Steve21

After looking at the normal players, redcloud/azure etc etc we went with iLand as we use Veeam (Cloud Connect) and then offload to iLand for the priority servers, but that's mainly down to the size of our backups etc we can't afford to do it all (Other off-site backups are used for the other servers) You don't mention what backup software you use, but for Veeam it's literally plug in an ip/username and it acts as a backup server etc Are those schools all linked like a MAT or separate? If they're linked I'd just go down the route of replicating between schools, once it's setup free forever, and a lot easier to get a full copy of backups if something goes wrong Only reason we didn't do that route is because our local schools aren't linked directly to us Steve

I mean a big question is why does the school want voip and what are they expecting from it before choosing a solution really. If for argument sake they're hoping to get full soft-phones installed is that something those 2 options are offering? Everyone is going to tell you their solution is better, but if you have a list of requirements from the school it'll help narrow it down Steve

Aye, love SCCM, lots to tweak about, but once it's sorted its amazingly powerful Steve

Yes, but was just referencing your quoted reply to Norph about no HA If you're using SS directly on the servers (rather than a separate computer/storage SS nodes) you'd need both to die to lose it fully Once a snapshot is created, it uses that for the backup so nothing is being edited at once. It's more down to whether you have the CPU/network capacity to do them both at the same time without affecting users etc, but was just a side thought Steve

Only a personal opinion, but I prefer file routes, as if for example it started updating/installing and broke it might still create folder without the files But in terms of your actual question I don't think it made a difference when I did try a folder rule as long as the path is valid, normally I didn't add the last \ on though (You can do the browse method and just browse to a client and do it manually if you want to confirm though) Steve

You have it set to type Folder not file it seems *Edit - just to expand, you can do it both routes, but either onedrive.exe as file, or the folder name onedrive etc Steve

What rule did you use exactly for the detection? Bearing in mind 32/64bit program files etc Steve

Want want want! Is it just the username and teams you're after? Or is there any other info you need from it? It might work just doing it as an auto-size if it's already in a table view? e.g. | Format-Table -AutoSize Steve

In answer to your second one, normally just using something like | fl On the end of any powershell will return a better formatted list, but might be worth trying Steve

I mean is there any reason you're only considering nightly backups? We have backups/replication running throughout the day, as if you're using incremental they won't take that long in the first place. (Obviously will need to ensure bandwidth limits are in place etc, but once the snapshot is run it shouldn't impact any clients) Also don't forget if you're using shared storage, whether SAN/SSD/Other, it'd be the same principle to losing a day's date if the storage went down and you had to use the backups either way Steve

But even after a month it it’s never on during that scan (let’s say 6pm) it’ll never update, as it didn’t just run it when it’s back on Err if I remember right it’s Admin -> client settings Then I think it was something like the software evaluation policy Easiest way to test this it without changing the server just log on a client, open the sccm client, go clients action and run app deployment policy That will force it to run a check on the installed software Steve

Normally those kind of issues are related to the heartbeat settings for the clients There’s tasks that’s scheduled to run to check things like software and normally they are set for once every 24 hours, meaning if the machine is off during that time etc it won’t report back We tweaked all of these a lot to do scans every few hours or mid-day etc when we expected these to be on If you have sccm right click tools installed you could force a manual update for the machine and see if it pulls the right stats through and then it’s likely related to that Steve

You can do individual file/folder restores now too, it just doesn't seem very logical on the restore wizard. When you tell it to restore a server, the next screen is something like pick whether it's whole machine/drive/folder etc now. (Obviously check on your version of server/windows before doing it live but should still work) Steve

Aye we used to use Windows Server ones for schools that didn't want to pay for other software (mainly smaller primaries), and time wise it obviously depends on the storage/network between the devices, it's not going to be quick if you're restoring an entire VM unless they're small ones. On a side note, we found (unless it's been updated in 2019) that you really do need to script/schedule backups away from MMC to get a proper setup going, so takes a bit of tuning but works a lot better that way Steve

And seeing you seem to have skipped my post: That's two very different stories? If you know and have access to more monitoring/filtering, you must know how many paying customers this downtime affected and whether they've actually been told of an issue... So which is it, you do have knowledge of how many were affected and are refusing to say (Which makes it sound very much like you're trying to hide it from those who didn't log it directly with you), or you don't have knowledge? (and your comments above are again inaccurate, and leads to the question why don't you know/have access to this data?) Steve

With all due respect that's not a very good answer, nothing I asked about requires a high detailed answer or any private information, and using that as a reason not to answer seems again a rather poor response. If you have an issue that affected, lets say just Filter8 and your engineer "broke" (for lack of a better phrase) the Rules that affect every customer on that filter8, all the customers on that filter8 are affected, therefore a restore of a filter8 backups would be that number (Lets say 50 for argument sake). Whether or not they had a user using the internet at said time doesn't affect what schools were affected by that change. If it's a filter higher in the chain, and it affects multiple filters lets say 8-10, that's still a number you would be able to know (Now 3 filters at 50 schools) Or if it affected all filters (lets say 20) that's 1000 etc. Therefore if you restored filter8 backups at 10am, you know 50 are resolved out of 150. If you restored filter 8-10 backups at once, you would know all 150 were resolved. If you're doing manual restores of backups one-by-one to phrase your RFO, surely again you know how many were restored by your technicians... I'm not sure why it seems unreasonable to you to expect to hear about an issue that affected a school without having to dig through and pull out every bit of information to get a simple answer without having to check in with staff/students to ask if they happened to not have internet at a certain time... Steve

Is it a constant thing? There used to be an issue with users who had too many different roles enabled that it does lots of redirecting in the background and threw a wobble. But obviously if it's end user based I'm guessing they don't have many roles? Can also be pop up block related if you have security set a bit tight on those machines, but again depends if it's a constant issue or just sometimes? Steve

To be frank I don't think taking it to PM is correct, and feel rather irritated that despite my previous comments you even PM me directly to discuss it off this topic, as this refers directly to my previous comment about things not being very public facing with SBB ^ironic hey? When you're officially posting a response to an issue schools have, and tell them you had an issue that has "about 25 customers", that's not the same as "exact number of customers that were initially impacted in the early morning as it was very difficult to ascertain", followed by "25 schools still affected" Else you are effectively saying that your RFO is inaccurate to say the least, you don't know how many were fixed in the morning, as the majority of an unknown figure were resolved? If there were 26 customers with an issue, then fixing 1 isn't a majority. If there were 25,000, I think the other 24,975 might want to know... Even by stating that you must have a rough idea of how many paying customers this affected? Steve

Can you clarify then, your initial comment about 25 customers being affected: a) Did the "Majority of customers" refer to the 10 out of 25 that were fixed? (25 less "sub 20"), which is an odd majority b) Or there were more than 25 affected, and your post is incorrect? Again, not trying to be a pain but these stories don't add up again, considering your post was at 2:24 PM? Steve

I mean I guess in my eyes, if you're talking about short term issues (until September etc) would you just have the laptop already setup on a desk/plugged in, just like a desktop pc would be etc Steve

Thought people might be interested, but this is some snippits related to IT from the latest 20 page union checklists for schools: Only some snippits as mentioned as it's a long doc but get the feeling the answer to all of those are NO currently Steve

Yep that's what hash does too That's the SSO side of things, rather than the hash Both will allow you to login automatically on-site, and with same details externally The only difference is that pass-thru allows more security based things like logon-hours etc (as it's constantly checking your AD server for policies), however you need to have it running a client constantly on servers for it to work. e.g. If your server goes down you have problems logging into cloud too Steve

If your only reason for changing is for SSO, I take it you realise you can do it just the same with hash? Didn't see a reason to change to pass-thru when we did it so never had any issues etc Steve

Don't you just do the same as Chrome and block the settings URL? As in: Block Access to a list of urls then add edge://settings etc, rather than Chrome Assuming you have 77+ GPOs *Edit - As a side note, that will block ALL settings just like in Chrome too, unless you want to specify which settings pages to block etc Steve

While I do jest, partially, I can pretty much sum it up! Still feel that despite SBB's opinion that it should only be sent to "affected schools" it's very much time they start to publish issues and resolutions publicly. The fact that schools might be getting the same issues at different times and won't know about it as they weren't in the first bunch of affected schools is still rather poor attitude imho. Whether it's 25 or 25,000 school an issue affects, it's still an issue and one that schools should be able to check, both in terms of QoS and that if they had issues they know it's resolved fully and not going to happen more (or replicated around each box/filter etc) Steve