petben

Hello, ESS are going to upgrade our SIMS SQL from 2012 to 2016. I am buying a SQL Server standard license but do I also need client licenses? It is a shame ESS don't support Server 2022, Office 2021 or even SQL 2019 - they're crap eh.

I am using a wmi filter speed test and general OS/file queries are 10's of milliseconds https://deploywindows.com/2016/02/15/using-group-policy-wmi-filters-computers-booting-slow/ we need a way of saying 'if file doesn't exist then apply the policy'. Unfortunately the policy settings are not item level target capable.

Anyone got any ideas for a WMI filter to apply policy only if file does NOT exist?

Thanks for your reply, so you can actually set a bandwidth policy that OneDrive uses? Nice. MS list the .adm existing here - %localappdata%\Microsoft\OneDrive but I cant see that. w.r.t the default folders - is OneDrive - XXX School created by OneDrive itself? a few screenshots of your GP would be really useful if possible? what folders end up in your OneDrive - XXX School folder? I was thinking as it's all cloud The workstation user documents folders would need to redirect to e.g. https://school-my.sharepoint.com/personal/username_com

We are planning on stage 1 of a project to move network folders to OneDrive. Some very basic research has suggested to migrate using the 'SharePoint migration tool', and then once moved, set 'Files on Demand' via OneDrive GPO (so users files are only downloaded if requested by the user.) so a couple of Q's: There seems to be a potential performance/bandwidth issue if a class of graphics students open 500MB Photoshop files from their OneDrive? How do you get the default save/open locations to be Onedrive, hence how do you replace the usual 'Documents' 'Pictures' etc folder shortcuts to point to OneDrive, rather than our current folder redirected network folders e.g. \\domain\users\%username%\pictures Thanks for any thoughts.

Hi, what does anyone use for their After School club registers. we currently use Schoolcloud, but it has no reporting, no alerting to parents if students don't attend, no read/write from SIMS and clunky admin for teachers. They're talking about going back to paper registers! Any amazing systems/thoughts? Thanks

Hello, do you find this setting deletes the C:\users\username folder too? Thanks

The documentation is misleading, the % is free space. What do you do to del these folders?

I now don’t think the Intune ‘account management’ setting is designed to remove the C:\Users\ folders. Just the accounts? Anyone got any ideas how to keep these HDD free, each laptop has potentially 1500 users logging into it. Scheduled task to delete user folders configured via powershell Intune policy? Sounds a bit crap though.

Ok thanks, looks good, can I configure it to tidy the C:\users folders from all those student logins? That’s where space will be used. Shame Intune delete profiles doesn’t seem to work, that’s just what I want..

Hello, I have setup a 'Shared Device' policy in Intune for laptops that any student could borrow. As Teams is installed, their profiles get huge (folders created C:\Users\'username), so I want to delete them. I have set my (Test) shared device policy as below, but the C:\Users folders are still there despite my settings, I think, implying: Account Mgmt - Enabled (so accounts get deleted at 'sign off') Delete Threshold - 95% and 96% (so this will always run for testing as free space will never get to 95%) Maintenance period - ?? Am I going something wrong?

Hello - We have been asked to get 150 devices in 5 trolleys. I think we would look at Surface Go 3 (we have a working Intune environment). I imagine the Surface Go 2 is cheaper, but it seems crazy to buy an older model. We considered the ES Surface laptop but the keyboards would be so prone to vandalism, ping a few keys off and it’s properly broken? Probably not even buy surface Go keyboards due to cost. Are there any clever charging solutions from Microsoft? We do have one LocknCharge trolley but it is a bit of a beast. What are school buying nowadays? Any thoughts? Thanks

I have setup Azure Self service password reset for a test group of students. It works fine, asks for authentication methods (phone etc) but any kind of post setup admin on a user, such as clearing out their mobile number or selecting 'Require re-register MFA' or 'Revoke MFA sessions' does not seem to do anything. They just log in fine without any prompt. If I clear the mobile number from a user (like we would if they changed their phone) and they choose 'forgotten password' when they login it says "You can't reset your own password because you haven't registered for password reset." So why isn't it asking them to re-add their authentication methods? I am doing all this in private sessions, no cookies etc. Am I misunderstanding something here?

Hello, we have set up federated shared iPads - Apple School Manger and Azure. Users can log in but get asked at every login for: 1. Region - they have to scroll down to UK 2. Set a passcode Can these be set to UK by default and is having a user set passcode really required? Nothing in the configuration and enrolment profiles that I can see. Thanks

Hello, has anyone deployed/configured the Smoothwall Browser to iOS devices via Intune? I would very much like to ask a few questions how it works if anyone is up for a Q or 2? Thanks

Hello, I pushed out a Wireless profile using Intune to a group of iPads, I now need to make the iPad forget this wireless network. Any ideas how? Thanks

Hello, I want to use applocker to restrict the users downloads folder. So not to block various legitimate webinar, remote support tools, remote access tools etc that will save to downloads I’m thinking to add allowed publishers. Has anyone got a useful list of allowed publishers that you wouldn’t mind sharing? If anyone has any other tips for how to deal with areas of applocker - appx, dll, path restriction - Screenshots, exports even? That would be really useful as it’s a new system for us. Thanks

I have finally got round to looking at these after hiding them for a year, got out 4 and 2 will not power on despite being charged for a couple of hours. There is a red light on the charging port, the charger tests OK, but it just will not power on. Is this a known issue? I am not crazy about going through some painful process with DFE to get them swapped out. Truly terrible hardware.

FYI this can be replicated and worked around by disabling GPU acceleration in the settings of Teams

Has anyone else found the Teams App crashes when sharing content in a meeting, be it individual Windows or whole screens. It started several months ago, then went away for a bit, but now seems to be back for all our users. The app is up to date. Anyone else? Thanks

thanks James, all working now. thanks for the help.

agreed thanks, do you bother with Windows Installer rules?

thanks James, as AppLocker is a 'block by default, allow by exception' system, why have you specified e.g. Deny - %HOT%, unless that path is specifically allowed it's already denied..?

Thanks, last thing (!) we have enabled the default .exe policies (which includes program files and Windows), cant really think what else they'd need, have you found that any other folders are important to be allowed for exes to run so users laptops can work properly?Appdata maybe?

Sorry one more thing, how do you stop Azure global admins (our IT logins) getting the Applocker policies, what group in Applocker do you exclude on the rules? Are they 'BUILTIN\administrators'? The local AD group 'Domain Admins' doesn't even sync to Azure. Thanks