I can display only one version

How are you guys deploying teams? We're just testing windows 11 and upgrading office from 2019 to M365 apps... so I removed our machine wide installer and all seemed to be good. A few patch cycles later and I have teams listed 3 times in the start menu, New Teams I presume i becuase i turned it on for myself in our tenant, anyone know how to stop this from happening or where each instance is coming from?

I was having a similar issue recently with pearson, our issue was related to filtering, whitelisted the site and all has been good since!

Morning All, Currently going through implementing a managed 1-2-1 device scheme for year 7, these Devices will have senso installed. Basically when the devices are on the school network I want certain policies applied, ad when they're not I want different policies applied. My initial thoughts we're to do this via groups using LIKE/NOTLIKE and our public IP, however senso told me that IP caching (presumably on the back end) can cause issues with this. Wondering if any of you use Senso in this kind of scenario and how you configuire it? I thought about schedules but that seems like a lot of manual work scheduling around holidays etc! Thanks

thanks for you help... I think I have it where I need it - Bar not having enough licenses

Fantastic... DEP Enrollment profile created as well, assigned as the default profile and showing assigned against the device

thanks, I've cretaed a new profile and for starters just added the domain details under directory. Do i now need an automated device enrollment profile?

Morning All, The situation I have is the school im at has ASM, JAMF School and some iPads, however we now have a need to deploy a macbook... I'm not too familiar with JAMF and at present don't have an awful lot of time to spend getting this deployed or research too in depth how to do it so i'm looking to pull on your expertise here! At the moment i'd just the like the basics if possible i.e. get the macbook to a place where it's domain joined so I can handover to the user, how do I acheive this or where do I start? So far I have added the device to ASM using apple configurator and assigned to JAMF as the MDM Any help greatly appreciated Thanks

I've been through the article, but SMTP relay still not working... I was receiving Event ID's 12014 MSExchangeFrontEndTransport before insatlling the cert and running the hybrid configuration wizard and now i'm getting 12023 which references an old cert Can anyone help?

Thanks, I had found thisd article but couldn't find the cert.... Found the cert and will install and test.... fingers crossed!

Hey, I've recently inherited a Microsoft school, generally I've been working with google schools and not had much experience in the o365 enviroment. Anyway it looks like SMTP relay is failing for this school, doing some digging it looks to have started recently after a new SSL certificate was insatlled, when testing the connector thats configured for this I receive a message along the lines of "450 4.4.317 Cannot connect to remote server [Message=451 5.7.3 STARTTLS is required to send mail]" Am I right in thinking the new SSL cert is the cause of this and if so how do I rectify it?

Set their access to "contributor", this allows them to add and edit files/folders but not remove Im sure thats how we have it set and those staff with Contributor permissions have "Bin" and "Move to" options greyed out

When you delegate access to a mailbox using GAM the user does need to to accept the delegation and does not receive a notification. If you share the calendar the person you share the calendar to will receive a notification that the calendar has been shared with them

We've only recently iplemented MFA on our google accounts, acheived utilising P1 licenses on Azure AD and syncing accounts for SSO. Anyway this presented a problem where we have shared mailboxes/accounts in gmail where specific functions will have 2,3,4 users have the email address and password to the generic account, this accounts are currently exluded from MFA. I haven't worked with google previoulsy and wondered what others do for shared mailboxes in gogole workspace? I was looking at setting up delegated access meaning staff would be forced to use their own MFA to access these accounts, the generic accounts can then be secured with more complex passwords and hopefully MFA. With delegated access can you delegate to a group email address and have all users as part of that group have access, can that group be maintained in AD and synced? How do you deal with the need for shared mailboxes in google workspace?

We use google and access gmail via chrome, when staff receive an eml file they just click on the file and gmail opens it.

I've inherited a google school and reviewing controls in place for Staff using personal devices to access work data (specifically google workspace) We have all sorts of polcies in place around what Staff should do like making sure the device is encrypted and on a supported OS verion with latest security updates etc. What technical controls have you implemented to secure data even further i.e. wiping accounts when staff leave and how do you achieve this?

Who are you all using to deliver your service? Likely be rpelacing ours this year and looking for potential to spec up a new service Very likely going cloud and removing the PBX on each site Thanks