Olliedawg

Well I disabled the printer GPO - back to normal now! Can't believe it was something so simple.. Also strange that this GPO has been set for at least the past 2 weeks & has been fine.

Don't have any start up scripts running for that set of PC's - I do have a printer applied via group policy for that room which I added a couple of weeks ago, ready for the printer to be moved into there during first week of summer, it is indeed offline at the moment. I will try disabling that & see if there is any difference, hasn't seemed to cause any issues up until the power outage though (unless its a coincidence!)

I’ll give that a go tomorrow - I’ve never used this “verbose mode” before but a quick google & it sounds very useful Thank you

Had a power outage yesterday which lasted for over an hour (yippiee!). Gracefully powered down all of our VM's/Hosts etc. before the UPS's gave way. Rebooted back up once power was on & everything is looking golden. I thought I was in the all clear with no issues until this morning came around. We have a typing club every morning in one of our IT rooms which is staffed by a TA. The TA comes to my office and says that almost half of the computers are stuck on a blue screen and just say "Please wait". They had been stuck in this state for over 10 minutes. The IT room was free for most of the day so I had plenty of time to investigate. I powered on all of the machines & it seems very sporadic with regards the boot times. The fastest now being around 2 minutes, with the worst being nearly 15 minutes to get past the "please wait" screen. This did not happen at all before the power outage. Boot time prior to this was sub 1 minute to get to the windows login screen, everytime, on every machine. Once the machines boot into windows, its business as usual, no issues to report whatsoever. These machines in question are HP EliteOne 800 G1 AIO's & are around 6 years old now. What I have tried on a few machines to rectify the long "please wait" screen - - Ran Memory tests (all machines I tested passed) - Checked SMART info for storage (all good..) - Re-image with MDT - Re-image with MDT on a new SSD Even with a new storage drive, and a fresh reimage, I still get presented by the lovely "please wait" screen for a couple of minutes! Has anyone else experienced anything like this before? *edit* I do have fast startup disabled, although this has been disabled for a long while before these issues became present.

We had one recently where the subject requested "Everything" we had on the subject, and her two children (both ex students) in paper format!.. Our DPO contacted them and as someone above said, mentioned costs due to the massive scale of the amount of admin work. Subject then narrowed down her request.

I will be doing this also once we are able to get back in.

Another major incident reported today Bromcom Cloud Services Status "Users unable to login"

Oh dear! Sounds like its ready to kick the bucket! How old is that unit?

APC Smart UPS 3000 Been using these for years, never let me down. *edit typo*

Haven’t got as far as that yet, I just know the graphics department are after some iPads, so just preparing myself haha! Can you recommend anywhere to purchase?

Will take a look thank you. Completely unfamiliar with apple devices in education but shouldn’t be too much of a task!

Looking to invest into some apple products for the school - starting off with 10ipads for the graphics department. How would you manage these? I currently have no apple products on my network at all. I have heard of Jamf - is this worth it for 10 devices?

I have had a look there & do not have any policies set. It does allow me to create a policy though. I know I don't have conditional access, so would have to just blanket apply the policy to all users. Edit: If i go to devices > monitor > encryption report - this shows no data which is strange. I have no devices showing within intune apart from staff mobile phones. Although I can see the azure registered devices within azure AD

Had a dig around and no policies are set with regards to drive encryption - I assume by default this means devices can be / are automatically encrypted if they meet criteria? I can't disable registering completely as we use intune for mobile devices. (albeit we are on a basic azure licence). Going to have a play around with policies tomorrow to try and prevent this from happening again. So in theory, if a student uses a family members laptop for an evening for example, and adds their microsoft account via workplace join, this may encrypt the drive?!? In my opinion, this would make a little more sense on a device which is Azure AD JOINED, or even Hybrid Azure Joined - not on a Azure AD Registered/Workplace device... I spoke to the student & showed him the image, he can recall seeing that & most likely just whizzed through and pressed ok. I have asked the parent to check any other drives on the home PC / any external drives which may have been connected during the time the student signed in, with a possibility that the bitlocker key is stored on there (doubt it..). I'm not even sure if it prompts the user to save the encryption key file at all. Luckily the parent has stated that the drive which has been encrypted held nothing of importance - although I now may have to assist the parent with reinstalling windows over the encrypted drive

Brilliant... I will get them to check, although i'm not hopeful that the key will be there.. Need to look at disabling this as this could cause some serious headaches.

Really hope someone can help here or shed some light on how this happened Had a parent come in & say that they let their child use their computer to sign into their Microsoft account & now when they turn the computer on, it asks for a bitlocker key!! This is their personal computer. I asked for as many details as possible but the parent didn't seem to know much about it. They just said the student had "signed in" to access teams. I have checked the students azure account and can see the connected device - No bitlocker key stored - perfect!! Edit : Device is not azure ad joined, rather azure ad registered.

Just out of interest, why would local profiles not work for you? I was in a similar position, we used to use roaming profiles and we had some pretty large ones, the largest being 9GB. Now use local profiles, longest login time now is ~just under 2 minutes, when logging into a new machine.

Brilliant, thank you will look into.

Does anyone know how can I allow non admins (standard users) to update the 4matrix desktop client? Currently, when prompting for an update it opens up UAC and asks for admin creds. I'd ideally like users to be able to update this themselves.

ICT Direct Insight UK NS Optimum Everything ICT (not sure if they do refurbs) To name a few

Any ideas where I can get some sort of protective cover? I can guarantee a football or something would end up being booted at it at some point!

Looking to put a Smart TV in each of our PE changing rooms, with the ability to mirror from a trusted device (teacher iPad etc..) - these would need some sort of perspex protective screen / encasing (wouldnt last 5 minutes otherwise!). Does anyone know any companies which supply these sorts of protective covers for TV's?

Following this thread as i'm also looking at A3

I can vouch for SigninApp. Lots of features, easy to manage, once set up it requires little to no maintenance

What does this mean for orgs who only have the basic 0365 edu/ Azure AD Basic Edu? Ours is still set to disabled (not recommended) - we do not have conditional access as we do not have P1 etc.. I have MFA enabled per user for our IT Staff. I am looking to move to Microsoft 365 A3 in the future, to give us P1 bundled in + o365 desktop apps.