free780

It's not feature complete in line with SCCM. It has its uses, remote workers etc. For desktops I think SCCM is still the way to go. Intune is very light touch management.

https://docs.microsoft.com/en-us/deployoffice/device-based-licensing I get the impression microsoft think the users will join the device to the wifi (802.1x so 1:1) and then log in with their UPN rather than SamAccountName and magically Office will download and install. Bitlocker will encrypt and all will be well. I noticed simple things likes a different home page in edge for different user groups wasn't reliable. Policy seems to only get refrshed every hour not when a user logs in.

The new device based activation should work as long as you can get the registry entries applied. I don't think MS hate us. They are primarily interested in 1:1 and increasing the year on yest cost for licensing.

Why only 1 azure ad account per laptop? You can have shared devices within intune with edu policies. Granted the Onedrive Sync client is disabled. How does filtering work as when I asked Smoothwall they said theres no mechanism for Smoothwall to talk to AzureAD? I'm guessing Impero or similar doesn't work properly on these laptops? It's the shared device/safeguarding etc that isn't there yet in a pure cloud environment.

Yes theres a requirement for SMTP auth. In October legacy auth will be disabled. If you have legacy systems you need a hybrid setup or better still update them to support tighter security. I'd test with a test user to make sure ADAL works and turn it on. You can check how users are authenticating with https://aad.portal.azure.com go into users and check sign ins.

It's happening with many companies education uses. I've had the experience with these. Compass > Advanced Impero Adobe Smoithwall Any exam board. Microsoft I don't know if support staff are just being cut and Brexit is the excuse. In the past Bloxx had brilliant support. ISOxford have been pretty good. So it's not all doom and gloom. It's definitely quicker to resolve it yourself.

It should only affect office 2007/2010. Unless you don't have modern authentication enabled. I would block legacy authentication as imap and SMTP are leveraged in phishing attacks.

I ended up with a automated build and capture using MDT. It took at least a day. Saying that since 2016 it's been Windows 10 all the way. Of course its been absolutely seamless with no issues what so ever. [emoji6] Being an OS primarily targeted at 1:1 scenarios causes no issues in education. I do remember a Windows Update for Windows 7 that slowed down PCs with 2GB RAM. I feel sorry for those who are stuck on Windows 7/Server 2008 R2. The pain gets worse the longer you leave it.

Try procmon. I can't remember where the log is put for cs4. Procmon will log it.

Or buy Ericom Access Now for RDCB. It won't SSO to Office 365 but you can put it behind the app proxy. The MS html client doesn't support limiting RDP connections to domain joined devices. So you have to put it behind the app proxy to force 2FA. I wouldn't rely on just password authentication.

I think you need AAD P1 or P2.

I wonder how the Whiteboard app will be handled?

I think I fed this back via Twitter to MS. I'm not sure if you do folder redirection via group policy it should work. However if you just push the registry settings via GPP that may be where the issue is.

I've been using ShareX. Granted getting it deployed if you don't have the Store and Configmgr isn't easy. I also got the error and have Pictures redirected to Onedive.

We've been caught out with this. From Microsofts view the user should really take responsibility for making sure their data is syncd. Originally the sync client was more focused on 1:1 devices and took ages to update and start, which is a bad experience on shared devices. Within Intune if you enable the education policies for device configuration it actually disables the sync client. I guess someone thought, if its not 1:1 your not having the sync client. In the real world we have lots of 3rd party software Adobe/Autodesk etc where you need the sync client as there's no Onedrive connector in the application as in the Office programmes. In theory you could do a logoff script that forced a sync but I'm sure users would just power off the PC.

https://app.vacancy-filler.co.uk/salescrm/Careers/CareersPage.aspx?e=LMo8nnTwYNbb6_xTkghkjM9TJ8N3dWTVWwKU_Qn83i9-AMNOaPso0kEqvezzTmA77kW6FrHINUU&iframe=True&hidecareerslink=true

The amazon cost is probably one year as part of Office 365 subscription.

Yep with the Myapps extension it's great for Office 365. I've been using the beta build. Hopefully updates can be managed centrally. We had sync issues with Chrome which turned out to be using a netbios name for the UNC path when using DFS.

MS took a while to get that tool done. I wrote a script to update from the CDN in the meantime.

If only MS did a chromebook equivalent for the same price.

Do you have NPS security limiting RDS logons to domain joined devices? That can prevent the webclient from working?

I wonder how if the smoothwall browser extension gets round this? As always BYOD will be a pain as you'll have to require a browser extension which won't work on phones/tablets. Or do you not have BYOD and have 1:1 devices which will cost a lot.

Windows 10 is geared for 1:1. It's only now with WVD that things are changing. I would have a look at FSLogix. IT'S fools windows into thinking it's a local profile but stores the profile in a vhdx on a file share. This is then mounted when the user logs on. The first logon will always be the slowest. It's primarily meant for RDS/VDI scenarios but is supported on Windows 10.

I just did a powershell script to construct a CSV. There is now an Adobe cloud connector if your on AzureAD so you don't need the user sync tool.

Very brave to use roaming profiles anymore. In terms on ensuring every file is synced is more of a user training issue. You can run a command line on logout to force all files to stubs, I'm not sure if it will prevent log off until sync has finished.