MYK-IT

Checkout Scancom offers that are normally posted on HotUKDeals (and purchase direct or via Amazon, depending on the specific offer) as good pay up front deals on Three (Vodafone) & EE deals do come up. For example, it cost £57 for 20-months (data-only) SIM with 1000GB allowance a month which I used in 4G/5G router. https://www.hotukdeals.com/search?q=scancom

On a test computer (ensuring i have Jan 2026 update applied and latest BIOS with 2023 Certificates), I've followed: and it has completed fine. As @DavR mentioned existing PXE (and other media) will still work (for now) as Microsoft are not revoking the 2011 Certificates - but they'll expire in June 2026 etc. So that's the deadline to get USB, ISO, WIM, & PXE images updated with the 2023 Certificates - or create separate version.

@gaz350b Thankfully all our desktops are all compliant, just some models of laptops that are not... @itskdog @DavR As you have both started to migrate etc, are either of you using MDT/MECM/SCCM for image (re)deployment? As interested to know if you have updated the Boot WIM images (for PXE or USB boot) etc? Especially @DavR as appears from your comments that Intune ones are, but AD devices are not. Thanks,

I too, have been attempting to obtain a clearer understanding of the overall requirement for updating and applying the Windows UEFI CA 2023 Certificate process (Secure Boot Certificate updates: Guidance for IT professionals and organizations - Microsoft Support) as well as what is needed to be applied and when etc. I have ascertained, that all our computers have received the applicable Windows Updates etc all desktop computers have received the latest BIOS updates containing the Windows UEFI CA 2023 certificate Despite the above (two) being applied, the new certificates are currently within the Default DB, not Active I assume at some point, we will need to enable the extra settings via Intune to switch over to Active DB before June/October 2026? (How to update Secure Boot for Windows Certificates using Intune – James Vincent) Or will the Windows Update suffice, until perhaps a rebuild or the BIOS has been reset for whatever reason? (which would revoke the Microsoft Corporation UEFI CA 2011 Certificate). In relation to image deployment, again from what I have read, regardless if you are using MDT (even with latest ADK, as that just mitigates BlackLotus ) or MECM/SCCM the (PXE) Boot Image will still have and use the Microsoft Corporation UEFI CA 2011 Certificate. Meaning that once the Microsoft Corporation UEFI CA 2011 Certificates have been revoked /expired (on a computer/laptop) it won't be able to (PXE) boot from this existing WIM(?) Suggesting that two (PXE) Boot WIM images may be needed, one for those devices with 2023 Certificates, and another for those (legacy) devices without. I am not sure if Updating Windows bootable media to use the PCA2023 signed boot manager - Microsoft Support could be an option (e.g. modifying a copy of existing PXE Boot WIM, and adding to WDS) until Microsoft release an updated ADK that has the Windows UEFI CA 2023 Certificate by default. But I am going to give it a try... Either way, depending on what (compatible) devices everyone has (probably mixed due to funding etc), or as and when Microsoft update their ADK - two (PXE) Boot WIM (or USB) may be needed in the interim.... if i have understood this all correctly! 😉

Apple iPad | endoflife.date And what @sideone quoted, oos needs replacement etc

@karenf I have no experience of Vericool, but I would hazard a guess that your tills are running an operating system that, if not already out of date/support, soon will be - especially as they are already 7 years old (e.g. W10 LTSB, LTSC etc). So in the first instance I would get that confirmed, and look at a full hardware refresh (or use this an opportunity to tender for cashless catering renewal options etc). I would also use the DfE Meeting Digital and Technology Standards (for example, Meeting digital and technology standards in schools and colleges - Laptops, desktops and tablets - Guidance - GOV.UK) to support you. (e.g. unsupported devices connect to your network, Cyber Essentials requirement etc.)

We install (latest) MS OneDrive client as part of build process, but can be deployed similar using: Our Intune (Settings Catalog) configuration is as follows: Also, I suspect your devices are Hybrid Joined, as you mentioned using a combination of GPO & Intune Policies. Therefore, your devices may be set as a 'Shared PC'. (E.g. Shared PC Policy is applied, which disables the MS OneDrive client from working). If that is the case, you will need to make a couple of changes to re-enable OneDrive Client as follows (e.g. Intune > Device Configuration > Templates > Custom): And finally, we enable StorageSense, especially for Shared PCs (with appropriate retention periods etc) to ensure the local storage is kept under control (e.g. local cached profiles etc) We also used the SharePoint Migration Tool, as @itskdog mentioned when we migrated everything over to OneDrive (and SharePoint) etc. Hope this helps!

Was advised that ChatGPT* has no formal data processing agreement, age verification and limited control as to where and how data is stored. This could lead to a potential data breach or unauthorised use/processing. (*Free and Plus versions - I know that the likes of ChatGPT Business and ChatGPT Edu exist and have DPA etc, but they are at additional cost and EDU version is for university-aged students, on upwards. Hence, our use of M365 Copilot Chat as already licensed, and can implement age-controls etc).

Ai, and use of Ai within schools is certainly far from being straight forward and is creating a lot of work for many and policies too! From the teaching staff who want to teach, use and embrace Ai for T&L, and for those doing their due diligence (e.g. DPL/DPO - DPIA & Data Protection, Safeguarding Lead - safeguarding, IT/Digital Lead for filtering, reporting and monitoring.). Some of which I don't think is achievable (yet), or certainly without implementing additional filtering/services/products (or funding!) etc. For example,. Ai prompts need to be logged - However, M365 Copilot Chat does not allow M365 Admin to see what prompts a user has entered etc. Ai Generated Images - where do you start on monitoring if such Ai generated content is appropriate, or not? Need to protect the student's IP (e.g. school work, art etc) PII Data Protection - Although we state to use approved Ai only (e.g. M365 Copilot Chat) the user remains the weakest link to potentially entering PII data into an Ai (model) that is not approved / enterprise protected. Although you could argue that this would be covered by an existing Data Protection Policy We have a provisional Ai Policy, but we already know it needs much more consultation and amendment - As use of Ai is dynamically changing, as is the DfE's guidance! Which was updated only a couple of days ago to include reference to the Online Safety Act. Generative AI: product safety standards - GOV.UK In relation to OFSTED, How Ofsted Looks at AI During Inspection | Derbyshire Services for Schools is a useful reference. In relation to ChatGPT, we have been advised it will not pass a DPIA, hence our policy reflects accordingly.

We use Yodeck Digital Signage Pricing Plans | Free Players Included If this for one screen, it will be free (*education pricing available if you need more) and you could use existing laptop (or Raspberry PI) etc. TV wise, it is best to obtain a Commercial TV as they are designed for long-term use.

Same setup here, and working fine with W11 24H2 (Despite ADK 10.1.26100.2454 (Download and install the Windows ADK | Microsoft Learn) stating support for W11 25H2/24H2 etc). And although we use Intune for most app deployment / configuration, just so easy to use MDT to initially deploy our custom image (I know I could run scripts to remove Apps etc) and model specific drivers etc as well as re-deploying OS images back on if needed. I see that ADK 10.1.280001 states support for W11 26H1 - so perhaps MDT can be squeezed into continued use up until the bitter end (of 25H2) in October 2028 SCCM appears an overkill to deploy (PXE) boot and deploy an image (with drivers), especially for those who may be egg intolerant...

Appears (as mentioned with a related thread in June 2025) that our IP is blacklisted in some way. Have asked our ISP to investigate. In the interim, thankfully we have 2 different ISPs and I have setup (application) routing of YouTube via our other ISP to get YouTube working normally again (for now).

Happy New Year All! Its started.. users cannot access YouTube without signing in! YouTube - Sign in to confirm that you're not a bot Using Sophos XGS, any suggestions... Thanks, Mike.

I contacted CISCO, who replied advising that it appears that the webinar has been rescheduled and they will let me know when to etc.

Arbor does provide IP Whitelist for Arbor MFA, but as previously mentioned Microsoft Conditional Access combined with Microsoft SSO will give you more (granular) control - plus don't give them their Arbor Account (credentials)..if you are able to enable Microsoft SSO option.

In relation to supply/agency, for a Microsoft/Arbor scenario we have setup as follows: Microsoft Entra ID etc Dedicated Supply/Agency (Microsoft) Account(s) to sign into computer Conditional Access Rule to stop signing into M365 Account outside school etc. - Stops access outside of school / devices Conditional Access Rule to stop "Log in using Microsoft" option for Arbor outside school etc (Trusted Location only) - Stops access to Arbor outside of school / devices Arbor Arbor MFA Enabled (No Whitelist) - E.g. Arbor MFA applied at all times Arbor (Supply/Agency) Account pre-set up Password set, but not given to supply / agency (Retained by IT Support) Arbor Account MFA pre-setup (by, and retained by IT Support) Arbor Password Reset Emails Blocked (e.g. Mail Flow Rule) - Stops Supply/Agency receiving link to reset Arbor Account Password. Result, Supply/Agency staff member sign in using assigned M365 account / credentials then uses school-specific Arbor Sign-in URL to sign into Arbor using "Log in using Microsoft" option. With changes this week by Arbor in relation to SSO we had to reset the SSO of our Supply/Agency Arbor Accounts. We had to use Microsoft Conditional Access, as MFA Whitelist by School IP within Arbor wasn't sufficient enough by itself.

HI, Just wondered if anyone else registered for this morning's (10am-11am) webinar, Meraki Access Manager for Schools? I received emailed confirmation of registration and Webex link provided, but when accessed the link refers to Secure Everyone, Everywhere with Cisco Secure Access which is scheduled for 22nd January 2026 and I cannot find the intended webinar listed. Thanks,

Microsoft Lists...

Just in case you have deployed the latest Adobe Reader (25.001.20985, 2nd December 2025) via PDQ Deploy etc.and encountering problems, such as Acrobat failed to load its Core DLL Unresponsive Adobe Acrobat Reader no longer starts for many users | heise online Current solution is to either: Uninstall latest update, and install older version Deploy Microsoft Visual Studio C++ Redistribution v14, x86 (e.g. Microsoft Visual C++ 2015-2022 Runtime 14.44.35211.0 within PDQ Deploy)

I've enquired about Redstor's total package, was an additional ~£2,000. As we have Veeam on-site too, I'm going to compare functionality/cost of adding Entra ID backup capability for VEEAM. Free alternative, could be Introduction - Microsoft365DSC - Your Cloud Configuration, saving backups to SharePoint/OneDrive location which is then backed-up by existing Redstor Education Backup ⚖️

Yes, we use Redstor for Education. Previously used Redstor for backing up on-site data only and a different product for M365 data backup - but moved both over to Redstor for Education when it was launched 18-months or so ago, as it offers unlimited backups of both on-site and M365 data (previously had to pay based upon amount of data space required e.g. cost prohibitive). Resulting in all on-site servers(data) and M365 data being backed up (at least) daily. We also have a VEEAM backup server for on-premise backups too; but you could use a JBOD Server as an additional storage location for the Redstor for Education (onsite data) backups only - if required / deemed necessary - Either way, Redstor for Education as provided would meet the required RPA/NCSC/DfE Digital Standards. Cost is based on Pupil count.

Redstor for Education 1545 - How Redstor complies with the 3-2-1 rule for backups

Wave9 - @Wave9_Lee

I would hazard a guess that Microsoft licensing requirements have either (recently) changed and / or this method is not compliant any more??? Arbor FAQ State: Hence why many, due to licensing costs, are either restricting Power BI Pro licenses to SLT/MLT and/or extracting and publishing the data via other methods.

We are charged approx. £1.75 monthly, 1-month term (or £1.55 monthly, 1-year term / £17.50 annual, 1-year term). Soon adds up when you take into account how many members of staff could potentially require access to (view) the Power BI reports (on top of all the other MS Licenses!) Currently testing with a small group of staff. Alternative may be export to Excel (use pivot tables etc) to produce 2-D / non-dynamic analytic views that are then posted within SharePoint etc for others to see.