robyholmes

Nice of them to have fully supported modern deployment methods such as Intune.... oh wait. No they only appear to support SCCM and even then don't give any instructions on what detection method to use. And by default, updating Fusion 360 still requires admin rights.

The tablet PC setting is per machine. Don't know where the setting is stored though. Maybe run a capture while setting it to see where it's stored. I suspect it'll be against some 'display id' and 'input id'. So rolling it out on mass would require detecting what each ID is per machine.

I believe many use the 'Pager' field in AD for storing ID Card numbers as well. We did when we first introduced ID cards as you could sync it directly to Papercut. However Office 365 shows this in 'Contact Information', so it had to be removed. While it's not a direct password, once someone works out what the number is, it saves them scanning the physical card to make a copy of it.

I've give it another go then. We push out larger apps by Intune as well, but have a caching server onsite which helps with that. It would only use that for the first Win32 install though for Fusion, as any future updates wouldn't come via Intune but directly from Autodesk. Thanks for advice. I'll put it on the list to be tested and hopefully I can provide an update here with how I managed it in Intune.

How do you find bandwidth this this method? When we first tried this, we had machines dragging our connection down as each machine had to download the whole new version of the software (Normally around 1GB). We found it would drag the connection down, fail part of the download then start again.

Well it's 2026 and I've still not found a solution for moving Fusion 360 into Intune. I've found plenty of guides on how to install it via Intune, but managing it's updates seems to be the problem. So, to bump a over a year old thread, has anyone got a working Intune based method yet?

Has anyone made on progress on this? We're running into a load of problems with printing due to the defaults being changed. We're printing certain that the issue is with this check box being set for staff. But as yet we have still not found any solution to either disabling this by default, or restricting users from changing printing properties (Default ones) to pervert it.

Sounds like we could go Cloud route if we wanted then. We have a 'IOT' network which they could sit on, with staff and students going out to the cloud and back in, it wouldn't need any local cross VLAN access. Thanks for responses. I'll feedback to DT.

Hi All, I'm looking for feedback from schools who currently run BambuLab (WiFi ideally) printers on there school network. They would be use in the DT Department by students. Have you gone with cloud controlled and allowed this via your firewall/web filter? Or have you gone with local only control? Are you using BambuLab slicer or third party (With Bambu connect)? Just looking for any pitfalls and working out an outline plan of how we could get it working before feedback back to DT. Cheers, Rob

I reported to NYES Digital this morning too, who were going to past it onto NyNet. Other schools had already reported it but it was thought it was just another Microsoft issue. But doesn't appear that way to me.

Seeing issues on our NyNet connection (@NorthernNoel relevant to you I suspect as well) but not my home Virgin Media connection. So it seems to me to be ISP related. Downdetector is showing an uptick in issues reported, but not a major one so I suspect this is why. I wonder if a certain backhaul provider is having issues which certain ISPs are using, resulting in traffic having to take the long route round.

You just have to keep in mind that it's both a 'Best Practice' and a 'You need to buy X to be secure'. So yes it's good to review it, but you have to check if some of things needing a licence could be done another way, without needing for fork out for that licence (Be that free software or service, third party paid solution, or just covered by a internal school policy).

Depends if what your doing is part of a fixed installation of course. But yes you do still need to comply with everything electrically wise. But there's nothing wrong with IT working with a certified electrician or low voltage tech to provide a pre-configured control system. Many electricians these days are glad that the 1/0s bit is done for them, so they can do the bit they are good at.

I need to do a bit more digging into Matter. But my understanding is that 'Matter' is a 'Technical Standard' for compatibility. The idea being that if it's Matter certified, it can talk to other Matter devices. What it isn't, is a communication method. So Matter itself sits on top of other communication methods, be that Thread (An IPv6 based mesh network, the replacement for Zigbee), or standard TCP/IP. TCP/IP then of course sits on top of good old cooper ethernet cable or wibbly wobbly radio waves WiFi. Matter was/is the 'New IOT standard' but it's struggled to gain much traction in the number of years is been 'Coming'. Mainly as Zigbee, Z-Wave (US) or Tuya (Chinese IOT Cloud Platform) has been the dominate forces in the smart home devices world and once you pick one of them, you tend to stick to it. Now in terms of use in schools or business. You do have to careful what you opt for. Shelly I would compare to Ubiquiti, above the Aldi Smart Plug, but below your Trend or Schneider Electric BMS. Is it a good fit for a school? Yer I'd say it likely is for simpler tasks such as lighting, ventilation, blinds, school bell etc. When you get into heating, AC etc. Your into more complex protocols that normally sit on either the 'Domestic' or 'Commercial Side' of things. Which for a school means your likely going to hit a wall of licencing & non-open protocols to talk to commercial sized systems. Will this change over time as IOT becomes more mature? Yes I suspect it will. Shelly especially is really showing they can work with larger brands to link up together, allowing shelly devices to say provide sensor inputs to more complex control system.

Don't suppose you have that list of URLs do you? Might come in handy. We're going to do a bit of testing to confirm, but it does look like blocking Safari is causing this MS Apps issue (Although only seen in Teams & OneDrive currently, Outlook sometimes). I suspect we'll change to hiding it instead so we'll need to cut off any other routes it might have to using it which aren't pre-approved like MS365 for example.

Currently it's used for nothing (But AD it would seem, based on the templates / certificates still being issued). The only thing we might use it for in the future would be Radius. However, ideally we want to support Entra ID only devices as well as domain devices, my understanding is NPS Radius doesn't support Entra ID (Only) devices. We currently use Smoothwall for our radius which doesn't support VLAN IDs, but does authenticate to AD. So it 'Kind of' works for what we need. No VPN or internal services (Not covered by public certificates).

Hi All, For those people using Smoothwall Cloud Filter on iOS devices, IE via the Smoothwall Browser. How to you 'remove' access to Safari? Do you 'Block Safari' using a device restriction OR Do you hide Safari using the 'Hidden Apps' device restriction? The reason I ask is we've been having odd issues with Teams, OneDrive and sometimes Outlook not loading or updating content, when Safari is blocked. It looked like a web filter issue, but we now think it's linked to Safari being blocked. We block it, but I'm wondering if we should just be hiding it. Does this block other routes of access to it? IE from other apps etc. Thanks, Rob

No one with any advice on this? Are people keeping the CA for Radius?

Make the intranet page the homepage? Or at least a pupil friendly page which then links to the staff only page? (So information isn't shown on IWB's by mistake).

We currently have a single Enterprise Root CA, which is also a domain controller on our domain. We have one more domain controller, plus another one due to be setup. We're wanting to decommission this domain controller and would also like to remove the Certificate Authority at the same time. Currently, all the CA appears to now be doing is issuing Domain Controller Authentication, Kerberos Authentication & Directory Email Replication certificates to all the domain controllers. It was also used for SCCM but we no longer have this in use. So those issued certificates should be save to ignore. All other certificates have expired. I've found the following guide, but what I'm struggling to confirm is if this guide also covers any effects removing the only CA on a domain, from the domain. IE does this process have any affects on the function of the domain? Decommission a Windows enterprise CA - Windows Server | Microsoft Learn Has anyone done this process that can provide some feedback on how it went, tips etc. Thanks, Rob

The system is working 100%...for 75% of users... who can login.

Seeing the same here for staff and students.

Hi All, We're starting to get a number of staff printing things with the print printer settings, as the default printer preferences are being overwritten. The issue seems to be with the Windows Print System Dialog box which now has a (Ticked by default) option to save any preferences you pick for that one print, as the default. This is shown at the bottom as 'Let the app change my printer preferences'. So far, I've not found a method of blocking this or disabling it. Google (And it's AI) seems to be drawing a blank, other than disable the 'Let windows manage my default printer' option, which doesn't seem to make any difference to this. Anyone come across this? We're running Windows 11 25H2. Not sure when this was introduced. Cheers, Rob

Can't remember off top of my head licence requirements. So yes check that. It is supported on Windows, but runs in the Linux Subsystem of Windows (At least it did when I last looked). So made far more sense to me to run directly in Linux, than have the overhead of Windows (And maintenance of). Plus it'll run on lower resources and even on old W10 machine (Which are now collecting dust in many schools including ours).

My suggestion would be Microsoft Connected Cache rather than WSUS. As WSUS is now deprecated as of September 2024. Microsoft Connected Cache can be run on a linux VM or even old PC (Thinking retired Windows 10 machine). It's basically a cache of Windows and Office updates, that you point machines to via Group Policy (Or Intune I suspect). They then use the Delivery Optimization system built into windows to get updates from the cache, rather than Microsoft directly. Setup is a bit of a pain if you don't know linux to well, but it's documented and not to hard. Saved us a load of bandwidth on our network with around 98% of updates now done from the cache.