Boredguy

Ideally you would want the default policies set to the most restrictive, then under Meetings/Live Events/Messaging and Calling policies set a Group Policy Assignment for a AD Synchronised group to assign the correct policy (be it Education_Teacher, Education_SecondaryStudent etc).

you can apply the policies to Groups now so you don't need to run scripts @kennysarmy

We've only tested it on Windows & iOS, and since setting restrictions back in June our students have always been able to chat within a meeting, but not in a channel unless the moderation was not set to Owner. Teams can be interesting at times... we've had 2 reports of recordings done this afternoon not showing as available to download yet and meetings still showing as available when they have been ended.

Students should be able to chat within a meeting unless you have the muted within the Team Membership from what I understand. The Chat button in outlook will appear if you have disabled Skype for Business and forced all chat to Teams, and for students it just loads up Teams for us and does not take them into the chat portion (as that is disabled for them via the policies)

Oh hang on, thats the Powershell script isn't it, and not the PHP. When the PHP file reads the CSV it needs to echo out the

Well you would need the text to output Email so it makes it clickable for their browser, and also display it on screen So mailto:{0} becomes {0}

Well the mailto link works in HTML or PHP as it requires the user to click on it to open the default mail client.

You need to add the email address into AD, ADSync is only one way.

I just followed the official MS guide that can be found here -> https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment

You can choose in RRAS if you want to assign IP addresses from a DHCP server or from a static set you assign the server. As the point of the AoVPN is it connects in to your main network, the internal network card on your VPN box should be on the same vLan as your stations are on normally. I also went to the fun of ensuring the VPN XML file is set to forcetunnel instead of the splittunnel so that all web browsing done by users is routed via our school connection and not their own ISP gateway so that content will be filtered

I have the VPN and NPS role on different servers. If you do have the NPS on the same one, it complained in the RRAS that you could only setup the authorisation rules via the NPS which was a pain.. but as we already had a NPS for our Wifi authentication it made sense to just use it for the AoVPN and our Remote Desktop authentication

Its likely just the API notification based on it's settings and not the ones defined by NHSX. Been quite a lot of posts and articles about it and the app was updated to include the don't worry message to save confusion as people were thinking the API check. Remember that NHSX only looks for a "close contact" where as the bluetooth API will pick up anything in range (which could include someone in another car if your sat in a traffic jam potentially)

M4's is what we used on those models

To be honest, the most complex part I found in the guide was actually getting the certificate templates setup in our CA as you need to make sure it's done correctly. That and I hadn't noticed that when I setup our new Remote Desktop servers with Windows 2019 recently it had added a deny rule for VPN to our NPS server so everytime I connected it was saying the username and password was incorrect. Guess that's what happens when you use one that also does Remote Desktop access and WiFi authentication for different SSIDs. lots of rules means it's easy to over look one

I just followed the steps in https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment and other than a lot of cursing as our VPN server was not giving out DHCP addresses at first (turns out it had a dodgy registry entry) the guide was quite straight forward for a change.

I've recently setup AoVPN and so far the tests were very successful, but we did have to tweak the XML file as we wanted forced tunnel on to ensure all web traffic from devices goes though our filtering (since its mainly going to be students using it), but as the device could be seen via Impero over the VPN, there is nothing stopping SIMS from functioning

You can also disable users from changing their display photo, so it either uses what ever you have set in AD (assuming you have it configured to synchronise) or you can use PowerShell to set a "standard" picture for users. The OWAMailbox policy for Exchange contains one of the settings to prevent users changing the display picture, and it seems that Teams actually pays attention to this at times. The Powershell command Get-OwaMailboxPolicy | FL name,setphotoenabled will return any Mailbox policies you have and just show if the setPhotoEnabled is true or false. Set-OwaMailboxPolicy OwaMailboxPolicy-Default -SetPhotoEnabled $false can be used to turn the option off for the default mailbox policy, and that should propagate through to all users in due course.

We've been having issues recently with aspects of the SchoolComms site not working with no reported instances of blocks in the logs but with Schoolcomms support staff adamant it is either a cache or filtering issue (even though out of 3 users it only affects 1) If it was a case of some stations working ok and others not, I'd suggest checking proxytest.ifl.net on the problem stations to see which of the upstream servers it's going through to see if it's got a common server that is causing your problem

Well as HIGNFY is normally done the day before, Boris could do it Friday Morning, when we've been on half term for 2 days already Then again at least in Wales only Y7 and Y8 are back in secondary schools after the 2 week closure at present

I guess it could depend how your schools access the SIMS Database, as Wonde could be installed on the schools own server as it just uses the connect.ini to connect to the SIMS database, so shouldn't be any different to a normal install. As long as the client can see the database and has a valid SIMS username & password for it, it shouldn't matter if you have 1 or 12 SIMS DB's on a single server

@LeMarchand did you partake in finding all the continuity flaws in Bloodshot when you watched it like I did last week. Number of European style number plates in "Surrey" was comical. I must admit it wasn't as good as I was hoping so glad I waited for it to be free on Sky instead of getting it via Amazon like I was tempted a few months ago. Did kill a couple of hours though

We already have them setup by subjects with channels for the class, as was the agreement for the whole trust in August, before some of the more savvy users protested so some of the Leadership team insisted on a change to Team per class (which is easier for staff/meetings) so they can use gradebook & assignments just for their part of the course and not for whole year and it only goes to the 30 or so kids and not the 150-180

Don't think so, but also note that if you remove a student from the Team, their details won't appear in gradebook/insights etc which means we're having to create 5 different teams for our Tech classes as the students change subject (Food Tech, Design Tech and Computing) every term

Didn't know we had K-12 schools as that was a US designation. However outside the security concerns that had been raised in March and April, the functionality included in the MS and Google platforms for synchronisation with our AD (and that fact it's free and ties in with our current infrastructure) ruled out even considering your offering for our entire MAT

That is correct, if you try and send a message to that user it says "Administrator has disabled chat for this user"