foofighterjim

Bumping my own thread, in case it helps anyone else. I have actually just rediscovered the policies I created years ago. If you find yourself in a similar situation you can find old policies like this under: Endpoint Manager> Conditional Access> Classic Policies The policies will not necessarily have the same name as you gave them in the old Azure / Intune interface. All you can do with them is view or disable, this article outlines everything: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/policy-migration

Thanks for confirming @deano, I just wanted to ensure that it wasn't because of something I have done. I still can't find why personal devices are still downloading the company portal and profile, I know I set this years ago but I don't see a single actively applied policy that would be making this happen. This is mainly an issue because I want to ensure that students can't enrol their devices in Intune, or at least not until we review and raise awareness of what this means for them if they do chose to do so. Oh the joys of trying to refamiliarize yourself to a system on a live environment!

DfE devices are currently managed, I have a list of all the hardware hashes but I think I need to let them know when I want to enrol specific devices. I don't believe you can just register a device if it is already associated with another tenancy. Regarding the Azure AD Registered devices, I was just wondering if this was actually expected behaviour or if something I have done in the past has caused devices to show this way.

So, I used to know InTune pretty well, about 6 years back I used it to set device restrictions (Pin detection, encryption and the like) for staff who wanted to automatically sync their email to phones. This has worked as expected, downloading the Company Portal app and profile to ensure compliance. I’ve been looking around InTune with a view to enrolling our DfE managed devices into our tenancy, I now realise my understanding of InTune is very out of date. For a start I can’t even find the policy that is being applied to staff accounts for their personal devices, anymore. I have found everything I think I need in Endpoint Manager and I can see the InTune managed devices, but I can’t see what polices are applied to them. I also search by user, can see their devices, but can’t see any policies that are applicable to the user or device. In Endpoint Manager, all of these devices show as being Personal and Managed by Intune. I’m not sure if I should be concerned or not but in AAD > Devices I can also see loads more devices including student ones. I think these are personal devices and are showing because they have had O365 activated on them. They are all listed as Azure AD Registered, I am just concerned if I should have any visibility of these devices at all. Also, with all of this in mind, do I need to be making any changes to prevent personal Windows devices from being Azure AD Joined. i.e. if they use their school credentials in the OOBE, I believe it may Azure AD Join it. All this and I haven’t even attempted to join a DfE device yet!

Ours has installed to the Program Files folder, did you download the msi via their app finder: https://appusers.pixl.org.uk/appfinder.php

Honestly, this one passed me by, I didn't even know it was a thing. Looks like I've got some release notes to read!

Are your switch configs all correct? i.e. if you are running a flat network, you'll need to update the switch IPs into the correct range (or restart them if they're set to DHCP). If running VLANS, have you adjusted the DHCP settings for the relevant scope correctly?

No quick resume from USB storage either, if such things are important to you.

I know @GrumbleDook is looking at this in general. However, you never know, if you get in touch with them, you may get a different answer to what I had.

PM Sent

Seriously. Although they did for some reason think I was in the Netherlands. However, in terms of GDPR that makes little difference.

So, I emailed Desmos yesterday and got a reply this afternoon (not bad). They basically said that they have tried to be GDPR compliant but can't fully certify. The advice was to sign the students up using parental email addresses. So that will be a no to using Desmos then!

I'm not sure what our Music department did in the end, I raised my concerns and they never came back to me.

Thanks both. I'll get onto them via email too then, like you pointed out, some terminology seems to be a little off but yet they mention GDPR when it comes to deleting an account. Obviously, if they can just clarify in their Privacy policy then there is no grey area. Out of interest @GrumbleDook do we now need them to explicitly specify UK GDPR? Or are we still covered by the European agreement as we (to my knowledge) haven't made any changes yet.

I had seen that but dismissed it because that is desmos.org and the site is run from desmos.com, I thought they were two separate platforms. Edit: actually, is this right? Nowhere on that link does it specify that the GDPR statement relates to desmos.com?

So I've had a Maths teacher enquire about: https://www.desmos.com Are anyone else using this? I'm stuck on their privacy policy and GDPR. Being an online system I've done the usual thing of checking for (UK) GDPR compliance. In their privacy policy it references COPPA and FERPA, I can't find anything that suggests that either or both combined would make this site fully GDPR compliant. Their privacy policy or FAQ does not mention GDPR at all. Reading their Privacy Policy, it all seams very reasonable and covers the main aspects of GDPR I would look for but it doesn't specifically mention GDPR. I'm set to decline this request, unless I've missed something...

This was back in September, they might have got more efficient since... or not.

Last time I had a delivery it took about 5 days for the devices show up in the portal with their credentials.

That may be due to the age of the ancient reader I obtained from our Library to test with!

Try scanning a barcode with Notepad open, if it scans and reads the barcode correctly (but with a ~ at the beginning) then your reader and drivers are fine, at that point you'd need to take it up with whoever is in charge as the hardware would be doing everything it should.

All except the room the thermostat is located in, I believe. I was contemplating putting TRVs just in the bedrooms, mainly because you don't need to heat the them at the same time as the rest of the house.

Not sure if this has been mentioned but the Hive TVRs can work independently from the thermostat. i.e. the TVRs can prompt the boiler to turn on even if the thermostat is at it's desired temperature. Not sure how efficient this is in terms of heating a house unless you have TVRs on all radiators but...

I would have to go with Soundgarden, particularly their final song in the setlist Slaves & Bulldozers. Chris Cornell hitting those impossibly high notes, with Ben Shepherd's bass pummelling your innards at the low end and that extended outro I have never left a gig feeling such pain and happiness is equal measure (and unfortunately I probably never will again, RIP Chris). Honourable mentions go to AC/DC and Deftones for sheer volume.

We have the former set to "Everyone, but users can override" the latter to "Everyone in your Organisation" Just a point of reference, I believe it is mentioned in the previously linked article. These settings are for any meeting that the user creates, i.e. if your students can't create a meeting then these settings are pretty much irrelevant in your student policy, you'll need to ensure they are set correctly for your staff policy.

I would say get the Students to attend the meeting from an incognito window in Chrome or Edge, where they are only signed into their school account. The last time I tested this (back in the summer) it created some sort of loop and wouldn't connect to the meeting, worth a test run though as YMMV. Re students admitting Guests, it's not something I am aware of but would suspect it would depend on the meeting policy applied to the students. This article may be of more assistance: https://docs.microsoft.com/en-us/microsoftteams/meeting-policies-in-teams