DGrice

Just read this on the official Microsoft support page: "Microsoft is updating the Secure Boot certificates originally issued in 2011 to ensure Windows devices continue to verify trusted boot software. These older certificates begin expiring in June 2026. Devices that haven’t received the newer 2023 certificates will continue to start and operate normally, and standard Windows updates will continue to install. However, these devices will no longer be able to receive new security protections for the early boot process, including updates to Windows Boot Manager, Secure Boot databases, revocation lists, or mitigations for newly discovered boot level vulnerabilities. " I shouldn't think this would cause any immediate concern, but definitely something to check!

This is more of an ask than anything else! Could someone respond to this when google allows administrators to grant student access specifically to the Gemini "Learn" tool, independent of other Gemini services. Implementing this restricted access would be a major step forward for institutional integration for schools and students. Thanks!

Just buy yourself a few cheap FIDO2 keys and use those. Best practices to have 2FA it in place anyway.

We had a similar issue a while ago, it was infuriating. using AD lockout we determined the user was trying to authenticate 50+ times a day. Turns out their AD password expired before maternity leave and upon coming back, her mobile phone was still trying to connect to the wifi with an old password. Hope this helps.

Hardware permitting, have you tried using intel's built in graphics command centre? We managed a similar setup using this.

Netsupport seems to do a great job for us. It includes an energy monitor which allows us to check session times.

I second this query.