talksr

Hi there, I have contacted CleverTouch support but as of yet, no answers. Has anyone had success at deploying Clevertouch Lynx software via Intune? Essentially, you get an MSI file and a reg file which has all of the necessary activation info in it. Example of the reg file below for you... [HKEY_LOCAL_MACHINE\SOFTWARE\Sahara\Lynx 4\OrganizationDefaults] "Lynx4Code"="CPS-Prod-Key-12345678" "Name"="The Management Team" "Email"="[email protected]" "Organisation"="School Name" "Address"="School Address" "PostCode"="P0STC0D3" "Country"="GB" "LynxTerms"="true" "SerialNumber"="" "Trial"="false" Just wondering if it is even possible to add a .reg file to an Intune App. Never tried it before, but happy to give it a go.

How do you have your's configured here? If I deselect local storage, where would user downloads etc go as downloads don't currently go to their onedrive?

Thanks Steve, that is good to know. How would I go about doing that and if I prefer to just wipe and have a clean install, is there a faster way of doing it than I am already doing?

Hi guys, Just wondering what would be the most efficient way to do this. I have an M365 tenancy and a number of devices on a local AD. We are scrapping this and putting the devices on the cloud. Currently, I have been resetting devices, when the Windows 10/11 setup screen shows, pressing Shift + F10, loading PowerShell and entering in the following: Set-ExecutionPolicy bypass Install-Script get-windowsautopilotinfo (agreen to each thing it wants to install) Get-WindowsAutoPilotInfo.ps1 - Online Then entering in my administrator details for the M365 tenancy. Locating the new device in Entra and adding it to the apropriate group on M365 as well as renaming the Host Name if needed. This is working nicely, but soon, I will have a large number of devices to enroll, so I was wondering if there is a better and faster way to do this? The devices are not new, so I don't have a nice list of serial numbers and models. Just to be able to do the above PowerShell commands faster would be a big improvement. Any suggestions would be greatly appreciated.

Thank you, I think we tried these last time but with the longer cable length, it seemed to cause problems. I think the ones we have currently have some kind of in-line booster to make the signal strong enough for a 5m cable. The only reason I am asking for Amazon links is because the school is so poor, the head is going to buy the cables with her own personal Amazon account and pay for it herself.

Hi there, Can anyone recommend (preferably Amazon links) any good quality, reliable HDMI to DP cables for our Clevertouch displays? Staff keep damaging the ones that came with the boards when they were installed on the computer end, despite it going into a computer and not a laptop. It seems they are pulling the computer out of the housing area in the desk, god knows why as they are not plugging any other device into the cable. In the past, we have ordered various ones and find some just don't work, others are ok. Ideally, I would like 5 or 4 meters. Any recommendations would be great.

Thanks, Did it again, this time, it is installing to devices in the deployed group with success but NOT the one I am testing on. I have a feeling this may be to do with the port number assigned in the client app. This bit = -PortName "IP_192.168.1.1" I am wondering if where I have manually added the printer before as a local Administrator, that port is already used so it is causing an issue when this client app goes on. Could I re-name the portname to something different such as "IP_192.168.1.1MDM"? EDIT: It has worked. Seems to be a lengthy time delay but it has gone through, I just had to remove and re-do as you advised. Thank you 👍🏻

Doesn't seem to be going still. So this is the install command: powershell.exe -executionpolicy bypass -file .\Install-Printer.ps1 -PortName "IP_10.75.44.160" -PrinterIP "10.75.44.160" -PrinterName "ICTSuitePrinter" -DriverName "Canon Generic Plus PCL6" -INFFile "CNP60MA64.inf It is a Canon copier. The uninstall command is: powershell.exe -executionpolicy bypass -file .\Uninstall-Printer.ps1 -PrinterName "ICTSuitePrinter" This is how it is configured now:

Thank you. I have just updated it. Will wait for it to refresh on the clients and I will let you know if it worked!

Sure, no problem...

Hi, thanks, very useful. I am getting Invalid Detection Rule errors when I deploy to any station. I added Rules format as Manually Configure Detection Rules, path/code: Key = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\ICTSuitePrinter Value Name = NameDetection Method: String ComparisonOperator: EqualsValue:ICTSuitePrinter Detection Method = Value Exists Associated with a 32-bit app on 64bit clients = No. Where have I gone wrong?

Hi there, Just looking for some advice. We have a local network on a server 2022, we also have M365. I would like to join the two together but have a few questions... 1. Would we have to re-autopilot the existing M365 devices to get them to talk to the local DC server? 2. If we join M365 to our local server, what will happen to the existing Group Policies and users? As an example, all of the existing staff and pupils have accounts on our local server. Would these be overwritten or would a new OU form in the AD for the M365 users and devices? 3. What is the best way to go about doing the hybrid? My biggest concern is I don't want to mess up anything on our existing server or mess up the existing systems on M365. Any advice would be greatly appreciated.

Thanks. Do you have an example of the startup script? The school wants staff to access all printers from all locations so I don't need to worry about this. Tried adding printers from local server on a local admin account but still they are not showing up when an M365 user logs into the laptop which is odd as I know this has worked in the past. Short of manually installing the printers to the device by going to Control Panel, add printer, adding IP and driver, not sure howelse I can get it to permanently remain on the system for any user who logs in so would appreciate any scripts you may have handy. Thanks in advance.

Hi, Looking for some advice. My school has three photocopiers all shared from a 2022 Windows server. We are gradually adding more and more cloud systems. The printers are able to join the cloud as they are 2024 canons or we could use Universal Print, but the school does not have licencing for this yet. The school will be moving to the Canon Uniflow solution in the future but not yet. In the interim, as we don't have loads of these new cloud connected devices, I had manually added the three printers to each device by logging in as administrator, browsing to \\servername, selecting each printer and right clicking and connecting, however I am finding when a normal user logs in, the printers are not there. I am sure this has worked before but I am guessing maybe I was signed in as a local administrator on the system rather than cloud admin. Has anyone managed to make this work before? Just looking for a quick and easy temporary solution until the school moves to Uniflow. Thanks in advance.

Thanks for your post. This is exactly what I was looking to do but I have not had a chance to and plan to this Thursday. I had found the following online, and was going to give that a go on Group Policy: Workaround If you cannot disable the use of guest for your third party, you must disable the requirement of SMB signing. Obviously, this means that now not only are you using guest access, but you're also preventing your client from guaranteeing signing to a trusted device. That's why this is just a workaround, and we don't recommend it. You can disable the SMB signing requirement three ways: Graphical (local group policy on one device) Open the Local Group Policy Editor (gpedit.msc) on your Windows device. In the console tree, select Computer Configuration > Windows Settings > Security Settings> Local Policies > Security Options. Double-click Microsoft network client: Digitally sign communications (always). Select Disabled > OK. Command-line (PowerShell on one device) Open an administrator-elevated PowerShell console. Run Set-SmbClientConfiguration -RequireSecuritySignature $false Domain-based group policy (on IT-managed fleets) Locate the security policy applying this setting to your Windows devices (you can use GPRESULT /H on a client to generate a resultant set of policy report to show which group policy is requiring SMB signing. In GPMC.MSC, change the Computer Configuration > Policies > Windows Settings > Security Settings> Local Policies > Security Options. Set Microsoft network client: Digitally sign communications (always) to Disabled. Apply the updated policy to Windows devices needing guest access over SMB.

Hi, There was a firmware update available but I was very reluctant to put it on as last time I did so, the whole thing stopped working, though it was on the previous model. I have put the new firmware on and I now get the following: I have selected Configure Globally under SMB3 Transport Encryption and made sure it is enabled. Fingers crossed this will do the job!

Thank you everyone, all of your posts have been really useful and helped me to construct an email to SLT more than anything to cover myself. I totally understand that money is tight, but we just cannot be cutting corners in the way the SLT are intending. I will let you know if anything further develops. @JATSO thank you for taking the time to explain what you managed to achieve. I have said in the email that we may be able to do something with a small number of the devices but it would not be possible to manage hundreds of them. Thank you guys. Have a good evening.

Hi there, Looking for some advice on how to deal with this situation. During lockdown, I was off for about 3 weeks whilst I recovered from an operation. It is just me, nobody else to deal with ICT and in my absence, the school panic purchased what can only be described as a total load of junk. Cheap Acer laptops with 1 year warranty, with such small HDDs we can't run Windows and any other software on them. I converted them to Chrome OS and well over half are dead and don't work and there is no extended warranty. But most importantly was hundreds of Amazon Fire Tablets. Once I resumed work again after recovering, I advised that we would need to try and get these devices added to an MDM to manage them and I was told repeatedly, we didn't have the funds to do so. I explained, there is not the time and resources to individually manage that number of devices. The devices are junk as far as I am concerened, they will not run the iOS apps we have on the iPads. The SLT bought them without looking at what they could actually be used for and it was a total waste of tax payer money all because of the covid panic that nobody could get hold of IT hardware. Every single year since the purchase of these Fire Tablets, the SLT palm them off on another member of staff in the school and tell them that they need to get them working as I made it quite clear, we either get them on an MDM or I am not getting involved. Some are signed in on parent's accounts, some children accounts, others are signed in as staff. It is a total mess and not something I wish to be involved in unless it is properly managed. The SLT are now demanding that our bursar hand over their Amazon username and password for the school Amazon account such that a poor teaching assistant can manually log in to each of these devices so that apps can be downloaded and purchased. As if it isn't bad enough that all of them are signed in on random people's accounts. Obviuously, the bursar is really concered about this and rang me to arrange a meeting as they are not happy to supply the infomation requested. I would be really grateful on your thoughts but more importantly, some tips on what I can formally wright to the bursar as I have already told the SLT repeatedly we are NOT meant to have non-managed devices signed in with people's personal accounts. These devices should never have been purchased and the ONLY way I am happy for these to be used is with an MDM. I am very unhappy that rather than listening to the advice of their expert (me) they are again, trying to force another member of our staff to deal with these wretched devices. Thanks in advance for any words of wisdom. I am at my wits' end with this place and on the verges of going off sick as the toxic atmosphere and constant 'we have no money' responses is getting to the point where we are not compliant in so many areas. I really don't like the poor attitude towards IT and the blaming things on IT or me when these kind of things were not suggested or endoursed by me. I am repeating myself over and over and just not being listened to. Maybe this would be a better post for Devaluing of IT jobs.

Thank you. I have taken a look, but it doesn't seem there are any settings for this. All I can do is enable SMB and give a workgroup name... I am assuming it is because it is an older model maybe?

Hi there, As we move between servers, I have put one of the staff shared areas in an SMB share on our NAS. The share has no password, so anyone with the share IP and folder name, can access it. It seems to be working nicely but not on our Windows 11 stations. If I try and browse to the share as an administrator, I see the following message which suggests my sec policy is blocking this. I am able to ping the NAS from the Windows 11 clients, just can't actually access it. If a user logs in, the netlogon batch shows the following error: I am assuming the Windows 11 system is trying to authenticate with the share using the logged in Windows account even though the share has no username or password. The NAS in question is just a standalone Netgear ReadyNAS 104. Can anyone suggest the best work around? This will only be needed until the end of the summer hols. Thanks in advance.

Hi there, We have an old 2012 server I am gradually migrating everying over from to a new 2022 server. I set up DHCP Failover so that both the old 2012 and new 2022 servers have DHCP running. Can anyone tell me the best practice method to make the 2022 server the main primary DHCP server as eventually, we will decomission the 2012. Currently, if I view the Failover Relationship, the name is old2012server.domain-new2022server.domain. The new 2022 server is already added as a DC to the same domain as the old one and the new server has taken over all FSMO roles. Thanks in advance for any advice - assuming this DHCP work would be best done in a holiday as it will be disruptive. I will also make the lease times for clients maybe 5 minutes closer to the time I do this work.

Hi all, Just a quick update on this to say, I presented all of the info from this thread. The head decided to go with Smoothwall as she knows other heads who use it and I have got to say, it has worked really well so far. It is running across M365, local AD, Lightspeed MDM for iPads and Google Chrome. So far, no issues, it seems really good. Just thought I would let you all know. Many thanks for your helpful advice on this.

Thank you both. I had never heard of it until @RLR mentioned. I will look into it.

Interesting. How did you go about packaging it as it doesn't seem to be an MSI?

I am sure most of us are familiar with BGInfo and it's helpful desktp info. I have it on several servers and is is really helpful. I was wondering, has anyone been able to deploy this to Windows 10 and 11 Client Stations running on M365? If not, does anyone know if there is a way to get Windows 10 and 11 cloud connected stations to show their IP in the windows gene before sign on? Thanks in advance for any help.