jamesbmarshall

Who told you that?

You need to add the licences to your tenant by using the product key you have in VLSC (assuming you have OVS-ES). There are posts on the blog that can help: UK Education Cloud Blog - Site Home - MSDN Blogs

Only if that's how you set it up - 2007, 2010 and 2013 should all connect using ActiveSync or Outlook Anywhere. As I say, you can disable IMAP and POP and prevent anyone connecting that way.

Honest answer is that I'm not sure - perhaps Outlook's doing something funky and automatically connecting to those mailboxes. Just a thought Try removing your permission from those mailboxes and see if it makes any difference?

I don't think there are. Very happy to be proven wrong as things change all the time; HOWEVER, even if there is a way I would strongly recommend against doing it. My reasons are thus: - It is confusing to users. - Users will not get a seamless experience, and managing identity will be a tricky task since MSA (WLID) and O365 accounts are separate. - OneDrive (aka SkyDrive) is not manageable by administrators, nor does it respect any of the policies set in Office 365. - You introduce a blocker if you later want to move to OneDrive for business (aka SkyDrive Pro) and SharePoint Online as there's no simple migration path between the two. The list could get quite lengthy.

This is a huge topic that's not just technical. You can restrict connection protocols so that POP, IMAP etc. can't be used to connect to a mailbox - thereby limiting folks to ActiveSync. You can then set policies for connection (i.e. device must have a PIN, etc.) to ensure that devices accessing mailboxes are not unsecured. The connecting devices must enforce policies that support the ability to remote wipe the device if needs be (again this can all be set in policy). That means you can securely allow folks to connect to Exchange Online with the ability to wipe that data/device in an emergency. You can also go down the more complex route of ADFS and you can then really simply limit connection to inside the school network. The BIG question is: why not let staff/students access school mail on their device IF you can mandate a degree of security on that device?

Can't be done. It's not horrible - it's 25GB (or up to 100GB) of managed, controlled and secured space for each of your students and teachers.

Have you given yourself permissions to access those mailboxes?

Those materials were out of date, and were hosted as part of the Live@edu - Office 365 transition. Unfortunately, at this time, there are no newer versions.

To extend the answer further, it is possible for users to sign-up for a Microsoft Account with their Office 365 ID (i.e. so that they look identical, but are technically separate) in the same way you can sign up for an MSA with a Yahoo, Google, other, account. The caveat here is that you, as an institution, cannot manage the MSA, only the Office 365 ID. Worth noting: Lync Online can talk to Skype.

If you're looking at this with respect to SharePoint Online you're going to struggle a little bit since this behavior is not fully supported - authN is the big one here. The best way to interact with a doc library in SharePoint Online is either via the browser (utilising drag 'n' drop, web apps, opening in client features) or using the built-in sync feature to sync the library down to the local PC. SSO won't fix the problem since Explorer cannot handle the authN to SharePoint Online regardless of SSO or not - you can only map a drive properly for the current session; beyond that it'll error.

Take a look at this: Deploying Office 365 Education? You don't need single sign-on, and here's why! You should look at DirSync, that will take care of your user sync, and password sync. As for licences this can be wrapped up in a PowerShell script that you can run whenever you add new users.

Clearly, if you're going to need licences for users as they come into school, but before old users have left, it makes sense to have the corresponding number of licences available to make that easier.

Why not use SharePoint Online?

Perfect, thanks!

I'm glad someone reads it! As @AngryTechnician says, you phone up your re-seller and order more! You should always be as accurate as possible with your licence count. Don't go ordering lots more than you need. I know there's nothing I can do specifically to stop you other than say that it makes life a lot easier for me, and that it's best practice, but please always try and keep your licence count as "true" to your actual user numbers as possible. If they return and are given a user account with an active licence assigned to it then they can carry on using the same bits, in theory. The software invites users to "reactivate" once it detects no active licence. In theory, no. Depends when the software last acquired an active token. Up to 30 days, then into reduced functionality mode. Check the service description! As above. The client will attempt to extend its life every day (or time.. I think) that it's run. If it last connected to the Internet, say, 15 days ago and then on day 16 it connects and finds no licence then you have 15 days until it goes into RFM. That's my understanding of it at least. Whose rules do you want them to obey? Microsoft has the EULA which users accept whenever they run any Microsoft software. If you've got your own AUP then you'll need to find your own way to ensure your users sign/adhere to it.

Can anyone who has successfully added Office 365 ProPlus Student Advantage licences to their tenant please screenshot the licensing screen and share it here? Also, if possible, the results from running: [h=2]Get-MsolAccountSku | Format-Table AccountSkuId, SkuPartNumber [/h]

No, you should not run them one by one like that. Use the PowerShell script. Synchronize your directories

The GUI is great for so, so many things. However, it's not particularly efficient for doing things for large numbers of users, or a large number of times in repetition. Windows Remote PowerShell is a much, much better method of managing more than a handful of users; offering you the ability to make far-reaching config changes in literally one or two lines of cmdlets. Google's approach might be more browser-based, and that's fine, but I don't think they have anything that even comes within a country mile of PowerShell. You've got a couple of options. Start again by reinstalling DirSync. Phone support. Or lastly, get a partner to help you. How did you trigger a full sync?

Support

Grab a coffee and read, my friend: Browse by Tags - UK Education Cloud Blog - Site Home - MSDN Blogs

Did you perform a full sync afterwards? Take a look at this post: Installing and Configure DirSync with OU level filtering for Office365 - Denotation - Site Home - MSDN Blogs

Thanks everyone! This has been really useful; keep any thoughts coming. I think I can pretty much see the aspirational trends for the future - how would you propose to get there?

Fair enough, but in that case how do you ensure that schools are getting the best from their IT staff? If you took two secondary schools and put an old-school IT technician, whose only requirement was to keep the lights on; ensure the network didn't fall over and replace broken hardware when needed, into one, and a higher-level strategic IT Manager into the other, whose role was to lead the IT strategy within the school and grow its capabilities and reliability to support a better learning environment for students and teachers; which one is doing the better thing by its pupils? Does it even matter? Should the direction of IT, the software choices, the hardware procurement, etc. be taken by a different person? The IT coordinator? The Head?

Great point - and I think it's the marque of a good IT Manager to know when it's right to get specialist help and advice, rather than trying to do it yourself. I couldn't agree more with this - and it's something a few people I've spoken to have all echoed. Communication is essential, almost to the point of needing some marketing savvy to complement IT knowledge. Interesting insight - what about primary schools? Of course, also, what about academy chains - is having core IT functions centralised a good thing or a bad thing? (Rhetorical question, that's probably a debate in itself!) Do you think there is a place for the IT Manager at curriculum meetings, not necessarily to contribute but to listen and get a feel for the pressures and direction of the school's teaching and learning, with a view to structuring the IT facilities to support that better? So which schools get it right? Conversely, just because a school just wants someone to run the network and hardware does that make it right, and if not who should be responsible for defining what is? Should there be a templated role guide that schools should use when hiring to ensure consistency of function, skills, pay, etc.? Do you think schools should prioritise having someone in that role over other things? Has the role become so important that it is critical to the longer term success of the school to have someone focused on it? OK, so being devil's advocate for a moment do you think that those skills require a degree, industry experience or something else? Do you think that you can be a "lifer" in these roles, recruited straight from school, and be able to be as effective as someone who brings a wide range of unique experiences from a variety of sources to the school? (I left school and went straight to work in schools... I'm not saying it's a bad move at all!) As above, just because that's what they think they want does that make it right? To use a well-worn cliche "If I had asked my customers what they wanted they would have said a faster horse." Yes, yes! As much IT Manager as IT Evangelist? Again, should there be a national template? Should there be a blueprint that schools should stick to? (Is there one already? I'd love to know!)