IT_Man_Dan
Members-
Posts
446 -
Joined
-
Last visited
-
I think I'm onto something. Found this article: https://www.anoopcnair.com/intune-enable-copilot-in-managed-microsoft-edge/#:~:text=Users%20can%20modify%20permissions%20by,behaviour%20using%20group%20policy%20settings. the info is for intune but I think it's relevent. We currently restrict what extensions can be installed to edge etc. The article states that you need to add two values to the "Extension/App IDs and update URLs to be silently installed" setting. These are: nkbndigcebkoaejohleckhekfmcecfja ofefcgjbeghpigppfmkologfjadafddi I shall try it on a test gpo when I get chance over next couple of days and confirm if it solved it for me.
-
Morning all, I want the Copilot button to appear in top right corner of edge browser for staff users. Currently, within Edge if a staff user goes to Settings>Sidebar> Copilot the 'show copilot button on the toolbar' and 'allow copilot to use page content' buttons are greyed out and managed by administrator. - Anyone able to point me straight to the GPO setting to change this please? I've enabled 'Show Hubs sidebar' GPO setting so far and I'm now just about to start investigating further. TBF I haven't gone through my edge GPO with a fine tooth comb yet but am wondering if someone can just point me to the correct setting. I wonder if I need new admx update. As always, thanks in advance.
-
Morning all. I'm going to Bett tomorrow and I'm interested in seeing latest advancements in AI for teaching and learning. Can anyone recommend stands I don't want to miss? Many thanks
-
Morning all, Going to Bett tomorrow and there's a talk in the arena I'd like to attend. I have my Bett ticket but do I need to book into the talk or just rock up to the arena? Thanks
-
Afternoon all, I'm just starting to look at Entra and Intune etc and I'm planning to hybrid join our devices. On inspecting 'Active Devices' in the M365 admin center there are 7 fully managed personal devices listed?! These also appear in Intune. I have checked device enrolment restrictions in intune and personal devices are blocked for each platform, I've also gone into Entra and under device settings I've set "Users may join devices to Microsoft Entra" to none (this may be wrong but I've only skimmed through documentation so far) to try to stop peopled adding personal devices, is there anything else I need to do to prevent it? Also, as these devices appear to be fully managed would they be wiped (which I don't want to happen) if I just delete them from 'Active devices' within M365 or would they just unlink? I'm currently learning this so thank you for your advice.
-
I was thinking this when I replied haha...
-
ESS own SIMS - Bought it from Capita a while back. Here's a link to Next Gen info https://www.ess-sims.co.uk/nextgen Regarding the VM, You need to know what it is hosted on in order to change the amount of processors and can then change it there.
-
Afternoon all, Just going through and locking edge down for students as we are moving away from Chrome to Edge. I've configured a lot already but I wondered if people could please post/PM me screenshots of their policy to see if I have missed anything that should be set please? Many thanks Dan
-
Afternoon all, We've setup a guest wifi and have it going through its own NIC on the smoothwall. Is there any easy way to set it so that any HTTPS traffic on that NIC is not set to Decrypt and inspect so that users don't need to install the certificate? We've tried setting a policy in the HTTPS inspection policy area but it doesn't seem to work. Many thanks
-
Morning all, I hope everyone's ok and didn't get blown away overnight. As a trust we are currently looking at live safeguarding monitoring systems. We've currently had a demo and a quote from Smoothwall Monitor and we are planning to take a look at Lightspeed alert also. What other solutions are around please? Any feedback on any of them would be appreciated. Many thanks
-
Stuck blocking students from emailing distribution lists
IT_Man_Dan replied to CHiLL's topic in How do you do....it?
As in start powershell with AD and use the following command, setting the distinguished names to what you need. Set-ADObject "distinguished name of group you are trying to restrict here" -Add @{dLMemSubmitPerms="distinguished name of group you want to be able to send to group"} Then after the next sync runs (or you can force a delta sync) it then sets it up in 365.

