Koldov

When signed on with my Google Workspace account and using Chrome & Google to search the internet, sometimes I'll click on the 3 dots next to a result (which displays a pop-up with options) to open a cached version of the page. Just recently I get a 403 error in the 'About this result' section. I can still use the cached button (or any of the others) but don't know what is producing the 403 error, nothing has change in our Google Workspace settings recently and I can see the contents of that section when signed out of the Google account, so I know it's not Chrome itself...

Many thanks, yes this may be it as I do believe this user is an admin.

Not sure about inTune as we don't use it, but I'd be surprised if there was a setting... I didn't find one in Meraki when I had this a while back, here's the post: /forums/netbooks-pda-phones/233574-guided-access-password-set-ipad.html From what I worked out when I researched it, I emailed the teachers the following: "Regarding the passcode lock on the iPad for ‘Guided Access’, I have looked into it and spoken with a few colleagues and the answer is… you cannot block this because it is an ‘Accessibility’ setting and Apple do not give 3rd party MDM developers the means to do so. In fact there is no useable way to block access to the settings in general. Unfortunately Apple’s view on iPads is that they are a one-to-one device, to be used solely by an individual who has full autonomy and they were never designed to be ‘managed’. There are quite a few parts of the iOS that cannot be controlled externally as Apple do not give out access to the code that controls them. Apparently if you set a passcode but do not turn the feature on, that passcode will be remembered and used whenever the function is started. However each time you disable and then re-enable the feature in the settings you can choose a new passcode… However, there is a way to get the iPad out of ‘Guided Access’ without the passcode, so for the rare occasions this happens it should be just brought to me. "

Sorry yet another post about Google Workspace... Not long ago I finally thought I'd got my head around O365 quarantine and adding the rules, changing the default behaviours etc. Then it was decided we were going to move to GMail... I have found where the quarantine section is, but looking through the emails, I can't work out why most of them are there! I've expanded the section for the 'Matched Rule' and it doesn't actually give me any information. I also can't seem to work out where these 'rules' are and what they contain...

Pretty new to Google Workspace, so not sure how to ask the right question to get the answers I need but... Our 3rd-party consultant has decided to blow away the groups I had initially created (or the system had created - I can't remember), I didn't take much notice of the whole 'Groups' thing actually because I did everything based on OUs and we weren't actually using it for GMail or anything other than Classroom actually (and not really even that very much). Anyway, they have created what looks like a few new groups, mainly I guess to be used for a mailing list, rather than to apply any settings. There is a 'teachers' group which I tried to email but got a bounce back (not very specific - saying anything from the I don't have permission to 'post' to the group doesn't exist)... I had a quick root around in 'Groups' and looked at the 'Access Settings' and I think this answered the question of why that happened. I am not a member of the group and the setting is as follows: So, if understand it correctly that is why I can't email that group... however, I went to my BM and told them I thought there was a problem with the email list set-up and could they test it by sending this group an email. They are not a member of this group and yet the email got sent straight through.... So, now I'm confused... According to the settings neither of us should be able to email/post to this group!

(Zip) Bombs away!

Sorry I should have mentioned that my Mac knowledge is practically zero, so it would be helpful if any answers could be worded ELI5 style... Thanks, it isn't so much about the shares appearing (sometimes they do and sometimes they don't) but recently they are saying that when they click on them nothing appears (I think spinning wheel of death) and it just won't connect. The only thing I can think of that I've changed was an in-place from 2012R2 to 2019... I don't think it coincides directly, but sometimes the users just struggle on for ages without telling you and then decide it gets so bad they tell you and expect a 5 minute fix because they've been dealing with it for so long that they've had enough. Or 'think' they've told you, or just mention it and never give you the thing to fix it.... The Headteacher has complained about it and then when I ask for his Macbook, he's too busy, then I don't see them for a few weeks until they come to complain about it again... I've said it's like asking a mechanic to fix your car and then driving off... then coming back a week later to complain it isn't fixed! Interesting point regarding the share permissions/NTFS permissions. I think when I started (many years ago) I was shown the way to create shares was 'share permission' = 'everyone' and then NTFS permissions give the user 'full control'... I didn't really understand back then and I can see that's an issue but I inherited a full to bursting physical server and a staff share with many weird and wonderful permissions (and a lot of 'legacy') and haven't ever had the guts to change it. Not that I want to off-topic, but do you all set NTFS permissions for users at 'modify' then?

I'm pretty sure I've asked this a few times before, but don't think I've ever really got to the solution! My Headteacher demanded a Mac (to use SIMS, Microsoft Office/Outlook, and Chrome browser)... and I thought I had smoothed out most of the issues, but recently they are complaining that the Windows server shares are not appearing. Added to this we are coming up to our performance management reviews and they are moderated by the Headteacher. This means (as we store the documents on the server), that they are going into lots of folders/files and amending/editing them. Unfortunately we are still plagued by the fact that when they do this it renders the file unusable by anyone else. In the past I worked out that it seems to be a combination of things depending on what they are doing with the file, but the only resolution I could find doesn't seem to work for all scenarios. Basically there are two things that happen: 1. When working on the document (Example_Word.docx) every edit that is save produces a folder with a random file in. It's a temporary file Office opens whilst working on a document, which it then deletes and writes the edits to the original file. The only issue is that the Mac/User doesn't seem to be able to delete these 'temp' files once they are finished editing and saves the document, leaving hundreds of random folders/files. One fix for this has something to do with adding explicit permissions for the user (adding the user account to the R/W ACL on the parent folder), which this folder does have, but I can't go into every folder they might use and do this. 2. The other issue we are seeing, is that (and I'm not exactly sure how this happens) if they save or move the file some other way, the file gains some sort of permissions from a user (or machine) account which the Windows Server cannot resolve or identify (S-1-5-88-3-33216)... Once it gets to that point the file seems to stop inheriting any other permissions from its folder and therefore nobody else can see this file. If I delete the rogue permission, it immediately populates with the correct permissions... I have seen a couple of apparent fixes and one of those is to remove the 'everyone' share permission from the share permissions. Unfortunately this is just a folder in a huge shared drive and the folder itself isn't shared, so I would need to remove it from the root (which has folder with over 300GB worth of files) and I'm very wary of messing with permissions on such a large amount of data. Does anyone know what the actual cause of these issues is and the 'correct' way to resolve them?

Had a discussion with a teacher about this recently whilst reminiscing about the old laptops, tablets and Macbooks I have sitting in my cupboard that were purchased to be the new, 'latest and greatest thing for education' and lasted for less than a year before either becoming unsupported by the manufacturer/developer, or just that there was nobody on staff able (or willing) to champion them in the classroom... Anyway, they said that at one point the school purchased some tiny (on the recommendation of the LEA ) hand held/pocket sized 'PDA' type devices and I'm pretty sure that iirc they ran some flavour of Windows like CE. They had some sort of maths games apps on them and the teachers were told that they HAD to use them in class and do lessons on them, so you can imagine the chaos of 30 children losing the stylus (or sticking it where it shouldn't go), coming out of the 'app' and messing about with pretty much every part of the OS (there was no kind of management for these devices), no way to save work or measure any kind of progress... Oh what the young techs of today with their Chrome/inTune/MDM managed iPads and Chrome tablets are missing...

Still couldn't see 'Clips' or 'Freeform' on the list and it actually appears you can search for pretty much any app by typing it in, so unless you know what to search for it's a bit hit and miss on what results are returned. Luckily I did a quick internet search for the apps and found them on the app store, found the app ID in the browser address bar and pasted that into the search box (which @CHiLL mentioned in an earlier post)... This identified the apps straight away so I could add them to the list of blocked apps! EDIT: Strange thing is, those 'extra' apps I thought might have been on a staff members iPad... have now disappeared from my list!

Ok, so the reason why this may not have attracted the answer I needed is possibly because I don't know what I'm doing and so didn't ask the right question (or as usual everybody else does know what they're doing and so can't understand why I'm asking about things they think are blindingly obvious and so there is no way I couldn't know about it)... I made a Meraki support request yesterday, so I don't know if the 2 things are related, but firstly when I looked at the drop down list of apps to block it has changed... When I checked this morning they all appeared with a com.apple in the app title.. as in the inTune screenshot from @CHiLL - this has since disappeared for some strange reason... Also there are now some very strange apps that I can block... It would appear that somehow the iPads themselves must update this list as these apps might be on an SLT members iPad and would have been for a while... only they've only just appeared in this list, which is a strange coincidence? EDIT: I've just spoken to the member of staff and they say those apps aren't on the iPad they have!!! Where are they from then? Finally... it would appear that rather than just relying on what ever apps are shown in the drop down list... you can type in the box to search. When I did this all sorts of extra apps appeared in the drop down list!

For anyone else who needs it, or just for me so I can search for it when I forget... OK, so it just goes on whatever you put in here on SIMS: Tools > Setups > CTF to open 'Configure CTF Defaults'... Which for us is currently: So for the admin staff I will just copy the folder across and amend their mapped S:\ drive to point to the new server. Speaking to the admin staff member that does the census and they also mentioned the 'STAR' folder... I wonder if it might be worth just mapping the S:\ drive to the 'STAR' folder instead of the usual share the 'SIMS/SIMSROOT' folder option.

Thanks, yes that's how we'd normally do it. That's really strange... I can see the 'Apple Store' in your list, but I can't find it anywhere on mine (not in the list of currently blocked apps, or in the drop down box to block)! I wonder how that list gets updated?

Just started to look at some new iPads and found a few things that I don't appear to able to block as they don't appear in the list to block in the settings of my Meraki restrictions list (Show or hide apps)... Apple Store - (doesn't appear in the list to block, however iTunes store does and is blocked) Clips - (doesn't appear in the list to block) FreeForm - (doesn't appear in the list to block) Translate - (doesn't appear in the list to block) Apple Store and Clips appear to be recognised by Meraki as being on the device, but offers no way to 'manage' them... FreeForm and Translate don't appear anywhere but on the iPad.

Thanks, we don't do any of those apart from the census obviously... which is an interesting point... another of our admin staff does that and hasn't one been done recently...? I haven't heard of any issues although they probably have an S:\ drive mapped to the old server too! Still none the wiser on how a SIMS instance on the new server is writing files to the folder on the old server though... some sort of setting in SIMS or going through the old mapped drive?

A while ago I migrated our SIMS server to a VM and so far so good.... Just recently though I looked through the folders on the old server and noticed some files/folders had modified dates that have changed since the move. One of these is the STAR folder (used for CTF files) and I have realised that this folder wasn't created on the new server and as I didn't want to copy the whole SIMS folder over to the new server it doesn't exist on the new server. When the admission CTFs are being created and saved they are going to the old server (even though the SIMS instance they are using is the new one)! I have asked our admissions SIMS user to show me the process, but can't see at any point where the creation of the CTF is being directed to any particular folder, so presume it is in the settings somewhere? But, there should be nothing in the new SIMS server that can be pointing to the old SIMS server is there? However, possibly on a related note this user has the S:\ drive mapped to the old server (my fault as it completely slipped my mind and I can change that to point to the new server), but am I right in thinking that these days they are probably the only person that needs an S:\ drive mapped?

The email has been migrated, but I'm not sure what that changes? All I want is for a new user to be on all the push/pull/VPP/MDM/ADE/DEP - certificates - portal accounts, etc. . Yeah it's a bit confusing as I don't really know what I actually want/need for this to happen...

Thanks for trying to help. Sorry I don't use Meraki or Apple products very often and this, like most of it just doesn't make any sense to me... it made sense when I thought I was going to create a new Apple ID (for the new account I want to be VPP) and then get the existing VPP/ASM account to do the invite for it. But then the part about inviting the 'existing VPP user' by using their 'existing VPP email address' has blown my tiny mind... Maybe put it this way... [email protected] (this is the original VPP apple ID - it is the ASM admin & the VPP admin and is on all the certificates) Create a new Apple ID [email protected] (this will be the new VPP Apple ID) So then in ASM '[email protected]' (original) invites '[email protected]' (new).

Bit of a strange question maybe, but there are other questions linked... We have a domain name 'schoolname.org.uk' and have our website on that domain name (wrong terminology probably). A bit messy as we have the domain name with our registrar and the website hosted by another company. We also have a couple of other domain names: schoolname.sch.uk - which I created an O365 tenant on. schoolname.co.uk - which I created a Google Workspace tenant on. I wanted both of those to point to our website (just for completeness and to make sure that if anyone typed one in to the internet they would be directed to our website) and created a DNS A record at our domain host for WWW to point to the correct server (as directed by our website host). Admittedly the advice was to create WWW and naked A records in DNS, but I didn't add naked records due to not knowing what impact this would have on the services attached to the domains. Recently our website was unavailable due to the SSL certificate expiring and not being auto renewed. According to our website host, this was due to the secondary domains not having a naked A record pointing to their servers (only a WWW A record) and as the SSL certificate auto renewal process was expecting all domains on the subscription to have a naked record it failed. Options are to create naked A records in DNS for the secondary domains - but will this affect the services attached to them (O365 & Google - especially Google as we have gone GMail exclusively). Remove the secondary domains from the subscription and point them elsewhere (not sure where though?).

Just need a quick sense check on this as I haven't done it for years... We purchased a new class set of iPads which were delivered this week and although I'm on holiday I've offered to go in tomorrow and set them up (lots of reasons, but this also works for me so I'm OK with it), but I'm trying to get most of the Anyway, the supplier has added them to ASM and they are visible in ADE (DEP) and I can see them in Meraki, the profile and settings are 'Assigned', I've tagged them and I thought moved them into the correct 'Network'. Although they say they are when viewed in the ADE, they don't appear to have actually moved to that network, when I select it and view devices it just says 'There are no managed devices'. Will they appear in the correct network once I get into work and go through the initial manual set-up? Only I want this to be done as quick as possible obviously!

Thanks, we had a similar idea... "ht tps://%yournumber%.microlibrarian.net" seems to work for us... looks like there's a few different ways to get to the same website! I have also received confirmation from their support that they did some sort of update last night that broke everything, but they have since 'rolled back' that update as of 10 a.m. today and it should be resolved... apparently they can load our site OK. However, it's still not working for us, but I think I will push out the new shortcut as above (not sure what the "/default.aspx?ad=true" bits did anyway).

Anyone else use this? Just getting a blank screen in the browser, but noticed this in the address bar that I don't remember seeing before... ht tps://u0040631.microlibrarian.net/default.aspx?ad=true?auth=00000000-0000-0000-0000-000000000000

Our SENCO is looking for an APP that will show on an ipad the same as the whiteboard (so I guess she means mirror a laptop screen). She has seen it being used in other schools and feels that it might be beneficial for some of our pupils. A local school uses one call Blizz (she thinks) but has also heard of Team Viewer. We currently use Airserver to mirror iPads to laptops/whiteboards, but don't know if it can do the reverse?

So for this I need to create an Apple ID for my new GMail user account/email and invite that, how do I make sure I create a 'school' type Apple ID and not a personal one? EDIT: I don't even know if that's a thing, but I know when I forgot which 'Apple ID' I used that one time, when I tried to log into VPP it said something along the lines of 'you can't use that Apple ID in VPP'... or something like that...

I wasn't sure if that's where it was going to be set as I did see that, but mine is also set to 600 seconds and that's 10 minutes isn't it? It was initially failing the login within about 15-20 seconds!