Sheridan

I've only had a brief look at Securly in the past, but it seems to be popular. I think smoothwall are losing their place in the Edu market, no one is happy with them at the moment! Most of the secondary schools around here have ditched them or are planning to.

I'm about to ditch Smoothwall as well - tickets take ages to get resolved, by the time I get any kind of reply I've had to find a workaround anyway Sophos XG looks like the way to go

I'm going to move from Smoothwall - after being pretty happy with them for years I'm sick of the poor support and the changes to the hardware. So I'm after some opinions on replacements - we need the following in a replacement: - cloud filtering - support for 2000 users - at least 6 ethernet ports for connection to various LAN/VLANs etc - web filter and firewall I know there's a few UTMs out there but I'm hoping to keep this within the same sort of budget as the previous smoothwall, so any advice would be helpful?

I'd removed them from both MDM and ASM - I've since reconnected the MDM in ASM (it didn't expire until next year though) and so far preparing 2 of them has now worked!

Yeah - reset that way and on reboot it still tries to connect to the MDM, and then fails!

We've got some ipads (DEP) that kept failing to download apps from the MDM. Long story short we gave up and tried to re-prepare them, which failed as they then were stuck in the loop trying to load the configuration and then failing (even on a home wifi connection) So last resort we released them from DEP to start them as 'fresh' devices. And even that didn't work as they still boot up and go to 'retrieving configuration' as if they were DEP managed and connecting to the MDM! I've DFU'd a couple and the end result is still the same. So thanks to Apple we now have a bunch of unusable, 'DEP but not DEP' devices, is the only option to return them to Apple with the original invoice?

We've managed a bunch of ipads with Mosyle & DEP - all have worked and pulled down the apps bar one ipad. Its pulled down most of the apps but refuses to install 3 apps (garageband, clips and imovie) We have 100's free in licenses and this ipad has been flattened several times and rejoined to Mosyle but those three apps stay at 'waiting to install' no matter what - very frustrating! I'm not sure what else we can do, apple won't help as they say is the mdm and mosyle is the free version so they're not bothered either! Has anyone seen this before and found a way around it?

Thanks, it looks like its not possible with an MDM. I'm sure I used to do this back in the days of iOS 9 or so using Meraki, but its obviously changed since then

We use 365 and Suite - 365 is more complex seems to have lots of disparate parts. GSuite (to me) feels a bit slicker in its integration - especially when using Classroom. Plus GSuite is cloud and cloud alone, where's 365 (I'm looking at you Teams!) also wants to install the local app for every user which is tiresome for a cloud service. But as said before - neither is bad, both are good and have their +'s and -'s

Thanks, I'd seen in some forums but it was from a few years ago, looks like Apple don't allow this

Does anyone use an MDM that allows you to disable/enable/prevent changing Location services in iOS? We use Mosyle and there's no option, and AC2 doesn't show anything either?

Argh what a nightmare this app is - when we deployed it with our MDM it simply fails to open with the unhelpful message 'No SPIKE app running. Please start the SPIKE app and refresh your browser' The error message is not much use, as why refer to a browser when its an iOS app? But, we have found what seems to be the cause - we deployed the ipads by adding the wifi settings using Apple Configurator and once connected they connect to the MDM which all works fine. However, during testing we've found that if we remove the profile and join the wifi manually the app then works (still with the MDM restrictions etc in place) Add the wifi the AC profile and its broken again! So this means we'd have to manually join 100 or so ipads to the wifi just to get this crummy thing working, which seems really daft when you consider the profile ONLY contains the wifi name and password/proxy which are identical to what is used when trying the manual method Has anyone else had much experience with this app?

I was testing on 1909, but it would only show the old Edge in the Apps list. I used to have GPOS in place to replace the default shell with Chrome but I'd probably have to rebuild them. The new inbuilt version looked promising but not if it only uses store apps

Has anyone used the built in Windows 10 kiosk mode? It looked like it would be a nice quick way to setup some old laptops as browser only devices, but it only allows 'store' (i.e worthless) apps, and I'd want to run only Chome or Chromium Edge I've used GPOs in the past, but this seemed like an easier way, but hobbled by the app support

AFAIK this was a 365 tenancy setup by one of the companies when the DfE were offering financial support to create a GSuite or 365 domain. It seems to be pretty basic and the connectivity test shows the MX records points directly to o365 (i.e domain.mail.protection.outlook.com)

I've tried with 2 new accounts and neither are showing as restricted, and I've done the rename/save option with both. They can both email external addresses and internal address, but any emails sent to them from any external account are bounced There's no external filtering either - just bog standard 365 Exchange!

We've taken over support for a 365 tenancy for a primary, and part of that we created a new account for us to use - it works fine internally but any external emails to it are bounced straight away: 550 5.4.1 Recipient address rejected: Access denied The new user has a standard A1 account, with their email address specified correctly. Other existing email accounts work fine for internal and external accounts, there are no domain blocks for incoming email either I've tried the method of changing the address, saving it and then changing it back again but no luck, and nothing appears in the mail trace either, so is this an MS issue or have I missed something really obvious? I also ran the connectivity test for inbound smtp email and that was all good.

Ahh this is a small primary who have literally just switched to 365, so the dozen or so accounts have all been created manually. Its going to be used more in the future but for now its only those users

Hmm, maybe its not as straightforward as I though. I've tried to add A1 to the existing A3 users and I just get the following error - I'm reluctant to remove the A3 until the A1 is successfully assigned You can't assign licenses that contain these conflicting services: SharePoint Plan 2 for EDU, SharePoint Plan 1 for EDU. Review the services included with each license, and try again. You can't assign licenses that contain these conflicting services: Exchange Online (Plan 2), Exchange Online (Plan 1). Review the services included with each license, and try again.

Cheers all - I think I'll switch to A1 and wait before removing the A3!

We're looking to merge a schools Office 365 A1 and A3 licenses to be all A1 - as they don't require the extra A3 features anymore Is it possible to simply switch their license from A3 to A1 and lose the extra features, without any impact on their mailbox etc? I can only find information about upgrading from A1 to A3, rather than the other way around!

Hmm, its happening on all of our 20H2 PCs, which is a PITA, but that's pretty much the W10 path - fix 10 bugs, introduce 20 more.. The fixes I've found involve a full reimage. That will have to wait!

After upgrading a number of our PCs to 20H2 we're seeing a lot (i.e just about every one!) sticking on logout or shutdown with the message "Task host is stopping background tasks (...\Synchronize language settings)" and we have to force the signout or shutdown This is just going to mean a lot of PCs left logged in, I can't seem to find a reason of fix for this? Just another 'feature' we have to workaround perhaps?

Yes - you're right the new one appears in incognito mode, so it must be cached locally - although I'm almost 100% sure I tried a machine I'd never used on RDS before! I guess the 'old' certificate is still valid for a little while so the new one will be ignored by the clients

I recently renewed our domain wildcard SSL certificate (not self signed) and imported it onto our RDS 2019 server - and added it in using the server manager in the deployment properties certificates section - for all 4 services Weird thing is, when accessing the RD Web page externally it still shows the old certificate - which is still valid for a week or so, but thats not even on the RDS server anymore as I deleted it! Have I missed something, as this is the only place I installed the original certificate, and its port forwarded through our firewall as well?