Steve21

That is literally a parent contribution scheme but hey ho, if you call it different fair enough Steve

That’s not BYOD though that’s parental contribution/school owned which OP said they didn’t want Steve

Unless you're a private school and putting it in as part of the requirements to join, I can't see how you'd ever be able to "force" BYOD participation Bearing in mind even most parental contribution schemes have clauses like being able to loan a device for free during school days etc Run while you can! Steve

There always has been a cheaper business version https://www.microsoft.com/en-gb/microsoft-365/business They might have picked the lowest option if they are using it, as that doesn't give installable programs, but 2nd one up does But if you mean even cheaper then no Steve

You don’t get any KMS keys by default anymore, but you can request them still. Did this recently for office 2021 Regarding the OP, those licenses are for 365 not 2021 (if you used the generator tool it adds them all in) Shared is still checking that the user who’s logged on is licensed to use 365 (eg a guest account wouldn’t be able to launch it) Device is l licensing the device, so whoever logs on can use it even without the licenses But 2021 is still MAK or KMS related so leave those as empty/0 Regarding the logins, it should default to 365 logins not AD - so you might have it not setup in AD where the login/email/upn matches their 365 accounts to sign in automatically Steve

The only time I’ve seen that is when you have a vault hold on the user that’s removed the license via the sync Anything like that on yours? Steve

Yep! I guess you previously bought some perpetual back in yonder days https://www.microsoft.com/en-us/licensing/news/microsoft-open-license-program-changes Steve

I thought that was Open License only, which isn’t OVS Might be worth checking with your provider, but as a school I’d expect you to be on OVS so no rush to change Steve

Depending on where its shared from (e.g. is it from a local pc) do they have that machine in the point print restrictions list? Steve

Ah no that’s fine if they’re all showing that way (Was just thinking if some weren’t DLs as such) Just tried it on mine and I get the same both ways Are you talking thousands of lists etc? Just thinking about limits etc Steve

Are you sure you’re not mixing the two up? As in distribution lists are those, groups wouldn’t normally show if you’re filtering to DLs only Steve

Martin has a good point! Steve

It’s in the config file you set the display level it’s not a parameter Steve

I’m assuming this is more related to 1 license required than not supporting two providers Best bet would be tall to selectec or papercut and see about merging the two licenses (until renewal) etc Steve

If you're reallllllly tight on budgets, there are some cheaper brands currently by a few pence, for example on Softcat - Integral 240GB V Series SATA III 2.5” SSD Version 2, 240 GB, 2.5", 450 MB/s, 6 Gbit/s - £11.64 ADATA ULTIMATE SU630, 240 GB, 2.5", 520 MB/s, 6 Gbit/s - £11.73 But personally would pay an extra £ or so and get a higher/more reliable ones Steve

You shouldn’t need to It stores it in AD so the role as such is just the GUI install (assuming you do the standard for dcs regarding ad replication etc etc) Steve

When you say it's not installed, do you mean it's been uninstalled? As it's built into Windows nowadays (for the home OneDrive rather than Business AllUsers etc) Steve

We use the helpdesk number as the backup As it's a hunt-group between all staff members phones it shouldn't get clogged up unless you have every single tech ringing a 2FA at once and even if that's the case then they probably wouldn't be answering another call Steve

So ours is slightly different because one of our two DCs is core which isn’t supported by STAS So we have one GUI DC installed directly, and then a member server monitoring for the Core DC But there’s only one service account (being the admin one) that’s ours was installed under by Wave9 Steve

I assume that Linux way is via lots of scripts etc though; which you said you didn’t want compared to off the shelf for support? Maybe I misunderstood, but wasn’t this just to monitor the firewall etc? Or did you mean that it’s full infrastructure monitoring but it’s just that you need it to bypass the firewall in case that’s down too? Or how does the relay receiving an email come into the process? Is it just monitoring the out queue and if it stays sitting in it’ll text? Just trying to get a picture of the whole route currently Steve

I had this argument when Wave9 set up our Sophos and the engineers wouldn’t do anything other than full admin rights on the account Never really got an answer as to why, when as you say you can add accounts permissions for wmi etc So would be interested to see if you get anywhere with this! Steve

Not sure that really exists in the way you’re talking if it’s pure SIM and not data dongle etc You’d either need external hardware like the eagle mentioned above, or scripting it via an external phone link (eg using windows phone link app) But it sounds a bit muddled in regards to why you couldn’t use a cloud based monitoring system, as all you’re doing is basically the same with a local app that’s then using “cloud” via a SIM The alternative option, but again depends on what the “security policy” mentioned is referring to, could you not have it locally monitored and when it detects downtime it’ll activate the data dongle? So it’s not unfiltered all the time and only connects once it’s required, then automatically disables again after it’s back online? Steve

Do you have anything from MS that says that email wise etc? It just seems we read that differently, as that's the same document I've discussed with them EQU is anyone using an A3 or A5 product. If I don't assign them a licence, they are not an EQU. -> I agree that if you're using an A3/5 product it counts (but remember it includes all aspects of A3/5, not just an assigned license, which includes Windows/CALs/Office etc) These non EQU users are covered to use windows as long as they don't use a device for more than 50% of their work day (which none do!) -> This seems to be clashing two rules into one. A shared device is something used under 50% by one person yes "however" if it's their primary device it still counts as the primary user making it EQU. e.g. A catering manager who uses a pc in their office to do reports then that is their primary device so not licensed that way, even if it's only used 1 hour a day to do those reports then it's no longer a shared device as it's primary. Compared to say a cleaner who logs into a shared library pc for 5 minutes, or a till assistant who only uses a kiosk style till, who wouldn't count. You can't just say they use their machine under 50% of the day and count it at light. Otherwise under that logic a teacher who teaches in 3-5 classrooms a day isn't EQU either As they aren't using it over 50% of the day Steve

All of those would fall under EQU based on MS descriptions “Any employee or contractor (except Students) who accesses or uses an Education Platform Product for the benefit of the Institution” which they all would be I thought? (I know some resellers word it different but MS don’t seem to agree) Then you’d start running into further issues if you’re counting them like that, as they wouldn’t be covered for CALs/Windows licenses etc either regarding your Intune comment (assuming that’s for logging into school devices?) Steve

Still issues at home too. Certain things work. Others don’t Steve