free780

I wouldnt be suprised if cloud only MIS systems become the norm.

Also don't make your UNC paths too long, the depoyment usually fails.

Intune works for 1:1. Schools like shared devices which apple doesn't like. All MDMs can only do what apple allows. Jamf is the market leader for a reason. You'll never get the management you get over Windows on Mac. With Jamf you can add custom scripts etc which may get close.

There is also a html 5 rdp client you can use through the app proxy which will secure access and ensure MFA.

I just added the IMAP settings to Gmail. I didn't want my personal email tied to an ISP. I've left Virgin now though.

There's still no sync with AAD or similar? That is quite poor for larger environments. Adobe has managed it.

Castaway on Netflix The highlight was trying to explain to a 9 and 11 year old what a pager is.

Or they can just enter your organisations domain which matches the one in the users UPN. As long as you have SSO with HAADJ devices.

There are some domains that may need whitelisting from the NPS server. Also check Azure AD > Security > MFA > Activity Report

I would say use the app proxy with the Web client. The Azure NPS Plugin is more trouble as there is no on screen prompt. I'm suprised that anyone has an RD Gateway on the Internet without MFA.

Or use an RD Gateway with the AAD App Proxy which will force MFA but not every time as in the case of the AAD NPS extension.

https://docs.microsoft.com/en-us/deployedge/edge-ie-disable-ie11 This should disable IE but allow enterprise mode in Edge. It's worth a test.

Break all the printing that will lead to 1:1 devices and COVID19 not spreading via MFDs.

If your using LTSC (1607) you can't with the settings app. Use Settings app Group Policy - Windows Client | Microsoft Docs If using Windows 10 1703 or newer you can hide parts of the Settings App.

If you purchase a firewall with Dynamic Updatable Objects the Firewall will poll the Microsoft list and keep your rules up to date with using FQDNs. Exchange Hybrid Servers should be restricted to Exchange Online ranges. I asked Smoothwall about this feature over a year ago given the use of CloudFront and M365.

Are people still printing? I thought WFH had killed printing? I'm guessing the 1607 (yes you should upgrade Windows 10 unless using LTSC) patch will be very similar to the Server 2016 patch. I wonder if that will break your print Server if you have Kyocera Printers.

Does the version work from HKLM... Uninstall key for Teams?

Surely this would require from SSL/TLS interception by your ISP? I think the actually streams come from googlevideo.com over https. I'm sure someone will correct me if I'm wrong.

If think Adobe have stopped Flash from even loading even if you havent installed the Microsoft removal update.

I'm not convinced by some of the claims. I think you still get access to ISOs for all Windows versions. In terms of activation you can use AD Activation still. Microsoft would like to use subscription licensing as it enables devices to be provisioned away from the network. Its worth noting in HE/FE Microsoft has driven the change to A3/A5 away from the older campus agreements. I'm guessing other orgs will be the same? Shared devices need to be AAD/HAADJ for Office.

I did look at using attrib on a logout script to force a sync and validate the results. So it's automated for the users using shared devices. Or you go though training every user to wait for the solid cloud before logging off.

inetcpl.cpl still works after IE is removed. Microsoft will keep IE supported against security bugs as long as your running Windows 10 20H2 for example as its supported. There too much legacy for them to remove it. The Edge enterprise mode *may* function without it installed so you can allow finance sites/CCTV/Printers etc etc. But don't let people use IE for day to day browsing as most sites wont work.

I think the endgame is for all users to have a 1:1 device and never log off apart from the monthly Windows Updates so sync can occur when a device is idle. No idea how those in education can afford that scenario. We have a situation where our customers (students) require devices to achieve however shared devices are seen as an after thought which is why many of us won't deploy the sync client to shared devices. It has got better with WVD and the per machine client but you have to go through the pain of lost work or try and find it and never delete profiles.

Its the sync when they log off which is usually the issue. Microsoft really need some sort of local cache server to deal with it. Or applications have a direct connection to onedrive instead of relying on the sync client. Its an issue for shared devices. If all your students have 1:1 devices it will probably eliminate a lot of these issues.

I had the Oxford one. Got flu symptoms the say after. Shivering, headaches, hot spells. Tiredness. After 24 hours it seems to have cleared up.