free780

It'll get even more interesting when Basic Authentication gets turned off. Hopefully oauth will be used with IMAP, POP etc.

Try Resolve-DnsName login.microsoftonline.com in powershell or Test-NetConnection login.microsoftonline.com -Port 443.

The argument from MS is they don't want IT departments managing (stopping) updates. They want the app to update automatically. As it is a cloud service this makes sense the same with MS Edge and the Onedrive Sync Client. You release some control and trust Microsoft (then Work Folders breaks - Sorry other issue). When MS finally work it out and have a per machine service/scheduled task, you shouldn't have an issue with the latest update. They did have a Teams beta in the MS Store at one point but it violated their own store guidelines due to its use of Chromium. This was before Chromium Edge. If they just put it in the store you can integrate the store with SCCM and deploy per machine. The other alternative is to make the Web App a Progressive Web App like Outlook, as long as there is a way of provisioning the latest version for the user before they login. The issues have been highlighted as the Breakout rooms feature requires the latest version of the Teams client but as Microsoft want a gradual release sometimes the client will not update to the latest version. Again shared devices are an afterthought as there is the trend towards 1:1 devices (increasing so with COVID-19). I think Electron is not designed to separate the user data the the executable (yes silly I know). Anyway vote away here. Improve Install options - Install for all users and install location – Microsoft Teams UserVoice Pre Per Machine installer I ended up having a script to download the latest version to a share which got GPP'd into C:\program files (x86)\Microsoft Teams\teams.exe. If the user started form the start menu (User GPP file for the shortcut) it would point to C:\program files (x86)\Microsoft Teams\teams.exe but install Teams into the profile. I did a user GPP to remove the shortcut to C:\program files (x86)\Microsoft Teams\teams.exe if the teams exe was present in the profile. I think this is what the per-machine installer does today but without GPP.

You may find you need to use the IE Enterprise list within Edge which will rely on IE still being installed.

I wouldn't do that. Windows Internet Name Service (WINS) | Microsoft Docs

You can push out the DNS suffix by group policy.

I posted this the other week. In another thread. /showthread.php?p=1880652. Also see https://gist.github.com/JohnLBevan/ec5991482e4ae02fcfd6c10d1a3b67b3 For DNS Hijacking.

Does G-Mail support oauth with IMAP? Just an idea. Microsoft were going to block IMAP connections to Office 365 at one point.

Please be aware that if you are on Windows 10 1909/2004/20H2 since the December Culmative Updates, Work Folders has been broken. Mainly if data is added at the server side (mapped drive). 0x8007017C error when Work Folders syncs files in Windows 10 (microsoft.com) Work Folder (Arbeitsordner) Error/Fehler: 0x8007017c - The Cloud operation is invalid (Der Cloudvorgang ist ungültig) - Microsoft Q&A Seems like a sneaky way to get folk onto Onedrive.

I'd do the MSI but you need to enable updates in group policy (you need the admx). If you have SCCM you can make Zoom available rather than push it to all devices. You don't need to update via SCCM. It only updates when launched. The Per Machine version can update as standard user using zupdater.exe. Go to meeting uses a schedule task and will update proactively for the per user and the the system level installer. There will always be external meetings to join. So I think trying to make the per machine version of WebEx, Go to Meeting etc is the lesser of 2 evils. Better than per user apps everywhere. You also want them to be on the most recent version. Most update themselves. Back when Zoom had a lot of Security issue an update was forced before you could join a meeting.

Really depends on Win32 Apps that require connection back to site. If you nee this then you need a VPN or Remote Desktop Gateway. Intune really gives you control when a VPN connection fails (for whatever reason). I'd probably go with co-managed ideally.

Has not stopped all day in Leeds. Had a long lunch of throwing Snowballs and Sledging.

You may just be able to allow TLS 1.0 on the client side of Schannel (as a temp fix) on the remote app server. The App needs updating to use TLS 1.2 and SQL may need updates depending on which version.

Is the phone managed by MDM? If so you can push the app. If not they need a Google Account. Its pretty difficult to use an Android Account without a Google Account.

You need a reliable method to update the VPN config which ideally doesn't rely on a VPN connection E. G Intune.

Are you not letting all internet traffic connect direct? MFA should only prompt once a day via conditional access. If you've got the money for Azure Active Directory Identity Protection, it will learn the usual location and device the user is using. If you have your device AAD Hybrid joined this can also be used as a Conditional Access method rather than MFA. However not all apps support this. Adobe Creative Cloud Desktop App for example.

Its in the catalog under the Update category. Its unclear if you have to import it via the WSUS console. Microsoft Update Catalog

That's it. It's over. It's really over. From today, Adobe Flash Player no longer works. We're free. We can just leave • The Register Expect to see this logo on any flash content from today. The removal update has now hit WSUS.

Yep I did a help sheet for our helpdesk team. Sorry if these have been mentioned before. -Make sure the Xbox Live Networking Service is disabled on the client. It can interfere. -Sky Customers need to whitelist your VPN address. - https://www.sky.com/help/diagnostics/sky-broadband-shield/cant-use-a-vpn -Virgin Media can sometimes hijack DNS for non resolvable lookups. This will be all your internal DNS entries. It needs to be disabled by the user here. https://my.virginmedia.com/advancederrorsearch/settings . You will see internal lookups resolve to 92.242.132.24 or similar IPS. I wouldn't be surprised if other ISPs are doing this, they use a company called Barefruit. -Enable the VPN GUI in the network list. Always On VPN Device Tunnel Status Indicator | Richard M. Hicks Consulting, Inc. (richardhicks.com) Users can click Connect if the VPN fails to connect. -Rasdial from an administrator command prompt to disconnect and reconnect. -If Users can use wired connections to their router the experience is a lot better. -Be prepared that ISPs will change things with no warnings which can impact connections.

The views are still present but will just be pushed underground or spill out on the streets. Hearts willingly changing is the harder long term solution. Or is there sadly an invertable civil war brewing?

Go some here in Leeds though the grounds quite wet so it probably won't settle. Part of me hopes it doesn't as people will mix more.

99.99% uptime for Azure Active Directory - Microsoft Tech Community Good News apart from the date!

Lastpass with MFA enabled.

Gets even more fun with multiple NPS Servers. You basically have to have riles that makes sure the same NPS Server handles the authentication if you have multiple. It's best to you Powershell to export the config and import.

Not touched SIMS in a long time. But. Capita finally finds buyer for education software biz, private equity Montagu to pay £400m • The Register