Boredguy

That just appears to the policy for that MAT. It's certainly not been raised by either of our 2 external DPO's as important e-mails like that should be stored elsewhere other than in the mailbox. We normally remove accounts once staff have left, and it's available for a further 90 days in 365 if we need to restore it.

Erm that only for the communications sector though not education.

Also do remember that Discord is a US company so safeguarding considerations are a bit different, but it is kind of a pointless feature

Our e-mail retention policy was setup within the classic Exchange Admin Centre We created new Retention Tags with the retention action set to Delete and Allow Recovery and the retention period to be how many days we wanted it to stay. Next we created a new retention policy and applied the tags we wanted for those staff that could keep mail for up to 3 years, and updated the tags in the default MRM Policy so that everyone else would get the tags for only 1 year. For those users with the longer retention period, we then updated their Mailbox so they got the correct retention policy, and unless you run a PS script to force it to take effect straight away, the following day it should then show the retention policy under e-mail header in Outlook and the date it will expire

I assume you are referring to SIMS, in which case your SIMS Support company should be able to provide you with the details, since they are also the ones authorising your regular updates.

With regards the safeguarding, our CP records for instance are not kept electronically, but rather in secured filing cabinets, and other correspondence for students that need to be kept on file can be added to most MIS systems, even as a PDF of the e-mail, so no reason to use the e-mail as a file storage system (which it's not)

All good ideas, but keep in mind any applications you might have that are not freeware/site licenced might be best to kept hidden from users to install themselves.

Standard should be more than sufficient for most school use

Holy Necro. Well SIMS needs full SQL licence ideally if your a secondary school, and when getting the Core licence you have to have a minimum order of 4 (so you are covered for up to 8 vCPU or 8 pCPU). But the unit cost seems extremely high, should be around 1/4 of that price based on what we were quoted on OVS-EES the other year. SCCM includes a licence for the full version of SQL as long as it's on the same host as the SCCM/MECM install itself, so does not need a dedicated SQL Core licence, unless you had a SQL instance on another server. Depending who your current MS licence supplier is, might want to check with with other suppliers

Are you using a standard Windows ISO image, or one you created from a capture? All our stations are built from the the standard Windows 10 20H2 iso via MDT?SCCM. Might be something else to check, even if you have a spare machine you can try it on at the same time as you rebuild the other one

All ours are Education on 20H2 and fine =/

Yep, installed it on the same computers that had the existing A2C tool on it, no errors generated. If you have done it on a fresh station, have you updated the .net version on the computer?

The idea they have is that everyone where possible is using Office 365 as long as you have suitable licencing in place (be it the free A1 Plus For Students/Faculty or any of the other brackets).

Difference between Office 365 and Office 2021 is simple.... 2021 will not any any regular updates over it's life time, where as Office 365 is always being up dated. They added the LTSC to Office as a way to get people on to using 365

Thats not a problem, since the user policy is applied based on the OU the workstations are in if it is still the same as the CC3 days. If you block inheritance for your new OU, you can set it so all stations within that folder use local policy and not roaming by setting the local loopback for the station. We did that for years while running vanilla and CC3 stations

You could create a new OU structure for your vanilla network (which is what we did for our move from CC3), and in GPMC set that OU to block inheritance of GPO's from other locations and then just create the GPO's you want and assign to them that OU structure.

Just remember, to enable Conditional Access, you need to have a P1 licence on your tenancy as a minimum. Each of the A3 EM&S add on licences were under £8 per member of staff for the year, but we also got 40 student licences with it. Depending what your current MS licencing provision is, you might want to talk to your provider to make sure you have suitable licencing in place... as while you can unlock Conditional Access with just 1 licence on your tenancy, it's not always the correct method.

We rolled Conditional Access MFA out to all our staff across the MAT before Summer. There have been one or two staff over the 5 schools that did not want to use it, however as it only limits them accessing their Office 365 account off site, I don't think they complained too long. We've recommended that staff use the MS Authenticator where possible instead of the default SMS option, as if using a personal device in school they always have access to the school wifi for the app to get the request, where as for some providers our schools can be signal black holes. By going down the Conditional Access route (We purchased the A3 EM&S addon pack for our tenancies so also got InTune), and that all our school devices are classed as Hybrid AD Joined device, we could set the policy so that the school workstations count as the 2nd authenticator so they do not have to authorise on the app in school (which was causing a headache for one fo the schools who switched on MFA before the licences were allocated)

As long as you clean the Bios password, and enable the network boot function, you can easily rebuild the laptop on to your network via SCCM. It will not be part of the DfE InTune setup once you do that, so if you are using it for a student offsite, make sure you have suitable web filtering provision in place.

Well it's a different Metaverse than the CW Flash, so shouldn't be much of an issue They were both in the last major crossover at least

Likewise never have an issue with SharedComputerLicensing set to 1 in the config file, so that the logged on user activates Office each time, even if the account is logged on to 30 computers at once. Only time we have an issue is if Teacher B signs in to Office 365 while using Teacher A's network account as they haven't logged off. At times it then flags up that the application is unlicensed, but signing both accounts out of Office and signing back in as Teacher A always resolves the issue (and it is a rare issue down to user not Office)

Well to pass the evenings these last few weeks while waiting to find out when The Rookie season 4 will get shown in the UK, I've been watching Castle on Amazon Prime. Quite fun spotting the Fire Fly references and all the Star Trek actors that show in it during the first 3 seasons.

Where as we went for the SQLSvrStdCore 2Lic pack (4 of them) as we just have the single SQL server instance for SIMS

According to the MS SQL Server 2019 licence guide To license a VM or container with core licenses, purchase a core license for each virtual core (virtual thread) allocated to the VM or the number of cores configured for access by the container (with a minimum of 4 core licenses per VM or container).

For those few computers that don't have the Network Boot option secured by password in the Bios/UEFI, then yes they could rebuild the workstation if they really tried.. and it would just put back on the same OS and software as defined in our MDT and SCCM settings.