Oaktech

Or at least give enterprise/edu sku's an opt out.

We were. it stopped working. Our MAT set up something via AWS. We were going to use MailGun before the MAT central IT stepped in.

11 has now been released on the insider preview and I'm registered for it, but 0 devices out the 700 I have on inventory meet the minimum requirements to run it, so I can't even download it . Can anyone help me out with a 64bit UK English ISO that I can tinker with as I have a couple of things I'd like to try?

I imagine that would be a well received product by a great number of people...

The final twist in a very twisty tale... I was privileged to attend an industry conference in 1993 while I was doing work experience where Peter Norton, John McAffee, Bill Gates and Steve Jobs all spoke and yeah, he was in a Hawaiian shirt and Bermuda shorts.

I'm going to apply it and see what breaks... :meh:

And while we've been talking I've squished the 2 scripts into one... Might be useful as a start point for someone. I'm having issues calling the Azure AD module to get something like this to work in't cloud. ### Generates a request via the DinoPass API for a random simple password $Password_Part1 = Invoke-WebRequest -Uri https://www.dinopass.com/password/simple | Select-Object -ExpandProperty content ### Generates a date in day-2digitmonth-4digityear $Password_Part2 = Get-Date -format "dd-MM-yyyy" ### Concatenates the 2 into one variable $Password_Complete ="$Password_Part1$Password_Part2" ### Writes the output to text file $Password_Complete | Out-File C:\YourFileLocation\value.txt ### Resets the specified account password to the value contained within $Password_Complete Set-ADAccountPassword -Identity UserName -Reset -NewPassword (ConvertTo-SecureString -AsPlainText "$Password_Complete" -Force) ### Emails the new password ### Email address to send from $username = "[email protected]" ### Email Password $Password = "ComplexEmailPassword" ### Converts plaintext password above to a secure string $Password = ConvertTo-SecureString -String $Password -AsPlainText -Force ### Creates a credential object to call later $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username, $Password ### Specifies email subject $subject = 'Alert: New Password' ### Specifies Email body $body = $Password_Complete ### Splatting with Hash Table $hash = @{ To = '[email protected]' From = $username Subject = $subject Body = $body BodyAsHtml = $true SmtpServer = 'smtp.office365.com' UseSSL = $true Credential = $cred Port = 587 } ### Sends Mail Send-MailMessage @hash -WarningAction Ignore

I've got a ticket in with Workspace so I'm interested to see what they come back with. I'll share just in case in there is a tidbit that applies to you.

Just humour me have a check and make sure you don't have conflicting policies set up between GPO and Chrome Management and between OUs in GWorkspace. We've been seeing features that should be turned on stop working and vice versa because one set of mangement is taking precedence over another with unpredictable results. Specifically we've seen the password manager cease to function because suddenly it's become disabled in cloud management and enabled in GPO, Payments stop working because the save payment details popup is disabled in GPO and enabled in Cloud Management and chromebooks have issues with wifi because the certificates for wifi and filtering were in a higher OU than the devices and inheritance doesn't appear to be trickling down like you'd expect.

The sticking point is the Azure acounts. The on prem AD ones are done, as you say, automatically via 2 powershell scripts. One which which actually changes them and emails it to the office staff, and one that generates a TXT file for the first one with the password based on the DinoPass simple API and an uncommon date format.

I would take anything that man says with a bag of salt. https://www.theregister.com/2011/01/13/russ_accessories/

Any use? https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-migrating-the-active-directory-certificate-service/ba-p/697674

Is it an NVME drive as I've had issues with anything older than 2016 not botting of NVME on dell hardware

Unsure if you're a secondary, but we have a yeargroup supply accounts for our primary which is given out to the incoming supply by reception which has access to all the classes in a year and the passwords are changed daily at 5pm by my technician to something generated by dinopass and re-notified to reception. We're trying to find a way to change the password on a schedule but we we haven't tried that hard so far.

I've got no answer, but if it's any consolation I've got some Lenovo devices that also came through the DfE that do exactly that on occasion.

Neither can I but our cyber essentials assessment says it's a required configuration! To me it's an uneccesary complication.

I think you're right. After the last couple of messages I tried a bog standard deployment to a single machine using the latest ODT rather than the historic ODT I usually use and while mine succeeded it took aaaagggggeeeesssss... My normal deployment takes about 15 minutes start to finish on a moderately specc'd machine. The one I tried yesterday took over an hour and a half and the webfiltering showed that it crawled at very-small-numbers-of B\s for 10+ minutes on some files.

We have a 10 lock wired access control solution from TDSi based on a number of expert4 controllers and we're very happy with it. One thing I would say is go for the EXKeypad plug-in programmer as well as it will allow you to delegate the activation/deactivation of cards to reception staff with minimal training.

Bin WSUS as mentioned above, or get a cheap a*s microserver with a tiny SSD for the OS and big a*s spinner for the Space Monster. I have a 'utility server' which hosts VA, WSUS, WDS/MDT and a file share with device drivers on it. Something I can drop and nobody will notice.

I downloaded about 6 weeks after 2019 was released and I've never needed to do it since... I wonder if I sneaked in under the radar for something.

Interesting... I've got a bog standard ISO of 2019 with setup.exe for individual no domain devices, just came from VLSC My bulk deployment is as you say...

Mount the iso like a DVD, double click the setup.exe, do the next,next,next thing...

What happens if you just do it like a consumer and just run the exe file and set the options in the gui?

Ok, then we can still get part of the way down the line by registering chrome as the default email handler in windows settings, either manually or by default apps XML.https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/export-or-import-default-application-associations

Yes, configure a service handler in Chrome... https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::RegisteredProtocolHandlers_recommended Only if you're SSO. Patchy... Seems to work with Gmail more reliably than Office365