Boredguy

Sunbeam (See who gets the link)

That command appears to be specifically for local Exchange servers, not 365 hosted or hybrid setups, so easier update the values either manually, or use Powershell to update the ADUser proxyAddress field Import-Module ActiveDirectory $User = Get-ADUser UserA -Properties proxyAddresses $User.proxyAddresses.Add("smtp:User@Domain") Set-ADUser -instance $User

Can't see a problem with them shutting it down

You have a couple of choices. In the Folder Direction section of the Group Policy you users get applied, you can direct the Downloads folder to a specific folder, be it in their network drive or another location of your choice. You can also set the download folder in the Chrome and Edge GPO by setting the "Set Download Directory" value. As we use OneDrive for our users, we setup an Environmental Variable called %OneDriveSync% which points to the Download folder in their local "OneDrive - X School" folder and have both folder redirection and Edge/Chrome polices set to point to it

While we have standardised wallpaper for the logon screen/lock screen at each school in the MAT which is automatically updated every fortnight (the joy of powershell scripts), the actually user wallpaper can be different for each school. We have a flat colour for our users with login details in the top corner similar to BGInfo. One of the other schools changes their wallpaper daily/weekly based on different student art work.

As long as the Network Driver Stack is enabled in the UEFI Bios, it should pick up a suitable USB NIC and boot. Certainly some of the GeoBooks needed it enabled to get the StarTech USB NIC to detect, and the UNI USB NIC's generally work with all other brands happily as it's a reliable chipset. The touchpad not working might just need the drivers adding to MDT and the deployment image regenerated and updated in WDS so that the WinPE instance can access it

You might need to look at creating additional Global Address Books to assign to users to limit who can see who. Example, all our Students have a custom GAL assigned which only lets them see fellow students and the Teaching staff in their Address book, and not our Governors or Support staff

It also depends if your Switch supports layer 3 for intervlan routing, or if it's just a layer 2 All our switches are Layer 2, so even if I wanted to split the Printers from the Workstations so only the Servers could talk directly to the Printers, it wouldn't work unless I had a layer 3 switch to route the traffic across, or I setup a network card on the server on the same vLan as the printers. It can be a complex task and entirely depends on what your system is designed for.

You don't have to have a DHCP scope on a vLan, it entirely depends what you are wanting it for. We have several vLans configured, 2 for BYoD (1 with SSL interception, 1 without) and I've got the NAT box on each of those vLans doing DHCP for it with a different range. I've got a vLAN for CCTV that has no DHCP server attached as everything has static IP's. When it comes to switches, you have Tagging and pvids to take into account. If you set a port up with a pvid of 40, but it's "Untagged" (ie not Trunk for multiple vLans) then only traffic on that vLan id can access is. Your Uplink ports would be "Tagged" or "Trunked" with the different vLan id's which can be different the pvid (which is the default vlan for that port)... and of course the terms can change depending on brands

Best way is for students to share folders with their work (or just the file) with the teacher. While the admin centre allows links to be generated to access other people accounts, that is not something that should be done on a regular basis. If the student shares the file just once with the teacher, they at least have access to it until the student works out how to revoke the permission (or moves it elsewhere).

We use UE-V for some minor settings on our Vanilla network, but it's nothing I would even think of looking at these days since Microsoft have moved away from it. Think we had some settings for Chrome and Edge, but as the settings are built into the latest GPO's even those are redundant and I need to think about removing them from the network

It's not a technical issue, but rather a class management one. Staff have the ability to enable moderation mode, and mute students. When I create all our teams via Powershell, I have them all configured so that Members are not able to delete or edit their posts, so anything students do say is there until the teacher decided to deal with it. Teams is designed for a business use, and has had educational requirements shoehorned into it and should be treated as such a product.

Well other than the Team Owner muting students, there isn't much you can do, and that has to be done manually in each Team

Have you updated your OWAMailbox policy via Powershell to stop users from being able to change their avatar? Set-OwaMailboxPolicy -SetPhotoEnabled $false

We have chat disabled in the Teams policies to stop students from doing 1 to 1 chats, but within the Team chat we leave it down to staff to either monitor what the students are saying (same as in a meeting chat window), or they have the option to enable the moderation mode on the General Channel which only allows Owners to start new conversations, but of course students/members can always reply to those messages.

Here is a post DJ made when we were setting up OneDrive onDemand for our station with the Station/User policy examples. http://www.edugeek.net/forums/how-do-you-do/216456-microsoft-onedrive-365-a.html

We have the network card on our NAT box for guest Wifi configured as a 100Mb instead of 1Gb to throttle the handful of users we have on it, but thats mainly just to ensure we have more than sufficient on the network stations themselves since giving guest/BYoD access is a bonus not a requirement

The Address book itself normally updates overnight, but as Chaplic said, Teams can take 48 hours (or sometimes more) to finally pick up any changes made to account details. During the middle of last year when we were still teaching remotely, we updated all the students display names so it showed Surname, Forename to make it easier for staff to register them.. it still had some students with the names inverted the originally way 2 days after the rest of the Team members had updated. It will change, just takes time

1 - For the workstation Onedrive policy, we set the maximum bandwidth to 85%, and for the Students policy we have it set at 500. So far not had much connectivity issues, but we are on a 1Gb connection, but at least you can adjust the throttle based on GPO policy, so you could increase the limit for those doing photography compared to the rest of the school 2 - In GPP we have defined a %OneDriveSync% Environmental variable set with the value "%USERPROFILE%\OneDrive - XXX School" and we create the users folders in there via GPP as they logon. OneDriveonDemand uses that folder, and we use that variable to define the Documents path in GPO

They were getting cleaned by staff and students before and after use with normal aqua based multi-surface cleaner of the right potency (since IPA packs dried out far too quickly to make them cost effective) That seems to have died out since we came back in September. You could always do a similar test on the door handles since they get cleaned even less frequently than keyboards and mice (p

Minimum of 2 data per desk like the others plus additional for printers/Wifi etc. Although the cost looks high when doing the planning, its always easier to flood wire locations during construction. Can always ask for the cables to just be run into the box but to just have a blanking plate on it instead of the cables terminated at both ends (won't save much). If they then realise how much it will cost to run additional cables after the building is completed (both financial and with disruption), then they might be more understanding

We are redoing all the usernames within our trust to be in the same format (since we currently have 5 different variations on staff and student usernames, and is phase 1 before we merge the tenancies), so is similar to what you are doing. Our steps are - Update AD Username to match new format (checking across the trust to make sure we've got unique username) - Update AD e-Mail field to new address - Set the proxyAddress field so that SMTP: is the new address, and smtp: is their old address as an alias for the next 3-6 months (when it then gets removed) - Update the Office 365 Principle Username so that the sign-in address matches the new primary e-mail address and not the old one that is now an alias Set-MsolUserPrincipalName -UserPrincipalName [email protected] -NewUserPrincipalName [email protected] Any new starters will automatically get the new format The steps above is basically what we do when-ever a member of staff requests to change their name, so the process works nicely.

And it's amazing the number of drivers I see each week that don't understand that STOP means "come to a complete stop, not just roll through the junction as if it was Give Way"

Well that was likely down to the host going into sleep mode that caused the issue, more so than Hyper-V itself. Servers would never be configured to have a sleep setting so that would not normally be an issue, and all of our workstations that we have Hyper-V setup on for testing with VM's also have sleep disabled.

Cheapest on Amazon is https://www.amazon.co.uk/dp/B09BYX4LJZ