kennysarmy

Our MFA policy has a Sign-in Frequency set to 6 hours - so it's not that....

We've had a member of staff report the following: I’m not sure who to speak to about this but I am having great difficulty using my e-mail address as it logs me out so quickly and then it keeps flashing up on my laptop all the time that I need to re-input the password even if I’m not using that email it gets in the way of other work. Logging in is also time consuming as the password is long and I have to look it up plus I then have to do two stage verification with my phone. Both of those ar understandable but not when I have to do it 10 to 15 times a day! I don’t have this problem with the other e-mail accounts. Is there any way the settings can be adjusted so it doesn’t log me out so often? Could it at least give me 2 or 3 hours before logging me out if not more? followed up with: I’m just trying to access my email account via the Apple mail app or outlook app - not in a browser. It’s a real problem for me as I get kicked out and then get no notifications of incoming mail until I log back in again. That means I’m missing some urgent emails. followed up with: I don’t think this is anything to do with my phone. The problem happens on my desktop too and it happens using both the Apple mail app and the Outlook app. Basically I get logged out of my School email account really quickly. It doesn’t happen with my accounts or any other of my several email accounts. I just asked ChatGPT what might be causing the problem. Does any of the following sound like something you might be able to fix?

An admin staff member has asked if I can install TeamViewer on her work desktop as it's ofen used by 3rd party companies the school uses for remote support. I'm reluctant as I feel it's opening a vulnerabilty to our systems. The alternative is she uses Teams and does a screen share, which I feel is at least a controlled method. Thoughts?

So I went back in to the two shares mailboxes an hour later and neither had my name still in the access lists - not only could we get in the mailboxes but it looks like no changes could be made either, even though it showed my name in the access list after I added myself. Admin team now reporting they are working again, ableit slowly and after readding myself back in again they are both now opening for me. Grrrr

I added myself to the affected shared mailboxes at 11.10 - I still cannot get in 25 minutes later. UTC Date: 2026-05-14T10:36:07.647Z Client Id: 240B37AFCA9A49E6A51AE57952A4741F Session Id: dfc543a0-319f-469b-814a-cd6ddd128c6b Client Version: 20260501001.17 BootResult: accessDenied Back Filled Errors: Unhandled Rejection: Error: 500:undefined|undefined:undefined err: Microsoft.Exchange.Data.StoreObjects.AccessDeniedException esrc: StartupData et: ServerError estack: Microsoft.Mapi.MapiExceptionNoAccess st: 500 ehk: X-OWA-Error efe: LO2P265CA0114 ewsver: 15.20.9891.14 reqid: c0417cbe-47ac-bb02-e04d-56efd1f9731b cv: vvLbzl3w53/Ytar5gSiA0L.0.1.1 emsg: ErrorPermissionDenied Admin staff can now access the shared mailboxes but are reporting that they are incredibly slow and some email previews just showing grey boxes!

Anyone else withi M365 issues today? None or our admins can access some of our shared mailboxes 😕 Chaos in reception!

Cheers - yes Drivers are not updated or upgraded via WSUS

If only we had that luxury - we have students sitting exams in the main hall on laptops from various departments that can spare them and other students in offices all over the school on desktop PC's.

Is there even a GPO that could supress the MS Update pop-up?

I wonder if another GPO policy is in place as these are Exam accounts that somehow has suppressed the ability to click the pop-up to delay the reboot 😕

I've checked event viewer on the computer for Event Viewer → Windows Logs → System Does this suggest the PC did just restart on it's own? The process C:\WINDOWS\servicing\TrustedInstaller.exe (EXTCLR-2019-07) has initiated the restart of computer EXTCLR-2019-07 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shut-down Type: restart

I've been advised a PC has shutdown in the middle of an exam and was told this was because it was doing an update! Can you sanity check the image of my WSUS GPO and confirm these would not cause a PC to restart just because a pending update was applied in the background whilst a user was working. Ta.

Governors have the following licences: Microsoft 365 Apps for Faculty, Office 365 A3 for Faculty.

We have a hybrid Windows system with the majority of users working on site. Anyone who wishes to change their password can do so by the common CTRL+ALT+DEL method. Students who forget their passwords can have them reset by teachers. Staff who forget their passwords contact the IT team and we change it in AD and force a change to something else at first logon. School governors are setup with AD accounts but they never come in to school, what additional Microsoft licence do these accounts require so they can change and reset lost passwords remotely and without needing to contact IT Support?

Where would I find the StartNet folder? Do I create this in "C:\OSDCloud\Config" ? And then once it's in place run "New-OSDCloudISO" - again and burn the ISO to USB?

Good luck. I'm struggling to get an unattend.xml parsed to bypass all the OOBE stuff so it's more light touch, so far no good!

My OSDCloud commands - if anyone can advise any amendments? New-OSDCloudTemplate -Language en-gb -SetInputLocale en-gb -Verbose New-OSDCloudWorkspace Set-OSDCloudWorkspace C:\OSDCloud Edit-OSDCloudWinPE -DriverPath 'D:\drivers' Edit-OSDCloudWinPE -StartOSDCloudGUI New-OSDCloudISO Burn files (C:\OSDCloud) using Rufus to USB

What will determine if the device imaged using OSDCloud is joined to Entra in hybrid mode or not? I'm finding my test devices are "Microsoft Entra joined" - rather than hybrid which is what I'd expect from the AutoPilot Deployment Profile...

The AutoPilot Deployment Profile states: Out-of-box experience (OOBE) Edit Deployment mode User-Driven Join to Microsoft Entra ID as Microsoft Entra hybrid joined Skip AD connectivity check Yes Language (Region) English (United Kingdom) Automatically configure keyboard Yes Microsoft Software License Terms Hide Privacy settings Hide Hide change account options Hide User account type Standard Allow pre-provisioned deployment No Apply device name template No Yes the device is connected to the network so should be able to see the DC during AutoPilot - I can't see why it wouldn't be able to....

We currently use MDT to image devices which are then joined to our network and appear in Entra as Microsoft Entra hybrid joined. We can then use group policy to control them along with Intune where that’s a better (or the only) option. As MDT will soon go EOL I’ve been playing around with OSDCloud as a way to image devices, I’ve set it so it also enrols using AutoPilot during the process, with the devices then automatically added to AD in a separate OU that I’ve called “Intune Hybrid”. The test devices appear in Entra as “Microsoft Entra joined” (not hybrid) – is this because of AutoPilot? What are the implications if I then move the PC in AD to its correct OU? We have no plans to ditch our on-prem servers at the moment but am looking to embrace some additional cloud resources such as making more use of Intune and Windows Update for Business (WUfB)

I asked our reseller about this and this was their response. I’ve doubled checked with our Microsoft team and it seems that your students maybe the lucky ones to have Clipchamp, as it’s not part of the M365 Apps licence which will explain why the staff don’t have it. This licence is normally only available with a M365 A3 licence for both staff and student. It can be purchased as a standalone licence but there is no education discount for it Thanks

Unless I allocate the licence to staff from the student licence my staff get an error saying "Clipchamp is not available to you!"

I am able to allocate licences to students from our Microsoft 365 Apps for Students licence as it appears as one of the options, "Microsoft Clipchamp" See image. However when I look to allocate a licence for staff from our Microsoft 365 Apps for Faculty licence, there is no option for "Microsoft Clipchamp" - is this normal and I have allocate from Student? Or has something not been correctly set at the Microsoft side? Cheers

At one of my sites they have a couple of Make: EATON Model: 9PX5Ki / 9PX 5000 They are both now alerting with "End Battery life” An Eaton replacement is almost £1000, but I have found a compatible from www.sourceups.co.uk which are £260! Is it necessary to replace with the more expensive? Both only come with a 1 year warranty!

The GPO that I removed (to uninstall the old version) also had an element to push out the licence key. I've now separated that in to it's own GPO and one of the devices is now reporting correctly Is it Friday yet?