bheadon

We had a request from one of our users that wanted to send encrypted emails to external people related to Child Protection issues etc. She was advised at a course that she should pay for a service to do this, but we noticed that it is a free offering for schools on Office 365 (we are on the free E1 licence). It took a few steps and calls to Microsoft to get it set up, so I thought I would share a rough user guide in case it helped anyone? It has been cobbled together from a couple of Microsoft Technical Guides and my own experience from setting it up. Hopefully it will be of help! O365 Email Ecryption for Schools.pdf

Oh ok, when I ran mine I ran it on its own GPO under its own "Logged Users" OU. Maybe the script hasn't replicated to your other DCs yet (if you have more than one?).

Also maybe try running gpupdate /force to force the new policy to take effect and then run gpresult again to check it has gone through?

Sorry to hear that. It has worked for me in 3 schools now so not sure what is going on. Maybe it is worth putting something into the script so you can check it actually runs? A message box or something? Or maybe use gpresult /h to check that the script is set up to run correctly on login?

I am sure you can cut it down but it just means that everything you might want to edit is up the top of the script. It just makes it a little easier to see where the changes are that you want to make. Feel free to edit it as you see fit (I only adapted it from someone else's hard work) but I do know it works for what you want it to do (I just attached it as a login script for any user we wanted to log, the script reads the login name and changes the email appropriately) .

Not sure if this will help, but I used a script to do exactly this too. Looking at yours I can't see anything wrong though. Set objNetwork = wscript.CreateObject("wscript.network") Set WshNetwork = WScript.CreateObject("WScript.Network") SMTPServer = "x.x.x.x" Recipient = "bheadon@****" From = "alert@****" Subject = "Alert " & objNetwork.Username & " is on " & WshNetwork.ComputerName Message = " User " & objNetwork.Username & " has logged into " & WshNetwork.ComputerName ' To add an attachment update the full path and uncomment the line ' There is one line below that must also be uncommented 'attachment = "c: \ test.txt" ' Call Sub and pass required data GenericSendmail SMTPserver, From, Recipient, Subject, Message ' Begin Sub ' ------------------------------------------------------------------ ' Generic function to send mail using a remote ' SMTP server. Pass SMTPserver, From address, ' Recipient address, Subject, and Message as arguments ' ------------------------------------------------------------------ Sub GenericSendmail (SMTPserver, From, Recipient, Subject, Message) set msg = WScript.CreateObject("CDO.Message") msg.From = From msg.To = Recipient msg.Subject = Subject msg.TextBody = Message ' To add an attachment uncomment this line 'msg.AddAttachment attachment msg.Configuration.Fields ("http://schemas.microsoft.com/cdo/configuration/smtpserver") = SMTPServer msg.Configuration.Fields("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2 msg.Configuration.Fields.Update msg.Send End Sub

Can't you set the filter1 group to work in a whitelist mode rather than no web access? Then it will only allow them to get to sites you specifically allow.