gsk

Hi All, I’ve just started with a place who heavily rely on sharing generic accounts such as [email protected] I want to delegate these generic mailboxes to users so that nobody is logging in directly as ‘invoices@‘. I’ve used GAM to do the delegation but the problem that was identified within 5 mins was: When they log in directly they have the option to save all attachments (eg invoices) to a Drive. When they are using it as a delegated mailbox, this option disappears. What am I doing wrong? Or what can I do to workaround whatever’s wrong? Thanks,

And there's the problem. A lot of what MS seem to be doing at the moment is trying to upsell additional subscriptions. User-based MFA works fine for a lot of places and give the granularity to have MFA for staff but not students. Anyone else feel the tide might be about to turn on cloud-first in education?

Hi All, Apologies if this has already been highlighted. I had a quick look and couldn't see anything. Paragraph 142 of the 2023 KCSIE (Keeping Children Safe In Education) recommends schools use the SWGFL Filtering Test website (Test Your Internet Filter | SWGfL Test Filtering) to check that categories are filtered including CSA, Extremist Content and Adult Content. Doing this test will use your local device to check websites. One of which is a well-known adult site. Therefore the firewall log will show that the device the test was performed from will have attempted to access that site. It caught us out when we were reviewing the filtering logs and took a little while to link it back to the test which had been performed through the site above. I would anticipate that on reading KCSIE, DSLs and Governors may use that site to check for themselves that filtering is working and therefore generate these entries in the filtering logs. Clearly, if the wider context isn't known, a wild goose chase will likely follow with differing outcomes if the fact that a legitimate ping has occurred from using that test isn't known. Hopefully this will be useful to others to have this in the back of their mind. Thanks,

Because I want them to provide a managed firewall and be familiar with Securly so that they can force all traffic through Securly even if someone specifies their own DNS servers. Quite right - we could split the purchase, but I want someone who's familiar with Securly to manage the firewall. The other reason is that the previous IT Manager commissioned a 5 year Leased Line contract so I need someone to do firewall and filtering but not the connection. Don't fancy having three suppliers, one for connection, one for firewall, and one for filtering. Thanks,

Hi All, I don't know if I'm just having a brain-blank here, but I can't figure out how to find a UK education broadband supplier that partners with Securly. Does anyone have any reccommendations? Thanks,

Sorry, should have been more specific. This is for security groups or mail-enabled security groups excluded from the global address book.

Hi All, I'm looking for a way for users to be able to query either a group to see its members or a user to see the groups it is a member of. I'd like to make this available to non-tech users so would like to ideally keep it so that they have no Admin Roles within M365, or if that's not possible, just grant the lowest possible level to allow what we want to do. Any thoughts or help would be much appreciated. Thanks,

Hi All, I was just wondering if anyone would be willing to share their DPIA for Securus or any other software being used for monitoring the screens of Staff and Students? Thanks,

Hi All, We've got DMARC and MTA-STS set up with TLS reporting, but I wanted a way where I could put a tag in the subject line of an incoming email that wasn't sent using TLS. This is so that, rather than blocking an incoming message outright, it's at least tagged for caution so that the user is aware. Does anyone have any thoughts on how to achieve this in Microsoft 365? Thanks,

Hi All, Been working on this for a while and not really getting anywhere useful. Children and local admins can log on to a PC and use the Online Pictures and Translate functions fine. Staff can't. I've checked filtering and it's allowing the right URLs through and isn't denying any, but it just appears as though it can't get out on to the internet from within office - PowerPoint specifically. The only thing I can think of is GPOs but can't see anything in there that should affect it. If anyone has come across this before and has a quick answer it would be much appreciated! Thanks,

Hi, Just wanted to update this and say that turning off, removing all cables and turning back on with nothing plugged in fixed the problem. Then used the existing cables to connect up and all was fine again.

Thanks. I used to do this when we first moved to 64 bit systems. I'd forgotten about that. - - - Updated - - - Thanks. I used to do this when we first moved to 64 bit systems. I'd forgotten about that. - - - Updated - - - This is great and is what I've done. Much tidier. Thanks.

Hi All, I'm looking for a way to set up GPP Shortcuts for Chrome so that it will open regardless of whether it is the x86 version or x64 version of Chrome that is installed. While we're on the subject, is there a way to make a 'Word' Shortcut open whichever version of Word is installed whether its 2016, 2019 or 2021? Thanks,

Hi All, my preferred method of managing users is to have a spreadsheet with students info in containing their usernames and passwords for all the various platforms we use. This means that its really easy to keep things consistent accross platforms and can be mail-merged into stickers for the kids diaries or reminder letters for parents. I've added another tab that uses each students info to create single line powershell commands so that I have a column for "command to add user to distribution list" and it will take their username and year group from other columns and put those values in the right place in the command. This works really well for us because it means we can copy/paste 1 command for a new child or 70 for a new year group intake. We can disable an individual user or the whole class/year/school. It means we can do that without having copies of data to make CSVs that feed into a 'for each' powershell script. So with the backstory over, I'm trying to add users to a security group for a single sign on application that won't accept job title or department as an attribute to assign people to year groups. I've created the security groups and have the group object IDs that can be found with a lookup in excel. The follow is the most concise script I've found but I'd like to turn it from: $group = get-msolgroup | where {$_.Displayname -eq “StudentSecurityGroup”} $users = get-msoluser -MaxResults 2000 -Title "*Intake*" | select userprincipalname,objectid | where {$_.title -like “*Intake*”} $users | foreach {add-msolgroupmember -groupobjectid $group.objectid -groupmembertype “user” -GroupMemberObjectId $_.objectid} into something that is one line with values taken from excel, perhaps resembling this: Get-AzureADUser -ObjectID [email protected] | select objectid | add-msolgroupmember -groupobjectid 88733a83-427e-4bb0-b3e7-ae77ee1e9258 -groupmembertype “user” -GroupMemberObjectId objectid I've put some time into getting my head round it, but I'm getting stuck on what to search for that will help me get to the answer I need. Any help would be much appreciated. Thanks,

That's great thanks. I also added in -MailNickname value so it didn't have the default random string Once this has been run and student added the team owner is told that there are students waiting to join and has to Activate them. Any way to bypass/automate that? Thanks,

Does this still allow team owners to create/delete channels or does it block it for Owners and Members? Thanks,

Hi All, Just had this problem so went googling. Just to add that this can be resolved by creating a new text file in c:\Windows and then rename it to OmrConfig.ini Then grant full permissions to a user/group for that file only and sims will write to the file and populate it as needed. Thanks

Still getting this happen on the odd machine- mostly a pain with non-domain or mobile laptops connecting to ‘foreign’ network printers. What’s the long term fix?

Certainly worth a go, thanks. I’ll try new cables when I’m on site tomorrow. Thanks.

Having the same issue here and logged a support call last Friday but not heard anything. Does anyone know what the solution is? Thanks.

There are 80 iPads. Yes there is a caching server. It's an LA school but it uses an RM connection rather than an LA enforced RBC. I wasn't able to see much at all on the dashboard other than that wifi experience was at around 98%. I changed back to the classic view and it gives far more useful information. There are access points with high retry rates (Don't know what this actually means or how to fix it yet but at least it's a thread to pull on!) and there are acknowledgements that some devices aren't resolving DNS requests - but no clue as to why just yet, so any ideas appreciated! Only the cloud-based RM Safetynet that applies to the whole network.

I've checked the bands and there are a few older iPads on the 2.4GHz band but the vast majority of all devices (laptops or iPads) are on 5GHz. It definitely seems to be something the apple devices don't like - although I should probably keep an open mind so I don't go down a dead end. Thanks,

I've pushed out a change to the WiFi profile on the iPads through MDM and it's still happening. Thanks for the replies. It's much appreciated, as I'm really struggling with what to try next.

Thanks, I'll check that out, I haven't looked down that route yet. I suspect not, for a couple of reasons: 1)The windows laptops are brand new HP ProBooks with AX wireless cards so should (although I've not checked yet) be using 5g most of the time 2)The issue seems to be ipad related across the site and I would expect interference to be a problem in some areas but not all I'll let you know what I find re the use of bands though to see if that adds any pieces to the puzzle. Thanks,

They’re all up to date and the issues have carried over from previous updates. Thank you for replying.