Sam_Brown

* Meru * Server 2k8 NAP server

I'm all for best practice. I admit this is all new for me so any advice would be massively appreciated. How would I publish the certificate seeing as it's BYOD and not a domain joined device? Do I set this up on the NSP server or WiFi controller? Also I don't know exactly what certificate it's referring to!

On the Wireless Controller I'm guessing?

We have RADIUS set up and our WiFi uses it to authenticate devices onto the network. We have three rules set up. 1) School Computers WiFi - If Computer is member of Domain Computers allow it to connect. 2) Student BYOD - Asks for User and Pass. If user is member of Student Group allow it to connect. 3) Staff BYOD - As above but if Staff allow to connect. Recently opened up the Student BYOD scheme to more students and for phones and iPads it works fine. The issue is with Windows Devices. If it's Windows 7 it will ask for User and Pass but will give a generic error message stating it was unable to connect. Looking on the logs on the NPS server we have an entry which states: "Certificate user or computer provided as proof of identity chains to an enterprise root certificate authority that is not trusted by the NPS server" However Windows 8 laptops can connect with no issues as all! Seems to be an issue with both Staff and Student BYOD. Any ideas?

Bitlocker here on 200+ laptops. No issues. Recovery key gets stored in AD and you can add bitlockering as part of your build process if you use MDT \ SCCM so it's all automated.

I'm a complete noob when it comes to Macs so anything pointing me in the right direction is a positive for me. Thanks.

We are currently trialing a piece of software called Academic Calendar which has SIMS integration. I believe it's only in BETA at the moment but we are using it. Might be worth getting in contact with them. Academic Calendar Home Page

I solved this particular issue. I always like to respond with how I did things in case someone else has the same issue in the future and googles this topic. Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J. When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder. Select Preferences/com.apple.sidebarlists.plist. Still not sure on how to edit the file or make it available to everyone as default. If someone could shine some light on that I'd be really appreciative.

It appears sidebar.plists is missing in 9.1. Can anyone confirm?

Only got 15 so doing by hand at the moment. Will look to move to Deployment Studio in the future so editing the plist could be done by hand on a machine by machine basis for the time being. How do I configure sidebarlists.plist?

Morning All, Anyone know of a way to configure the Finder Sidebar and customise what shows up. Looking to show the students home areas in the sidebar and want to remove the option to save to any other areas. I can do this on a user by user basis but anyway to do it for everyone logging in automatically?

Morning All, Have 30 Chrome Books and manage them via the Google. Have a printer that I have added to Cloud Print (via Paper Cut) and this appears in the admin console on Google. I'm then able to share the printer and assign it to our Chrome Books. The issue is when a student logs in and the printer is selected and printed from nothing happens! If I manually share the same printer and the student adds it it works fine. Tried all sorts and no luck. Anyone else had similar issues? Only difference I can see is if it's pushed out by the Google Admin console show up as "Local Destinations" and if I manually share the same printer it it comes up as "Google Cloud Print".

Bog standard VPN through Server 2008. Staff laptops can connect using a shortcut and once in it's like they are at work. For staff with other devices we have Ericom which has an HTML5 client so can run on iPAD with no issues.

I'll also add that by creating your own queries you're running the risk of bringing the SQL server grinding to a halt unless you're adapt in optimizing your queries.

From a technical standpoint there aren't any big issues I can think of. When we have exams or training sessions we'll use IMPERO to log into all the computers in a room with a generic guest account.

Oh wow. I didn't expect to win anything!

Unfortunately we don't have any. We have a newer model of board. Sorry.

VPP will only really help if you're purchasing apps in quantities of 20 or more. If you've only got 10 iPads Apple Configurator will probably be your best bet. It's not too difficult to use and you can lock things down more than just setting up the iPads manually. I'll leave others to give you the specifics. I'm sure we've a few people on here with decent experience on this.

How did you do this? I don't recall seeing an option for this under group policy. - - - Updated - - - I get the feeling that once they stick it in presentation mode they won't take it out again!

I had this issue at two sites. On one site the fix worked and the other it didn't. I never did get it to work at the other. Sorry for not being any help.

Do you use an MDM at all? We can remotely remove passcodes from our iPads using ours.

Just set GPO to lock computers after X minutes to prevent people leaving their screens unlocked and noticed that even when Powerpoints and Videos are showing it will still lock. Does anyone know of a way to make sure they don't lock when powerpoints or videos are playing?

You can change a setting in group policy to enable it to encrypt without a TPM. Edge Pereira's Blog: How to Enable Bitlocker for Windows 8 without TPM It is possible to save the recovery keys to AD. We do this when encrypting ours. Although we do ours as part of a SCCM Task Sequence so not sure how you'd go about configuring it yourself. This might help: Group Policy Settings for BitLocker Save to AD | Windows 8 content from Windows IT Pro

Cheers. Never heard of that before.

What's UDI?