giblet

I was looking at an older article. Thanks

https://petervanderwoude.nl/post/easier-configuring-shared-pc-mode-with-onedrive-sync-enabled/ Ok this looks better

yeah - but look at the steps to configure it in InTune. https://petervanderwoude.nl/post/configuring-shared-pc-mode-with-onedrive-sync-enabled-and-configured/ I mean possible, but now I'm going to have to go through another 30 InTune policies to make sure nothing is going to conflict. Yay.

That sounds like a decent solution. I just realised that Shared Multi User Devices means OneDrive now doesn't work.... Great. Back to square one. Why does Microsoft make everything so difficult. It's seemingly basic stuff - it's so annoying.

Weird stuff is happening with our desktops on Shared Student Devices at our school. On occasion the Public Desktop loads before a Users Desktop and doesn't update. I cannot seem to force it to update to the correct Desktop by forcing it using scripts or cmds. If I wait 5/10 min (unspecified amount of time) and ask the Student User to relog on the same machine the Student gets the correct Desktop. After that the Student User on that machine seems to always get the right Student desktop - but if they move to another machine they have not logged in on they get the Public Desktop again. Any ideas? I did just find a policy that controls the Shared multi-user device settings and it hadn't been enabled so I've enabled it and have applied it to Student machines but as with everything in InTune it's now a waiting game. Anyone else had this issue? Cheers

Ok - well I've created a new Root CA Cert and sent it to all devices from InTune - hopefully they pick it up and then I'll switch over next week and make the new Root CA cert default in the Smothwall interface and everything will keep working... if not - I've got holiday coming up

So I do have to create new Root CA as I thought? It's only the 'Dynamic' certs that you can trick by doing the method below? Create a new root ca. Set the new one as default. Set the old as default - this will renew the dynamic certs. Delete the new root CA as it's no longer needed.

Thanks Tom - I understand the warning will go - but the dates are not updating when I follow the above instructions, see screenshots: I create and set as default new 2026 Root CA as shown and expiry dates update. I then set the old Root CA as default and the dates revert back to expiring in shortly.... So I assume I cannot update the Root CA this way? I will have to create a new one i.e. 2026 one as above - roll it out to all InTune clients - check it installs then switch over to it once I'm sure all clients have received it? Is that correct or is there another quicker and easier way?

Root CA needs updating but the above no longer works - when I set the Old Root CA back to default the old expiry dates remain the same. Does anyone have any ideas or do I just need to wait a day?

I have realised that I was trying to set a configuration file type as a 'Managed App'.... but actually I needed to create the configuration policy under type 'Managed devices' as XML file targetting the app. (See screenshots) Not confusing at all. I have now successfully set the XML file up and sent it out to the iPads... Now to test whether the actual app works as intended (I'll probably be back)

This is from Copilot... so I guess it's probably wrong Intune supports tokens like {{username}}, {{email}}, {{deviceid}}, and {{serialnumber}} only for apps integrated with Intune App SDK or using Managed App Configuration (e.g., Microsoft Edge, Outlook). Smoothwall Browser is not listed as an Intune-protected app, so these tokens won’t resolve automatically. Any ideas how I can resolve this and get the Smoothwall Browser deployed on the iPads using InTune with some sort of way to identify them?

I must be doing something fundamentally wrong because that gives me invalid token too

Yes InTune is giving these errors. Invalid Token. Is there a list of allowable parameters you can input into those fields? Same with Lower Case

Hi I'm trying to get the Smoothwall Browser working with new iPads. When filling in the App Configuration Policy in InTune for the browser I cannot enter a UniqueDeviceID or UserID with any of these parameters: {{DeviceName}} / {{DeviceSerial}} I get the same Invalid token. Does anyone know what I am doing wrong? Thanks

Hi I recently moved our DNS management to Cloudflare for our Domain. The registrar for our domain is Capita who manage it on Nominet. I'm trying to enable DNSSEC for our domain name servers - Cloudflare provided me with this info: Step 1 - Activate DNSSEC in Cloudflare - Log in to the Cloudflare dashboard and select your account and domain. - Go to DNS > Settings. - For DNSSEC, click Enable DNSSEC. In the dialog, you have access to several necessary values to help you create a DS record at your registrar. Once you close the dialog, you can access this information by clicking DS record on the DNSSEC card. ​​ Step 2 - Add DS record to your registrar Add the DS record to your registrar. If Algorithm 13 - Cloudflare’s preferred cipher choice - is not listed by your registrar, it may also be called ECDSA Curve P-256 with SHA-256. I've done Step 1 and have provided Capita with the DS record that was generated, but Capita keep insisting that I need to add it at Cloudflare. Cloudflare pretty clearly states that the DS record can only be added by the Registrar. Am I going mad - or are they? I'm essentially stuck in a loop with their support and I don't know how else to explain it to them. Any advice appreciated. Thanks

Thanks for this. I had the same warning and the 'Show me how' does not show you how.... Anyway that worked perfectly - thanks.

Hi Tom Can you please setup safeguarding alerts at our school through the Cloud portal, as I'm having the same issues as others with email authentication although via Microsoft. We have on prem S5 but I will PM you if I can. Thanks

iFile is very useful too... It allows you to view iOS filesystem and files as root and also allows you to setup an adhoc network on your idevice so that you can browse, edit and add files from a web browser.

Hi Chris I want to serve the energy meter to the school via IIS so it is available via any web browser.. I have used your index file and filled in the blanks. In IIS I've setup a new site called EnergyMeter and pointed it to the new Index file you provided. I've set the IP address up as the same one the energy meter is running on - is that correct? Also are there any other IIS settings I need to adjust to get the site served? I can't get it to work but it's probably something simple that I've done wrong... Any help appreciated. Thanks Ben