5nowman

Long term you are right.. this needs LOTS of testing as it could kill a system

out of curiousity is it a secondary school you look after?

do you actually use applocker? I have never had to use it and not had a problem either. Can you give some examples of where you use it? or anyone?

Any reason why you chose education over pro? school here, 8 admin machines, rest teachers and ICT...

does having a pin mean you don't see to backup that recovery key? or you still need key? I am planning to bitlocker all laptops one by one and backup key for each on a usb stick. same stick just save file. Add pin number too.

They get just about enough elevated rights to do their work. A custom group.

I am guessing this is a alphanumeric key not a physical usb key. This sounds like a good plan!

1. IT manager has access 2. Safegarding officer could have access however any unblocks should be vetted through the right channels. IF you have a company that manages smoothwall, requests from IT manager, safeguarding officer and head. The fewer the better. 5nowman

A lot of staff don't even use their laptops. It is a waste! The ones that do are the good ones that don't mess around! Each case needs it's own security and standards.. there isn't really a one that fits all. not just printers lol.. that would be nuts!

would this work with smoothwall vpn?

They have local admin as they need this for printers scanners at home etc. We have sophos end point which protects them. On a grand scale we find chrome notifications causing the most chaos regarding popups sometimes however this is not dependent on administrator rights.

Basically users have a local administrator account. They VPN to the school server and access 1 share. The laptops are on the domain so when they use them at school they can login using their domain credentials. No profile roaming. I find if they login at home using their domain credentials lots of things do not work. Do people just get staff to use their domain credentials and when at home it loads just their local apps, no start menu redirection etc? Bitlocker: so I can encrypt the drive, make a note of the key incase windows updates screws it up. Does it as users for the key upon bootup? Thank you all for your help so far. 5nowman

All, Hi. Hope you are all well. We issue laptops to teachers. They have all been told not to store stuff on their desktop and this has been violated. We need to setup bitlocker and windows 11 asap. I have never setup bitlocker. What we want: 1. install bitlocker on laptops - if it gets stolen nobody can get data. is that right? They all log on with a local acocunt on laptops Am I to setup bitlocker to encrypt the whole drive? will users be asked a secondary password during boot? If windows fails to boot or gets corrupt, no data will be restored from the laptop.. just a fresh format. That will be the rule. Do I need to mess around with the recovery passcord at that point? 2. How are you all getting users to login to their laptops from home? Laptops are on a DC and have a local acocunt for teachers to login with. Any quick info would be appreciated. Kind regards 5nowman

Thicko (me) here just figured it out lol. Thank you! Test worked.. just having issues with the generate test alert!

Hi how are you? How did you get this to work when smoothwall does not accept spaces in password and google app passwords have 16 characters with spaces between them? Do let me know. Many thanks 5nowman

Hi! Epic post. Useful info here. What was the big reason you used Windows 11 Education and not Professional seeing as you are doing an app cleanout. We currently use Windows 10 LTSC - want to move to a different version of windows next time and having a hard time deciding which. A Simple primary school. Any advice would be cool! 5nowman

Where do I get this "Outlook (new)" ? We want to rollout the latest office, the only option seems to be 2024 LTSC - is this the same for everyone? no more professional version? I thought LTSC was for hospitals etc.

Our school is not an office 365 school. we do use office 2019 at the moment lgflmail.org emails. We are looking to move to Google Workspace. Does this mean we are totally screwed for teams at the moment? We are also looking to install office 2024 LTSC (I think this is the only version now)... there is no such thing as office 2024 pro plus like there was for office 2019.

Hi, Hope you are all well. Do any of you use the above appplications? I am having a hell of a lot of trouble. 1. Teams integration with outlook - for some reason outlook 2019 keeps thinking teams is not logged in and it is. 2. Tried to upgrade to the latest Microsoft office which is 2024 - however this seems to be called Office 2024 LTSC!!! is this right? our volume license supplier for OVS says this is the one. 3. Installed Office 2024 LTSC and cannot get a teams meeting option. The add-in is there, no option to make a teams meeting. This is driving me crazy.. does anyone have a WORKING setup with outlook / teams ? In teams, the calender is different to the one in outlook - linked to LGFLmail Hopefully someone can help. The alternative for me seems to be make a meeting in teams and copy the details of the meeting to make a meeting in outlook and invite people in outlook... this is long winded. Any help appreciated. Kind regards 5nowman

Hi, Ok, I am not familiar with intune. On a Server OS, I would import the admx, create a policy .. go to the policy in the image and ensure it is set to enable (enable the disable policy), As it is a user policy, I applied it to all staff users OU and it worked. Just make sure you get the one for the right version of Office you use. As I said.. not sure how Intune works.. never used it sorry. Let me know if you do find a way. There are registry keys going around for this.. Kind regards snowman

I love this reply! It is totally true.. By the book, Microsoft have officially released Windows Server 2025 Retail. I didn't check as I went by replies in this forum, but the final released October 2024. Good practice as you said is to normally x months... (I'd say 6-12 months) or riskers and go nuts. Thank you for replying.. have a good weekend. 5nowman

Also.. Why do people say Windows Server 2025 is beta? IS that not wrong?

Is this the fix for the problem this thread was created for?

Hi! How did you get on? We are running version 4. I heard I'll need to go 4>5>6 in that order. Right now we have it running on a workstation with backup exports going to a server... this I want to change. Makes sense really as at each level the door entry points do a firmware upgrade (AFAIK). What are peoples experiences doing this? Thank you 5nowman

This seems right. Bug with powerpoint / intel GPU for years. Sometimes it stays in extended mode or random things happen. I set a group policy for ALL staff. Powerpoint ADMX see attached. Worked for me. Test first of course!