gshaw

Files on Demand works a treat for us; if you go 1809 build of Windows 10 it also cleans up stale cached files so the local drives don't fill up

You most likely need to configure this Defaults option if on a newer OS e.g. High Sierra or Mojave https://support.apple.com/en-us/HT207112 Also check your Kerberos ticket is valid using klist from Terminal once logged in

@maark I had the same issue but to be fair to Adobe it did get escalated to someone who understood the issue and eventually Okta, who needed to reset the SSO configuration at their end to get it sorted. You can SSO from Azure AD following the MS guide with a few caveats... 1) you need to change the certificate algorithm to SHA-1 (need to use the old Azure UI to see the option) 2) if you had an existing SSO configured e.g. to internal ADFS there's a chance the updated certificate won't actually get pushed to Okta and / or the redirect won't update. At that point you will need escalation to get to the team who can sort it.

Assuming that's O365 MFA and Azure AD Premium you should get 15 student licenses free for every licensed FTE member of staff.

Ahhh yes you're a bit stuck there. Perhaps using something like Faronics Deepfreeze may do the trick at a more affordable price point?

If you're on EES you already have it

This may be of interest, a little project a tried out a few months back https://gshaw0.wordpress.com/2017/06/11/build-your-own-thin-ish-client-with-windows-10-ltsb/

Doesn't sound like a student using illegitimate local admin rights at all does it [emoji6]

One college I speak to has Visual Studio on RDS so that way they only install it once... neat thinking if you can afford the hardware / got spare capacity for a few RDS host VMs. With Visual Studio I cut our recent installation down a bit by only adding the components absolutely necessary. Down to about 15GB from 45GB+ for the whole lot.

For us it's large local HDDs (2TB) as we haven't got space on our DFS servers to hold that level of data per user on the network. Cloud doesn't help much either as once you get into large file sizes it saturates the bandwidth of your internet connection, as we found out earlier this week when students were downloading 192GB each of raw video to work on in another course (!) Had to remove C: write restrictions as part of our Win10 deployment (for OneDrive) but perhaps that's where your error occurs? Also check proxy / filter logs as there's a couple of additional domains the store contacts iirc. Also if anyone uses UNREAL engine install that before Unity as the latter installs Visual C++ 2017, which replaces 2015 and causes UNREAL installation to fail as a newer component is already present.

I wish! City & Guilds, AAT, our Health & Safety training all demand Flash. Can only imagine the carnage we'll have in 2020 when it gets killed by the browser entirely [emoji849] We still even have to create IE specific shortcuts for Silverlight apps and Java *shudder* FYI the separate PPAPI installer seems to be doing the trick - thanks for pointing me in the right direction @Rob_D @Arthur

Urgh Google why you go backwards Might have to use it as a workaround if I keep seeing the built-in version being shaky. No redirection on our AppData so looks like some kind of wonky deployment of the Flash plugin within Chrome. There's an additional entry in our Patch Management system for Flash Player so that'll likely do the trick.

I've never installed anything but Chrome to get Flash, interesting... Just checked chrome://components and on both Chrome v71 and v72 it shows as having 32.0.0.114 installed, same as what Adobe lists on their site for the PPAPI download. Confused muchly...

Learn something new every day, nice tip

It seems to be oddly hit and miss, I can refresh the page multiple times and it'll go from Out of Date / Downloading / Working without any other changes. I've stuck with the per domain allows, rather than the workaround of doing [*].* as restricting Flash to trusted sites until it gets deprecated seems like a good idea security wise. I wonder if it's partly to do with Flash detection code on certain sites and if it doesn't see the plugin straight away bombs out while Chrome figures out whether policy allows it, has user clicked run etc. Interestingly just found this thread http://www.edugeek.net/forums/learning-network-manager/192179-chrome-flash-plugin-not-supported-2.html where reinstalling Flash separately fixes Chrome (PPAPI plugin). Surely the whole point of Google bundling Flash in the browser was that we don't need to do a separate install

Since updating to the latest Chrome build on our Patch Management system (Version 71.0.3578.98) we've started getting issues with Flash not running properly. It'll either come up as "Flash out of Date" or be stuck with a plugin window showing "Downloading". This happens on sites that we've explicitly allowed Flash to run on using the GPO template Chrome > Content Settings > Allow the Flash plugin on these sites Anyone noticed similar behaviour? I can see there's now a Chrome 72.0.3626.96 available from Google so maybe it's fixed in the newer release?

Mac client was one of the only things I didn't ask about at BETT - @jon-senso what's the status of that now?

Sounds very similar to what I've done on my MDT TS but also need to schedule the latest client download [emoji1] Why MS can't update the client (and Store appa for that matter) via WSUS really is a mystery.

With 1TB of data transfer yesterday it wouldn't so much be telemetry as a data dump All of that was disabled via GPO when I set up our Win 10 policies and until a few days ago not had anything like this level of traffic. Seems to have been triggered by the last round of patches. Thanks, have put these on this morning, going to watch during the course of the day to see if the number of hits on the firewall rule I put in yesterday to Deny the traffic reduces. I've never seen our 1Gb line saturated but yesterday I watched the traffic graph go up to 100% usage and stay there

We've just noticed a huge traffic spike on our network from what looks like client PCs trying to go out directly to Microsoft for updates, despite being configured to use WSUS via GPO. Put a block rule in place for a while to stop the traffic but need to find the root cause. Only seems to be a recent thing, has anyone noticed any changes since the last round of updates?

FYI Jamf Pro can be ran on-prem or as a cloud deployment.

3000 Windows machines, 330 Macs here. We've moved to Jamf Pro for management now everything has gone to DEP as Apple's preferred deployment method. Good product but you also need to get handy with scripts and additional utilities for some of the more finicky bits.

I'm still waiting for the Azure Password Protection product to come out of beta. Was told Q1 2019 so shouldn't be too much longer.

I created my own with a mixture of slides, videos and a Socrative quiz to keep the audience engaged. We've also got access to a SCORM package for formal training as our college is a member of UCISA so that goes up on Moodle https://www.ucisa.ac.uk/istoolkit

Good build-up, poor ending. The Doctor almost apologetic for having to fight a Dalek... "I gave it a chance"... oh dear [emoji58]