petben
Members-
Posts
671 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by petben
-
I have contatced Office Test, as well as another couple, all the pricing is {unsurprisingly} pretty much the same, do you have any comments on their service? Thanks
-
Hello we are looking for a PAT testing company to test around 1500 items anually. Can anyone recommend a company? The pricing for a couple of companies Ive investigated seems to be around £1-£1.50 per item if that sounds right? We are based in Wiltshire, so a compnay based in the S/SW would be good. Thanks
-
Hello, I am trying to completely delete some users, I have made a script to delete their AD account, OneDrive, Sharepoint Info etc and there's one last bit where the SPO User exisits but will not remove. The account I am using is Glabal Admin and SharePoint admin. Can anyone advise how I remove this last bit? >$UserPrincipalName = "[email protected]" >Get-SpoUser -Site "https://school.sharepoint.com" -LoginName $UserPrincipalName | fl * DisplayName : John Brown LoginName : [email protected] IsSiteAdmin : False IsGroup : False Groups : {} UserType : Member >Remove-SPOUser -Site "https://school.sharepoint.com" -LoginName $UserPrincipalName Remove-SPOUser: Attempted to perform an unauthorized operation. Thanks
-
We want to apply a couple of Conditional Access polices on (a few) users personal devices. e.g. 'Allow access outside the UK'. The thing is we need a rule to find these devices to apply the rule to. They are 'Registered' in Entra, but this is not enough to require for the rule to apply as registering a device is not very secure. So we then tried also adding an ExtensionAttribute requirement, but these only apply in Conditional Access policies if the device is managed in Intune. Any ideas how we can apply a Conditional Access policy to BYOD? We dont want to go down the road of Intune managing users personal devices..
-
FYI - I just got an unlimited size, up to 1500 users - Redstor Basic Education Backup quote at £4,500, which I think is very reasonable. To get the 'Total' features which would include Entra backup is unfortunately another £2,500. Losing all those Entras users/groups/settings/policies would be a freaking nightmare, does anyone do anything worth sharing to back this this? There is the Entra Exporter PS module but (I think) that doesn't even have a restore option, just export...
-
this looks good too, do you use Redstor? can you give an idea of pricing/size etc.
-
the synology stuff looks interesting. I would be concerned of a backup taking 4 days. We already have a backup server that we could buy extra disks for, but (i think) synology wants its own hardware? Has anyone any experience of Iperius? perpetual license for $200. Iperius Backup - Disk image, ESXi, Hyper-V, SQL, Exchange - NAS, Cloud Thanks
-
If we are Azure only (no AD) and use Papercut is there a way to allow students to enter just their username (rather than full email address) onto the copiers when logging in? Thanks
-
We have 365 in Microsoft, we also pay a 3rd party to have a 'Cloud to Cloud' backup. BUT we all know about the reqwuirmeent for 3 data locations, so what does everyone do to satisfy this? - Another cloud backup provider? Expensive. - A cloud to onsite solution? This will require significant storage space and we are trying to remove onsite hardware. - Does versioning satisfy this 3rd copy requirement? But then I have read about ransomware making 1000's of files version changes, hence rendering this useless. Any thoughts?
-
Hello, what do you do to name Intune devices in IT rooms, they dont have a 'primary user', and a naming template %serial% or something from the autopilot profile is not as useful as it could be. So, do you manually add a friendly name somewhere, or maybe leave the naming part out of the Autopilot profile (so it prompts presumably?). How about staff 1-1 laptops? I was thinking to use a 'SchoolName%serial%' autopilot template and then manually add the primary user once they are enrolled.
-
Hello our current Ruckus wireless network is going EOL soon-ish and the pricing of a complete refresh to Unifi AP's and it's cloud controllers is quite attractive. So a quick Qs if anyone can offer thoughts: - A suggested model of Unifi AP - A comment on the fact our switches only support PoE+ and nearly all the cabling is Cat5e. Most AP's we've looked at 'require' (?) PoE++. - The solution for the Wireless Authentication/Smoothwall/Azure link so students will get the correct level of filtering once signed in. - Any other thoughts. Thanks for any advice.
-
MYK-IT how do you deploy the Bootstrapper version? do you have some kind of 'If version is current then exit' process? we would probaby go for Powershell startup, but the latest versions of Office aren't supported installing as system, which this would also be. Thanks for any ideas.
-
We deploy Teams with the other Microsoft365 Apps to the default folder C:\Program Files\WindowsApps\MSTeams*. When users (including admins) open Teams it opens as below 'Teams needs an update' and no further options. Can't see any filtering issues. Manually running ms-teamsupdate.exe from the WindowsApps\MSTeams folder does nothing. Microsoft says it should auto check and update every few hours, we have 100's of machines on different Teams versions, depending when Win11 was installed. Any ideas...?
-
Hello, we are looking for a piece of software (paid I am sure) to manage Intune devices. I know there are ways and means in Intune itself but we want a simple 3rd party software, probably with a client install so we can: - Remote access unattended Window 11 devices - Remote access with approval from logged in user - Remote Powershell/Registry/Services/Event Viewer management (etc..) Has anyone any suggestions. We looked at msp360 which looked OK-ish..
-
Users with A3 license not activating Windows
petben replied to petben's topic in Licensing Questions
interesting. Thanks. I can do an edition upgrade as an Intune config policy, Windows 10/11 Pro Education is listed as a dropdown option in the policy. However in my volume licensing site (the 365 admin centre) Windows 10/11 Pro Education is NOT listed as a product so I can't get the key for the policy. -
Users with A3 license not activating Windows
petben replied to petben's topic in Licensing Questions
The license is called - Microsoft 365 A3 Extra Features for faculty It has been manay days unfortunately.. -
Hello, our users have Entra A3 licenses assigned to them. Their school laptops are running Windows 11 education and Entra joined. I was thinking that when a user logs into the device it should auto activate. Running slmgr /dli shows it has the public KMS key installed VOLUME_KMS Running slmgr / ato returns no KMS server found I could Powershell remediate the MAK key on them all, but I don't think that's the vision really. Any ideas?
-
Intune - Catering for staff without laptops allocated
petben replied to petben's topic in Cloud Services
hence the original question and answer - use App Protection Policies (rather than force staff to use, and IT to manage, outdated/out of warranty/slow hardware). -
Intune - Catering for staff without laptops allocated
petben replied to petben's topic in Cloud Services
I think we’re going a little off topic. my personal thoughts, right or wrong, is that for schools who are nearly all struggling with finances to now be purchasing devices for staff which are more expensive to initially purchase, have a shorter life span and are more difficult to upgrade/repair seems to be counter intuitive. Especially as there is an alternative - to use your personal device with App control, or work on-site if that is not an option. -
Intune - Catering for staff without laptops allocated
petben replied to petben's topic in Cloud Services
it's a tricky one, so we have a list of staff who probably work externally - they get a laptop, and a list of staff who don't really do that - they don't get a laptop. so for this second list of staff if they need to access school systems they either have to put up with the App Protection Policy, or use a school device when onsite, which tbh is open a huge period of time 6am-9pm ish. this same rule could apply to the first group of staff? -
Intune - Catering for staff without laptops allocated
petben replied to petben's topic in Cloud Services
thanks, so if we can put this security in place on home devices why are schools leaning back towards providing laptops for staff to use at home? we could just keep workstations in classrooms, but that very much does not seem to be the trend. I know Intune may drive the trend a bit as it's inherently terrible on non 1-1 devices, but eventually (if not already) schools will be using Intune for multi user devices in IT rooms, so we are going to have to cater for Intune managed non 1-1 devices anyway. -
Hello, we are going to hand out laptops (with docking stations) for staff to use at home and in their classrooms . The reason we are handing out laptops is to provide managed secuity for users on the school systems, but quite a few members of staff don't 'justify' a personal laptop e.g. They are PT, Teaching assistants or just not expected to ever work from home, BUT we do need to allow them access school systems remotely (e.g. occasionally checking email, 365 logging in to a system or accessing the staff Sharepoint Sites) how do we cater for this, yet also adhere to the security aspect of the project? They will presumably be using iOS, Windows, Android etc..
-
Even if it’s not a cluster?
-
I have 2 x HV hosts, one is setup as a replica of the other. In HV manager it seems you can only failover one VM at a time, but with many VMs this is a chore. There must be an easier way. Powershell I suppose but nothing in a GUI?
-
Hello, I am trialling Defender - Attack Simulation and Training. I have created a few test training campaigns just allocated to myself. and one other I can see them listed in the 'Training Completion Report' but the one useful thing I am going to be asked to create is a list of users and what training is still waiting to be completed. How can I get this information? Some of the campaigns end dates have passed, so there should surely be some marked as 'INCOMPLETE', although they dont seem to move beyond 'ASSIGNED'. Any clarity someone could offer would be great. Thanks
