free780

It's a keyboard shortcut. I wrote a log off script to turn it off. The setting doesn't stay on just for the user that enabled it.

On Windows 10 personal devices workplace join should handle password changes. I did write a script that could email a user if their password was due to expire soon. There is an argument that if you have 2FA and Conditional Access that password expiry isn't needed. Please add a mail server. Allow the IP of the server you are running the script from. I tied it down to a AD group while testing. Create a scheduled task to run as service account with permissions to run scheduled tasks. It will need read permission to the correct attributes within AD. samaccountname Mail Name msDS-UserPasswordExpiryTimeComputed

When I dealt with this 3 years ago they were refurbs so I guess it's EOL time from HPs perspective. You may just have to do some testing to figure out the jumper. I may have the pdf somewhere or try https://web.archive.org or Google cache.

In that scenario I would not allow remote access. The security and data protection risks are too great.

I've done it with AzureAD but auth is via ADFS. You have to put the domain name into the login box to trigger the SSO. I asked Adobe and they said theres not way to automate this. Which is strange as Microsoft can do it with Office. The login box is actually using chrome when logged in according to AzureAD.

I believe UWP is not supported on LTSC as the Store is not installed.

Unfortunately Google are very anti. SSL Interception so if you choose Gsuite as your platform you need to Bypass interception for Google domains. Also newer versions of android block interception certificates.

Will Email rights management become the normal soon as a result?

You can exclude MFA on Azure AD joined devices. Do you trust every device behind your public IP? It's worth the investment as it gives you insight into where logins are coming from. Has anyone started to implement this for students yet? Is it worth moving this to the security forum?

I think it's coming for students. The issue is them using their own phones. Fine at FE/HE level but secondary and primary could be more of an issue. Or you just say no external access unless you have MFA enabled.

Out of curiosity which version of Acrobat triggers the requirement for logging in?

Is it to do with Acrobat requiring signing in now?

LTSC releases seem to be 2nd class citizens. The bug was fixed in 1703 but MS want you to move to Server 2019 or shift your workload into Azure.

I find tge requirement of an MSI is less so. Particularly if you use SCCM. The annoying thing about Adobe CC is that the feature lock down can only happen when the software is deployed. There are Admxs for Acrobat and Reader. The newer software such as XD is actually a sideloaded UWP so introduces updating issues.

Or maybe MS should buy Adobe. Adobe 365 E3. Seriously though due to the new requirement for signings in CC 2019 some were asking Adobe why they don't just follow Autodesks model of giving the software for free to education.

I once spent 3 hours on the phone getting SSO working with multiple domains. In the end we had to delete the Idp part and start again. Adobe didn't support AzureADs default SHA256 for signing. I get the impression it's very scripted responses unless your dealing with something very complex.

This was introduced on 1810. https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/Application-approval-improvements-in-ConfigMgr-1810/ba-p/303534 If its a required deployment then it should pick it up within a hour. Unless you have maintainence windows. To be honest I'd stick with SCCM as anything 3rd party is usually playing catchup in regards to OSD/Feature Upgrades.

I know. The phrase rock and hard place comes to mind. I spent last week with a low powered laptop and Intune. But I can't see it working as well. The intune policy only refreshes every hour so if a staff member logged in they get the wrong policy. I get the sense the chromebook flies in the face of 1:1 devices. There is a shared PC Mode but it disables the onedrive sync client.

Microsoft need Windows 10 S for this with low cost devices. Perhaps not call it Windows as people think you can run Win32 apps. The issue will be when you get pressure to switch to Gsuite from Office 365.

https://www.askwoody.com/2019/server-2016-ltsc-patches-take-for-e-ver-there-are-numerous-reasons-why-and-not-much-you-can-do-about-it/ Automation via SCCM or the Windows Update powershell module kind of works around this. I guess it's Server 2019 or cloud.

Not sure about this. I have a special accounts that aren't synced with office 365 and DBA works. It is however not officially supported out of the US.

Sounds great.

It's the cost of the hardware and the learning curve for staff and students. With one device per person really you can make programs/apps avaliable rather than required. The user takes more responsibility. I suspect with Microsoft 365 1:1 may become the necessity to take advantage of all features. In edu we have a legacy of shared devices and the management which is going to be hard to escape. Now all we need is a 365 chromebook.

All the content is contained per user. It's written with 1:1 in mind. I found it won't even store projects on a network drive. If you licence it via command line as the system account students don't need to login to a Unity account. We have to count on students saving locally to OneDrive. But usually they use the same PC due to settings not roaming. I guess if you hide the C drive you could repartition the drive and have a script to copy up the project to the home drive on log off. Basically the software needs to integrate with a cloud platform like Onedrive/GDrive but you still need the space on the C Drive.

If you enable password hash sync and in the event of a power cut/Internet outage on prem. Could you not just disable authentication via federation (using a cloud only account) ? Will this save on the Azure costs?