Garacesh

I don't think I did, but how would one deactivate this setting? For example, I've just freshly imaged a machine. It is not showing up in Azure's device list. My test user still can't log in. (Although the error has now disappeared, and you put your password in, it looks fine, the login box goes away, and... nothing, you're still signed out)

Weird one here.. With Curtain Mode disabled (so Chrome RD runs more like remote assistance than remote desktop) everything works fine. But of course, anybody in the room could see the session live, so I'm this isn't really useful. As soon as I enable Curtain Mode, it gets to putting in the PIN then boots me off. It's definitely making a connection, because if I purposely put the PIN in wrong it says so. This happens whether I apply the GPO at Computer Policies\Policies\Administrative Templates\Google Chrome\Remote access\Enable Curtaining of remote access hosts (Enabled) Or the corresponding registry keys HKLM\SOFTWARE\Policies\Google\Chrome\RemoteAccessHostRequireCurtain (REG_DWORD, 00000001) HKLM\SOFTWARE\WOW6432Node\Policies\Google\Chrome\RemoteAccessHostRequireCurtain (REG_DWORD, 00000001) Or both. Unfortunately using actual RDS isn't an option at the moment as our gateway server is unlicensed and our licensing reseller is being... slow. I assume they're still understaffed because COVID Alternatively, is there anything else out there that can be used in the interim?

Not gonna lie, I fully expect to be trekking my webcam & cardioid in from home Though that'll work for open evening.. Parent's evening on the other hand... Good luck anybody trying to sort out that particular box of frogs!

Yup that's my proposed backup. Means we don't get any additional audio, but it might work. Going to meet with the brass today and try to hash it out... Or just convince them to just upload a YouTube video and do the Q&A some other way.

Spent half the day mucking around with Teams and OBS aaand... You can't. OBS does what I want, cool! Apparently there's a way to push your OBS stream to Teams, cool! ... but you can't do that if you're doing a broadcast that anyone can join. Why?! Why, Microsoft, would you decide "Oh he's doing a stream outside the organisation, GIMP HIS POTENTIAL!"

Oh lawdy Jim Browning's latest video The goose In stitches. Just watch it all the way through.

Wut.. I click 'em, they work for me O.o Attachment 1: Attachment 2:

Edit: Dunno why the attachments aren't showing, but they do work if you click them. Azure AD Connect synchronises users, we've all seen this part of the story before so I'll skip it. When I try to log in to Office applications, e.g. OneNote, with my test user, I get the following: [ATTACH=CONFIG]59232[/ATTACH] I don't even get as far as the password box, stick in the e-mail address and, nope! If I try to log in as me, my admin account, I get through fine, no mess, no fuss. Same computer, same console session as the test user, only difference is the credentials I'm supplying to OneNote. Office 365 recognises the bad sign in.. [ATTACH=CONFIG]59233[/ATTACH] If I check the sign in event in Azure AD, I get the following: Status: Failure Sign-in error code: 50155 Failure reason: Device authentication failed. But why would the device matter? We've never synchronised devices*? I don't care what device the user is using, so long as they authenticate properly? The only difference I can see between my account and my test user, besides the admin privileges, is that regular users aren't licensed for Exchange, Kaizala, StaffHub or Yammer, and surely none of those are the issue? * Unless maybe it happened by accident when AzureADC was being set up and now it's mucked everything up? Edit3: Okay, so it turns out there are a few of our machines in Azure AD, but there's also a tonne of not-our-machines - including phones, so my guess is it's just throwing in every PC anyone's ever logged into a 365 account with? Edit2: As for the 'but doesn't?' part, one time I still go the same error as my test user, but this was after providing a password, and it let me in. but upon running through it a few more times, it turns out most of the time it doesn't even let me put a password in, though.

And Google support's verdict: Computer says no. They just haven't programmed Vault so it can search by MD5. I can probably download everything and write a script to just MD5 each individual file and dump out a spreadsheet of name/path/hash. But still, going to discuss that one with the cops before I do it.

See, I read that as it gives you the MD5 for the export? Perhaps I misunderstood. I'm on hold with Google support at the moment... I'm resigning myself to the prospect of having to manually export everything from Vault and then script a way to search through it.. Really don't want to have to do that, and I'm not entirely convinced I should be the one doing this, either.. Might have to discuss with whoever from the police gets me the file hash...

Aye, that's my backup plan. I'm just really hoping I can get away with not having to have any access to the files at all. Well, that, and I'm not sure if GAM can pull back deleted e-mails (or files, to be fair..) like Vault can? This is the first (and hopefully last..) time I've had to do anything like this.

Yeah, I have Drive sorted with GAM GAM.exe user [color="#FF0000"][user][/color] show filelist md5checksum It's the e-mail bit I'm concerned about. Might have to get on to support, see what they say. Maybe? With a question mark? I would have expected it's trying to chase down the file and the sendee, but if they already have the hash, then they already have the file. Truth be told I'm not really sure what to expect now. With present information, the best I can do is confirm the file exists/was sent to the pupil. Not sure what use that is to them.

The police will soon be contacting me with a hash (which I assume is MD5 checksum, but can't confirm) of a file. This is a file that, knowing its brief description, I absolutely do not want to open. Obviously I can't say more, but I'm sure you all get what ballpark we're playing in right now. I'm pretty sure I could set up and use GAM for searching Drive, but the support docs for Vault doesn't list anything of that nature for emails, the closest I've got is has:attachment Personally, I'd rather just dump all data, encrypt it, pass it over, change the pupil's email and honeypot the original account but.. Apparently that's not what I'm being asked to do

Turns out that Microsoft, too, are dialling back who gets streaming capabilities on what license as of the 30th I suspect the brass would rather buy an A3 license than switch to YouTube, though.

Hmm, Teams has a built-in moderated Q&A mode, and apparently can support up to 10,000 viewers. I guess I'll take a day working from home at some point next week and really get to grips with OBS.

Yeah, screening messages is a huge one. I don't want the messages being seen by all the other parents, but I do think we need a 2nd body to filter through them and decide which questions the head answers, so that the head isn't sat there on stream reading through them. Does YouTube's livestream chat let you do that? E.g. blank out the chat for regular viewers and have moderators or something that can still read it? From a UX perspective I'm disinclined to have them have to submit their questions 'off-platform' if it can be avoided.

I'm not convinced the hardware we've got here would handle OBS very well, but it's on my list of things to look into. We don't actually have a youtube channel, though, which is why I suspect the boss is keen to go for Teams/Meet/etc where there's already an infrastructure in place. Edit: I also feel like they're over-complicating it. The head's opening speech could easily be pre-recorded (plus it guarantees no screwups!) and added in along with the powerpoint or video of whatever it is they want to do (which I assume is the virtual tour? Apparently we've got some company coming in to do it.)

Scratch that, I have now been included! The brass want an opening speech, a video stream and a Q&A session Which I assume means: Live webcam/microphone coverage of the Head as he addresses the viewers A way for parents to watch the stream but NOT broadcast their a/v input to each other A way for parents to type messages that the boss can see (bonus points if nobody else can) A way to play a pre-recorded video file or powerpoint (possible screen-share?) as part of stream An idiot-proof way to toggle between these segments Since we don't want the parents to see/hear each other, the typical style 'conference call' e.g. Google Meet might be out of the question. Plus it looks like Google are nixing their free enhancements at the end of the month, so I'm not sure how much capacity that has. I want it to be reasonably fool-proof, so trying to give the boss a crash-course in OBS is probably setting myself up for disaster. I'm gonna start investigating Teams to see if that's going to be any good for it, but off the top of anyone's head, any other ideas?

Yep that's exactly what's happening here, too, if a kid is confirmed to have COVID.

We're doing a 'virtual tour' (of which I have not been involved in the discussions surrounding, and will undoubtedly be drafted in last-minute to make everything work..) and a Q&A session (see previous)

No doubt this will continue to not apply to schools, 'cause we all know COVID is terrified of being accused of any impropriety with kids, so it won't come into the building. Or hunting. Because COVID is a wuss and wouldn't dare go near a bunch of toffs getting their jollies off at killing animals.

The one across the road from my house closes at midnight. Although at least they've gone with 'members only' for a while now, which means essentially just the couple of streets nearby. Still not great. But better. Why, what did @localzuk do now?

NGL I toyed with the idea of hotlinking the text to that image I don't know where I stand on the idea of the 2nd lockdown. Several economies absolutely will not survive it. There will be many people losing jobs because of it. But so too would lives be saved. I'm not convinced we have any other options. The British public at large aren't doing anything to prevent the spread, and the incompetence (and inconsistency) of the measures thus far aren't helping either. Unfortunately I think we're at the point now where someone (or several) 'important' has to die. World leaders, celebrities, etc. And then maybe people will take it seriously. Not that I wish death on anybody, but the warnings and the figures clearly aren't working.

Restaurants I can at least understand the thinking behind, people don't really tend to mingle outside their own party that much in a restaurant. Pubs was a terrible idea, though. I appreciate certain industries are being damaged heavily by lockdowns but we have to think of the greater good. As for today's news.. "If, and that's quite a big if, but if that continues unabated, and this grows, doubling every seven days... if that continued you would end up with something like 50,000 cases in the middle of October per day. They have simultaneously given anyone sensible enough to listen incredible cause for concern, and those too dumb or complacent enough to not care a reason to continue disregarding the official advice.

Funny, that, because last I checked, aerosol transmission was actually the bit we made a law about...