Steve21

Thanks, that's interesting to hear and as expected really! Still seems to only really be of use for off-site or 1-to-1 (at least for secondary, primary is a different kettle) Steve

Comparing that to a normal GPO-led system, are you actually seeing any benefits to it? Or was that more a "as good as it'll get, but still not as good" Steve

Yep that link takes you to the newer one, but there's two under that branch though - Microsoft 365 ("New") and Exchange (legacy) ("MRM") There are specific examples on that page that reference scenarios with implicit/explicit and things like labels vs policies etc, but if it's just a question of two policies basically that #1 should answer it (Gets more waffly with extra items installed, thus they even made a nice flowchart! https://learn.microsoft.com/en-us/purview/retention-flowchart ) Steve

If you mean the "new" style retention policies (rather than MRM etc) - https://learn.microsoft.com/en-us/purview/retention?tabs=table-overriden#the-principles-of-retention-or-what-takes-precedence - details it, but the short answer is: Steve

Normally they have multiple sessions, some in and some out of work hours. As you'll also get those who are working (e.g. lets say someone on reception) who can't leave to go to the consultation etc Steve

Top Google results say roblox exploits Steve

Edited above post with the Excel formula we used previously Steve

That's just hex pairs reversed PaperCut: 36 64 01 3c UniFLOW: 3c 01 64 36 In Excel put the Papercut one in A1 and then use B1 as =RIGHT(A1,2) & MID(A1,5,2) & MID(A1,3,2) & LEFT(A1,2) Repeat it down the column etc Steve

No problem running two, just need different external web-addresses etc (assuming your firewall supports using them on same IP/reverse proxy etc) But you wouldn't actually need to run two unless you wanted to keep it separate unless 2022 changed something - You can just setup a collection of RemoteApps that will run from the same Gateway that's using the current SessionHost and that way wouldn't need to make any other server changes - That's what we did previously for RemoteAccess from home and RemoteApp SIMs on Macs Steve

It’s still “manualish” but under pastoral structure you should see the houses branch ans can just click/tick students in Rather than manually searching up each kid etc Steve

That's correct, you deployed an MSI and then the same style of UCL etc for serial, but it doesn't clash with Cloud Filter so can use them side by side or with another filter no worries Steve

If you mean normal Smoothwall alerts that’s only for web browsing Monitor does screen based/typing etc (also will work offsite if you have home laptops etc) - think of it more like securus for comparison rather than filtering Steve

Obviously it depends on storage/licensing (Adobe as an example) but where possible we try to install items in all suites There are too many covers/moves etc that then need items installing for those lessons to make it worth while restricting them Or kids who want to do extra homework/catchup etc in libraries/after school Steve

Haven’t used smart for a few years but anything like that used to be needing to bypass local host/127 etc via proxy settings as it needs to point to the local machine rather than being intercepted by proxy If you add it manually to test it does it work once the bypass is in place? Steve

I'd suggest sticking with paper copies for the parents - By default the assumption for the reason you're giving out the laptops is that the family may have less access to ICT in the first place so using paper copies ensures it's easy for them to complete/return as required (Not in any funny way just in terms of the reason for distributing them normally, PP/LAC etc etc) Once we receive the paper copies in we then use a spreadsheet internally for tracking them/filtering/add notes and return dates etc so we don't need to go through the piles you mentioned Steve

Can't comment on that specific Union but I thought most only support you for actions that happen "after" you join them - As in it'd be too late to change now as it's already started being actioned. Obviously it was designed to stop people only signing up after they have an issue etc, so would be worth checking before changing as even if yours may not be as helpful may be the best option you have Steve

As long as they support ios 16+ you can now add them via configurator on iphone (https://support.apple.com/en-gb/guide/apple-configurator/apd4015ec300/1.1/ios/17.0) - It does a 30-day grace then locks them into ASM just as if it was via a Mac Steve

Going back a step, with those 0x80070035 errors, can you manually browse to the share/ping the server etc from the client while it's building/breaking? (Assuming it hasn't changed in MDT it's like pressing F8 to open a command prompt during the PXE). At least that way you'd be able to confirm things like DNS is happy, drivers are connected to check network connections, does it resolve the hostname etc, does the account let you manually log into the share by just entering the credentials you're using etc? Might not be anything SQL side if it's not even finding the machines due to a missing NIC driver/DNS issue etc Steve

Have you tried the Azure AD sync route? https://learn.microsoft.com/en-us/entra/identity/saas-apps/apple-school-manager-provision-tutorial I assume all your users from SIMs sync to Azure anyway so might be easier link if that's got what you want in it's data Steve

Only a thought, but have you set the APs to bypass SSL inspection if it's on? Just wondering if the "restart fixed it issue" is they're getting connected while the proxy is offline while when it's online they might not like it Steve

Is it all users or only those with laptops etc? That sounds like what might happen if Offline files sync'ing and "updating" one area with the other etc. As it'll always sync the version it deems newest etc which would also remove files that don't exist on other source Many thanks, Steve

If that's the only bit you've done you haven't actually deployed a policy yet (That only enables the option) Go to InTune Admin portal EndPoint Security -> Account Protection -> Create a policy (Win10 later + LAPS) and you need to configure it up there with settings and deploy it to a group LAPS Backup Directory - Backup the password to Azure AD only Password Age Days - 30 Password Complexity - Large letters + small letters + numbers + special characters Password Length - 14 Post Authentication Actions - Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted. Post Authentication Reset Delay - 24 Example of what we use Additionally, make sure you've actually enabled local admin account if you're using AutoPilot etc, else you need to add the "custom" admin name in the policy for it to affect that if you use LocalAdmin or something else Steve

Can you narrow down what you have done Bit easier than guessing! Even a screenshot of your config to compare to ours etc Steve

"We're fed up of being fobbed off and tickets closed without items being resolved" ? "We should invest more in reliability, support and server hosting to reduce issues" ? "We have never had so many issues occur since moving to Bromcom from our previous MIS" ? What's the point exactly of posting a few select "good" reviews, when so many people are complaining about it and those are going unresolved? If Bromcom spent as much time fixing issues as claiming they're not problems, features, blaming clients etc, maybe they'd get a lot more reviews! Steve

If you mean the "new" version I don't think it's public yet so only showing on preview enabled tenants: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=SharePoint&searchterms=145802 That's the shiny one that allows lots of customisation (Aug 24 is release date atm). There's manual customisation currently on a per-site level I think if you want to do it for a sharepoint library/list. Which is more faff but it'd be here (Note the YOURTENANT part): https://YOURTENANT-admin.sharepoint.com/_layouts/15/TenantProfileAdmin/ManageUserProfileServiceApplication.aspx Search the user Highlight their name and click the tiny lil down arrow Dropdown - Manage Personal Site Site libraries and lists Customize "Documents" Versioning settings Change - Keep the following number of major versions etc as fits Steve