MicrodigitUK

You will be fine just got to keep an eye out for known good firmware and once you have one stick to it unless you need to upgrade for any reason.

Firmware 5.43.46 is now out so I am going to give that a go and see if the issue gets any better. https://community.ui.com/releases/UAP-Firmware-5-43-46/881bc329-cd89-4556-a715-4d90542af807

On print server open printmanagement.msc Browse down to drivers section For the driver you need make a note of the column “Inf Path” This will be in c:\windows\System32\DriverStore\… If you copy the entire folder from this path that contains the “.inf” file, this will give you all the files needed to import the driver onto another system, or install via SCCM driver package.

Interesting as following a firmware upgrades over the summer we are seeing Very similar issues on our RADIUS authenticated Staff network. We also have the same model of AP as you. I will go check what version we are running at present to see if it matches.

If you’re new to the AAD and Intune MDM coming from a AD world this is a good introduction and transition book to read http:// https://www.amazon.co.uk/MDM-Fundamentals-Security-Desktop-Autopilot/dp/1119564328

If you have one local domain Then the only way to stop this is to use AD Sync with device right back enabled to On prem domain. However if you have more than one site with multiple on prem domains you cannot get AD sync to write back to multiple, Only one on prime domain is allowed for device wright back. If you do have one domain this is by far the easiest method to print to on-site print servers. A standard Windows print server needs authentication on SMB print shares (Authenticated printer queues). Therefore needs those devices written back to the local domain the print server is joined to, to not prompt for authentication, as the device will be authenticated like any on prime device. (Using some certificates that are written back to onprem AD with the device identity) An alternative (If you have more than one on Site local AD) is to have non-authenticating Printer queues. And I have found the easiest way to achieve this is with an IPP print queue Hosted from a CUPS server. Then you allow the installed Papercut client on Windows (or macOS) to do all the authentication by passing on the username to the Papercut server from the Papercut client running on the device. This is precisely how it works if you have a secondary Papercut PrintServer for something like your Apple Mac computers or iOS devices. This doesn’t have to be macOS running CUPS (That could be expensive if you need a Apple Mac for each on prem side) it could be any Linux distribution like Ubuntu server, CentOS. Also apposed to popular belief, Windows will add printer use using IPP printer shares. It’s just normally in the Windows world we are commonly connect via SMB printer shares. No you won’t have all the bells and whistles of an SMP print share if you use IPP you will need some other method to distribute the print drivers AzureAD devices. But you could use something like Papercut print deploy to help you or to make this process of deploying drivers and IPP connections to clients. Then it’s just a case of pushing out the Papercut client via Intune.

Bump… [emoji3] The closing date for this was extended to 16 Jul 2021.

Nominet will allow you to set and manage sch.uk domains directly with them free of charge. So set up a nominet account (basicly link an email address) send them a email asking to link the sch.uk domain to that Nominet account on school letter head sighted by head. Then once change is prosessed it shows in portal, you can then set dns to Cloud Flare DNS servers and set up a free cloud flare account. Manage all the DNS entries from cloud flare. No need to give the LA a tag as Nominet will do it all for you if you have the signed letter from headteacher as sch.uk domains belong to the school not the LA and are free for life including basic management (change your dns provider) via Nominet web portal. So combine that with a free DNS like cloud flare an no costs involved.

Enable Network Stack

Dell Adapter - USB 3.0 to Ethernet PXE Boot It’s this one in the link: https://www.dell.com/en-uk/shop/dell-adapter-usb-30-to-ethernet-pxe-boot/apd/470-abbt/networking

Have you updated the firmware on the Docks?

Yes, we made a .RTF SIMS report just the other day for our six form ID cards using this method.

1+ for FSlogix Profiles and Office containers! That’s the magical change for keeping local cash copies and roaming between devices. Although having run it now for several months myself, you do need to watch out for space requirements to store the local cash Fxlogix VHDX profiles and Office containers (for OneDrive/Outlook cash). They can grow rather large in size.

That is not true, we have the Dell,s and they PXE boot fine with “Network Stack” enabled in BIOS and the official Dell USB A network card that is designed to PXE boot them.

Have a look at this PDF in the “Running my report” section for all the command line switches so you can schedule it in Windows to run silently. https://pmapis.azure-api.net/guidance/PC-3-CommandReporterGuidance.pdf

Try https://www.clouddesignbox.co.uk/

@howartp Perfect I spotted my issue. Thanks for your help

@howartp I have also just tried that however that also gives me an error. Please can you give an example of the XML file headers and format so I can check Salamander are outputting the data correctly in the XML.

@howartp Could you give an example of the headers and fields in the XML import file? Obviously redacting any user data, just need the XML file format. Got Salamander to set this up for Staff at our site but... I have tried using the output XML file and MISSync is telling me there is nothing to import! Do you need to upload it in a different way?

The only other MDM I’ve found comparable to MS Intune and in some aspects slightly better, is VMWare Airwatch. However it can come in at 10 times the price! So after 5 years of Airwatch I’ve moved to Intune purely to not spend a fortune on our MDM.

Do you have a reader on your printer for PaperCut. They are normally just running in USB keyboard emulation mode. If so try one of them. As for the different formats of the card numbers this is normally just Depending on if it’s in hex integer and different ordering of the bites. Also Paxton Only uses part of the card number so you can go Papercut to Paxton But not Paxton to PaperCut as it will be missing some of the information end of the card number.

I normal go for the rf IDEAS WAVE ID Plus Readers https://www.windmill-computing.com/products/view-one/pn/RDR-80581AKU/page/pcprox_plus

I normally install it on a server that has the SIMS.net client installed. Call it my Sync server But he’s just a normal member server nothing speshal other than having SIMS.net installed. So no need for it to be on your SQL, SIMS or Solous server.

This time last year when we replaced some APs we installed 515s for the higher capacity of clients as it has 4 radios built in and the 505 only has 2. Went for the 515s so we can hang a couple of class sets 35x2 devices off one AP and have no issues.

I once got them to do a bulk import of cards for me when we first had NRS installed and all they did was take the cards and wrote a bulk import SQL query.