jadzea

Hi Tom, we don’t have the issue now with one to one assigned devices. could I feedback though, that while we do have the iPad platform web filter extension installed for apps other than the smoothwall web browser, it would be soooo much better if this extension did the proper filtering thus negating the need for the smoothwall browser…. Like lightspeed can do.

yes that’s correct. we have used shared iPads in areas before we went full one to one. We federated our AppleIDs with Office365 so it worked very well (same email and password they’re used to). not sure how a shared iPad would fair as effectively the payload is generated on intune and pushed to the device with all the information configured (ie their username rather than the wildcard) and it picks this up from the primary user field for the device in intune. Perhaps in shared iPad mode that primary user changes? I guess issue is sync frequency then, as I tune I think is every 6 hours..!

Thanks for this - very helpful. We've gone back to the start somewhat to the enrolment profile and switched to enrolling with user affinity (these are 1 to 1 devices assigned to the individual students) so during enrolment they authenticate as themselves (the student, or we do it on their behalf using their credentials) and then use dynamic security group based on enrolment profile used to then assign settings and apps. We've started to use the Microsoft authenticator app and are working on the SSO for this. We get company portal installed, but just hide this as not sure we really need it. We've found though, without even setting up the Microsoft Authenticator app (need for the SSO extensions) Smoothwall now works correctly as the primary user for the device is now set in inTune and thusly pushed to the device. I think I just made the mistake/assumption that it read the userprinciaplname variable from the device somehow, when in actual fact the app config is pushed onto the device from InTune with this value configured. We also didn't use the XML, and just set the values using the configuration designer (as shown on the screenshot attached). Smoothwall Browser works with it straight away and to be fair quite nicely. Next bit we need to sort is the general filter extension for the device so in-app browsers have some level of filtering to them too (disappointing that it isn't the same user level filtering, but at least it's something).

We’ve got the same issue - did you find a resolution to this?

Ok, so we no longer use SIMS and haven't done for sometime. We now need to get into it to recover some old data however everyone that had a login to the particular SIMS instance has left..! Does anyone know how to reset the SYSMAN password so we can gain access? We know the SA password and can view the SQL database using SQL studio and logging in using the SA password. Help!! Thanks!

That's brilliant thanks!

Don't suppose you could share your script could you? Thanks!

That’s fantastic - thank you! I completely agree with your comments on time servers - I’ve experienced hyper-v time drift before where virtual machines are supplying the time to the hosts and start to drift further and further. Appreciate your help with this

Brilliant - thanks for your reply and guidance. Do you know of any articles where I could read more about this? Keen to learn more about this topic. Thanks again for your advice - I’ll certainly implement two now.

Just built a new Server 2022 2 node failover cluster with S2D and thinking about what’s the recommendation when creating a virtual disk on the storage pool to be used as cluster shared volume. Question is, create one virtual disk for the CSV that is maximum space available in the pool, or create several smaller ones to store each virtual machines resources and VHDXs? Coming to this from a dedicated SAN where we would have had volumes related to the LUNs on the SAN (ie faster disks as a LUN and slower disks as a LUN), so wondering what’s the best practice with this? I’m tempted just to create one single virtual disk that occupies the whole storage pool and is set for CSV and then store all our VMs in this, but wondered if this is the optimal use of the disks in S2D? Ie is there some sort of overhead that uses more space with multiple virtual disks as CSV, or is there a speed or other benefit? Any thoughts anyone??

You might want to look at Lightspeed for MDM and filtering.

I’m also assuming you’ve added them to nebula? We find using the iPhone app and scanning the QR code on the AP the quickest way of doing this.

We’ve experienced this with Zyxel APs and it’s almost every time the network time server it’s trying to reach. You can probably test this theory by whitelisting the IP address of the AP to give it a totally unfiltered route out and see if this works.

Hi, We're looking at some Chromebooks and also their performance on our wifi network - narrowed down to these two models, however I can't find out if either of them support 802.11R 802.11K 802.11V - we've found that devices that do have a much better time roaming from AP to AP etc as one might expect. It looks like the Intel Celeron versions of these Chromebooks do (think they have a REALTEK card) but I can't find any information regarding the 11A G8EE model or the 11MK G9EE model. Hoping someone out here might have come across this! Thanks,

Could anyone share a link to an announcement from Microsoft about this please? I can’t find where Microsoft have said they are forcing all users to have MFA enabled. Thanks