Carter

We've tried the Dell P2425HE which have built in hubs and use USB C but won't daisy chain a second display without mirroring. What model are you using?

I've tested out the Dell P2425HE and for PC's it will daisy chain displays but with macOS it only mirrors the second display without thunder bolt. I really wish they worked as we have a number of them at the college now.

I looked at the Dell P2425HE Hub Monitor which would have been great but for Mac they won't work to extend a second display like they will for a PC plugged in. If Dell could make these work we would be using these. https://www.dell.com/en-ca/shop/dell-24-usb-c-hub-monitor-p2425he/apd/210-bmkk/monitors-monitor-accessories

MacBook Airs and Pros. Both are the same though limited to how many external they can support. I have an Air setup with two external extended but lid on the laptop stays shut. If open the display mirror but that's a MBA limitation to two total displays. The Pros are similar but can handle the laptop display with two external. For both they all work with the docks listed. I'm trying to go through all the options now to see what the costs are. Some need multiple extra adapter to go from USBC/TB to HDMI/DP which increases the cost with an extra $40-$100 depending on how many extra adapters are needed.

The Dell Docks would be great to use as the college is full of them but where Apple heavy leans on TB for extending displays Dell docks will only extend to one. That's why the Dell TB4 dock needs an extra adapter to plug into the TB4 port to get DP or HDMI. I looked at a few of the Stardocks and the one that seemed to fit was over $500.

We need to start adding a dock to staff and faculty laptop orders. However, it’s challenging to find a reasonably priced dock that functions with all the required ports and doesn’t cost a fortune, as we’ll need to order a significant number of these. I’ve tested several options: - CalDigit TB3: It works great, but the newer TB4 model is more expensive. - Dell TB4: It functions well, but it doesn’t support a second extended display out of the box without additional adapters. - Kensington SD5800: This dock has been good with minor issues of displays not always showing up but fixed by disconnecting and reconnecting the dock. - Targus: We’ve used these docks in the past, but we avoided them due to issues with DisplayLink and the need for drivers and updates, which caused support problems. I understand that many high-end docks cost between $350 and $400 CAN however, since we’ll need to purchase a large quantity, it would be beneficial to find a balance between features and cost. CalDigit was the best option based on my testing, followed by Kensington. However, at $460 with tax, it’s a tough sell for the school. It would be great for a dock that has support for two external displays and around 3-4 USB-A ports. Thank you .

Interesting, this is good to know. So Apple will take them back for credit? We’re going to use old keyboards where we can and order a $4 6” USBC to USBA tail that we can then lock the keyboard/dongle to. For those that don’t have a keyboard we need to look at third party.

We're an Apple and Samsung house but I'd soon like to move to the new Pixel 6a when it's released but we use InTune and we would need to have our mobile service provider (Bell) input the device SN into the management solution that Google uses. Bell is connected to our Apple DEP & Samsung Knox solution so that when we purchase a new device they're automatically enter via the SN before we receive the device. What is Google using to direct devices that our carrier would become a partner/connection with? Thank you

Never-mind, finally found info https://support.google.com/work/android/answer/7514005 Not near as easy to get geared up as DEP and Knox.

We have an InTune MDM solution in place and we currently use iPhone (majority) and Samsung phones. I'm looking into testing Google Pixel as a new Android offering but what solution does Google use to point devices to Intune? When we buy phones from Bell we have accounts setup with both Samsung Knox and Apple DEP so that they get registered into those solutions right away so that they will point to our InTune MDM solution out of the box. What is the Google Pixel solution?

It's crazy that it's come down to this. Appe tried this some years back and there was a lot of back lash so they brought out keyboards and mice wired and school needed to request them and yet the public could not buy them. We've done so literally up until these new 24" iMacs. Actually we could still get the wired ones if we were ordering the 27" iMac.

Honestly it looks kinda crappy on Apple's part to not offer a USB-C keyboard. We're looking to order a bunch of computers and we're going to look at buying USB-C Wired Keyboards and Mice from Amazon to replace all the wireless ones we will receive. May not look great with new iMacs but at least we can't put a small luggage lock on wired keyboards and mice to keep around instead of wireless keyboards and mice walking off on their own.

Are you using a USB -> USB-C Hub. or adapters since the new computers only have USB-C?

We've always opted to get wired keyboards and mice so that we can use small little luggage sized locks so people would not take the keyboards and mice but now with the move to wireless (again) there does not seem to be a new wired version of the keyboards coming out. With keyboards and mice being completely wireless there is nothing to stop people from taking these from the classrooms or the charge cables need to keep them charged. What are other institutions doing to manage all the new wireless keyboards and mice for a public/classroom setting? TY

Thanks I'll have a look. The issue is getting a connection into an environment. Up until last week I was using a VPN connection into our network then using Apple Screen Sharing but without VPN can not longer use Screen Sharing. Basically Screen Sharing is VNC but Apple's version.

Citrix works fine to gain access to all the services but we need a solution that give users the ability to connect from a Mac to another Mac on site and though the solution of RDP works great through Citrix for windows it doesn't for Mac. We tried using VNC but it was very laggy. We have VPN in use right now but because of the number of users we need to use those seats elsewhere and look to a different solution.

We're a big Citrix organization and recently the college has decide to move techs from being able to VPN into the network and now use Citrix but theres no real solution within Citrix that works for Mac. We're trying to find a solution that isn't as super expensive as TeamViewer. I've looked at nuords.com as well as a couple other services.

UPDATE: Please only use for macOS High Sierra or older This solution pretty much died off and ended after macOS High Sierra 10.13. After macOS Mojave and newer OS's this script will not work properly. When implemented profiles will have a lot of permission issues. Please only user for macOS High Sierra 10.13 or older.

iOS will pickup and complete compliance within minutes and registration though 5-10 mins it does complete but so far on all the Androids I've tested they do not complete compliance and they just sit there and hang on registration. We get the red notification to register and when we select it to do so it just sits there trying, and trying, and trying etc. Anyone else having a similar issue?

Has anyone tested out Microsoft Defender ATP for Mac? I'm curious to see what advantages their EndPoint Protection has compared to others. https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac

Over the past year we've been in circles with what we will go with. JAMF though on the pricy side it's looking like it will be the most reliable solution to do everything we're looking for. WE have InTune and we're pushing that as an option but it's limited when it comes to full Mac Management.

With the ever growing MDM or as we've now been calling it EDM "Enterprise Device Management" (since not all devices are technically mobile) I would like to suggest a section for "Device Management". When I just looked up InTune here on edugeek it's spread across multiple sections and many though may have parts of the question for Window, Mac, iOS, Android etc. much of it seems to be sorted based on the end hardware brand rather than the discussion point of "Device Management". Myself we're building a new InTune and possibly JAMF solution and environment where much of our discussion is based on the services them selves rather than the devices though the devices are also the key part. For now I'll try to post to the forum topics the retain to the end device brand but really would be better if those looking at the topics seen it as a "Device Management" discussion rather than the specific brand/device discussion. Just my $0.02 Anyways hope that makes sense. Have a great day!

Thanks @ICMP-KS Had a read over and yes you’re correct that the “Account Confirmation” is normal. Odd we were not noticing it u TIL now. Tks

We're still working with this issue. I know above I mentioned about making an install package with the license file by itself which gets packaged up with the CC App itself and for the most part this does work but we've still seen issues after the fact. For our latest round of testing we have the latest license package which was built today (Tuesday July 16th, 2019) and setup to install after the machines have been imaged. The issue we're having today is that some of our computers are getting a new "400" error as seen here: If you lookup this error you will find yourself here https://helpx.adobe.com/in/x-productkb/policy-pricing/tshoot-fed-id.html#ErrorquotThecurrenttimeisbeforethetimerangespecifiedintheassertionconditionsquot This article talks about a “SAML” issue. If we watch the adobe logs on the website we can see these logs as "Inbound SAML login failed with message: The current time is before the time-range specified in the Assertion Conditions" We’ve gone over our sync tool settings and everything looks fine and if we talk to Adobe they reference this same article once again. The part that we found odd is the steps you take to produce the error is dependent on which application you open first. If we log into the computer and we now see the Adobe CC App popping up right away because it’s no longer suppressed as it was installed after imaging. So acting as if we don’t know better we put in our credentials to log into the Adobe CC App at which point we get the 400 error. If we close the window it shows the CC App but still not logged in. If you try again it’s the same 400 error will come up. If you look back to the “Events” window in the Adobe Admin console you can see a log of the error and then the computer/software being successful. The next step we launched any of the Adobe CC Suite Apps (in our case testing with multiple computers we tried PS, DW & Ill) and when it asked for our Adobe ID/Fed ID we put it in and Adobe authenticated without an issue. If we close or quit the application we can now see that the Adobe CC App is now logged into our account. If we use an application from the suite first we can get in. If we use the Adobe CC App first we get the 400 error. For a quick test if I logged out of the suite and apps and quit everything then tried to log into the CC App again I would get the same 400 error once again. Along with these new quirks we’re now seeing a new random windows (always seems to be random with Adobe as it may or may not show up from one time to another) anyway we now randomly see this new message if a user has ran the software once before, logged out of the computer then back into it. Once we hit continue it logs in without an issue and if we select sign out it signs out. We never had this prompt from our pervious image. Just another window users need to get prompted with. My personal favorite popup that we randomly see is “Sorry, something went wrong …… This is likely an issue at our end……” The short of it is that yes creating a package with the license only “fixes” it but so far we’re seeing changes in the users experience with more popups and how some applications run. As it sits right now we just started to image a lab of 30 PC's and tomorrow we will continue to troubleshoot and test different ways of starting applications. We're also requesting another meeting with Adobe to go over everything we've come across today. Thank you everyone for your input and feedback. Everything helps in finding a resolution! ©

We spent the better part of two full days troubleshooting this. I imaged 14 PC's with named and shred licensing to track down the issue to either "Imaging", "Windows Updates", "Adobe Updates" or a "Corrupt Adobe Package Install". We've confirmed "Named" licensing has nothing wrong with it and that it affected "Named" licensing. The short of it is that it has nothing to do with imaging as everything work with the deployments after they were completed. Adobe has confirmed that the issue started mid week and that it has been reported by other clients that push on "Shared" license packages and that it seems to be related to some form of of update or something in that field. That's why IMO it relates to a checkin/handshake the computers/software does when a user logs into the suite. Even non federated account (so personal or freshly created adobe accounts) are affected.