free780

Just wait until you jump on board the Teams/Slack bandwagon. Notifications all sorts of times. You don't have to respond. You might be able to send out an Outlook app config on the Office 365 side but notifications are usually user preference. https://docs.microsoft.com/en-gb/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/outlook-for-ios-and-android-configuration-with-microsoft-intune#data-protection-settings Looks like IOS only.

I used the command line tool a few years ago. Set the options on 1 PC and then capture the settings. Then apply as part of a task sequence. It was just Asset ID that needed manually adding.

Also be aware if you are still using FRS. Server 2016 is the last server version to support this. You can migrate to DFS quite easily.

Visual Studio isn't supported on LTSC and I assume not on Server 2016/2019 due to the LTSC. You could put it on a Windows 10 SAC VDI deployment but it would cost a lot.

Well we promote Onedrive however it has issues with Unity projects so removable media gets used or projects get stored on the local PC some have large 2nd hard drives. We did purchase a few Unity Teams licences so work is stored on Unitys cloud but per user licensing. Really the software is designed for a 1:1 device where the user is technical. @gshaw Thanks for heads up about c++. I had to update Unity recently due to a licensing bug when returning a licence. In terms of Visual Studio it's huge. You need the right hardware. We moved to OneDrive but had to update it and keep up to date. I wrote some powershell scripts. I also set the default project location to Onedrive.

It's a bit inconstant as I actually submitted a ticket to MS about using it on RDS and they recommended Shared for RDS and Device for normal Windows 10. I get the occasional 1st launch on RDS say its not licenced but a close and reopen fixes it. I have User Profile Disks deployed so the token roams. If MS really insist it's OK only it wouldn't be too much work to switch to shared licensing. But the token would have to roam. You also don't know what the device activation count is or what MS allow.

Yep I've tun it for just over a year. It's just the script and compliance items I had to tweak. If you reimage PCs a lot I have to run the script to force dba.

You can roam the token via home drive or Onedrive I believe.

It would be great if Microsoft could produce and sell a surface at £200-250 for shared use with fast first logins but I think the focus is on 1:1 devices.

I don't think you can with shared activation. Device Based Activation creates a user in AzureAD. Though I found I used a compliance item in SCCM to monitor it in case it got.l licenced against a user.

This might be what @genesis is looking for https://www.stonegroup.co.uk/stone-products/notebooks/stone-cloudbook/ Chrome books may look attractive price wise but if your an Office 365 org you'd have to tie gsuite to azure ad and then manage the Chrome books via gsuite without staff wanting to use gsuite. An AzureAD joined laptop should work a lot better and be more in line with the real world.

Many hours spent with the start layout. Getting the xml right and working with the differences between 1607/1709/1809/Server 2016.

This is a script I created to force a refresh of the Start menu Layout. Its good for testing. This is when the start layout is set to per-user not per-machine, you need to change. $startlayoutfile to "HKLM:\Software\Policies\Microsoft\Windows\Explorer" The script needs to run in the user context and the users needs modify rights to the xml file. If you put it in %localappdata%\start\layout.xml via GPP the user will have modify access by default.

I've had to work on Adobe User Sync since the summer to support the 2019 products. Adobe software is never designed to be behind proxies or used on shared PCs. It all seems to be heading to 1:1 subscription.

Hi I have this available now. I have updated my blog post. Of Course everyone's environment is different so please test. https://broadsystemadmin.wordpress.com/2018/12/10/adobe-user-sync/

The start menu layout is a dark art it only imports it when the date modified of the xml file changes. All the applications need to be installed on the PC. Also there are some edits required in the XML and the encoding can mess things up. Really if there was the budget. 1:1 local profiles. Shared PCs seem to be heading the way of the dinosaur.

Is the exe actually signed? you can use Get-Authenticode cmdlet to prove it. I wanted to do this but instead moved to OneDrive and rely on defender screening executables. Otherwise you need a seperate VM and a way of sharing files both ways.

Two words that cause so much grief: DLL Injection. Having seem various products (AB Tutor, Vision) they all seem to be root kits. I wish Microsoft would provide classroom management via Configmgr. Net Support looked good but didn't do desktop utilisation reports which Impero does.

I found the GPO setting mentioned doesn't stop PCs hybrid joining. You've then got to clear out all the Azure AD registered domain PCs from intune via powershell. MS say the scenario isn't supported. There is a new GPO setting for 1809 that stops Workplace Join/AzureAD registered or you can block the AAD modern app via applocker.

Yep and 1 device per student/staff member.

At least the apps will update by themselves.

OK. Finally managed to push out Store Apps. Invloved SCCM Update to 1810. Hybrid Joined PCs. Configured Intune and then Store for Education linked to SCCM I can provision per device. It seems to kick in once 1 user has had the app installed. Its fairly quick. I can understand those of you with smaller setups struggled. Unless you bin your on prem domain.

I didn't notice any downtime today. I even joined my first PC to hybrid join.

Have you tried turning it off and back on again?