Bankesy

Good afternoon, Having migrated all user files to OneDrive over the Easter break we put in folder redirection group policies for both users and devices but I notice that at logon it can take a long time to process, particularly when users are logging onto a device for the first time but also sometimes on the same device again and again. I'm wondering where I might have gone wrong, has anybody seen this behaviour? Thanks

@VBallantyne @UOB I don't know about the 365 authentication for the account and tenant, I was just following the guide so if there's anything outside of the guide that needs configuring I don't know how we would know what to do. Can somebody explain to me in simple terms what I would be looking for in terms of this please? Thanks

Not directly relevant but I did see this recently: https://www.healthandsafetyevent.com/?__hstc=190441268.0aebecad7c02bf17ad2432e09235d4df.1712918154375.1712918154375.1712918154375.1&__hssc=190441268.1.1712918154375&__hsfp=2868988929

Hello, me again Has anybody got PaperCut working via Outlook with OAuth? I've followed the guides and double-checked I've done everything correctly but I can't send test notifications, "Failed to send test notification, check your settings and try again. Reason: Connection timed out: connect." Any suggestions? Sophos? Is something missing on the 365 side?

Good morning, Just wondering if anybody out there has any experience with setting user and risk sign-in policies via conditional access. I'm trying to follow this the guidance at this link after being alerted to some potentially compromised accounts but I don't seem to have the options for 'User Risk' as a condition or 'Require password change' as an access control. Maybe it's a licensing thing, we aren't P2 here. Any thoughts welcome as always, thanks in advance.

Well I've changed the setting in a GPO for "Prevent access to drives from My Computer' to 'Do not restrict drives' and this appears to have fixed it while keeping the C:\ drive hidden

If anybody is still following this I have a new issue, students can't access 'Documents' or OneDrive "Due to restrictions in effect on this computer" which I gather is due to them not having access to the C:\ drive Does anybody have any advice on this beyond allowing access to the C:\ drive? Thanks

Thanks, everyone, I've fixed my redirection issue. Me being silly and only applying redirection on the user side of things but not on the device side although I realise now one thing I didn't account for was how long the redirection policy takes to apply at logon for those users with a huge amount of data. @Davit2005 @munkey appreciate the info regarding the shares, I was focusing too much on users not being able to edit their folders and forgetting that I could do something at the level above. @DaveTheTech cool script

@Julian That's cool, just had a look at that now and can't see why that wouldn't do. My apprentice has found an updated admin installer though which he's testing as we already have a script for install. Thanks

Update: When users log into Windows they get auto-signed-in to OneDrive with Documents, Pictures etc. all redirecting correctly. But the 'Documents' link under Quick Access doesn't point anywhere, it's not showing the directory on the file server nor the OneDrive redirection. Anybody any clues as to what might be happening there? I'm going to check the Event Log...just typing and thinking is making me feel better

@munkey It turns out redirection isn't working properly, that was just an illusion because the user for testing had already replaced their 'My Documents' shortcut with one that points straight to OneDrive because that's all they were using but that only came to light in the last few minutes. So I need to review why that's not working but yes I take your point, what was your method for un-sharing the user profiles location? Thanks

Good morning all, We've had a migration of user home directories from the on-prem file server to OneDrive this week (at last). It's all gone fine and I've got auto log-in\redirection working with GPOs which I know is the old way but I haven't done it via Intune before so I didn't want to risk it. My question now though is how to cleanly remove the user home directories on the server, I wanted to put them in read-only for a couple of weeks but can't seem to find anything online that works. I know the infrastructure engineer I worked with at my last place did this somehow. Any thoughts? Thanks

@notsogenius Thanks, think I will probably end up creating the team and ignoring like you say.

Good morning, We recently had an issue whereby Fusion 360 just wouldn't sign in and neither the error messages not their support were very helpful beyond establishing that we need to install a new version. But the new version prompts for a team to be created which we don't really want to do so just wondering if anybody else has overcome this issue? Thanks

Much like OP, we have a Head of IT and indeed school leadership group as a whole who are open to all things AI being used in the right way. We have a small staff IT focus group for all things tech anyway so started discussions in those meetings, I then wrote a policy (using a bit of AI) which got passed down to Heads of Department and now it's just regularly reviewed and updated if for example exam board guidance changes etc. Simply saying no to AI isn't going to get anybody anywhere, in my opinion, staff and students will just miss out on the knowledge they need moving forward. It's about saying yes in the right way, starting small and opening it up gradually to the wider school community.

We use Macs in our Music department, I don't really know anything about them other than my predecessor using Munki to manage them. I've been speaking to Alex Stout at Counterpoint regarding a refresh and he has been very helpful.

@Danny11515 My advice may not be relevant to you but it sounds like you're going through something similar to myself right now so I'll offer this: 1. From an OS and patch management compliance point of view we manage via InTune, we were very fortunate to receive direct guidance on setting this up from a Microsoft partner so it works very well, happy to share more on this if you want to send me a PM. 2. From a hardware replacement angle I have been using the Windows 11 readiness reports in InTune but learnt as recently as today that switching TPM on for devices that have it can significantly impact this number positively so you may not need to replace as many as it first seems. I think one of the other posts here mentions Windows 11 install skipping hardware requirements check, again also learnt today that this is the case now but come to the next feature update for that OS it will not skip the checks so it won't move beyond the current build if hardware doesn't meet standards. Again if you want to send me a PM I'm happy to discuss hardware suppliers and provide contacts that I have great relationships with when it comes to purchasing.

Good morning, Does anybody know whether or not it's possible to automate category assignment to e-mails in a shared mailbox based on who opened it or replied? For example, for shared mailbox [email protected] there are two people with access, and messages dealt with by person 1 should turn green, and messages dealt with by person 2 should turn orange. Thanks

@howartp The date to and from is November last year to February this so it is out of date but I don't understand why when I have updated on Exchange server and it's working for everyone else. Thanks

Thanks everyone, I've had another look and it seems the entire directory is selected for sync so I'll have to think about which ones I don't want to get around this problem. While I'm here, I wonder if anybody could help me troubleshoot a security certificate issue as I don't really understand these things. I believe it's related to the Exchange certificate that got renewed but I'm confused as to why only one user is having the issue, as you can see from the screenshot below there appears to be an issue with the path but I'm not sure what to do from here. I've tried exporting the cert from Exchange thinking I could manually install it on that one PC but seems I need a secret key that I don't have, I do know that the cert is generated by LetsEncrypt on the Exchange server.

Good afternoon all Does anybody have any recommendations for Year 7 and Sixth Form admissions software? We don't currently have anything like that and have started to look at Applicaa which we can already see has some cons, our admissions team even went to a networking event for it at another school and not all was positive. Thanks in advance for any suggestions

Thanks for the tips, I've got a strange feeling that the people before me might have set every directory to sync but I will check.

@3s-gtech Okay, hopefully there are some that are not synced with M365. I didn't do setup here, I guess there's a way I can check with OUs are and change this if required? Through Azure AD sync right? Thanks

Good afternoon all, I'm trying to understand what is causing X500 proxy addresses to be added to distribution lists in AD and how to stop it? My vague understanding is it's something to do with Azure AD Sync, I've got a mail-enabled security group that I can't delete but don't want people to e-mail. But every time I remove the X500 address it just comes back, I've tried mail-disable via PowerShell. Any other suggestions? Thanks

So my suggestion might be way off but we had something similar when upgrading our Ricoh printers recently because the old card readers had a kind of SIM card in them that converted the number on the card. We don't use MiFare though, these 'SIM cards' were effectively making our HID iClass cards work.