free780

Anyone tried a powershell login script?

The desktop client updates itself in the user context. If you do remove it you have to run a powershell script to remove it from each users profile.

You can update from a folder but you'd have to script the download of new updates. You won't get any reporting. It is better through Configmgr.

It needs a Chrome style updater and support federation using gsuite/azurrad/Adfs. If you can script as much as you can you can get the updates out. What issues are you having? Is it the lack of proxy support?

It may work. But don't deploy Adobe 2019 CC as the licensing has moved to user based.

A per machine script can do it. I did a script to replace the onedrive setup in syswow64 so I just run it from there.

There is an AzureAD power bi app that's quite interesting.

They might prevent MITM https inspection as Android no longer supports this. There were rumours of Apple doing the same for IOS.

Software as a Service. We are here to pick up the pieces. Basically if you allow the store you allow updates, per user updates. All you can do is try and trace the issue.

You don't get much control over the modern apps. I'd try and work what is causing the system error. It's probably a domain that isn't doesn't like SSL interception.

I'm getting the same but if I quit the app and relaunch it works. Notifications have been a bit flakey recently.

So if you create Registry GPP Item. Create a GPO Computer Configuration>Preferences>Registry. The Registry Key Path is SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run If you are using Teams I recommend this method I did rather than the per machine installer which is now bundled with Office 365 ProPlus. https://broadsystemadmin.wordpress.com/2018/10/10/microsoft-teams-on-shared-devices/ When Microsoft release a proper per machine version of Teams it will solve many of the issues. The Autostart in the current per-machine installer is due to the way it has been packaged. If it just provided the shortcut on the start menu to start teams but not Autostart it would be fine. Microsoft's Windows Virtual Desktop seems to be forcing Microsoft to provide per machine installers. But it takes time due to MS wanting to thoroughly test.

It's actually a per machine setting that updates teams and starts it for each user. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run A per machine real installer is coming. You can use powershell remove-itemproperty I believe. I used GPP to remove the setting.

Also modern apps are installed per user. You can unprovision them before anyone logs on. If you need to strip them out and retain the profiles you need to use Remove-Appxpackage in the user context for each user. If you have the Store setup for education you can unprovision apps and remove without scripts.

Yep costs money for the features you want usually. But also may come into play if we all end up having to use information rights management is a few years.

@mavhc And how's Information Protection and Conditional Access in G Suite?

You can do applocker via intune but requires a reference PC/VM.

Yep. However if an organisation has chosen Office 365 staff should use it. Otherwise you run the risk of shadow IT and data leakage using personal accounts. In business you wouldn't get the "I don't like it" argument. There's also the coauthoring that is possible with SharePoint online which you can't do with mapped drives.

You can also go down the Teams route. A SharePoint Teams site is setup per team with a document library. You supposed to use the onedrive sync client and connect the team site for files such as Smart Notebook. The per machine Onedrive client is out of preview (I believe). Mapped drives use webdav which is slow.

I'd be interested as my current testing with Intune just isn't as good as GPOs and Configmgr.

I found the sheer amount of events means I had to forward the events to MS SQL. Then I needed some queries.

@Brimstone You've never tried using filevault then. It ties the unlocking key to a user making it useless for a shared device.

Are you forwarding broadcast traffic on port 9 UDP? Are the PCs on a different subnet or vlan?

Apart from if they can sell a 1:1 device. But to be honest I think microsoft are leaning that way. Trying to get a budget for that in Edu is going to be tough, though because of VDI etc MS still have to make adjustments. Apple don't have to.

Most apple software assumes local storage and a 1:1 device. Also the user is a local admin. The onedrive sync client can get around this to an extent. You'd assume students wouldn't change which mac they use due to settings they may change on the mac.