ThomL

These steps, but set the 'EnableHotkeys' registry key to 0 rather than 1? https://www.intel.com/content/www/us/en/support/articles/000087656/graphics.html Also a few other thread that mention other reg keys, here's one from a few years a go: Damn Intel Hotkeys again.... (edugeek.net)

This guide looked accurate from a quick scan: https://www.anoopcnair.com/sccm-install-application-task-sequence-step/

Would this gpo block the keys used? Turn off Windows Key hotkeys (admx.help)

or use the wscript.exe command that you've already added to the GPO, or add cscript.exe to the GPO

Are you explicitly using wscript.exe in the task to run the vbs or just pointing to the vbs? Could it be trying to use cscript or something like that to run the vbs from the task?

At that pace it should pull all 7TB in 24 hour 19 mins (ish) then switch to incremental? not sure how it works, don't have one - but very interested. 80MBs is 640Mbps, so you should have maybe 200-260Mbps still available on your 1Gbps connection - is the NAS tapping out at this write speed? Could this be Office 365 throttling? I'm looking to backup roughly the same amount of data, in the same way, so very interested in where the bottleneck is - don't want to purchase something that's not going to get the job done.

As well as it being in it's own vlan, no comms to the rest of the LAN, WAN only and firewalled WAN at that - you could put the front end of the nas behind a VPN, with 2FA on the VPN login before gaining access to the NAS web front end. Job done, nice and secure? Even if they have creds from say a keylogger they don't have your MFA to get in. Or is there a massive hole in this plan?

Interesting stuff - with the costs I've seen for a cloud based solution I'm thinking this setup with Raid 10 would be enough for our 7TB of storage used in 365 and give the most resiliency: https://www.broadbandbuyer.com/products/48452-synology-rs2423rp-48tb-hat5300/ Thoughts?

oh thats good! I'll try and track down the complaint list I found and post it up if you guys wouldn't mind reviewing and commenting? Can't find the thread, but found this: "It works with caveats. For example you cant d/l an entire users onedrive directory through the activebackupforbusinesso365 (ab4bo365) client, but rather have to go through file station instead. This is a known issue. Also, you can only restore emails one at a time not an entire mailbox; the file station trick doesnt work in this context either."

I've read that restoring from Synology really sucks, no way to restore full mailboxes for example and having to restore emails individually. This puts me off the idea completely - it's great having stuff backed up but if I can't restore effectively what's the point?

Do you know if there is a fee attached to Wonde API usage as an end-user school?

Apologies, I didn't realise you were talking about OP's PowerShell - I thought you were replying in reference to my post!

It looks like it should accept a user object in the way I posted. From example three, doesn't get-aduser return a user object?: Add-ADGroupMember (ActiveDirectory) | Microsoft Learn

I think you might need to get all the users from the reception group and then for each user add or remove them from the other group - this might work: # Add to Group Get-ADGroupMember -Identity "RECEPTION" | ForEach-Object { Add-ADGroupMember -Identity "COLOURING IN" -Members $_ } # Remove from Group Get-ADGroupMember -Identity "RECEPTION" | ForEach-Object { Remove-ADGroupMember -Identity "COLOURING IN" -Members $_ }

Was the contract agreed after an in-house tender or via a framework like: https://www.thecpc.ac.uk/ ? I think things are easier to argue in these type of situations if a framework was used, have you had a good look at the contract for anything usable?

Backup the attributes so you can revert if needed, then wipe them from the user and sync?

I moved to a new employer, to explain the 5+ years . But I do remember several iterations of the disk in the first month, then followed the agreement for any tweaks to take place once per term. I don't remember having activation issues, but I also can't remember if we use KMS/MAK etc. ...no too helpful on this one unfortunately!

It's been 5+ years since I've done this, but that sounds about right... I think.... Try it and see if it works

Looks like there's only MFA for admin and mods: https://forum.vbulletin.com/articles/support-documents/tutorials/4367717-enabling-two-factor-authentication

This is the properties of the GPO setting, not the drive itself - does that help? You'll need to navigate through the GPO that applies the drive mapping, find the mapping with the issue and then hit properties and you should get the same view.

Or possibly reset the SA account? https://www.sqlshack.com/recover-lost-sa-password/

Surely it's your SQL server, you paid for the licensing and it's on your hardware - ignoring what you may or may not do with the credentials you require a copy of the administrative credentials to be stored in a fireproof safe for disaster recovery. Remove any other reasoning and cite disaster recovery to force them the share the credentials with you?

For controlled conditions with a time requirement we have specific accounts used, one per student, the accounts are enabled each day they are require with PowerShell that is launched from task scheduler. The PowerShell enables the account when the task runs and sets an account expiration time just after the end of the session so the accounts are only active during they times students should be using them, making them unavailable outside of the specific session requirement. Currently working one to one with teachers to manage this as I scale it up, at a previous school we had a shared calendar that the exams team would populate and we would then colour code calendar items to show it we (IT) had processed the item or if the exam team had just added the item or updated an item they would change the item colour so we would notice it. It quickly became a spot check at the beginning of the day for any yellow items in a particular calendar and then updating any relevant tasks. I made a crude PowerShell script with a GUI to create/delete the scheduled tasks. It wasn't/isn't too much work once up and running, I plan to automate this further in the future.

https://www.notifications.service.gov.uk/using-notify/send-files-by-email Seems you can send files, but they don't send them as attachments but link to the files and you need to code something to interact with the API to upload and send the files yourself rather than sending via a portal.

I can't test in my tenancy - seems like a licensing issue. Are you getting "Microsoft.Graph.PowerShell.Models.MicrosoftGraphLicenseDetails" in the output of $InactiveUsers? so $InactiveUsers[0].License returns "Microsoft.Graph.PowerShell.Models.MicrosoftGraphLicenseDetails"? If so I'd be debugging this area as it builds the variable that's used in the object ($UserLicenses) - maybe throw in a write-host $UserLicense after the variable is set as some quick and dirty testing : $UserLicenseDetails = Get-MgUserLicenseDetail -UserId $user.Id $UserLicenses = $UserLicenseDetails | ForEach-Object { ($_.ServicePlans | ForEach-Object { $_.SkuPartNumber }) -join ', '}