CHiLL

While not Google Classroom, we had the same request with Office 365. Our only option was to replace staff first names in AD with their first initial. Then when it's synced, it'll just show J Smith for example.

OK, thanks. It appears to be progressing, though we're now getting the Windows Hello setup on the brand new devices, when setting it up with our Intune admin account. This is despite it being set to disabled in Windows Enrollment. However, when we logged then logged on with a standard user, they didn't get a Windows Hello prompt. It appears to just be a ask once (which we cancel) and then it doesn't come back. Is this expected behaviour?

Ah OK, thanks. We've just attempted this, but it failed (on a brand new device, which shows in the assigned devices for that profile). The OOBE steps were; Language setup, keyboard layout setup, additional keyboard layout setup, network setup (which then goes off and talks to Intune), restarts and continues the OOBE, then asks whether to set up as a personal or organisation device. Chose organisation and signed in with Intune admin credentials and then it errors out. I've attached the error. [ATTACH=CONFIG]60439[/ATTACH] Edit: That error relates to the user not having an Intune license assigned. Just assigned it and will try again. Do all users need an Intune license assigned, if they're to use these laptops at home?

It's self deploy, because we're also removing from of the crapware that came with them.

It failed on our unfiltered connection too.

I should have included the message in my OP (I should know better!). It just says that it timed out trying to get the security policy and then automatically fails all remaining steps.

It's Windows 10 ProEducation 2004. We're seeing a 100% failure rate. If we push them out anyway, the user gets the Windows Hello prompt every time. If you get this, what are you doing, re Windows Hello?

Like loads of other schools, we've had a stack of laptops delivered to hand to students. We had some delivered earlier last year, which we were able to move from the DfE InTune over to ours and they deployed/worked fine. However, we've had more laptops delivered (HP 250 G7), but they're unsecured devices, not enrolled into any Intune. Our process: Boot laptop At OOBE - Get hash ID with Powershell script Import hash to Intune Connect to WiFi Laptop goes to Setting up your device page Consistently fails at Security Policies stage and will not proceed I cannot figure out why tall of these brand new unboxed devices are failing at the same point, when they previously worked on the first batch of devices we received. Can anyone help point me in the right direction?

But there is crap metal.

Are you using SCCM? If so, right clicking the TS shows a copy option, which will create a clone of the selected TS, which you can then modify. I'm not sure about WDS/MDT though

I like the look of that. I wish I could see it at my local Cineworld though, it looks like a film that's visually stunning.

We don't use streaming very often and only have a handful of content, but we installed Emby on our backup QNAP SAN. Users can log in and browse the videos and stream it from that device over the network. Not sure if it meets all your requirements, but it may be worth looking into.

It will prompt you to encrypt it anyway, so you'd effectively have a double-encrypted device. I encountered this with hardware-encrypted USB devices, which then had to be encrypted again with BitLocker, so the user had to put in two passwords to access the data.

We've banned students from using removable USB devices and we have a BitLocker policy that requires staff to encrypt a removable drive before being able to put data on it.

After looking at the permissions on the certificate template, the VPN Servers group does not have auto-enroll checked, and all of the guides (Microsoft, Richard Hicks, 4SysOps, etc) leave it unchecked. I guess this is why it isn't re-enrolling? Is there a reason why we wouldn't want it to do this automatically and do you all have to do it manually?

We've been running Microsoft's Always-On VPN on a Server 2019 server for a while now and we've been encountering issues today. No clients can connect, throwing the following error message: IKE failed to find a valid machine certificate It's not the client laptop, because that only uses user certificates. When I checked the server, I noticed that the machine certificate has expired, specifically the certificate for the 'VPN Servers' template expired today. It expired today, which explains why users suddenly can't connect. The server has the following GPO applied: Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Certificate Services Client - Auto-Enrollment Properties Configuration model: Enabled Renew expired certificates, update pending certificates, and remove revoked certificates: Enabled Update certificates that use certificate templates: Enabled With that policy, this VPN certificate should have automatically renewed itself, but I don't know why it hasn't. A GPResult shows that policy has applied and those settings are set. A server restart and gpupdate /force also hasn't fixed it. I can renew the certificate manually, but I want to get to the bottom of it, for when this happens next time the certificate renews. Has anyone come across this before?

PilotTV (of Empire Magazine) have released their top 20 TV shows of 2020: 20) This Country 19) The Crown 18) Curb Your Enthusiasm 17) The Boys 16) Schitt's Creek 15) Home 14) Sex Education 13) After Life 12) Feel Good 11) The Third Day 10) I Hate Suzie 9) The Queen's Gambit 8) Better Call Saul 7) Gangs Of London 6) High Fidelity 5) Devs 4) The Mandalorian 3) Save Me Too =1) I May Destroy You =1) Normal People I hope to go through a number of these during the Christmas break.

We have some devices that can't PXE, though we use SCCM. For those devices, I've created the WinPE boot image, which I can boot from via USB. This just loads the WinPE environment that WinPE would do and then it loads it's basic network drivers and can connect to the SCCM server and start pulling the Windows image. The main issue I had for this, was WiFi only devices, which I either use a USB Ethernet adapter or just a full deployment image via USB.

A Christmas doesn't feel complete without a VeryPC giveaway* *It may be just the socks

We've been very disillusioned from Smoothwall over the past few years of using it. It's difficult to use and the support has been absolutely terrible. We have booked a demo with Wave9 for Sophos XG, so we'll see what that's like. What do you mean by not content aware? I'm seeing in the Smoothwall marketing about being content aware, but not what it actually is. Edit: Is it just that it checks the content of the page, such as the source code and includes that to decide whether the allow or block the page? If so, does that mean Sophos is just URL based filtering...and from that, does Sophos require the deployment of a SSL certificate to clients for HTTPS decryption like Smoothwall does?

Not necessarily. Monitors haven't caught up to TVs in terms of quality and feature set. 4K monitors are very expensive and lack things like good HDR. The sweet spot of monitors at the moment is 1440p high refresh rate, with a lot of people still using 1080p. If you're hooking the PC up to a 4K display, then yeah, a 3080 is the card for you...but the majority of PC gamers are still on 1080p/1440p displays.

It's clever pricing, just in that bracket of making you think "it's not that much more for the next one up".

This is game dependent, but generally the 1650S graphics card just doesn't have enough horse power to play at 4K, unless it's on low settings and low FPS. You'd have a much better gaming experience at high settings with higher FPS.

That build will be fine for 1080p gaming, though like others have said, don't skimp on the PSU. I've been using Corsair for years and looking at reviews, I don't think you could go wrong with the Corsair CV450 for £40 (Currys and Ebuyer atm).

Apparently there's a character in AC:V with a scouse accent and sounds remarkably like Korean Billy. I haven't played it, so can't confirm.