free780

If you can you could grab the mac and IP from DHCP. It depends on how your PCs are named. You may be able to wildcard it.

Can you not just leave the apps as default and build and capture? I try and automate it in MDT so I can repeat the process. It's easier unprovisioning the apps when the image is applied.

On the rolling out channel Onedrive is now on version 19.043.0304.0006. So it looks like per machine is out of preview.

I guess smoothwall need to write a method of using azuread as the directory source. The way you could do it now is point your on prem radius to AzureAD via a 3rd party. This presumes 1:1 devices as 802.1x auth doesn't work on shared devices.

I asked Smoothwall and say not currently. I guess you could use a capture page or SAML. How do people using chrome books do it?

I was looking at these https://www.adobe.com/uk/products/premiere-rush.html (struggled with going through a web proxy -Adobe though) and this https://www.microsoft.com/en-gb/p/microsoft-photos/9wzdncrfjbh4?activetab=pivot:overviewtab (Though you need to provision it with SCCM tied into Store for Education if you removed it at any point) and this https://shotcut.org/ Trying to get staff to communicate what they need is part of the problem.

Mitm certificate deployed to ipads but they need to be MDM enrolled which is a grey area for BYOD.

If your no 100% sure no personal data may be shared the information protection can auto classify files containing personal data. It can then apply a policy. E. G only staff can open the files. Of course this involves azure information protection licences.

It maybe something Microsoft has to enable per Tennant.

I did get the webclient to work through AzureAD but not the app proxy. You have to use the myapps browser extension. At least users won't store credentials in their Google account or similar.

Interesting 1709 has been solid for us. We didn't touch 1803 but now getting 1809 ready.

Has anybody got the preview up and running? I tried to but it looks like you need an Azure Subscription to implement back to prem link.

I wonder if it will reduce the high CPU and disk IO on 1st user logon? You'd hope so since it will be up to date.

@gshaw I'm also chasing this with fasttrack and the product team. I currently have Ericom going through the Azure App Proxy but it does mean staff have to logon twice. I couldn't get accessnow to SSO using AzureAD. Ericom solution is very complex and another cost.

All they need is a text file or registry key to populate the login screen. It could just be an append to the URL to add the domain of your users.

I ended up doing it overnight with a scheduled task waking up PCs. I may have put the exe in the antivirus exceptions to improve speed.

How about subscription licensing for Windows 10 via intune? Office 365 Proplus is cloud licensing anyway. So unless you have any 3rd party software that needs a licensing server.

I did in place upgrades mid year using SAC. The main issue was 3rd party software (Unity, Impero etc) which needed to be uninstalled and licence returned. Then put back when the OS was upgraded. Other that it seem to be fine.

Using Azure AD instead of ADFS/LDAP works for quite a lot of apps but they need to support SAML/WIA. I don't know about spice works you also need to run it somewhere which will incur cost. You'll need dhcp from somewhere even if it's a switch. OU can do windows updates via intune but not 3rd party patching.

The big con with JAMF is the mandatory training when you first buy it. There is an annual subscription. I also have profile manager. It seems fine for mac management if you don't need different user level settings. If one setting is incorrect the whole profile doesn't apply. You have to enable logging and go hunting for issues. E.G If you set a wallpaper but the file isn't present the whole profile including domain join fails. The AD Sync falls over with large AD Groups and there isn't any documentation on how to adjust AD to accommodate macs.

I always cite security as the changes in Defender in 1709 give new features. Also software such as Visual Studio isn't supported on LTSC.

There's always something still using a legacy plug in. Some music software still installs QuickTime.

I use this but I try to not do it get people used to the cloud and that processes will take longer.

LTSC is for power stations,NHS etc. SAC is the way to go. Be aware you'll need to do a feature probably every year to stay in support.

Here are the scripts Per User (include it in your logoff script). This was an attempt at turning it off Per Machine. But I couldn't get it to work.