xlandhenry

Querying a group for its members is easy and everyone can do that: click plus sign to expand a distribution group in the recipient field in OWA. For the latter you might need to create a custom role in Azure AD with just one permission 'microsoft.directory/users/memberOf/read' and assign it to whoever needs access.

If your school uses O365, definitely have a look at Power Automate! You can schedule it to pull data from virtually any API/database, and manipulate it in tons of ways or do other stuff using the data(send emails, update calendars or run applications etc.)

Only the booking administrator needs A3, who sets up other bookable staff, services availability, etc. So only one A3 license is needed technically.

The school I'm working at is in China. Here many things aren't working great without the use of VPN. Here's a Microsoft recommendation for using VPN if you're using Teams in China: https://docs.microsoft.com/en-us/office365/enterprise/office-365-networking-china

Yes but that doesn't necessarily justified use of E2EE, no?

Sorry my post above sound rude or nonconstructive. Yes I work in education and I fully understand many posts here are taking this with the safeguarding principles in mind, which I also concur with. For my school, Microsoft Teams is not really usable for many of our kids here without a VPN. When teachers need to use Zoom, we require them and kids to stay audio-only as much as possible, and record when turning on camera is needed. Also educate them about the 'controls' that Zoom provides to minimize risks. Again if anyone find my above post offensive I apologize, I just meant to provide a different perspective here.

The amount of automatic negativity towards Zoom is unbelievable. If you want to evaluate Zoom for use in a school setting, at least take a look at what its enterprise plan(or education plan as they call it)could offer, not nitpicking its consumer version. Can anybody tell me what kind of classified and super-secret meetings are taking place in schools, that justifies use of end-to-end encryption? Hundreds of large enterprises have been using Zoom in daily high-stakes meetings for years, yet when school starts using it everyone yells "It's not secure"? ============================== Edit: I am not suggesting that you should just 'go ahead and use Zoom". Careful planning, educating your users with best practices etc, are still necessary.

I was able to find one at https://msassist.com/files/index.php?dir=Windows7/VPC_and_XP-Mode/

I know this is really old stuff...but has anyone got this hotfix for XP SP3 KB961742-v3.exe that enables RemoteApp hosting and can share with me? I searched the whole Internet but was unable to find a download, even torrents are dead:(

We used to make language packs available via WSUS and users can add them in Settings app. With 1803 I can't seem to find language packs in WSUS any more? What has been changed in 1803?

If you want to prevent them from running things not meant for them, best way is to use AppLocker in my opinion.

As you mentioned you tried it on clean install of the official image I suspect it could be a device model specific issue. Are the manufacture firmware and drivers up to date?

Have you tried installing the update directly from Windows Update?

When your school signs campus agreement or other equivalent to purchase Office 365 for faculty with Microsoft. That's how we got it.

If what you want is to prevent running programs, isn't applocker the ultimate solution?

I can still use Get-MsolUser after installing V2 powershell, maybe I was not following best practice? Anyway you can replace Get-MsolUser cmdlet with Get-AzureADUser. The license part is a little bit trickier because Set-AzureADUserLicense accepts different parameters. The best way to do probably is to assign the needed licenses to a template user and then construct a license object from that user and pass it to Set-AzureADUserLicense $license = (Get-AzureADUser -ObjectId [template_user]).AssignedLicenses $licensetable = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicenses $licensetable.AddLicenses =$license Get-AzureADUser -SearchString ?? | Set-AzureADUserLicense -AssignedLicenses $licensetable

What error message did that command give you? Have the accounts in question been assigned other licenses before?

Then I would recommend switching to the new client, it's miles ahead of the old one and any future updates will not be available for the old client.

Is it the old ODfB client? I didn't come across these issues with the new client that handles both personal onedrive and onedrive for business.

This is truly stunning, I'm glad I didn't roll it out this year.

It doesn't have to be configured when deployed, right? I think it would probably make more sense to configure it via group policy so you can apply different language preference for different people.

Main reason for our planned move is the new features and updates which are not delivered to VL version. We've done some small scale tests with this in our MDT deploy task sequence and so far so good. I don't know about Deep Freeze so can't really comment there.

We haven't gone that route yet but planned to do so. You need to make sure your Office 365 tenant has Office 365 Education Pro Plus licensing so that you can utilize the device-based activation model: https://docs.com/caseyhill/8578/microsoft-office-365-proplus-device-based You may also want to deploy the updates internally so automatic updates won't clogged up the network.

Click-to-run version requires users to log in their accounts in order to activate. So you have to at least give the accounts to them. You can assign only the proplus licenses if you don't plan to give them other O365 features.

The biggest advantage with the click-to-run version is that it's getting several feature updates over the year, whereas the MSI version(2016) haven't got any noticeable new features since its release.