titch

Hi All We have had 1:1 intune devices for a long time but this summer we have made the jump to get our office and classroom teacher PCs intune only. All gone smoothly but I have missed a key policy that doesn't seem to work on shared intuned PCs. With intuned enrolled PCs it seems you can either have OneDrive silently syncing known folder or fast user switching enabled to allow multiple users but not both together with the classic "switch user"..... We unfortunately need both working. I have seen some work arounds but also some horror stories. There won't be tons of places where multiple users will login but this will definitely happen. Has anyone used a bodge of policies and seen it work fine? And on the flip side has anyone used a bodge of policies and wants to scare me off? Next year we are going docks and laptops everyone so shouldn't be an issue but until then I don't want to trade off this 2 important features that use to work happily through AD/GPOs Thanks

@Dos_BoxWhen will the links be sent out please? Not sure if ive missed the link going out? Thanks

Currently moving from old Aerohive wireless which is now extreme. Its about 10 years old so it's on its last legs. Would probably dont use half the features but it does need to be reliable. Also on Palo Alto firewall which has had a few CVEs after the past year as well. Would you mind expanding on this if you have some experience, please? Thanks

Thanks for this. We did discuss recently about moving away from Kieth Johnson due to the lack of "cloud" option. It would certainly make the licensing and install/file management much more managaeable but our timetabler still loves the product. Another concern was now timetabler has now been bought out by the key, the key may look to incorporate the product directly into Arbor. Do you think this could be a possibility?

Sorry question spans several forums but I thought it was best placed here. Anyone have any experience of going in 2 footed with fortinet. The demos look really good and I like the simplicity of a unified gui etc. I know the firewalls are good but the wireless seems to get mixed reviews. Not heard anyone using the switching. We haven't got a huge network but all the kids have 1:1 devices so wifi it's needs to be reliable. Any reviews positive or negative would be really helpful.

Sorry, not much help with any of the questions, but could I have a look at your script for Exam WritePad settings? Doing the same as you but have until the summer to get sorted. Thanks

Not sure where we stand with this, but I know there are some fairly well-versed people on here. We had a SAR for a previous pupil and so we pulled all the info as requested. They have come back and claimed inaccuracies in some of the many entries in myconcern. From a safeguarding angle we are always advised to log anything of concern on there however small. The claims are that the some of the comments from other pupils and staff are unverified witch is likely true but schools not being a court of law probably every record in my concern is not 100 percent verified and often holds opinions and recollections of other pupils and staffs best efforts of accuracy. I am worried if we react to this request, it is a slippery slope to our safeguarding system being useless. That have stated the below as reasoning: These records, detailed below, are in clear breach of the UK GDPR principles of accuracy, fairness, and data minimisation under Article 5, and their retention causes significant distress and potential harm to our child. Pursuant to Articles 16 and 17 of the UK GDPR, we require corrective action as outlined below. Any comments or advice greatly appreciated.

Hi all. Really struggling with the deployment/licensing involved with this software via Intune. The support docs seem all over the place, and having the peace the process together. We have a site licence but really don't know how to it this way with the documentation provided Has anyone done this themselves? Any advice appreciated!

Did you ever figure this out and what it means for your KMS licences?

https://www.bbc.co.uk/news/articles/czr36828mg1o Anyone know what system they are using in Edinburgh? Sounds like they arent managing the devices and whatever filtering they are using is single browser based and kids are just installing another browser?

This is a good plan as it only affects those who are turning it off. Ive found the event for the trigger but cant get the wifi on via a script.... Gonna scratch my head for a bit

Cheers Davr. The only reason to turn wifi off is for those odd times whens an AP becomes sticky of something just isn't working correctly. A quick off on of wifi generally does the trick.

We currently have a 1:1 scheme and use sensor for classroom management. Some of the little angels like to find online games and then turn their wifi off so the teacher cant see what they are doing on senso. They do need to be able to turn wifi off every now again so I don't want block the ability to do it but wondering if there's a way of scheduling the wifi to turn on every few minutes. I think this would be enough to deter them from doing it but I don't want it to impact performance of their devices really. Devices are all intune Any thoughts on how this may be achieved?

Cheers. Its then getting that info to a centralised spreadsheet that's gonna be the next tricky bit.

We have a 1:1 device scheme here and pupils have laptops that are intuned. Senso allows us to visually look at rough laptop percentages but Im trying to create something that each morning will pull down laptop battery percentages so I can mark those that haven't brought their laptops in charged into our behaviour management system which is essentially 2 strikes and a detention. Any Ideas on how I could do this easily? Or possible via senso?

Securly had this issue when using it's DNS/smartpac. They have had to disable YouTube filtering. Have a look here https://securly.status.io/

Have you considered If/How you will replace nps/radius without an onsite setup? Is your firewall capable of DHCP/DNS roles that are needed and the ability to HA the firewall/router/adva/Line etc. We are in the same boat and are moving away from NPS entirely.

Thanks for this. Would you say cloud drive mapper is better for large photo archives etc? Weve got a decent connection but its never gonna be as good as LAN. We have constant problems with the department uploading photos and videos etc and then them losing them which is partly user based but also down to the onedrive sync client to some extent. Im not sure how many times I have said have you checked onedrive is running when they cant find a file.

We've successfully moved over 100 percent to sharepoint for our file shares. Most staff are fine with this but our marketing department are really not doing well with managing their large photo collection. This is partly due to the end users not listening and adjusting their ways of working but If I am not being really honest the file management of something like a photo library is not as good when syncing with a cloud location. Is anyone successfully getting on with managing large amounts of photos in sharepoint? Would clouddrivermapper be any better with this kind of scenario. Would we be better off biting the bullet and getting a nas within school and losing all the great extra features of sharepoint for photo storage? Any advice or experience is gratefully received.

We have a 1:1 device scheme currently and am trying to streamline the onboarding as best I can. Currently, our pupils need 2 touches of the device with about an hour in between to allow the device polices etc to apply. Once pupils are logged in their user wifi policy takes over and they can auto-join the BYOD network without putting in credentials. But prior to this we have to add them to a guest network manually which is annoying. Is there any solution to this? We have company that enroll the devices for us but would love for them to somehow come out of the box, ready to connect to our onboarding SSID so this stage doesn't have to be done manually. Any ideas or tips for smoother onboarding are greatly appreciated!

Has anyone got an update or definitive answer on this? The pro licence seems prohibitive if you want people to take an interest in the dashboards that are being created. Realistically we are only going to have 1 person creating dashboards and then lots of people viewing them. Works out thousands a year to do this if everyone has a pro licence. Any advice welcome!

Hi all We've got a standard windows DHCP server dishing out IPs to our different VLANs. All working fine and as it should. We are getting closer and closer to being fully intune and what I would naively call "zero trust" We would like to move to having our Untrusted VLAN having it's IPs dished out by our firewall instead (Palo Alto). We aren't currently in a position to power down our windows DHCP server yet so we would end up with 2 devices dishes out IPs albeit on 2 different VLANs. This would then mean our domain joined devices stay being dished IPs by our windows server and any Untrusted or unknown devices get a straight through to the internet via the firewall which has also given it an IP. Does this sound sensible/possible How can I set this up without killing my network with 2 DHCP servers [emoji848] Thanks In advance

I've used several over the years and the best by far is Governorhub by the key. I would personally try and keep it separate to your tenant entirely I just feel like there's too much crossover.

Interesting and clever but not sure I like it......

Sorry not wanting to derail the thread but does anyone know how this feature works. I use it all the time and it's really handy but it does scare me!