klop

Thank you, new sponsors are suggesting to ditch the existing email accounts and just go with the new. We have agreed to keep them running for a little while and set them to forward to the new. I'm not comfortable with Powershell so guess its the forwarding option

Hi, we are in the process of becoming taken over by a new sponsor. Our new sponsors are suggesting we cease using our current email accounts and be setup within their Ofiice 365 account so we all may use the same domain, ourschoolname.sponsor.academy - our existing accounts are ourschoolname.com I would like to know if there is an easy way to transfer our domain, complete with all mailboxes over to their O365 tenancy(?) and use their domain, perhaps keeping our existing as an alias? I have looked online and there appears to be third party companies that offer a migration service - has anyone used this? Cost will be an issue though. We are only a small school, around 100 members of staff. Pupils have had very limited use of emails so not worried about migrating them - just staff accounts. Thanks

1. It appears not 2. It appears yes 3. No idea!

Thank you all - will phone around today and get some quotes.

Hi, we are on our last year of a three year Microsoft OVS originally purchased through Misco. Loking for recommendations for a new supplier to quote for our final year. Thanks

We use Bitlocker (though there may be some laptops still running truecrypt which we used before it ceased) We use an individual password for each laptop that the teacher chooses. Password must be min of 10 characters and contain lower & upper case, symbol and number(s) This password is different from their AD login. Staff have a little grumble at first, but I often help them come up with something memorable and it seems to have worked so far. I keep a log of all encryption passwords in case I need to use them. Our new sponsors to be will not allow allow laptops to be taken from school - teachers must provide their own devices to work on anything at home. Waiting to see how that pans out!

Hi all, We push our wifi settings to our iPad via apple configurator 2 We then use Meraki to manage However I cannot get the outlook app to work on the iPad due to our necessity to use the proxy settings for filtering I had to tether it to my phone to even get the app to install. Anyone know a fix please?? I can use the built in email app - that works ok but would prefer to use Outlook app. Thanks

If we were do not force complexity into staff passwords I would prefer that we continued with the password expiry - at least something is then in place. Having read much professional guidance on using the expiry policy it states adding other options to secure - options that we do not have currently in place. However, it is hopefully under discussion. But if staff are unable to keep their passwords secure themselves, whether it is changed regularly or not it may be considered that they must be changed just to try to keep them from being known by others. If staff will not (and do not) choose complex passwords by choice and we choose not to force them - then other options need to be considered - what would you do? If you know that staff are sharing their passwords and never changing them then wouldn't you consider that to be unsecure? Additionally we have at least one member of staff who does have fixed passwords for other logins and does still write those passwords down in their special password book - not secure either really!? Basically - you cannot win - at least not in at place!

It doesn't - that is the realisation... at least not without other factors included. What would make for a secure password is staff acceptance that a password should be secure. We were instructed to set the password change during an audit - and previous members of the SLT (who have now left) were insistent that we kept it. I am hoping to enforce complexity and perhaps retain the password life to 90 days (from 42 I believe) - however I am still waiting for a reply.

I'm guessing you have faith and trust in your colleagues to use strong passwords... and to let you know if they feel it is compromised and needs to be changed. Unfortunately I do not have any faith or trust - complexity is not activated here at present and many of the passwords I see are very weak. One member of staff has our town name as a password (it's changed now) and couldn't see why this wasn't secure for O365. Others have their children's name or perhaps the month name maybe followed by a number and that is it. The school policy states passwords should be strong and gives examples - which is simply not followed. To be honest I'm tired of the moaning here relating to passwords - either resulting from me suggesting someone's isn't strong enough or the groan that they have to be changed - which was dictated to us during an audit sometime back. So.. once and for all I want a decision from the SLT and I will put that in place. Staff will still moan at me regardless - but maybe I'm past caring!

Brilliant - thank you

Oaktech - do you know if disabling historic passwords stops a user changing the number at the end? ie, P@ssword!1 would meet length and complexity but could they then use P@ssword!2 P@ssword!3 P@ssword!4 etc ?? Thanks

O365 still sets a 90 day expiration as default though - can you point me to a Microsoft page suggesting to disable it please? I'd like to show it to our head / deputy head and maybe we'll stop the need for staff to change it. At the very least we'll change it from 40 days to 90 I think Thanks

I believe if you set up accounts direct in O365 you have the option to remove password expiration? But that it is set as default to 90 days? Staff here would be very happy if we removed the need for them to change their password every 40ish days. I'm waiting on replies from our deputy & head to see what their initial thoughts are.

Thanks everyone - had a look using the fine grained and it looks pretty straight forward and simple to do. I've sent an email to our head and deputy (who is also our ict coordinator) expressing my concerns re passwords and what I think we should do to make them secure. I await their replies! Thanks again :-)