IT_Man_Dan

To confirm, this resolved my issue.

I think I'm onto something. Found this article: https://www.anoopcnair.com/intune-enable-copilot-in-managed-microsoft-edge/#:~:text=Users%20can%20modify%20permissions%20by,behaviour%20using%20group%20policy%20settings. the info is for intune but I think it's relevent. We currently restrict what extensions can be installed to edge etc. The article states that you need to add two values to the "Extension/App IDs and update URLs to be silently installed" setting. These are: nkbndigcebkoaejohleckhekfmcecfja ofefcgjbeghpigppfmkologfjadafddi I shall try it on a test gpo when I get chance over next couple of days and confirm if it solved it for me.

Thanks for reply. Nope, haven't turned copilot off for staff. No configs in 365 admin that I can see. Weird, I shall investigate further.

Morning all, I want the Copilot button to appear in top right corner of edge browser for staff users. Currently, within Edge if a staff user goes to Settings>Sidebar> Copilot the 'show copilot button on the toolbar' and 'allow copilot to use page content' buttons are greyed out and managed by administrator. - Anyone able to point me straight to the GPO setting to change this please? I've enabled 'Show Hubs sidebar' GPO setting so far and I'm now just about to start investigating further. TBF I haven't gone through my edge GPO with a fine tooth comb yet but am wondering if someone can just point me to the correct setting. I wonder if I need new admx update. As always, thanks in advance.

Morning all. I'm going to Bett tomorrow and I'm interested in seeing latest advancements in AI for teaching and learning. Can anyone recommend stands I don't want to miss? Many thanks

Morning all, Going to Bett tomorrow and there's a talk in the arena I'd like to attend. I have my Bett ticket but do I need to book into the talk or just rock up to the arena? Thanks

Afternoon all, I'm just starting to look at Entra and Intune etc and I'm planning to hybrid join our devices. On inspecting 'Active Devices' in the M365 admin center there are 7 fully managed personal devices listed?! These also appear in Intune. I have checked device enrolment restrictions in intune and personal devices are blocked for each platform, I've also gone into Entra and under device settings I've set "Users may join devices to Microsoft Entra" to none (this may be wrong but I've only skimmed through documentation so far) to try to stop peopled adding personal devices, is there anything else I need to do to prevent it? Also, as these devices appear to be fully managed would they be wiped (which I don't want to happen) if I just delete them from 'Active devices' within M365 or would they just unlink? I'm currently learning this so thank you for your advice.

I was thinking this when I replied haha...

ESS own SIMS - Bought it from Capita a while back. Here's a link to Next Gen info https://www.ess-sims.co.uk/nextgen Regarding the VM, You need to know what it is hosted on in order to change the amount of processors and can then change it there.

Afternoon all, Just going through and locking edge down for students as we are moving away from Chrome to Edge. I've configured a lot already but I wondered if people could please post/PM me screenshots of their policy to see if I have missed anything that should be set please? Many thanks Dan

We have pretty much set this the same but it isn't working for us. What have you got in your transparent proxy settings for the guest wifi please @ThomL

Afternoon all, We've setup a guest wifi and have it going through its own NIC on the smoothwall. Is there any easy way to set it so that any HTTPS traffic on that NIC is not set to Decrypt and inspect so that users don't need to install the certificate? We've tried setting a policy in the HTTPS inspection policy area but it doesn't seem to work. Many thanks

Thanks for your replies, I will take a look at the products mentioned but I am looking mainly at solutions that use AI/Humans to live monitor and weed out false positives etc.

Morning all, I hope everyone's ok and didn't get blown away overnight. As a trust we are currently looking at live safeguarding monitoring systems. We've currently had a demo and a quote from Smoothwall Monitor and we are planning to take a look at Lightspeed alert also. What other solutions are around please? Any feedback on any of them would be appreciated. Many thanks

As in start powershell with AD and use the following command, setting the distinguished names to what you need. Set-ADObject "distinguished name of group you are trying to restrict here" -Add @{dLMemSubmitPerms="distinguished name of group you want to be able to send to group"} Then after the next sync runs (or you can force a delta sync) it then sets it up in 365.

You set it in powershell with AD module.

Yes it has to be done in powershell sadly as you get the error you mention above otherwise. It work's well though. I've done it with all my on prem distribution groups that sync to the cloud.

Ok, so we do it slightly differently through powershell by setting the dlmemsubmitperms attribute to only the groups of users we want to be able to email the group. Using this powershell command Set-ADObject "distinguished name of group you are trying to restrict here" -Add @{dLMemSubmitPerms="distinguished name of group you want to be able to send to group"} distinguished name can be retrieved from attributes tab in AD. Once above script run on a group you can then add extra groups via the attributes tab dlmemsubmits perms bit if needed.

Thank you, yes that did it

Morning all, I've raised a ticket but thought I'd put it on here just in case anyone knows a quick fix. The four dynamic certs on my smoothwall have expired on the 6th May but from reading the KB's the smoothwall should have regenerated them? I can't see anywhere that I can manually create them? My root cert is good til next year. Any ideas? Many thanks Dan

Has anyone got Mu installed on their network?

Afternoon all, Can I have some assistance with deploying Mu please? I'm using PDQ deploy to deploy the MSI and I've changed the allusers setting to ALLUSERS=1 but when I then run it on a deployed machine it tries to use the app data folder. When I try to run it as a student I get errors.

Are you passionate about IT and eager to contribute your skills to a dynamic team? We are looking for an enthusiastic ICT Support Technician to join our growing team within the trust.. This role will be based mainly at Alec Hunter Academy, Braintree, Essex, with occasional work at other schools within the trust Professional development will be delivered through in-house and external training. Duties include: Assisting with the daily operation and maintenance of all the ICT systems throughout the school and any associated primary schools in liaison with the SAT Central ICT Team. Ensuring the smooth and efficient daily operation of all systems and providing technical support to all users including assisting with maintaining specialist equipment, carrying out installations, repairs and upgrades. The ideal person will have previous experience of providing IT desktop support to end users, Good knowledge of Microsoft operating systems and Microsoft 365 is desirable. Prior experience in the education sector is beneficial, and familiarity with education-specific software such as SIMS is a plus (though not mandatory). Applicants will require a full clean UK driving licence and use of their own vehicle. The successful candidate should have good communication skills, be able to work as part of a team, be self-motivated and possess a keen interest in IT with a willingness to learn new skills. Closing date for applications is Monday 9th October 2023 Job Types: Permanent, Full-time Salary: £22,777.00-£24,054.00 per year link to job on Indeed: https://uk.indeed.com/jobs?q=ict+technician&l=braintree&vjk=bb31f7459a5bc83c

Good Morning all, I'm looking for helpdesk recommendations for an academy trust. Currently the schools with IT teams have Spiceworks and other schools without onsite teams email the relevant helpdesk. We're not too impressed with spiceworks so are looking for an alternative. We want a scalable multi desk solution where key members can see each unique desk, the ability to reassign jobs to a different helpdesk would be an advantage. If cloud hosted it needs to be GDPR compliant (sorry for being obvious). Also, it mustn't break the bank haha. Any recommendations please? Many thanks

ICT SUPPORT TECHNICIAN Salary range £ 22,777 to £ 24,054 per annum. Full time, 37 Hours per week Immediate start available We are seeking to appoint ICT Support Technicians to join our expanding team across the trust. Deployment will be based on the applicants home location but could include Saffron Walden and/or Braintree. We take a progressive approach towards flexible working and could offer some home working where appropriate. Professional development will be delivered through appropriate training both internally and externally delivered. Duties include: Assisting with the daily operation and maintenance of all the ICT systems throughout the school and any associated primary schools in liaison with the SAT Central ICT Team. Ensuring the smooth and efficient daily operation of all systems and providing technical support to all users including assisting with maintaining specialist equipment, carrying out installations, repairs and upgrades. The ideal person will have previous experience of providing IT desktop support to end users, Good knowledge of Microsoft operating systems and Microsoft 365 is essential. Previous experience working within the education sector, and knowledge of education specific software such as SIMS is desirable but not essential. Applicants will require a full clean UK driving licence and use of their own vehicle. The successful candidate should have good communication skills, be able to work as part of a team, be self-motivated and possess a keen interest in IT with a willingness to learn new skills. Closing date for applications is Monday 15th May 2023 Application forms and a job description can be downloaded from http://www.swchs.net or obtained directly from the school. e-mailed applications should be sent to: [email protected] The Governing Body is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment.