foofighterjim

Yes, guests will have the global settings applied. You should have a separate policy for your students even if it is the same as the default policy, it gives you better flexibility going forwards. The key setting is the automatically admit people option, you have this correctly set to everyone in your organisation. So now, if an external user connects they will be placed in the lobby and have access to whatever you have set in the global meeting policy. Remember that if you have changed any of these settings today, they can take up to 24 hours to apply.

We actually used @steveg recommendation and forced the lobby on for guests, allowing us to enable the setting for Allow IP Video for the global settings. Staff are now under instruction to never allow a Student into a meeting from the lobby, they must follow the instructions and authenticate properly. Caused a few complaints at first but the staff stuck to the rule and things have settled down now.

I believe Assignments needs a OneNote Notebook in order to work. Make sure that the Team is a "Class" team and not "Other", you can't change a Team type once it is created, so if it is wrong you will need to create a new one.

I hadn't seen that about the data plans being extended. I thought the Intune and filtering had been extended until September 2021 though.

Similar situation here, parent tested positive last week and continued to send their kids in, both kids test positive over the weekend. The family didn't inform the school, we only found out because one of the students put it on social media on Sunday night, prompting a flood of calls from concerned parents on Monday morning. We now have an entire year group out and a single form from another year. I just don't understand people.

Possibly not related but on the latest release there is apparently now a chat button within the Outlook client, with no apparent way to disable it. It could be linked if MS have fundamentally changed how Chat works.

Not as up to date as the article I read earlier in the year but: https://www.zdnet.com/article/google-wants-to-reduce-lifespan-for-https-certificates-to-one-year/

Possibly a long shot but how long is the certificate valid for? I had this issue a little while ago and it was due to our SSL certificate (Smoothwall), it was an old one that was valid for 3 years, Google and Apple have stopped trusting long life certificates. Otherwise, could be that the site they are trying to poll is blocked?

It was a requirement if your region was under local restrictions, we started September without the need to have masks on but by the end of the month we had to wear one in all communal areas of the school.

This is a needle I am currently trying to thread, but I don't think there is a silver bullet to this. I read 100s of documents on Teams and settings during lockdown, but only came to these conclusions: Your global meeting settings will probably need to be the same as your student settings, anticipating some students somehow manage to join as a guest. You should still have a dedicated student policy (despite the above) and a dedicated staff policy. All guests (if allowed) will join using the global policy. Guests are defined as anyone with the meeting link who can't authenticate against your tenant. Unfortunately, it looks like your are facing some challenges with your students. This would have to be dealt with in line with your schools behaviour policy, there is no technical way around this if you want to allow guest access. Our problem is that we disable the cameras for the students, so currently, if we invite guests we only have audio, which is a bit of a let down. In this event we do actually tend to use our Zoom subscription for external meetings at the moment.

You can't retrospectively change a Team category once it has been created. If it wasn't created as a Class Team initially, then your only option is to re-create the group and Team. I don't think you can re-create Team without also removing the group, but I could be wrong on that last part.

Even before this comes into effect, you can change the settings in Stream so that video uploads (including Teams recordings) are only visible to the content owner when initially uploaded. Users would then need to make a conscious decision to make the video available to others. Edit: I'm not 100% certain about uploads from Teams, they may be accessible to everyone in the Team by default.

As @MkII pointed out, there are very few auditing options available within the chat. We have disabled it for a number of reasons but the biggest was due to the lack of auditing which we assessed as a safeguarding risk, every school is different and assess risk differently so YMMV.

I think they are approaching this because it is: Free Online Will enable some form of practical music lessons, as the music room is unavailable to year 7, 8 & 9 currently. Honestly, my only real remit and interest given the above is; does it comply with GDPR and is it safe.

Did you get anywhere with this @CyBeRkId2002 Our music department are now asking for the same and after reading their privacy policy I have the same concerns as you. I always worry about using a site who provide a dead link to a list of where their data is stored. The privacy policy seems fairly comprehensive for the most part, although slightly contradictory in places.

Goodbye snow days

Make sure the group is set to private and that no students have been added as owners of the group.

My supplier has replied saying that there is no KMS option at all regarding Windows 10 on CSP, it is user activation only. Indeed, when I spoke to our supplier I basically just made sure that everything that was in our OVS was being covered by the M365 A3 license. Everything was checked over, Office and Windows 10 were included, little did I know the nuance of this being per user activation, so we also have an OVS for our Server licensing now. The aforementioned was cheaper than sticking with the OVS and adding all the optional extras such as Azure P1 & Intune (to name two). In the end this will be the right thing for us but I've just got to get around the short term issues of making us legal. Basically this ^^^, this was brought to my attention yesterday afternoon. The problem being that the majority of our computers don't have any indication of licensed OS version as the keys were embedded, we of course took these computers and immediately rebuilt them with MDT using our KMS key, so I'm now going through years of invoices and quotes to try and find what licenses we actually have for these devices. Correct. I haven't had communication to this effect but it stands to reason, we no longer have the license agreement that the KMS key was generated against so must be removed.

Cool, I'll get on the phone! That will save a lot of work and can just concentrate on Office 365 then. We have the added complication of our O365 tenancy being federated with RM Unify so using Azure Connect and SSO is out of the question for now. In our testing we seem to be able to activate Office fine as that redirects users to Unify for sign in, its an extra step but as long as it works reliably! Just starting to trouble shoot why the token roaming hasn't redirected as specified in our config.xml, fun times.

I've just fallen foul of this. Moved to M365 A3 last week and wondered where my Office keys had disappeared to in VLSC. We are now testing M365 apps for desktop deployment, using shared device activation and roaming tokens. Not ideal as I would have liked much more prep time and given staff a heads up, just hoping SIMS plays ball with the M365 version of Excel. The biggest problem though, is that Windows 10 is now also licensed the same way i.e. per user! So I'm now trying to figure out how we actually activate Windows whenever we rebuild a computer. Still, my fault I suppose for not fully understanding that CSP would cause so many problems and not clarifying things that I didn't know would be an issue.

Would the reg key in my OP not resolve this? [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Teams\IsWVDE nvironment] Type: REG_DWORD Value: 1

Good to know, thanks!

Does anyone have any idea or a link to what each service in M365 A3 license actually does? I've tried searching for each service and most come back with useful information whereas others I'm still no the wiser as to the exact implications of enabling or disabling. I'm just in the process of assigning this to our Student security group in Azure but a number of the services seem irrelevant or undesirable for students to have, for instance, why would you have Kaizala, StaffHub, Yammer & Skype for students; especially if you have Teams anyway? Likewise I'm not sure if removing Skype for Business Online, would have a knock on impact with elements of Teams, I recall some Teams permissions relying on Skype cmdlts in Powershell. Here is my list of what I have and haven't enabled if this is helpful to anyone else: Microsoft 365 A3 for students use benefit Enabled - Project for Office (Plan E3) Enabled - Common Data Service Enabled - Information Protection for Office 365 - Standard Enabled - Education Analytics Disabled - Microsoft Kaizala Pro Enabled - Whiteboard (Plan 2) Enabled - Intune for Education Enabled - Cloud App Security Discovery Enabled - To-Do (Plan 2) Enabled - Windows 10 Enterprise Enabled - Minecraft Education Edition Enabled - Microsoft Intune Enabled - Microsoft Azure Multi-Factor Authentication Enabled - Azure Active Directory Premium P1 Enabled - Azure Active Directory Basic for EDU Enabled - Microsoft Stream for O365 E3 SKU Enabled - School Data Sync (Plan 2) Enabled - Azure Rights Management Enabled - Microsoft Teams Enabled - Sway Disabled - Microsoft StaffHub Disabled - PowerApps for Office 365 Enabled - Flow for Office 365 Enabled - Microsoft Forms (Plan 2) Enabled - Microsoft Planner Disabled - Yammer for Academic Disabled - Skype for Business Online (Plan 2) Enabled - Office for the web (Education) Enabled - SharePoint Plan 2 for EDU Enabled - Exchange Online (Plan 2) Enabled - Office 365 Cloud App Security Enabled - Microsoft 365 Apps for enterprise Anything else I should turn off, or indeed, back on?

I've come across this article that seems to cover a number of issues around installing various elements of Office / Microsoft Apps / Whatever they are calling it today, so it may prove helpful: https://www.christiaanbrinkhoff.com/2019/04/27/the-little-unknown-secrets-of-using-office-365-proplus-and-office-2019-on-a-virtual-desktop-environment-survival-guide/ Buried in there I found this about installing Teams per-machine, please note that I have not tested this myself yet: "Install Microsoft Teams per-machine First we must create the following registry key in the image [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Teams\IsWVDEnvironment] Type: REG_DWORD Value: 1 Download Teams and run the command below to install Teams per-machine Note: To use the WebRTC AV redirection client, you must use Teams version 1.3.00.4461 or later – the 64-bit version is highly recommended. •64-bit version (recommended) •32-bit version msiexec /i c:\install\Teams_windows_x64.msi /l*v c:\install\Teams.log ALLUSERS=1 ALLUSER=1 If everything ran perfectly you will see Teams showing up in the Program Files directory." If you have already done this, how did it go? I haven't seen anyone mention this in the past, on here.

This is a real slap in the face both personally and professionally. Given the increases are unfunded, that could mean that support staff in some schools could be let go because of this.