Sheridan

Ditto I'm in the Durham area if I can help.

It doesn't work in Windows 10 - or rather you'll get varying results. Oddly, MS don't seem to think theres a problem, but they are the only ones who think the xml Start Tile redirection works properly!

Thanks - this is starting to make more sense now! I'm awaiting a quote for User CALS * FTE to see if I can add this to our existing OVS agreement

So you bought several CALS per staff member? Thats an alternative as I'm still not sure whether buying RDP User CALS under our OVS-ES entitles those to be used offsite.

Well, with it being all staff potentially we're better of with User CALS, student access probably won't happen as they're supposed to use the VLE for this kind of thing. If we have to start buying CALS on top of the OVS we might be better off renewing our Citrix solution.

Yeah we have the core pack - again its not really clear whether we opt for just FTE staff, or external connectors (and how do we quantify that!) Sometimes the old Select agreement was simpler!

I'm sure this has been asked before, but I can't seem to find an up to date answer, and my head is spinning from trying to read through the murky licensing documents! We have an OVS-ES agreement with MS, and want to move from our old Xenapp solution to the latest RDS - do we need to buy TS CALS or are we already covered? I'm struggling to find a definitive mention of this in any MS documentation, it just mentions Core CALS. We only need this for Staff (initially anyway) so I'm thinking that the FTE count would cover it...

I've tried with the exact path specified and it still allows it to run - the only way it works as expected is if I add the path as an exception in the default Allow rule for C:\windows. Not the behaviour I was expecting.

I think its a telling indication of Windows 10 readiness that a third party solution is the fix to something Microsoft couldn't get to work

I just used a simple Path rule - and it seems like the default rule to Allow C:\Windows\System32 allows Powershell to run, even if there is a specific Deny for that path. I put Powershell.exe as an exception to that default rule and it now stops it running - I always thought the Deny rules tool precedence over the Allow, as they did in SRP?

I'd just blocked the powershell.exe so it wouldn't be allowed to run from anywhere, which is how it worked in SRP?

I've got an Applocker policy to replace SRP, which specifically Denys users from running Powershell (powershell.exe) However, if they search for it, they can run it ok. Other Applocker restrictions seem to be applying but powershell is still allowed to run. I've checked that the executable name running under the restricted account is still showing as powershell.exe. Odd behaviour this, anyone else blocking powershell with Applocker had any issues?

I wouldn't mind so much if Windows 10 was a finished product!

I bought a Samsung all in one PC for the very reason it had hdmi input, brilliant for connecting something like a ps4 and then flipping between the PC and the hdmi source!

Snow in the US/Canada = they get on with it. Snow in the UK = all systems collapse. Panic, stock up your cupboards with pot noodles and hide until the 3cm of snow has gone away. We've have snow/sleet and hard ice here for a few days. Needless to say the local councils have done absolutely no gritting whatsoever, whilst appearing on the local news declaring their 'readiness' for the 'extreme' weather.

Snow here (no matter how little) = traffic chaos.

We have a little bit of snow in the North. Everybody panic. Lock up your family and prepare to eat your first born.

This all smacks of Apple copying GAFE, bit late to the party.

Well, I've tested this thoroughly with our AC2,Meraki and VPP setup now and as far as books go: 1) You cannot deploy books with AC2, they do not show up. 2) You can only deploy books with Meraki to users, not devices so deploying books in Meraki effectively only works on 1:1 devices I assume other MDM's will be the same as far as books go as this is obviously an apple restriction or policy. We can deploy Apps (vpp) fine with both AC2 (well, when it works anyway!) and Meraki but books for some reason are a whole different method. So I think its Kindle time for those who need eReaders.

All of the books bought through VPP show 'N' for device assignable - which is the problem I guess. These are just standard free books from the VPP store so I'm assuming all books are user assignable only. No books ever show in AC2, I don't think it works with anything other than Apps. Have you actually managed to do this with Ac2 or Meraki? I can't find any specific documentation for books, only Apps

The books I bought through VPP appear in the MDM VPP section - but these can only be deployed to Users. The purchased books do not appear in the AC2 - but the Apps do. I think I'm doing it the right way - but books never appear in AC2, and they only appear in the VPP section of Meraki - which can only be deployed to users (which means they will need an itunes account)

I wish I could work out how then! I can deploy Apps purchased with VPP but not books, how did you manage this? From the look of this, I have to have a VPP account to download and distribute free or paid Apps, which I can deploy to iPads using AC2 or Meraki. However when it comes to free or paid books I have to purchase them under the VPP account but then can ONLY push them to Users (not devices) so each ipad will need a seperate iTunes account. Thats not ideal as we're trying to manage iPads that aren't on a 1:1 basis.

Ha, this is a classics case of Apple. They are so incapable of producing a method of mass deployment its almost comical! We've setup Meraki MDM and Apple Vpp. We've 'purchased' some free books through the VPP which you cannot deploy with AC2. So I tried with Meraki, but there is no way to deploy books in there either. If you try and deploy using a URL you're told its invalid, if you search by ID you can find the book you've bought but cannot deploy it as 'Identifier cannot be blank' or 'Vendor cannot be blank'. Why on earth we can't deploy whatever we've bought (free or otherwise) through AC2 is beyond me, apple seemed to have tied themselves into knots with this. I'll be glad when the ipads in education fad has died out.

It looks like ibooks (free or otherwise) simply cannot be installed onto iPads using the Configurator 2. This looks like another pointless Apple restriction for the sake of it. AC2 can install Apps only, whereas an MDM can install Apps and Books - why? Is there a way around this apart from an MDM? Apple obviously don't want people to use AC2 as its so flakey and inconsistent.

Been a fan for 28 years, seen them live 17 times, had a ticket for next months tour. Now I'm gutted. Nothing has ever been like Motorhead for me!