Blue_Cookeh

I don't think a personal device is going to be enrolled in MDM, though I've had this done before for a few devices at a previous job. You can either take it to the Apple Store with proof of purchase (receipt, usually needs the serial number on it), or you can do an online chat/call Apple Care who will ask you to email the details and a scan of the proof of purchase to them, who will then pass it to a specialist team to deal with. Last time I did it, it took about 4 days via the online chat method.

I'm not sure how you're going to get SSO into HWB (I'm not well versed on what happens in Wales, sorry) since it sounds as if they have an Office365 tenant they want you to be a part of, am I right? I mean, in our setup we have Windows 10 laptops that are on our domain as normal. These then use DirectAccess (a new fangled VPN basically) to connect back into our school. Now, we run Azure AD Connect on our domain controllers to sync all our Active Directory users into Office365 and provide single sign on. This works flawlessly, but I'm not sure you'd ever be able to do it with HWB unless they specifically set up a service with something like ADFS so everyone could federate their domains with their HWB Office365 tenant. I'm not sure what you're asking is going to be possible, to be honest. It sounds like other people's policies are going to make your life unnecessarily difficult.

Have you got some part numbers on the bottom of that machine? Usually along with the serial numbers. VeryPC aren't an OEM so you can usually find *something* around if you have the original number.

Antennas, maybe?

It's also interesting they left out one of the biggest players in the Wireless market today... Ubiquiti. Definitely taken with a hu-ugeeeeeeeeeee pinch of salt here.

Interesting - when we had a quote (both with hardware, +1 for Smoothwall as a VM) Sophos came out vastly cheaper over 3 years. I've done this twice now (our renewal just came up for Sophos) and it was still the same :/

You're looking at Azure AD for the login, and InTune policies (which acts more like MDM) for a GPO replacement. How about connecting devices back to your on-prem network using DirectAccess? You keep your own AD domain and policies that way, with the connectivity. It works very well for a few of our staff that are based at other schools around the borough. A bit more difficult with Windows 7 (but doable) and very easy with Windows 10.

We're ripping out all our 24 port switches and replacing them with 48 with PoE. Our cab space is becoming very limited in all our locations, so anything I can do to free up a U or two is happening! Generally each switch will have two uplinks (two LACP bonds to give us x2 2Gb uplinks) to different switches in our network.

Just wondering, have you considered DirectAccess? It's a lot easier for end users to use and far more robust.

We have a mix of HP and Juniper switches, focusing on shifting over to Juniper. I'd have liked to try the UniFi switches but I feel like they need to mature a bit more. We've gone all in with the Ubiquiti APs (started out with UAPs four or five years ago, now moving to AP AC Lites) and have just rolled out a 20 camera UniFi CCTV system using a mixture of the G3 and G3 Dome cameras. Very very pleased so far! As with other access points in school environments, you need to tune them properly. Turn off B speeds if you can, turn down power levels and spread your APs out accordingly. If you do it properly these little beasts can handle anything you throw at them. I feel like the people that have problems might not have planned their rollout properly.

They're being used as real currency on a lot of nefarious websites, but also some legit physical shops (mainly hipster places, tattoo shops etc, still not common). BTC has a distinct advantage over real cash in that you can use it while being totally anonymous if you're careful enough.

We use Gamma through @Millgate as of early last year. Would highly recommend

I have a 'maintenance' PowerShell script that runs to do various things. Firstly, it'll take the latest RM Integris export and create the users in AD, forces an Azure AD Connect sync and ensures there's an Office365 license assigned. Folder redirection automatically creates the necessary user folders on first logon.

Grab the PXE.log file from the Logs folder in SCCM's ProgramFiles folder. Have a look through it or post it here for us.

As Sibrows said, make sure it's actually deployed to the right collection or Unknown Computers. Secondly, if you've tried PXE booting it before and it failed, you may need to clear the PXE deployments. Right click the collection the TS is deployed to and then click "Clear required PXE deployments" (I think that's what it is) and wait a minute before trying the PXE boot again.

I could be completely wrong, but I shouldn't think this is possible. When you start a deployment via PXE or ConfigMgr Client the device can check to see if it already exists in SCCM via it's SMBIOS GUID, whereas if you're using an offline deployment method it wont have that same connection back to SCCM. The only way I can think of doing it is if you create a customised HTA wizard during the WinPE phase, something like this https://www.windows-noob.com/forums/topic/3476-introducing-the-windows-noobcom-frontend-hta-ver-10/

Wow, that sounds seriously unprofessional. They were a contender for our CCTV system, glad we went over to Ubiquiti now.

Printers Phones Digital Signage Interactive TVs/whiteboards Projectors CCTV Door access control Automated overnight Windows deployments from SCCM cable doesn't seem like such a waste anymore

That's looking pretty slick... I might be stealing that one off you. Do you mind posting the XML file you used?

1. Are you trying to export a start menu with no tiles? That won't work (grrr... I want an empty start menu!!!) 2. Try making your changes, then logging off and then back on before exporting - that seemed to fix it for me

How were the backups taken?

I've got unlimited license for Office365 Edu Pro Plus on our Office365 account - I thought all schools got this? I certainly haven't done anything to link our volume licensing account and Office365 tenant - surely MS weren't *that* on the ball... *shrugs* @Arthur I thought that too, but then why would Microsoft be releasing tools for us to do device-based activation using the click-to-run version? Unless you can license devices through Office365 now?

Last I heard it was customers with data held in North America.

What am I missing here? I've just signed up for Device Based activation (we use Office365 in our school) and it looks like I can now deploy Office365 ProPlus across our school with it. What are the licensing implications? We currently have Office 2016 on our EES agreement, yet here I've just been given Office365 ProPlus for no cost.

The two of us manage to chew through about 7-800GB a month, and we both work full time! That could be because we rely on streaming rather than TV, though.