free780

Looks like MS have fixed it.

Could be time are they syncing with Apple or a DC? This could break SSL/TLS.

I think it is in MS docs as you can use it with anything that uses radius. You need a dedicated NPS Server for it. Or use the app proxy with the RDS web client.

I'm guessing the life cycle of an ipad is 2/3 years before Apple decree its EOL. Its a shame it doesn't just stop working as soon as IOS won't update. If you want to use ipads I guess you have to factor in a 3 year cost of replacing the ipads. You might be able to trade them in somehow. It sounds like getting some laptops and replacing them after 5 years would be more cost effective in the long run.

Disable the VaultSvc Service. It might break some stuff. You should really aim for SSO so the AD account they login to SSO's to G-Suite. Unless your doing something strange like generic Windows Logins (bad idea).

I've found issues with Sky where you need to allow the VPN Server through the filtering. Had a case with Virgin doing DNS Hikacking when try to resolve internal resources so had to turn that off. I really wish residental ISPs would stop adding things that get in the way. Particularly at the moment where the is a lot of people WFH.

Force them to use RDS to access email with MFA. Or give the magic money tree a shake for devices.

If its being hosted on AWS you'll need a decent Firewall to keep up to date with IPs and/or FQDNs.

Sounds like Impero. Given the increased focus on Secuirty and Compliance you'd think Software would be resilient enough for Windows Updates. A dedicated Server just means you have a Server you can't update which is a risk.

It depends on budget. Not just the initial outlay but the ongoing cost of batteries. You can't bulk buy them as they expire after a while.

Is there much point to protect kids if you have to do SSL Interception? DNS blocking can prevent some nasty sites. You can sign up for open dns for free.

These are consumer services not for organisations. You really need clickview or planet estream.

Sounds like an authentication issue. Hace you tried re creating the boot images so the Configmgr binaries are up to date. Also make sure no service accounts are locked out. Also make sure you server hasn't fallen off the domain with Test-ConputerSecureChannel in powershell.

I had a similar issue with 1709. I ended up using Delprof2 running as SYSTEM as a scheduled task. You can do a log off script to force the SharePoint files to be online only if hard disk space is the only issue.

Look at Shared PC mode for Windows 10. It is supposed to speed up logins on shared PCs. Generic Logins are just a world of pain now with per user licensing and if you deploy MFA you have to protect generic accounts as well some how.

If Windows Firewall enabled is enabled on the server switch on logging. But really as others have said a proper link or a site to site VPN is much more secure.

Has any else stuck all their plugs/light bulbs/fire sticks on to their home guest wifi rather than the main SSID? My router blocks traffic from the guest to the main SSID. I think it will break screen mirroring from android devices. I was getting all my plugs (2.4 only) fall off the WiFi. This might be due to the 2.4 and 5 Ghz bands having the same name. Apple devices recommend not having Tkip enabled anymore but I found this can upset some older kit.

I think there's some group policy to deal with proxies and the updater. If you've got the bandwidth there's no issue. I'd switch to the new Edge where you can manage the updates via SCCM.

Remember you can also set Hybrid joined devices as a factor even on the free Office 365 licences. This gets around the Trusted IP issue. You get SSO on the hybrid devices. You need to do some ADConnect work and allow some domains through your proxy.

I don't think so. It's there to make users aware that data is being syncd.

Thanks for all the replies. Yes it seems to be non IT leadership not caring about IT security. Until something bad happens. In the last few months the importance of IT is been paramount. Equally the bad guys have upped their game. Ransomware is on the rise. Education can no longer bury its head in the sand. When I started in educational IT we used XP and manually changed per user settings and copied profiles. We used HD Guard thinking we would be protected from Malware. We got conficker and it spread across our network. I have no hesitation in querying a schools choices in terms of not implementing adequate IT Security. Ultimately Schools/Colleges/Universities are Medium/Large Businesses. Either automation and compliance happen or more staff are required to manage the risk. I don't believe education should be 3/5 years behind the rest of the world. It should be current to prepare students for the world today and tomorrow. OK. Rant over.

I'm currently looking at Secondary Schools for my kids. I'm surprised so many schools still are using Windows 7. Has someone brought ESU for all these Windows 7 devices. I did a Windows 10 Upgrade/Migration in 2016 in the College I worked at which was pretty seamless. Is it budget/time/politics? In FE/HE there is a big push for Cyber Essentials and you can see it coming to Schools. Running a EOL OS is an automatic fail unless you have ESU. I also don't understand why TLS certificates are not installed on some school websites or worse VLEs with logins.

Have you tried this? https://docs.microsoft.com/en-us/windows/configuration/set-up-shared-or-guest-pc There are powershell cmdlets to enable and disable. It gives you a log out button on the locked screen. Quick Access is disabled in explorer.

You can use Get-AuthenticodeSignature to check the signing is valid.

Don't run specified Windows Applications also does not stop processes launched from command line. Only File Explorer. If you do need Powershell login scripts running in the User Context you can sign them with a certificate and then add a certificate rule for scripts in your AppLocker Policy. Ideally you want the PowerShell Execution Policy to AllSigned . Restrict who can get a code signing certificate.