Asgard

Hi All We have a number of Android tablets (v15) which we have set up using both Kiosk Mode and a Managed home screen. We seem to be hitting a roadblock that we cannot seem to navigate. Edge Launching Edge attempts to sign in then gives an error code just after 'signing you in and syncing' - Sign in failed (2285) We have set a few policies including what we thinks is the right ones; BrowserSignin = Enabled SyncDisabled = False But it still just point blank refuses to go pass this. I dont want them to be able to sign into Edge, nor sync any settings as they are going to be used for quick devices to login, do some unifrog work and put them back. We have ruled out a firewall issue by temporarily creating an exception for this group of devices. We deployed Chrome, but from looking it up it wont pass the same token to allow SSO. So normally we would expect it to open up the browser (which bounces to our captive portal), they click Single Sign On and because our firewall is entra joined it passes them though with Edge, but not via Chrome. Any tips gratefully welcome!

Hi Does anyone have an example unattend.xml for Win11 24H2 that I could have nose at. Currently have a Win10 one running on our SCCM/MEM build, but just wondering about a specific Win11 one. Cheers

We have just received this, after requesting an early termination. Its been back/forth with them for a few weeks. here's hoping......

CE assessor will have a hard time accepting that

The extra wrinkle you know have is Microsoft have said that come October 25, Office365 becomes unsupported on Win10 https://www.theverge.com/2025/1/15/24344209/microsoft-365-office-apps-windows-10-end-of-support I had a pretty frank conversation with our reseller and an MS rep and the kick back from them was —— we are releasing our M365 Link box (thin client) and azure virtual desktops are heavily subsidised for education. We have a small number of PCs we had planned to throw on Extended Support and change in Jan but I’m possibly thinking of applying the bodge to sccm to allow them to update and sort them come Sept in new budget land I asked about CE and he went we don’t care. And I said ok so are you saying it’s a conditional access policy to disable Win10 from connecting into your estate “Pretty much! “ Oh ok what about heavily deprived areas where moving to Win11 isn’t an option “Buy a cheap tablet and web apps” Slow clap Microsoft , slow clap

This https://helpx.adobe.com/uk/enterprise/using/uninstall-creative-cloud-products.html

What in the wizzarding world of Harry Potter are them extend / duplicate icons. Would you be willing to provide enlightenment [emoji23]

When you use the Adobe enterprise console I build a package with all the apps I want installing and it creates a bundle with a setup/msi - Adobe advice was use the exe for mass deployment. Uninstall takes 2 minutes on a average but we send it out in our sccm maintenance window The installer we set in our maintenance window and let it install - via task sequence it’s sub 5 mins Put it this way, we had 3000 devices uninstalled and installed to the latest version just side two nights - kicked it off Friday and on Monday we only had less than 5 machines that needed attention

Hi We have sites that have either shared device or user based the process is identical sir It’s the package that you download determines that in our case then we just tell sccm to install as machine

Hi So here is our Uninstaller, we use this each year to remove the current deployed version , in this case Adobe CC 2023, but we brute force this uninstaller by telling it to remove absolutley everything related to Adobe With a detection method to say only if run if it finds Adobe Photoshop CC 2023 (which is on all machines). This is our Installer thats mirrored as a task sequence step; and runs across a couple of institutions fine. You will note from the screenshot we are using setup.exe --silent , instead of the MSI within the same folder, for us it just works exactly how we need it to. With a detection method of asking if Photoshop 2024 is installed. Let me konw if you need anymore info and I can grab you some more screenshots etc.

We deploy it as a step in our SCCM/MCEM/MCM task sequence so it’s part of the freshly imaged machine. We handle major updates via Software Center First step is we run the Adobe uninstaller as an application package Then we use this as a dependency to install the latest major version. Give me a day or so and I’ll grab you some screenshots of how it all works, it works flawlessly on about 4000 windows devices and has done for a few years now - we’re on our 3 pass of the upgrade

I think your opinion mirrors mine. As ours is still in a battle I won’t put my full comments public . However what I will say. 1. The initial program was far to rigid and the DfE tick box exercise couldn’t fathom that we didn’t want to replace our APs - because they are less than 8 months old - we lease them. This instantly failed our first submission dispite then agreeing to in the first instance. This is the big one for me. 2. A lot of manufacturers need to hang their heads in shame. Price gouging and saying it’s a supply issue, nah your seeing a pot of free money and taking advantage. I’ve got emails from a manufacturer telling me that CTC equipment is on a different SKU this is more expensive i sanity checked this by asking for some pricing for the same Kit from two different email addresses and the kit list was identical except the one I mentioned CtC the price was a good 25k more expensive. The reseller in question couldn’t explain it when I called the manufacturer out on it. Other comments I think the DFE had the best of intentions but the execution was poor. I know our networks and building better than them and I know the nuances of having a site under PFI. What they should of said is if we give you a pot of money to do X present a proper proposal on why/how. Which is what they seem like they are doing now, after the horse has bolted and Scrooge mcduck’s money pile is empty. I presented a viable option that would of sorted the school for 10 years and they said no and added £60k on - to replace the WiFi which wasn’t needed I said take it out, save the money and allocate it to another school I was slapped down saying I wasn’t saving them money …. Still can’t work that one out

Id hazard a guess its a combination of a few things; 1. The cross industry pay settlements will need to be funded from somewhere - and a luxury budget like CTC could easily be sliced - especially as they haven't really pushed CtC in the public domain. 2. The initial budget has been blow due to manufacturers seeing CtC as a cash cow. 3. The program is far far to rigid and can't be nuanced. For example, we were told that we had to end our Lease for our Trust Wide WiFi - and go and purchase them outright...... basically take out AP Model A and replace with AP Model A - ie the exact same AP. Because a leased WiFi system isnt in scope..... so our initial quote went up by 80K when we had to add the WiFi into it. And whilst they understand and agree with it, at the time it didnt 'fit in scope', now with the changes in the last few days we can keep our WiFi - basically 5 months worth of plans, revisions, meetings - into the recycling bin. 3. The DfE is also spending a shed load of money on RAAC surveys (Reinforced concrete) - we have told them that at least one of our sites has NONE, and they are still insisting on sending a commercial surveying company out. 4. The DfE is helping out with utility costs I suppose there just isn't an endless supply of pennies and some things need to be scaled back - but it will be interesting to see what happens with the project going forward. These are my personal opinions and by no means reflect that of my employer (as I konw the DfE are reading these!)

@localzuk from the email they sent out with the revised funding figure The official line; As market factors continue to impact technology prices and availability, we are writing to provide information on funding to support your engagement with suppliers.

I’m going to be careful what I post for now - I know that they are looking at these posts as it came up in a conversation I had with them. We have had a school in our trust slashed by 60% despite putting ours in April! And being verbally told it was accepted. Once we get our reduced one signed off I’ll happily post my entire experience with them, I’ll probably get into hot water but I’m at the point now I don’t care. Suppliers like Cisco massively ramping up their prices to take advantage hasn’t helped either and it’s not a supply and demand thing - it’s blatant taking advantage of the DfE and they know it too but there is little they can do. Anyone wants to PM / talk offline I’d happily rant !!!

Most of it will be Windows 10 and their UWP apps (Cortana, Calculator, etc) which run in the users context - we block a fair few running on startup with applocker.

The Pearson PoP player. It’s still used for some random exams and it’s a woeful bit of software.

So …. We have a fair few of the SMF / VapeGuardian ones and I’d describe them as sketchy to say the least - we have turned them off - but left them in so the students think they are operational. False positives all day…. And all night We were told that the automatic air fresheners in the toilets aren’t compatible and we need to swap them - their either too close or too strong ….. and are triggering the sensor. Even in toilet that we pulled the batteries on one. It uses an app called Smart Industry IoT solution thst you get via TestFlight on an iPhone. Connected to a WPA2 network fine (isolated) Customer support after the first few days became non-existent ! Shortly after we started getting hundreds of false positives. Camera on a corridor showed no one entering the toilet but it was going off for a good 30 minutes

We (Sixth Form College) have five of the Project EV chargers for staff to use and use their back office software to manage it. They get a bill emailed to them on the 15th of the month with the previous months usage - essentially there free usage thru the month so we don’t pay the admin/back office transaction costs. We just send them the usage for the last 30 days for them to pay. It’s locked off to general public / anyone we haven’t pre-auth’d They come up Open their phone and scan the barcode on the charger Connect their car Press charge on the app We have 15 staff that share the chargers and it works an absolute dream. They were installed by local electricians then managed by the IT Team

Interested

I’m taking a guess and @Wave9_Lee may of dealt with this already - STAS issue, we had something similar and Sophos direct diagnosed it as a WMI Logoff detection issue. We turned it off in STAS and all of our issues with domain authentication went away.

Two sites running Extreme ClouidIQ. About 120 APs between them. We migrated both of them from Extreme Wing over the summer when our lease was up ( we use Extreme’s Enterprise Network Sub to lease both of them), when I say up… they contacted us and said it would be cheaper to end the lease start a new one with all 11ax kit! And it was !! Prior to the lease (first lease started July 18) we migrated the main site from Ruckus which we had been running from 2009 The second site was part of a different trust and when they joined us they migrated from Meru to WiNG now to ClouidIQ I’d always been a huge supporter of Ruckus having ran it since late 2009, but in my opinion ClouidIQ is special

Paul This may not be the 'best practice' way of doing it, but this has worked flawlessly for us over the last few years, deploying via MECM/SCCM. We used the link here ( http://www.edugeek.net/forums/mis-systems/48749-sims-cc3-needs-change-3.html#post549506 ) from @morganw We deploy it as a MECM Package and run the below from it; We put the the SIMS.ini and Connect.ini in the same location , just under sub-folders; we also deploy two other files; Pulsar.visualelementsmanifest Pulsar-mytile So we can populate our start menu with a SIMS.Net icon REM Original Code from EduGeek - See ITServices documentation for link REM Credit to Edugeek User MorganW @echo off cls setlocal TITLE SIMS.net Installer REM Links to SIMS App Location REM and SIMS Configuration Files for AD SSO set SETUPS=\\SIMS_Server_NAME\SHARE$\SIMS\Setups set CONFIGFILE=\\MECMDeploymentServer\MECMDeploymentShare$\Installations\SIMS\ConfigFiles\SIMS.ini set CONNECTFILE=\\MECMDeploymentServer\MECMDeploymentShare$\Installations\SIMS\ConfigFiles\Connect.ini REM Setting SIMS Network Share and Local Machine Location set SIMSDIRECTORY=s:\SIMS\ set SIMSDOTNETDIRECTORY=C:\Program Files\SIMS\SIMS .net echo Installing SIMS Infrastructure... start /wait %SETUPS%\SIMSInfrastructureSetup.EXE -a /S {QuietMode} {SIMSWorkstation} {NoAdobeReader} echo Installing SIMS.net Applications... start /wait %SETUPS%\SIMSApplicationSetup.exe /S {QuietMode} [sIMSDirectory]="%SIMSDIRECTORY%" [sIMSDotNetDirectory]="%SIMSDOTNETDIRECTORY%" echo. echo Installing SIMS Manuals... start /wait %SETUPS%\SIMSManualSetup.exe /S {QuietMode} [sIMSDirectory]="%SIMSDIRECTORY%" [sIMSDotNetDirectory]="%SIMSDOTNETDIRECTORY%" echo. if exist %CONFIGFILE% ( echo Copying configuration file into Windows directory... start /wait xcopy "%CONFIGFILE%" "%WINDIR%" /y ) else ( echo Configuration file could not be found. ) if exist %CONNECTFILE% ( echo Copying Connect.ini file into SIMS .net directory... start /wait xcopy "%CONNECTFILE%" "%SIMSDOTNETDIRECTORY%" /y ) else ( echo Connect.ini file could not be found. ) echo. echo Installation is complete Like I say, people may do it differently, its just how we do it and its worked fine in our Task Sequence for a few years now; its run as the 2nd to last step on our Staff PC task sequence

https://freshservice.com is really good. We use this across our trust.

Konica Minolta production print kit ; Pro 1100 and C3700 machines we have no toner for and can’t source them from commercial suppliers. The deafening silence from Konica on this is beyond shocking