sideone

At least its at a reasonable time. The last one came through as I was putting the children to bed, cheers then.

We're replacing all our old (non-Cyberessentials compliant) Cisco switches with Unifi. Much cheaper and really easy to manage centrally.

We block installing of programs, no admin access given. Do they ask the IT department if they can delete a file every time?

Agreed. "Sorry, that software is unsupported and can't be used".

Create an OWA Policy, then I think you set the no photos with Get-OWAMailboxPolicy | Set-OWAMailboxPolicy -SetPhotoEnabled $False It does take a while to sync down and show on the users.

It is possible, but its fiddly and annoying (and I've forgotten some of the points to set it up). You need to set up an Outlook web app policy which turns the ability to set a profile picture. I think I did this with PowerShell. You then need to allocate this policy to existing accounts, the script for this is something like: Connect-MsolService Connect-AzureAD Connect-ExchangeOnline Connect-Graph $usersOfGroup = Get-MsolGroupMember -GroupObjectId YOUR_GROUP_ID -All foreach ($user in $usersOfGroup) { Get-Mailbox $user.EmailAddress | Set-CASMailbox -OWAMailboxPolicy "NoProfilePhoto" } Then you can run a script to remove any already set photos in that group foreach ($user in $usersOfGroup) { Remove-MgUserPhoto -UserId $user.EmailAddress -ErrorAction SilentlyContinue -ErrorVariable Err if($ERR -ne $null) { Write-Host Photo Not Found for the user $($user.DisplayName) } } We use Salamander to set the OWAMailboxPolicy on new student accounts.

We're going with this, with a minimum length of twelve characters to comply with Cyber Essentials. Minimum password age needs to be at least 1 day else you can have users cycling through passwords to get back to what they had initially if you have "remember X number of previous passwords" set.

Or the 3CX client!

We use the web client rather than the installed version, is that an option?

Competitive

We've been putting ChromeOS Flex on our dinky COVID laptops which works well if (like us) you have spare education licences from recycled Chromebooks. Its £30 per unit if you want to licence them, but ChromeOS Flex works pretty well. We set ours up with Entra SSO so they can use their Windows / 365 accounts to log in.

Are there any unique identifiers on both sheets? You could chop out the role then remove duplicates, but it'll fail if you have more than one staff member with the same first and surname.

Thanks, I'll give it a try

Has anyone successfully blocked the Office 365 Copilot app in Windows 10? We have a set of users set up for exams that have no internet browsers allowed, but need connectivity to save to OneDrive via Word. Currently, these users can open the Office 365 Copilot app that shows in Start Menu and ask away. I've tried the GPO for turning off Copilot (which turns Windows Copilot off OK), and setting Copilot to only be allowed for certain groups in MS Admin > Settings > Integrated Apps. Cheers

My version of "decent" may be different to yours, but I have one of these at home Vortex Pok3r RGB Backlit Black Gaming Keyboard EDIT: want something smaller? https://vortexgear.store/products/core

+1 for Sign In App, ours integrates into Azure AD to pull staff data across.

In that case "𝐒𝐂-𝟗𝟎𝟎" please!

Do you have to take the exam before Friday?

Doesn't this open you up for phishing, as if someone maliciously tries to access one of these accounts from abroad they'll get a "please set up MFA" message and then be able to access.

Thank you. Bit rich for me this close to Christmas, but best of luck. I'd echo eBay and perhaps ~~reddit.com/r/mechanicalkeyboardsuk~~ https://www.reddit.com/r/mechmarket/

ISO or ANSI? What colour and ballpark cost? Cheers

>Is this actually the case still or can devices be enrolled with full control without having to wipe them? Usually it depends on how the devices show up in School Manager. When we purchase our iPads from a reseller, they get added to ASM automatically via Apple Enrollment. You then assign the MDM to the device in ASM, it appears in the MDM as supervised. If the devices don't show up in ASM, you need to manually wipe and add them via a Mac and Apple Configurator 2. They then show up in ASM to be assigned to the MDM. I think you'd have to wipe the device to get it to pick up the new configuration and add itself to the MDM, however.

What do you get if you type echo %windir% in cmd?

I think %windir% puts a \ at the end, so it would resolve to C:\Windows\\System32

I've used a PowerShell script before, try Example 2 here: Get MFA Status with PowerShell (Script Included)