TechMonkey

Doesn't matter what is said, docks will end up coming in. You will end up with some spare ones so staff can work in areas. Then they will be wanted to be in classrooms so they can easily attach to the screen. Then a monitor will be wanted so they can work while things are up on the screen. It will be one or two requests and will be fulfilled as being reasonable as it is only one or two. Then those teachers move classroom and new kit is needed there. Then the other teachers they work with want the same and the precedent has been set. Add to that senior members of support staff will ask to be able to work from home, so laptops will come in, then the dock or worse, a laptop and desktop. As for DSE at home, I think the get out clause here is the school has said staff are not expected to work from home. If they choose to though they need to ensure they work safely. Overall, you are not going to save costs going with laptops. The benefit is that it helps staff be more flexible and access resources where ever they are. An insight into what we are doing? In-between screaming into the void and banging our heads against the wall? We use Intune to manage the devices. Ensure you get business class devices, consumer ones will not be robust enough, education class ones if possible. We have a couple of old banger laptops as spares for when staff inevitably forget but also for visitors or AV setups, so they aren't sitting doing nothing for most of the year. MS Wireless Display Adaptors everywhere but now looking to ensure new boards we get have some kind of cast built in that works. Docks everywhere, as far as the eye can see. Mostly managed to resist them going into classrooms, but they abound in offices. Previously the HP ones were bought but found the Dell ones built into a monitor are cheaper, work well and save desk space.

What are you using Group Tags for (I appear to have either never heard of or overlooked them)? I'm presuming you can set Staff, Pupil, Office, Teacher, or some sort of combination?

That is cool. We use a few lines of code to register a device direct to AutoPilot But this looks smart

I did record a few of the messages to be used at one place. I recorded an "Errrr, its grim outside so wet break. Stay indoors" because someone wanted a wet break announcement but no one would record one themselves, no one would say what they wanted, and they wanted something 'different'. Then I recorded one of me saying "BING BONG It is wet break" as someone complained that they needed a warning before a message was played to know to listen. Depends on your school how acceptable slightly off the wall messages are though.

Sure it wasn't Maybe it is part of the new spinoff EduGeek After Hours?

There is a Parent/guardian digest that can be sent out from Teams. I've not used it yet but we are thinking about setting it up to give parents an overview of what their children are up to. THere was something new coming as well but I can't remember the name of it now, that would allow parents to see homework sent. I'll see if I can dig it up. In regards to My School Portal, I have only ever heard good things about.

Can I ask why this is startling? Pupils will see the OoO in Outlook or by sending an email so nothing sensitive or private should be put there.

Can I ask how did you set this up? Not managed to find an automated way to do this except manufacturer doing it or them supplying all the hashes.

For Pupils, I'm not sure it is wise at the best of times to have it available. Point 2 is an interesting thought. The internet itself has a lot of dodgy and unsavoury content, we don't talk about closing our websites. But at what point of the, pretty inevitable, train wreck do we get off? & at what point will Twitter itself be labelled a failed state?

It would put it back to where it was, but through InTune you could manage the upgrade to Win11 and that would be where it would return in a future wipe/reset. So the process would be: - Get device on autopilot - Get upgrade from InTune - Wipe.

You can register the devices into AutoPilot from the setup screen by running the AutoPilot script from CMD. You can get at CMD by pressing SHIFT + F10. Do be aware some laptops you have to press FN as well to make the F key actually be an F key. THen you can wipe, reset and clear from Entra/AAD. This way no manual imaging is needed.

Awesome glad to hear it.

At the start of the foreach loop put "$Output =" so it should look something like: $Output =Foreach ($Team in $Teams) { After, or instead of, the Write-Host command add: New-Object -TypeName PSObject -Property @{ TeamID = $teamFound.GroupID TeamName = $teamFound.DisplayName TeamMail = $teamFound.MailNickName } | Select-Object TeamID,TeamName,TeamMail This stores the details you want into an object. You can remove the TeamName and TeamMail bits if you want, just makes it a bit more useful. Then after the curly bracket, out of the foreach loop add: $Output | Export-Csv "c:\random\scripts\groupIdExport.csv" Changing the path to where ever you want it to save. I've not tested this but it should do what you want. Let me know how it goes.

No worries, yell if you have any other questions. Not a PowerShell guru, but manage to muddle through and trying to do more and more via it.

So if you have the CSV you just have to import it: $Teams = Import-CSV -Path "YOUR FILEPATH HERE - OTHER FILEPATHS ARE AVAILABLE" Use your header after the dot to get the column. So if your column header is TeamName: Foreach ($Team in $Teams) { $teamFound = Get-Team -Archived $false -DisplayName $Team.TeamName #Put code here for what you want done with each team. Below will just write out the ID. Write-Host "Team Found! ID:" $teamFound.GroupID -foregroundColor Green } It will be slow as it will search through all your teams to find matches to the display name. AFAIK there is no faster way. If you think something is going wrong what you can do is type $teamFound after the script is finished and it will show you the last record it was processing. May give a hint at what is happening, for instance, if it returns 2 records, you know your team name isn't unique. Is it returning more IDs than number of teams you have in your CSV?

On some scripts I have got I use a CSV with the teams listed then: Foreach ($Team in $Teams) { $teamFound = Get-Team -Archived $false -DisplayName $Team.Name Write-Host "Team Found! ID:" $teamFound.GroupID -foregroundColor Green } The only caveat is if you have multiple teams with the same name only the first will be used. So maybe put a check in to error out if results returned >1

I do not know definitely but I'm pretty sure it is the same build that is currently on the device. But with the proper policies the device will be up to date... won't it I've not got a coherent plan yet. Currently we have a policy that prevents W11 being upgraded onto our devices. So my pack of an envelope plan is to turn this off for a pilot group. Check it works OK and what issues it raises. Then set groups of devices to upgrade over a holiday. As far as I am currently aware, this will be an in-place upgrade. Having a quick look at this evaluation of the two options makes it look my plan is feasible.

Clean installation I do from the Azure interface or use the built-in wipe. Upgrade to W11 I'm intending to push out from the Azure interface with a time frame. Dead SSD, I don't think there is anyway round it except a USB rebuild, but you shouldn't need to re-register with Auto-pilot. A USB stick will probably be less hassle than MDT for the number of times it will be used.

Its going to happen no matter what you do, some people just want that hand holding. But with lots of publicity and reminding people will start to look, use it and realise it saves them time. Once some do it others will do as well and this frees you up to do other tasks and handle the hand holders.

Sounds like a cached address on that account somehow. Try manually typing out the address fully. Then try selecting from the address book.

As far as I am aware, you can't have SSPR without some sort of MFA. You have to have that extra check to ensure the person changing the password is the correct one.

I'll pile on but I have lost count so I'll just go with ++1

Ahh, so these aren't the old @schoolNAME.COUNTY.sch.uk addresses? I'm not sure why they have head or admin addresses. I'd ask for them to be closed down or redirected, update anywhere that may have that address and move on. Not sure I've ever heard of the council.town.sch.uk format and would never have twigged it was a legit school email.

Liaise with the IT support person to get the domain transferred. If they are unwilling go to the registrar and point out that a commercial entity has taken control of domains that should not be in the hands of commercial entities. Once you have the domain transferred to your tenant you can do what you want with it. I would keep hold of the sch.uk domain, even if it isn't used, as it can be used as identification in certain circumstances and prevents situations like you are in happening.

It doesn't. If the school is required by law to keep data for 25 years, that is the minimum amount of data. The school should have processes in place to remove the data it doesn't need.