mike86

Me too & I'm skinning it to look like Windows ME!!

Good shout! Thanks for this. We went with classic shell in the end, however I'll keep this in mind for the future. Thanks

I'm looking to deploy windows 10 edu to a small IT suite over the Easter Break and just going through creating the GPOs etc. I've managed to get everything working apart from a few little niggles. I've looked on here and done the usual googling but can't get any definitive answers. So here's hoping. 1. I've used app locker to block cortana however the first click on the start menu, everything is greyed out, second click everything is back! The reason I have this blocked is that I don't want students to be able to browse unc paths / run commands. Is there a better way of doing this? all searches have thrown up disable run from start menu, this stops the run command but not unc browsing / running commands from start. 2. How are you going about removing quick access / frequent folders from file explorer? I've tried the reg entries in from post a post on here but no dice. Thanks

Would love to grab this please

Currently we are running a mac mini server 10.8 & mac clients with the same os, they are integrated into AD in the old school golden triangle way. I'm looking to update the os on these machines and the server, so looks like i'm going to have to bin WGM and use profile manager. I imagine there is a way to do logon/off scripts with this too? Last time I was looking at this there was an issue with ACLs breaking so we decided to hold off. Is this still the case, is there anything i should be aware of? Looking at going to sierra. Thanks M

Hi All I know this has probably been talked about loads, but I'm just starting to jump into looking at windows 10, from what I've read there isn't any difference between Education / Enterprise. So does anyone have a basic pros and cons of deploying each before I get started? Thanks M

This did not work. Had to use %LocalAppData%\Temp\*.zip\* All sorted now. Thanks

Thanks, will give this a shot.

I've set up a file restrictions policy to stop .exe files running from pen drives, but it has come to my attention that if you run them from a compressed folder in explorer view then they will open succesfully? Does anyone know a group policy setting that will stop this, and force them to extract the compressed folder? Or can you think of another way of stopping this? Google is only showing reg edits to enable this. thanks

Our intranet page gives students a file link to student shared files on our network ie \\server\fileshares\students. They can then click the server name from the address bar to go back and browse to the root of the share on the server. Removing fileshares\students is disallowed, typing the unc into browser or win explorer is disallowed. Is there a way to stop this behaviour as google isn't giving me much luck. Many thanks

"Applying computer settings" is showing which I guess means this is on. We turn it on via a GPO however since this has been removed from the domain it should now be off and be showing "Please Wait". Maybe it's holding on to some old group policies and looking for somewhere on the network it can't find?! However with the network cards disabled I'd have thought it would have skipped this...very confusing.

I'm having trouble with a set of win 7 laptops, they are taking over an hour at applying computer settings. Done some googling and tried several suggestions. DNS / DHCP, remove from Domain, delete local GP history etc. I've tried booting one with the ethernet and wifi disabled and it is still getting stuck at boot up. Any ideas would be much appreciated. Thanks Mike

Hi Enjay, Thanks for your response, these are all concerns I have also, and have put together a document to highlight this. There is a security review going on and other than this I have no further info other than to investigate the feasibility and impact of doing this.

Thanks Meldrew, Should have mentioned we are using Veeam & I've tested that this is working on a folder with the permissions removed.

Hi I've been asked to "investigate the feasibility of changing the file/folder permissions on home and shared folders so that only the relevant user(s) have permissions to the files/folders i.e. remove the Administrators/other groups permissions". I'm not sure if it is a good idea removing the admins group from an admin / data management perspective but I would like some advice on the impact of doing this, and an insight into how other schools tech manage this. Many thanks

TLDR: - What do other schools do to protect against inappropriate content from YouTube accidentally being played in front of a class? --- As the YouTube SafetyMode Cookie is turned off for staff, we currently advise staff to check all videos before playing it front of a class. I was wondering what other schools do to protect against teachers accidentally playing inappropriate content in school? We use Smoothwall and currently block YouTube for all Junior and Senior school pupils, but allow it for Staff and Sixth Form. We can allow access to individual YouTube videos for pupils on an ad-hoc basis, without opening up the whole domain. We have enabled the YouTube SafetyMode Cookie on the Smoothwall for all pupils, but not for staff, as we have had many complaints from teachers in the past that this is blocking legitimate videos that they need access to. Unfortunately, we don’t have any control over what videos are restricted as this is determined by Google\YouTube, so we had to switch this feature off for staff and we advise staff to check all videos before playing it front of a class. I was just wondering what other schools did. Thanks

Managed to track this down to Impero being installed on the Macs, removed this and everything printing ok.

I have a suite of 13 macs connecting to a shared a printer on our Mac Server. This printer is pushed out via WGM. This morning any print jobs going to this printer via a client would go to paused & not print. Printing from the server works as normal. I deleted the printer and resent out via WGM and all was working for a few prints, now it's back going to paused again. Also noticed the old printers still show in the list when a student logs on although these have been removed within WGM. I've also noticed if I connect to the printer via IP from a client it still pauses the print job. We are using Mountain Lion on both server and client machines. Any ideas? Thanks

This is great news, do the iPads have to be supervised for this, we are having trouble blocking iMessage on BYOD iPads. - - - Updated - - - Nothing i suppose, but a password on the profile, would stop that?! Looks like you can't do it through profile and its a clear password job.

We do have Meraki however these iPads haven't been enrolled. I've just had a flick through the meraki settings and still can't find a way to get this to work, any ideas? If so it's time to enrol some iPads. - - - Updated - - - Thanks

There was no lock code on, the students can however set a lock code and lock the teacher out of the ipad. Guided access might be useful, can this be done even if the iPads are unmanaged?

Hi, I might be missing something really simple here, but having trouble working this out. We have a set of unmanaged iPads in a department that are shared between students, can I restrict them so the students can't change the lock code? Been flicking through the settings but I can't find the right thing, google not much help either. Thanks M

Thanks I'm trying to get it tested/write a report on this over the half term break so all the info is much appreciated. I haven't tested coping up shared file yet, is there anything i should be aware of, other than the file size restrictions? Are permissions on the folder structure retained?

What are you all using for shared files with in one drive, say we were to upload our "teachers shared drive" to the cloud, what would be the best way to give them access to this? Can we map a network drive to the cloud folder, so they don't notice a difference? Or is there another/better way of doing it?

Desktop link could work, i thought maybe mapping to another drive, might be a little easier for them & would stop the issues with clogging the HDD up using local profiles, i've tried the script from this thread http://www.edugeek.net/forums/cloud-services/151134-onedrive-deployment.html but had no luck.