Scorpio

Yes, will need to tweak the install, that can be done from the XML file cant it, IIRC ? Cheers

Hi Sorry to drag an older thread up but were looking into Device based activation for our schools. How does it work in the sense of how does it know you are licensed, i.e. if you had 50 machines to license, would it work off the 1 pupil license or does it need 50 pupil user licenses, does it convert them ? What if you have Exchange online? Any insight into this would be great, and I assume it works for UK based Tenants as the FAQ i read said US only... Thanks Scorpz

Ah ok, that would work didnt know there was such thing, how does that work for Exchange Online, I will have a read but if anyone uses device activation for office 365 let us know how it is, but also if using user based exchange online too, as id be interested in how that would work license wise. Thanks.

Thanks but isn't this the other way around - i.e. multiple users on 1 computer, not 1 user on multiple computers at the same time which is our predicament ? Scorpz

Hi All How does this work when you have multiple users on a Mandatory Profile using the same account login and Office 365 as titled... im aware that office 365 is free for the pupils if you buy ProPlus for all the faculty and Staff, so have these questions which im unsure about: 1. how does the activation work and how does Office 365 behave when multiple users are logged into the same account ? 2. Ive read mandatory profiles do not allow the office to activate and keeps asking to login as its a read only profile, is there anyway around this ? Possible activating as normal profile but then changing to mandatory profile afterwards? How does this behave or is it even possible. ? 3. How does Microsoft know you have licensed all your staff, is it based on the trust system? I assume if the staff member doesn't use office then they will not require a license as they wont be able to access it anyway without a valid account even if they use a PC with it on. Any pointers or advice would be great. Thanks. Scorpz

Does nobody use mail flow rules with any groups then ? If anyone has any clarification on this, let me know thanks. S

Hi We have a small school we are about to migrate to office 365, we're quite new to Exchange Online but have used on some of our other clients using basic setups. We are now all setup before moving over the MX records, but we want to apply some mail flow rules, such as restrict external emails for a group of users, etc. The groups are confusing as some show in the Office 365 admin centre, and some dont in Exchange admin centre. For example I have created a security group in the O365 Admin Centre and added the users I want to restrict and use in the mail flow rule, but they don't show when I go to mail flow rules nor do they show under Exchange Admin > Recipients > Groups The only option is to mail enable to Security group for it to show when using the mail flow rules, we don't want it to be mail enabled as we have no requirement for this. How do you guys go about this, do they have to be mail enabled and then just hide the group.... why is there an option for Security Group and Mail Enabled Security Group in 0365 Admin but then in Exchange Admin there is just the option for Mail Enabled Security Group and it only shows them too even though there is some non mail enabled Security Groups? Many Thanks S

Would like to know this too, just migrating some users to 10 and would like to know whether to use Classic Shell or now or use customised Widows 10 start menu using XML which looks like there been a list of nightmares with it. Cheers

Thanks im hoping it will working with the setup above, ie VLANS and Different subnets / routing. Anyone else is free to add anything they have used Cheers Scorpz

Any others people know of that may work... ? Cheers Scorpz

Hi We have VLANs for our different networks, such are the Wired LAN, Guest and Wifi Networks, Problems is we have also iPads which are managed with Meraki and no cable access, we have tried wireless transfer apps but seems they have to be on the same subnet to work which when a computer is on the wired network and the iPad on the WiFi they are on 2 different IPs. Anyone have any apps that work, surely someone has this setup on a similar network, as its quite a standard topology, so maybe you have something else in place, any help would be splendid..... Many Thanks Scorpz

Hi Thanks but they do have other outlets as well such as SAMI UK - Software Asset Management UK They have given cheaper quotes than anyone, not a massive amount but when you add up the number of licenses its a large saving... Anyone else have any experience ? They are MS Authorised. Many Thanks Scorpz

Nobody used these guys at all?

Hi Has anyone used these before are you legit and ok, their prices are the cheapest... anyone got any feedback or experience with them and how are the licences obtained from them, thanks Scorpz

Yeah i read that about books, so with Meraki do you have to install the Meraki Systems Manager app ? Whats the benefit of doing so as so far i havent pushed it out ... Thanks Scorps

Hi Guys Just got my MDM and ASM accounts all setup and ready to go and im just looking at app distribution: I know you can assign apps / Books to a Managed Id or via the actual device where its installed on a Device ID rather than users Apple Managed ID. Do you guys do away with apple managed ID and just use Device Assigned or User or actually even both... Are they both needed? Ive heard there are apps that might not be Device assignable and therefore I assume you need to use user assigned so therefore each iPad will require a user in the form of a managed apple ID created in ASM. Please let me know what the best way of doing it is, the pros and cons etc Many Thanks Scorps

Thanks Brimstone, much what I thought especially after burying my head in all this and reading lots of info... So do i have to enroll for DEP first or ASM ? on the apple website to get a DEP number after finding out the re-seller is apple authorised then give the re-seller or multiple re-sellers (If bought from different) this ID so they can populate the apple devices for us? So we dont need to use standard Apple IDs if just wanting to use Apps (Which ASM distributes using Device Assignment), if icloud is required for the 1:1 user of the iPad (As we cant use shared) the manged apple ids will take care of that for that user on that iPad assigned in ASM. Cheers Scorps

Thanks again for the info Tom, been reading up on this all day ready for next week. But it looks like I first have to check if the devices were purchased after March 2011 and from a DEP Authorised reseller, then i can then enroll the Apple School Manager which is the new DEP /VPP from what i understand and this will enable me to supervise the iPads, this way I dont need configurator or a MAC. I can then put the certs for ASM into Meraki and vice versa and all the devices will import, then i can setup the settings and apps from within Meraki and ASM. If the iPads are not able to be DEP/ASM enrolled then I will either have to get a MiniMac with Configurator 2 on so they can be set to supervised and then managed within Meraki, or just use Meraki and add the devices manually using a browser and code and not have them supervised if we cant get a Mac. I think im correct with the above, I think ASM is the new improved single sign on for DEP /VPP etc. Hopefully ive understood it ok...

Ive just read about about Apple School Manager, which can manage devices side by side with Meraki... this handles the Education Apple IDs so they dont need to be created individually, has anyone used this setup ? If these are 1:1 ipads, as they cant be shared as the are Gen 2 is it better to setup individual Apple IDS for each ? Do i need to use configurator 2? or is this just used to easily import into my MDM, if i dont use Configurator i wont need a Mac, but i will have to import the ipads into the MDM manually ? Is this correct. Once the ipads are in the MDM this means configurator would be redundant ? If the ipads are not DEP enrolled or cant be i cannot enable supervision on them without Configurator, but if I can enroll to DEP then the DEP will enable supervision for me ? Can i set lockdown and option settings on the IPAD using the MDM once the ipads are imported or can the MDM not do this and is this what Configurator is used for?

Hi Tom Thanks for the reply, so are you saying definitely need a mac to manage / clone the tablets? And As these ipads are Gen2 will they not work with Apple Classroom (Or are you saying the mac requires to be gen3 that its installed on ) And what does Meraki do and does this run on Windows or Mac only ? Had another look last night and seems so overly complex and locked into certain ways / software, which is why im not a fan of apple products. If anyone else have some 2pennys to throw in, be more than welcome. Thanks Scorps

Hi Guys Its been a while since Ive posted up here but Ive been given the task of managing 30 Ipads in a school, they are Ipad 2s 16GB, i haven't delved much into management of Tablets and never really on Apple Ipads much, but here i am with a challenge and need some help and advice from you Ipad gurus. Ive read up on DEP, VPP, Meraki and Apple Configurator and its just confused me, which i though it would knowing apple. They want to clone the ipads so they can just reset them after each term maybe and they have all the same apps on then the staff can add to them for the relevant year or class. They dont have a Mac to use to do this so needs to be cloud or windows based and free if possible. They were bought from a reseller such as Ebuyer or Misco, so unsure based on what i have read that they have or can be enrolled to DEP, which i understand is a way of allowing management a certain way. It looks like they all sign into the same apple account ID (Which i thought wasnt allowed) but they look to be setup that way. What is the best way to achieve what they want and to be able to manage or clone them from a central point including apps etc (Which i believe is something to do with VPP), any pointers would be really appreciated to guide me in the right direction. Many Thanks Scorps

So do you guys map H to the root of the Home Share... do you not get them saving all kinds everywhere ? As the policy "don not allow users to save to their root folder" doesnt work when you map the home share, do you hide it ? How do they access downloads ? We map H to Documents within the home share and let people use the home folder on the start menu to access th other folders which is locked for users saving anything in the root by the above policy. Intrigued how others set theirs up. For now ive mapped U to the root and hidden it then changed the policy in Chrome GPO to point to U:\Downloads which works.... something has defo changed as it was working in previous versions.

Started getting this on all my sites now, must be that they have all auto updated as this never happened with previous versions. I can make the user a domain admin and it works but, not as local admin, its not permissions as they can save to the folder no problems and have full control. Clearly google have changed or messed something up. It recognizes the redirected folder as: \\SERVER\UsersData\Homes$\Username\Downloads This worked in the past... Im reluctant to make changes to the network topology to just get this bug working, so just wondering if anyone has found a fix rather than a workaround.? Cant believe nobody is seeing this issue on a grand scale, we dont map the root of the home folder as users can save to it this way making a mess of the redirected folders, we map h:\ directly to documents so users can save directly to documents, downloads can be access from the start menu User Link where users cannot save file too and make a mess. Any other info would be great on this if anyone has a solution other than above. Cheers

Yes this was going to be something I was looking at doing, but our path to downloads is still UNC it wont work we only have H: as my docs the rest is one folder back in the home directory, it used to work so this new update must have a bug in it ... Ive reported it to google but whether or not it gets picked up and fixed i dont know.... Cheers

Latest version of Chrome 45.0.2454.85 m, was ok before this version... but now will not download to UNC paths anymore, it seems to only download to Local disks, If you have a UNC server path in the download location you get DOWNLOAD FAILED, if you tick ask where to download option and save to the same location mapped as a Drive letter it works... There is no policy to make the tick box active for ask for download location, so unless each user is instructed to do the setting so they can by pass the standard UNC downloads folder \\server\users\username\downloads then they cannot download anything without it failing... Anyone else having this? Scorpz