Steve21

Honestly that’s something you need to decide really The intune policies are effectively replicating GPOs, so you’d enable whatever you require to meet For example if you want staff to pick backgrounds but students fixed, you need to do two user policies with different options etc If it’s the same for both I’d apply it to device as it stops it needing applying for each user etc Steve

Just my two cents, but that'd make it instantly unavailable for our Trust. We can't spend that much on cards and even if we could have the limits on cards increased to cover it, I doubt they'd authorise that for a new time purchase/company compared to repeat business etc. Just worth thinking about regarding POs Steve

What do you mean by need access to it? Things like Smoothwall etc allow full config via the GUI, same as doing it via core switches which would remove the need for an additional box (and fall into standard backup/redundancies etc) Steve

Before deleting any check points I’d normally advise just shutting down the server/restarting overnight (or day obviously if downtime isn’t a problem) This would normally cause it to retry the merge “properly” and seems if it can fix itself without deleting it that way Steve

Looks like it should just be the case of updating B1 (between 2-56 as a max number) and then re-building/re-running the assign students to classes and using the higher number within that (12 in your case), then updating restrictions to each class etc Not got a copy to hand to test it but that's what the instructions seem to suggest (I assume this was licensed originally so it's not shareable to test?) Steve

Are you staying logged on the VM? It’s a user based setting not computer wide Steve

There seems to be a few ways to do it You can add all the apps to your store removal list - this then uinstalls them all as part of the “install” but you need to prepop that list You can use scripts etc to remove them all, similar to metro apps You can request clean images via manufacturer if bulk buying You can wipe it as you said with usb etc - but then this means you need hands on the device prior to sending it out etc Steve

It does depend on manufacturers and numbers of devices For example a single copier we had quoted recently was £450~ for embedded license. With a £80 support/license per year going on But I know there are levels of discount you get, so like 10 is a different band of pricing etc Steve

Not saying you can’t, just saying everything seems to work worse than normal on-site methods As a few examples, how are you dealing with security on machines when not all the user policies apply instantly? Meaning students can change settings around on 1st login to a machine etc (unless you mean hybrid then still needing servers/gpos etc) Building shared machines without either manually assigning login/users to each, or having supported TPMs etc for self/deploy (bearing in mind that’s only in preview still) Or if you’re upgrading a suite to SSDs/replacing failed HDDs without manually booting off USBs/ISO etc? (Unless you’re booting via pxe and then doing hybrid join etc) Any kind of packages over 8Gb being deployed? (Think solid works/Adobe etc) as they’re not supported via InTune Etc Seems to be lots of these “workarounds/settling withs ” that are required to do things that should be basic if done on-site Would be interested in throwing a long list of things like this to you two if you have time to see what you do with them if you have other ways around it Steve

Your wish is my command: pause(1) type("""#username""", """myusername""") pause(1) type("""#password""", """mypassword""") pause(1) runScript(""" document.querySelector("#username").dispatchEvent(new Event("change")) document.querySelector("#password").dispatchEvent(new Event("change")) """) pause(1) clickAndWait("""body > div > div > div > div > div.panel-body.panel-padded > form > div.form-actions > button""") pause(1) Steve

Personally I wouldn’t yet InTune still doesn’t seem “ready” for shared devices/suites in the way it works yet We are only using it for offsite/1:1 assigned devices Been looking a lot through it for a new school build and just can’t seem to get it setup as nice as I can using SCCM etc Steve

It's been that way for years sadfully (example from 2018) - http://www.edugeek.net/forums/security/196320-groupcall-crypto-vulnerability-something-else.html#post1678329 - and basically confirmed as you said, that only way to avoid it would be bypassing the entire temp folder which isn't recommended. The only other way I could think of doing it (while still a bodge, but less of a security risk) is scripting a Bypass rule to add to the FSRM service for that minute that the GroupCall process runs (assuming that alert is from around that 1am window it used to run?), and then removing it again after. So it's only activated on the temp folder for that minute or two it needs to process the file Steve

For brand new the easiest is to get the hash from the manufacturer in advance Unless you mean randomly bought items which then is likely to be the same you mentioned above In terms of rebuilds HDD changes shouldn’t affect hash so will just rebuild It’s more when it’s old machines you already own that’s faff as lots may not support automated methods. But you can script it etc if it’s already online and working on domain etc Steve

Has that user logged on (while storage sense has been run on a computer?) Don’t forget it’s random when it clears things, it’s not like you log in and it instantly runs, it’s part of when the normal storage sense is scheduled to run- setting 1 day just means when it runs it’ll process things in the bin that are over 1 day old Might be easier if you just lost everything you configured with so far Steve

Aye depending on your layout of the school it'd probably be cheaper to use 2930Ms currently as they're not EOL yet. We're doing a new secondary build atm and as part of the DfE framework they're using 2930Ms (in terms of the multi-gig either a full SmartRate for a large AP area or with a single 1-slot multi-gig module for smaller areas), but on average they're coming out about £3k each by the time you add in stacking modules/PSU etc Or a few chassis, but again would depend on your layout in terms of how those cabs fall The irony being it's probably cheaper to re-route the AP cabling to a few cabs and only have multigig there than trying to cover them all Steve

If that’s just the boot page does it actually show a task sequence for you to pick and deploy? If not I assume you missed the stage of deploying an actual TS under operating systems tab Steve

That depends on how you’re planning to run it You’re either going to pay MS call plans so there isn’t really any external involvement in it, or you link in external SIPs from a normal supplier (Gamma etc) and then run calls via then rather than with MS direct it just uses the Teams GUI in that sense Most the setup work is more from your side in terms of what users have licenses, populating their phone numbers etc Steve

How are you doing it? If you mean campus agreement you’d need to go into chest agreements unless you have 1000+ staff Ensure you ask to keep access to KMS keys etc, as easier to still use them Lock down the A3 license to remove the tatt you don’t want students access (bookings etc) Steve

“Don’t” We looked at this previously and basically every part of the offering seems to work worse than a proper cloud PBX. Unless you’re really going down the level of getting rid of all phones and only using soft console etc Steve

https://microsoft.github.io/XmlNotepad/ Steve

Appreciate it’s not excel, but might be worth trying Microsoft XML notepad Generally saves time rather than faffing with developer tools Steve

We use JotForm but again I wouldn’t say it’s something the end user would be able to automate and needs setting up in advance by IT for all the fancy bits Steve

Pretty sure there’s an official one called CableSAver from Kensington Edit - This one https://www.kensington.com/en-gb/p/products/security/lock-anchor-points-accessories/cablesaver/ Looks like a torture device but looks like it should work for laptops as well as peripherals Steve

Veeam does instant restores as an option, so it effectively mounts the backup image as a new temp VM (rather than any manual creation etc) We do this direct on the backup/Veeam server. When you do the restore it gives you the option to change the virtual switch, so can just pick an internal only one so it’s isolated and won’t affect the live SIMs server Then can just console into the server screen and login to it directly if that makes sense Steve

Do you specifically want the save option? As normally the printers have the option to auto switch tray, so in your scenario that’s probably in the Epson settings Then when it runs out it will just redirect to next tray (or bring up the option on screen to pick another tray to use like on Kyocera etc) Steve