2097

So a new day and a new project to get something going for me . As much as salamander looks great , I only needed it for the Sim’s To MS Teams integration . ( not very cost effective ) So i decided to make my own Created a SIMs report to extract Classes and class lists and teachers into a simple CSV file ( automated using the commandreporter.exe , creates a new one each week with changes) I have a PowerShell script that from the initial CSV file , will create every class , add every teacher as a owner and add every student as a member . It will also create them a "Secure" folder in the General part of the team for them and the teacher to access ( I don’t think salamander does that ). So basically i run two files each Year that will pre-populate my teams etc . What about changes to Sims ? Student Class moves , Class renames , Staff changing . For the moment i dont want this automated as i want to see the changes and make sure the script is working correctly. So I created a simple Web gui that takes the exports from commandreporter and compares them , this then prepares me a pre-made script which i can run and it will move , add , rename and move folders etc. it also reports on all the differences and changes to make sure everything is correct within Sims.

Oh Also forgot it created me another utility , Our Paxton Net2 system , Currently within sixth form we only allow specific people to use the gate system for lunchtime . With Net2 there was no way to Bulk assign a policy ( apart from SQL ) . So i created the following GUI to allow this.

Another one added to the Arsenal , AI redone the original logintracker that was posted on edugeek many years ago . Made a few modifications , Still uses a VBS login and logoff script to monitor logins. Redone the GUI Uses SSO from azure to access the frontend . Reads Entra Logs for laptop logins. Can determine either student or staff via the OU of the user. also added a print PDF button , which makes a nice table in a printable format to print out the logins for admin purposes. Also added a calendar option which allows me to choose a date and show all logins for that specific date.

Sounds very Interesting . I am currently working on a Paxton net2 Bulk policy updater and easy event log exporter into PDF . All Our sixthform kids are imported into Paxton from Entry sign with no policy , and then i get given a list of who i need to manually adjust to allow out of the gate etc . In a few hours i have a working design for Bulk changing

What a wonderful tool it is ! I have been trying to implement some web-tools for a while , but no luck in finding in what i really needed. Until someone on here mentioned using Antigravity for creating a Laptop booking software . Here is some of the Tools i have created so far with it , I host them internal only on Apache/Mysql . Normally secured against a Azure app also SSO . Laptop Booking System - Single / Mass booking - Sims timetable import . Admin Panel logs everything and allows removal etc Photo Booth - Allows self service taking of Photo/Sims iD images using a webcam , AI model removes the background and saves into the correct dimensions for Sims and the ID card software , saves them to a central database and names the files . Gives the user also the ability to download their photo , retake and Countdown etc . AI Check - Its a web based AI checker for staff , supports copied and pasted text and Multiple file uploads , When uploading it will allow the input of a pupil name next to a document so you can assign it . Produces a report for each upload , highlights the text etc . The tool downloads the model into the staffs temporary files on their machine, so its basically a offline AI check Tool.

So you cant event escape their online problems with using the offline program . They need to Start afresh from all this rubbish . create a new platform without using none of the old programming ( and apparent Hybrid working model ) Thanks For this Post though , sorted out the issue here

Thank you , Thats what i did in the end . Blocked all other SSID , Blocked login page of changing the SSID password protected boot menu etc .

Hi , I have researched this and cant really find a answer - We have lots of new laptops trolleys for "Internal Use" only , I want to prevent these ( Laptops ) from being taken home . We currently have a department that do this despite being told not to . I’m trying to find a conditional access policy that prevents this , But it seems Login ( Especially if already Cached ) will still allow them to login fine . Anyone done anything similar ? Thanks

Thanks for the replys . Im using the following https://github.com/SuperDOS/Intune-USB-Creator Basically will autoProvision for me as well as install our base image . The drivers works fine in the PE enviroment , Connects to wifi etc to provision to Intune. its when the image is loaded and windows is basically installed on the laptop and we are at the setup phase its "Lets connect to a network" which i assume is out of the PE enviroment and cannot find the drivers . Its not the standard setup , and i have already DISM slipped the drivers into the image . Edit - I might have slipped the drivers into the incorrect Index - So trying that now with index 3 instead of 1 !

Hi , about to image 100+ intune devices . I have a intune USB install which works great upto the point "Lets connect you to a network" , sadly looks like our wifi drivers are not in the standard setup . I can manually click "Install Driver" and get it from a directory on the USB ( Works fine ) But .. i wanted to keep my steps down to a minimum , i have tried slipping the drivers into the Install.wim image using the DISM command ( It says it added them ) But it never does , i have to still manually select them during the install process. Is there any other methods that i can use ? Thanks !

I had this issue when I first joined the HP G7's , took lots of attempts to get them on the system. With these machines only being able to run Windows 10 , for security they are now removed from our system , Wiped etc . Parents informed that they can keep or return , But no longer supported by us . If anyone wants my script that can remove bulk ( Serials required in a CSV ) # Path to CSV $csvPath = "C:\Scripts\Intune\devices_to_remove.csv" # Connect to Microsoft Graph Connect-MgGraph -Scopes ` "DeviceManagementManagedDevices.ReadWrite.All", "DeviceManagementServiceConfig.ReadWrite.All", "Directory.ReadWrite.All" # Required for Azure AD device removal # Import CSV $devices = Import-Csv $csvPath # Get all Autopilot devices once $autopilotDevices = Get-MgDeviceManagementWindowsAutopilotDeviceIdentity -All # Get all Intune managed devices once $managedDevices = Get-MgDeviceManagementManagedDevice -All # Get all Azure AD devices once $aadDevices = Get-MgDevice -All # Check if the cmdlet exists $wipeCmdletExists = Get-Command Invoke-MgDeviceManagementManagedDeviceWipe -ErrorAction SilentlyContinue foreach ($entry in $devices) { $serial = $entry.SerialNumber.Trim().ToUpper() Write-Host "`nProcessing serial:" $serial # --- Remove from Autopilot --- $apDevice = $autopilotDevices | Where-Object { $_.SerialNumber -and $_.SerialNumber.Trim().ToUpper() -eq $serial } if ($apDevice) { Write-Host "Removing from Autopilot..." Remove-MgDeviceManagementWindowsAutopilotDeviceIdentity -WindowsAutopilotDeviceIdentityId $apDevice.Id Write-Host "Autopilot entry removed" } else { Write-Host "Autopilot device not found" } Start-Sleep -Seconds 5 # small wait for propagation # --- Remove from Azure AD --- $aadDevice = $aadDevices | Where-Object { ($_.devicePhysicalIds -match "SerialNumber:$serial") -or ($_.deviceId -eq $serial) -or ($_.displayName -like "*$serial*") } if ($aadDevice) { Write-Host "Removing device from Azure AD..." foreach ($d in $aadDevice) { Remove-MgDevice -DeviceId $d.Id } Write-Host "Azure AD device removed" } else { Write-Host "Azure AD device not found" } # --- Find Intune managed device --- $managedDevice = $managedDevices | Where-Object { $_.SerialNumber -and $_.SerialNumber.Trim().ToUpper() -eq $serial } if ($managedDevice) { Write-Host "Managed device found:" $managedDevice.DeviceName # --- Send wipe command --- if ($wipeCmdletExists) { Write-Host "Using Invoke-MgDeviceManagementManagedDeviceWipe..." Invoke-MgDeviceManagementManagedDeviceWipe -ManagedDeviceId $managedDevice.Id -KeepEnrollmentData:$false -KeepUserData:$false } else { Write-Host "Cmdlet not available, using direct Graph API request..." $body = @{ keepEnrollmentData = $false keepUserData = $false } | ConvertTo-Json Invoke-MgGraphRequest -Method POST ` -Uri "https://graph.microsoft.com/v1.0/deviceManagement/managedDevices/$($managedDevice.Id)/wipe" ` -Body $body } Write-Host "Wipe command sent" } else { Write-Host "Intune managed device not found for serial:" $serial } Write-Host "-----------------------------" } Write-Host "`nAll devices processed"

What forest functional level are the servers ?

Just checked on the laptop , and the Json isnt actually in that folder. From what i have read i believe it removes it once the first setup runs. I think i have just realised something , "Join a domain" Allows you just to create a local account. Think i will just tell people to do that instead Thanks a lot for your help Luke

Ah yes , Whole point we are getting rid of them . They were the free DFE laptops , They just about ran windows 10 ... Wouldnt have liked to see them running windows 11 ! .

Decided to give a different path a try . We currently use windows 10 education , i am going to change the OS type on my test laptop before wipeing , and then see the screen after