Roberto

Google has a habit of starting projects and losing interest in them if they don't see an immediate domination of all their competition by maybe a month after the launch date... and only a fool would think that was ever likely in the gaming market. Just think how much money Microsoft had to invest just to be one of three major gaming companies with the various xboxs over the years. Anyway, Stadia is continuing this trend... and to put it bluntly: I won't take Google's product seriously until Google starts taking Google's products seriously.

If you're using O365/Azure and have MFA enabled for that (and if not, why not?!) take a look at https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-integrate-with-remote-desktop-services

I’m not saying they don’t work, or that they’re bad at what they do. I’m saying that it’s been 1283 days since Apple last updated them, which makes them a poor strategic choice right now, as they’re going to be either updated or taken outside and shot quite soon, I should think.

Not sure I’d be investing in Apple TV right now, because Apple sure aren’t investing in it. It has an “end of life” feel to it right now as a product.

Worst is probably Question Of Sport, sorry Quantum of Solace. best.. you only live twice I think. But OHMSS is a fine film too.

Fever with violent shivering here, plus a headache after my first jab yesterday morning, but not that bad in the grand scheme of things. Do feel absolutely exhausted today tho.

My OH and I are getting the jab later today. I'm quite optimistic - it's a sign that one day we might return to something like "normal".

Allowing SSPR for admin passwords is the last thing you want - potential for compromise etc. For 'normal' accounts, you can require MFA to allow a password reset and that should be fine imo.

On the Lanyard? Do you mean on a badge / card that is attached to a Lanyard?

Docks reduce support queries because there’s only ever one cable to connect or disconnect, and with most laptops you can tell everyone to connect the dock to any usbc socket on their laptop and not have to remember which virtually identical (at least to them) cable goes in which similar but slightly different socket on their devices. Docks standardise connectivity in each room regardless of the differences between hardware in each room. Hello less disruption to the start of each lesson as Mr Luddite, the maths cover teacher, struggles to remember how to connect each one of 4 different cables to a device he barely understands or ever uses, while going full Grandpa Simpson to the kids about how you didn’t need to plug a stick of chalk in back in his day... Docks reduce ‘wear and tear’ damage to cables and hardware because the room’s hardware can be carefully run to the dock, and a usbc cable can be run from the dock to the laptop, without worrying about constant plugging and unplugging of connectors that may not have entirely been designed with that in mind by people who may not entirely understand how to treat the connections with respect.

I don’t think it’s difficult to understand. This is the “cloud all the things” deal and is fairly clear in that. The issue seems to be when people apply their own filter to it.

If your normal staff would use a laptop and the rooms are geared up for laptop connections, why not have a couple of ‘pool’ laptops and logins for cover staff? You’d want to reset the password and maybe sanatize these after use, but that can still be relatively low stress if you have twice the number of accounts as you expect to have cover requirements so you can have time for this. Giving them iPads, if that’s not standard issue for normal staff, feels like setting everyone up for failure before they can even try.

Not put it under heavy load enough to say but it makes very short work of moderate workloads that have the old 9 year old MBA throttling and spinning up the fans like someone's bet it a tenner that it can't impersonate a helicopter.

I have a (8 core GPU, 8Gb Ram, 512Gb disk) M1 MBA here. Everything @Norphy says is correct but to me, a moot point as the M1 MBA is a vast improvement over my 2012 MBA, which is still useful in its own right, which makes a point as to how well these devices age and how much of a huge improvement the M1 is.

I tweeted at Octopus to ask about this, pointing out that as a customer, “no IT department” makes me worry about my data, and got a reply from their account and from his account. They don’t have an “IT Department”, they have a “Tech Team” led by a CTO. Wonder if they don’t have a “HR department“ because they have a “people team” too? All credit to them for a swift and informative reply though.

C15 I think?

It’s all good. You can create a Windows server VM in the freebie tenant/azure trial, install AD & AD Connect, and fill your boots.

This isn’t a bad idea, especially when you consider potential safeguarding and data protection issues being just a default setting or mis-configuration away if allowing lots of external guests to have access to one org’s tenant

So you can share data in Exchange Online / Organization / Sharing between M365 tenants to share free/busy info for meetings, for example. That's not a problem. You can ultimately have multiple domains brought into the same M365 tenant too if you prefer. There's about 200 domains in the tenant I help manage right now.

I think that Zoom, like Teams, will need regular updates. However it won't necessarily need to be updated every single release, so perhaps you could update it once a month or something? Alternatively, as you say, maybe a link to the website to use the web client will be fine, at least for people who are just attending meetings.

Does it really need to be live? If your bandwidth is inadequate to stream live on one platform, it will be an issue on all. Zoom will allow you to stream to Facebook, YouTube and the like and you can share the sharing site link, for example, and that may help a bit. Similarly, with Teams Live Events your output would go live to M365 and viewers would connect to that rather than back to on-prem... but that first hop from on prem to whatever would be my concern with live streaming.

This seems backwards to me. Once the devices are enrolled in DEP and your MDM you should be able to give them to the users and they should be able to set their own passcode, log in with their Apple ID if necessary, etc. That's part of personalising the device for the user, not a central setup task.

Teams are fundamentally O365 Groups, so to restrict who can create a team you need to restrict who can create an O365 group. https://docs.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide

I'm working on this right now for a project at work. Currently, AAD-joined devices won't run the windows time service as its set to manual start on domain join, then it gets time from a DC. Not sure how this would work for AD-joined devices that aren't connecting to the mothership via VPN while at home... Anyway, for devices that are managed by Intune and off your local network you need a powershell script to change the trigger to manual start on detection of a network and the get time from an internet NTP server. Luckily, I've written a powershell script you can deliver via Intune to do this, so you don't have to. See https://github.com/robertomoir/MTR-Time-Sync-tools/. It's designed to run in Windows IoT enterprise but should be good on all platforms. You may also need to set the time zone in Intune which needs to be done via oma-uri. See https://www.petervanderwoude.nl/post/configure-time-zones-via-windows-10-mdm/

You could probably put something together with a power automate/flow trigger. There’s even a sharepoint one for capturing file/object creation in a sharepoint library (which ultimately is what Teams files store really is). https://docs.microsoft.com/en-us/power-automate/triggers-introduction