Dave_G

I managed to delete the existing policy listed under 'Cloud Attach' by using the 'Remove-CMConfigurationPolicy' PowerShell command, and the update now doesn't fail the prerequisites checks. Whether or not the update installs without any issues, or if I've broken something by removing the policy, are problems for another day!

It's red, so do not pass Go, do not install the update. I've checked under 'Assets and Compliance > Company Resource Access' for any existing profiles and there aren't any. So I assume the error relates to the 'move the co-management workload for Resource Access (if co-managed) to Intune', which I'm unable to do in the existing policy under 'Administration > Cloud Services > Cloud Attach'.

Hi all I'm trying to install the 2403 update on our SCCM server, but it's failing the pre-requisite Co-Management workload slider for resource access policies towards Configuration Manager is no longer supported. This seems to relate to a 'Cloud Attach' policy configured prior to me taking over. However all the sliders under the 'Workloads' tab are grey-out, so I'm unable to move the 'Resource access policies' slider from Configuration Manager. The settings in the other tabs all appear to be greyed-out or blank as well, and I'm not sure if there's some sort of issue with the policy itself? Our SCCM server was migrated by an external company last summer, so I'm wondering if something during that process has caused this. Unfortunately, the 'Delete' button for the policy is also grey-out, so I'm unable to delete it to see if that resolves the upgrade issue. I have seen posts online detailing how to use WBEMTEST to remove orphaned policies in order to resolve an issue with the 'Configured Cloud Attach' option being grey-out, although as this isn't my specific issue I'm hesitant to try it. If anybody has experienced similar issues I'd welcome your thoughts. Heck, at this stage I'm open to wild guesses! David

It's really not. 'Modules > Setup' has 'System Users' and 'Third Party Access Permissions and Logs', but 'Roles and Permissions' are under 'Config > Setup'. Why aren't they together? (I don't even care where!)

..and having to wait whilst it loads the entire list before you're able to do a search (then having to wait for said search to complete).

I'd just give them explicit permissions to the folder itself, then send them a direct link to the folder to use. I know it's not as elegant as setting permissions so that they can traverse through from the root folder, but you'll end up tying yourself in knots when another student teacher needs access to Folder 1.4 or other folders buried deeper.

This reminds me of the Computing NEAs from a few years ago; explicit instructions that the materials had to be stored securely on the network, and no files could be added after the start of term. Can anybody remember what happened with those? (hint) I always chuckle to myself about these edicts handed from exam boards, that we then have to put into practice somehow. I think my favorite was one of the ICT Functional Skill exams, which required a fully functional email client, but without the ability to send or receive email. And as far as I'm aware, no external body has ever asked to audit any of our IT practices for exams or controlled assessments. Not even to confirm that spellcheck is disabled on the accounts used for word processing!

This is what I use, in conjuctuion with the Torque App (which was around £2.75 when I bought it). Plus if you install the Torque Scan add-on, you can see the raw values of all the available sensors.

Do you have a designated Health and Safety Officer? I would email them to say that you have been informed of a potential classroom hazard, then they can risk assess and decided on what action (if any) needs to be taken.

We have experienced this in the past; 20 hour delays with emails being delivered to Hotmail accounts. On examining the header of an email once it arrived, the issue was that an ‘outbound.protection.outlook.com’ address was being blacklisted (and we were using Office365!).

We use the below VBS script, run as a Computer Startup script (it's basically the Javascript code but in VBS): Option Explicit Dim wshShell, solus3Agent, fso Set wshShell = CreateObject("WScript.Shell") Set fso = CreateObject("Scripting.FileSystemObject") solus3Agent = wshShell.ExpandEnvironmentStrings("%ProgramFiles%") & "\Solus3\AgentService\Sims.Solus3.Agent.AgentService.exe" If fso.FileExists(solus3Agent) Then WScript.Quit End If Const msiFolder = "" Const logFileName = "solus3_agent_installer.log" Const agentAddress = "net.tcp://localhost:52966" Const dsAddress = "net.tcp://:52965" Const keyFileName = "Solus3.Keys.DeploymentService.Public.xml" Const msi32 = "SOLUS3AgentInstaller_x86.msi" Const msi64 = "SOLUS3AgentInstaller_x64.msi" If is64 Then InstallAgent(msi64) Else InstallAgent(msi32) End If '*********************************************************************************************************************************** Function is64 is64 = InStr("AMD64",WshShell.Environment("System")("PROCESSOR_ARCHITECTURE")) End Function Sub InstallAgent(msi) Dim typeLib, returnCode Set typeLib = CreateObject("Scriptlet.TypeLib") returnCode = wshShell.Run ("msiexec.exe /qb /lv* """ & fso.BuildPath(wshShell.Environment("SYSTEM")("TEMP"), logFileName) _ & """ /i """ & msiFolder & "\" & msi _ & """ AGENTSERVICEADDRESS=""" & agentAddress _ & """ AGENTID=""" & Left(TypeLib.Guid, 38) _ & """ DEPLOYMENTSERVERADDRESS=""" & dsAddress _ & """ RSAKEYPATH=""" & msiFolder _ & """", 0, True) End Sub I've ripped it from a larger script that also emails the computer name and return code (so I know to add it under 'Targets > Client' in the SOLUS Console) but it should work.

This, but I would also ensure that I had covered my back by doing my due dillagence: Put a thermometer in your server room to get an idea of the temperature, and then check this against your server manufactures environmental temperature guidelines for continuous operation. If the server room temperature isn’t within the guidelines, email SLT to advise them that the servers will be operating outside of the manufactures guidelines (possibly include some of the issues this may cause). Give them some things that could be done to mitigate this issue (air con, manually shutting servers down if the temperature gets too high), then wait to hear back from them. Then:

We're only testing MFA at the moment, but we're going for the Verification code from mobile app or hardware token option. The reason being is that you need to unlock your device to read the verification code in order to enter it. With the other two methods it's possbile to either 'Accept' the push notification, or preview the SMS message containing the verification code, without the need to unlock the device (depending on the devices notification settings).

I bet a lot of them have managed to add a photo to their Office 365 profile with zero help though!

The two setting that relate to this are: Contact Can See Only Self If enabled the contact cannot view or edit any other contacts for the student. Contact Must Live At Same Address If enabled Data Collection is only available to contacts that live at the same address as the child. The default for both is 'Yes' - Contacts can only see their own details, and Contacts must live at the same address as the pupil to be eligbale for Parent Lite access. I’d recommend leaving the default settings in-place, as the potential issues that could arise in certain circumstances (that you have raised), outweigh the potential advantages.