Oaktech

As soon as I found the classic ribbon I felt better about it... I'm not keen on the un-hideable taskbar on the left.

Our slow ones have a monthly maintenance window which is me starrting them all up, running updates and shutting them down again. Our fast ones do it fast enough that nobody complains.

Delete them and see who complains.

Anyone here up on Rubrik backup for Office365? I've been signed up for it by my MAT and been told 'any questions, just ask' but the question I've asked they don't have an answer for, so I thought I'd ask here.... Most of this has been set by the MAT and I have limited access to the backend of the setup. I've got 18 objects, 9 Teams Instances and 9 Document Libraries (associated with those Teams instances) out of compliance, but nowhere does it say what criteria it's out of compliance against and what I need to do to bring them into compliance. Anyone got any ideas?

We've had a load of people apparently been signed out of their OneDrive client and upon attempting to sign in have been asked to reauthenticate using their 2FA this morning. It's weird because some of them were working at 7:30am and signed out at 8am.

I don't have an answer, but the only time I've seen that message is when we have restricted login on a specific group of machines to a specific group of users - for example admin staff to office machines disallowing teachers and students. Might give you a clue to start looking? Does it clear on a restart?

Following - I've not had any notifications of this and the 'guided experience' has not appeared in any of my admin centres - yet.

Across 3 schools I've got 30 ASUS, 60 Samsung, 90 HP and 90 Lenovo Chromebooks. The HP are the least reliable with 1-3 requiring a rebuild each week and frequent freezes requiring battery removal. The most reliable have, shockingly, been the ASUS, I've literally repaired one smashed screen in 3 years. Lenovos suffer from occasional (maybe one a month) battery-out freezes but other than that they've been fine. The Samsung are mainly out in the community so it's difficuly to tell exactly, but I've only had 1 returned faulty and that was fried on an aftermarket charger. These are all Intel based devices. With regards to the Lenovo specifically I've had an issue with my Wife's personal 500e a year or so ago (much marital strife ensued) where it appeared to be completely dead. This was fixed by removal of the battery, leaving for 24 hours. It then powered up successfully on the charger with no battery installed, then shut down, battery reinstalled and allowed to sit on the charger with the lid shut until the charging light went out. It's worked normally ever since.

I've been having similar issues with longer cable runs - I've solved a lot of my issues with these: https://www.amazon.co.uk/EVanlak-Passthrough-Eliminated-Generrtion-Thunderbolt-HDMI-EDID-1200-3P/dp/B07YMP17WM They present a consistent HDMI 1.4 device to the computer in question. This has solved a wide variety of issues including cables that are marginally over length/not very good, devices that can't negotiate an HDMI connection fast enough, computers that keep turning a device off randomly & devices that interpret an HDMI signal with a massive display overscan

Also HP... If it's stupid and it works, it's not stupid.

Sleep settings? System allowing hardware to turn off to save power?

I don't think that's possible to define... I know a 3 school MAT with around 3000 users and 1800 devices who have 1 permanent term time only support person and a 1 person-once-a-week thirdparty company... And I equally know a 650 student primary school who have 2 full time support staff.

Is there any difference in functionality between the staff and student licenses? If I assigned a student license, to say, an MDSA who accesses the computers a few times a year for training is anyone going to notice?

Regulars have a named account, everyone else has the register taken by another available member of staff. That's usually a class TA or HLTA, but occasionally office staff or me.

I had a Renault Fuego as my second car - it cost me £150 and I sold the alloys to someone who was restoring one for £300. When I scrapped it. if you lifted the carpet you could see from front to back through the rust holes.

I configured this about 10 years ago and haven't touched it since! https://theitbros.com/configure-ntp-time-sync-group-policy/

Windows configuration designer?

Not my script (LazyAdmin.nl), but works beautifully... usage: .\getmfa.ps1 | export-csv c:\temp\downloadsmfastatus.csv <# .Synopsis Get the MFA status for all users or a single user. .DESCRIPTION This script will get the Azure MFA Status for your users. You can query all the users, admins only or a single user. It will return the MFA Status, MFA type ( .NOTES Name: Get-MFAStatus Author: R. Mens - LazyAdmin.nl Version: 1.3 DateCreated: jan 2021 Purpose/Change: List all Configured MFA Types Thanks to: Anthony Bartolo .LINK [url]https://lazyadmin.nl[/url] .EXAMPLE Get-MFAStatus Get the MFA Status of all enabled and licensed users and check if there are an admin or not .EXAMPLE Get-MFAStatus -UserPrincipalName '[email protected]','[email protected]' Get the MFA Status for the users John Doe and Jane Doe .EXAMPLE Get-MFAStatus -withOutMFAOnly Get only the licensed and enabled users that don't have MFA enabled .EXAMPLE Get-MFAStatus -adminsOnly Get the MFA Status of the admins only .EXAMPLE Get-MsolUser -Country "NL" | ForEach-Object { Get-MFAStatus -UserPrincipalName $_.UserPrincipalName } Get the MFA status for all users in the Country The Netherlands. You can use a similar approach to run this for a department only. .EXAMPLE Get-MFAStatus -withOutMFAOnly | Export-CSV c:\temp\userwithoutmfa.csv -noTypeInformation Get all users without MFA and export them to a CSV file #> [CmdletBinding(DefaultParameterSetName="Default")] param( [Parameter( Mandatory = $false, ParameterSetName = "UserPrincipalName", HelpMessage = "Enter a single UserPrincipalName or a comma separted list of UserPrincipalNames", Position = 0 )] [string[]]$UserPrincipalName, [Parameter( Mandatory = $false, ValueFromPipeline = $false, ParameterSetName = "AdminsOnly" )] # Get only the users that are an admin [switch]$adminsOnly = $false, [Parameter( Mandatory = $false, ValueFromPipeline = $false, ParameterSetName = "AllUsers" )] # Set the Max results to return [int]$MaxResults = 10000, [Parameter( Mandatory = $false, ValueFromPipeline = $false, ParameterSetName = "Licenend" )] # Check only the MFA status of users that have license [switch]$IsLicensed = $true, [Parameter( Mandatory = $false, ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true, ParameterSetName = "withOutMFAOnly" )] # Get only the users that don't have MFA enabled [switch]$withOutMFAOnly = $false, [Parameter( Mandatory = $false, ValueFromPipeline = $false )] # Check if a user is an admin. Set to $false to skip the check [switch]$listAdmins = $true ) # Connect to Msol if ((Get-Module -ListAvailable -Name MSOnline) -eq $null) { Write-Host "MSOnline Module is required, do you want to install it?" -ForegroundColor Yellow $install = Read-Host Do you want to install module? [Y] Yes [N] No if($install -match "[yY]") { Write-Host "Installing MSOnline module" -ForegroundColor Cyan Install-Module MSOnline -Repository PSGallery -AllowClobber -Force } else { Write-Error "Please install MSOnline module." } } if ((Get-Module -ListAvailable -Name MSOnline) -ne $null) { if(-not (Get-MsolDomain -ErrorAction SilentlyContinue)) { Connect-MsolService } } else{ Write-Error "Please install Msol module." } # Get all licensed admins $admins = $null if (($listAdmins) -or ($adminsOnly)) { $admins = Get-MsolRole | %{$role = $_.name; Get-MsolRoleMember -RoleObjectId $_.objectid} | Where-Object {$_.isLicensed -eq $true} | select @{Name="Role"; Expression = {$role}}, DisplayName, EmailAddress, ObjectId | Sort-Object -Property EmailAddress -Unique } # Check if a UserPrincipalName is given # Get the MFA status for the given user(s) if they exist if ($PSBoundParameters.ContainsKey('UserPrincipalName')) { foreach ($user in $UserPrincipalName) { try { $MsolUser = Get-MsolUser -UserPrincipalName $user -ErrorAction Stop $Method = "" $MFAMethod = $MsolUser.StrongAuthenticationMethods | Where-Object {$_.IsDefault -eq $true} | Select-Object -ExpandProperty MethodType If (($MsolUser.StrongAuthenticationRequirements) -or ($MsolUser.StrongAuthenticationMethods)) { Switch ($MFAMethod) { "OneWaySMS" { $Method = "SMS token" } "TwoWayVoiceMobile" { $Method = "Phone call verification" } "PhoneAppOTP" { $Method = "Hardware token or authenticator app" } "PhoneAppNotification" { $Method = "Authenticator app" } } } [PSCustomObject]@{ DisplayName = $MsolUser.DisplayName UserPrincipalName = $MsolUser.UserPrincipalName isAdmin = if ($listAdmins -and $admins.EmailAddress -match $MsolUser.UserPrincipalName) {$true} else {"-"} MFAEnabled = if ($MsolUser.StrongAuthenticationMethods) {$true} else {$false} MFAType = $Method MFAEnforced = if ($MsolUser.StrongAuthenticationRequirements) {$true} else {"-"} } } catch { [PSCustomObject]@{ DisplayName = " - Not found" UserPrincipalName = $User isAdmin = $null MFAEnabled = $null } } } } # Get only the admins and check their MFA Status elseif ($adminsOnly) { foreach ($admin in $admins) { $MsolUser = Get-MsolUser -ObjectId $admin.ObjectId | Sort-Object UserPrincipalName -ErrorAction Stop $MFAMethod = $MsolUser.StrongAuthenticationMethods | Where-Object {$_.IsDefault -eq $true} | Select-Object -ExpandProperty MethodType $Method = "" If (($MsolUser.StrongAuthenticationRequirements) -or ($MsolUser.StrongAuthenticationMethods)) { Switch ($MFAMethod) { "OneWaySMS" { $Method = "SMS token" } "TwoWayVoiceMobile" { $Method = "Phone call verification" } "PhoneAppOTP" { $Method = "Hardware token or authenticator app" } "PhoneAppNotification" { $Method = "Authenticator app" } } } [PSCustomObject]@{ DisplayName = $MsolUser.DisplayName UserPrincipalName = $MsolUser.UserPrincipalName isAdmin = $true "MFA Enabled" = if ($MsolUser.StrongAuthenticationMethods) {$true} else {$false} "MFA Default Type"= $Method "SMS token" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "OneWaySMS") {$true} else {"-"} "Phone call verification" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "TwoWayVoiceMobile") {$true} else {"-"} "Hardware token or authenticator app" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "PhoneAppOTP") {$true} else {"-"} "Authenticator app" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "PhoneAppNotification") {$true} else {"-"} MFAEnforced = if ($MsolUser.StrongAuthenticationRequirements) {$true} else {"-"} } } } # Get the MFA status from all the users else { $MsolUsers = Get-MsolUser -EnabledFilter EnabledOnly -MaxResults $MaxResults | Where-Object {$_.IsLicensed -eq $isLicensed} | Sort-Object UserPrincipalName foreach ($MsolUser in $MsolUsers) { $MFAMethod = $MsolUser.StrongAuthenticationMethods | Where-Object {$_.IsDefault -eq $true} | Select-Object -ExpandProperty MethodType $Method = "" If (($MsolUser.StrongAuthenticationRequirements) -or ($MsolUser.StrongAuthenticationMethods)) { Switch ($MFAMethod) { "OneWaySMS" { $Method = "SMS token" } "TwoWayVoiceMobile" { $Method = "Phone call verification" } "PhoneAppOTP" { $Method = "Hardware token or authenticator app" } "PhoneAppNotification" { $Method = "Authenticator app" } } } if ($withOutMFAOnly) { # List only the user that don't have MFA enabled if (-not($MsolUser.StrongAuthenticationMethods)) { [PSCustomObject]@{ DisplayName = $MsolUser.DisplayName UserPrincipalName = $MsolUser.UserPrincipalName isAdmin = if ($listAdmins -and ($admins.EmailAddress -match $MsolUser.UserPrincipalName)) {$true} else {"-"} MFAEnabled = $false MFAType = "-" MFAEnforced = if ($MsolUser.StrongAuthenticationRequirements) {$true} else {"-"} } } }else{ [PSCustomObject]@{ DisplayName = $MsolUser.DisplayName UserPrincipalName = $MsolUser.UserPrincipalName isAdmin = if ($listAdmins -and ($admins.EmailAddress -match $MsolUser.UserPrincipalName)) {$true} else {"-"} "MFA Enabled" = if ($MsolUser.StrongAuthenticationMethods) {$true} else {$false} "MFA Default Type"= $Method "SMS token" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "OneWaySMS") {$true} else {"-"} "Phone call verification" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "TwoWayVoiceMobile") {$true} else {"-"} "Hardware token or authenticator app" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "PhoneAppOTP") {$true} else {"-"} "Authenticator app" = if ($MsolUser.StrongAuthenticationMethods.MethodType -contains "PhoneAppNotification") {$true} else {"-"} MFAEnforced = if ($MsolUser.StrongAuthenticationRequirements) {$true} else {"-"} } } } }

Be very wary of volcanoeists - they're like to explode.

We've been buying Del Optiplex 5060 8th gen i5, but whilst they work beautifully they have not been without their issues as they are tricky to build due to missing stock drivers.

I'm speaking to my MAT about it now as I set a load of devices to provision off Intune overnight - about 90 - and over half have failed with timeouts. Seems OK this morning though.

We had repeated slowdowns and timeouts this morning. Seems to have been stable since about 12.

Check your power supplies. I had to run them on a 5v 4a USB wall wart to make them stable.

Have you guys tried switching 'use hardware acceleration when available' to 'off' on Chrome or Edge Chromium? Fixes it for me. Does make certain transitions a bit blocky, but that's a small price to pay!

The info page says English US so I'm going to say no not currently.