free780

Adding printers per machine is possible. But making the printer the default is a user setting. A logon powershell script maybe the way to go.

If the ipads are under an MDM can the app installation not be prevented?

Try the free version until you get to the point of needing Ems. Windows Information Protection will stop people moving files from Onedrive.

Maybe it's a MS conspiracy to move everything to Azure.

Best idea would be to have an server of each OS Version in your first ring. Then once validated update the next ring.

Microsoft just drop some nodes in the cluster. They are running server 1709 for everything probably.

Or Edge *shudders*...

Yes. Ideally you need to use SCCM/MDT Task Sequence to get the level of control you want. You could write a powershell script to remove the apps before anyone logs on timing it will be the hard bit. You may be better with a powershell script ran from a Scheduled Task you can run scripts as a post install command from Windows Setup. But you won't get any reporting.

I've got computer activation working. However officially Microsoft only support it in the US. When I asked Office 365 support they said Windows 10 thick client should be on device activation (creates an azure AD account per computer) and use Shared activation (use group policy) on RDS. Since then MS are going to drop support for Office 365 Pro plus on Server 2016 in 2020. The true with shared activation is you don't know what the limit is for activations.

Any use: https://olavtvedt.blogspot.co.uk/2018/03/migration-users-homefolders-to-onedrive.html?m=1

Clearly this group havent seen filtering logs in a school. Or any idea about Safeguarding, Prevent etc.

You may be able to push out via WSUS.

Windows Information Protection can prevent uploads to cloud services. It is not supported on shared devices only 1:1.

I was wondering myself. Would be nice to have it pointed at a home drive or Onedrive.

If you have the Do not connect to Internet Locations GPO setting enable. PCs won't get upgraded. But the store in broken. If you don't have it defined or disabled and don't have a WSUS server set they can upgrade. One be honest I'd get GPOS etc ready when 1803 is ready and start testing. If a few get updated via Windows Update its actually saving you a job.

It's by design. Putting it into SCCM is just really for pre-windows 10. It needs to keep up to date to support new features. The main issue is that the base Onedrivesetup in c:windows\syswow64 doesn't support files on demand. You can replace it but it's unsupported. A per machine updater is on the road map for Onedrive or through wsus. By default it's just a delay of 5 minutes. It really is geared primarily for 1:1 devices.

Does File stream install drivers though?

I guess vote for this. https://onedrive.uservoice.com/forums/262982-onedrive/suggestions/19320118-on-demand-sync-for-mac Can't see if this works on Onedrive for Business. https://cloudmounter.net Out of curiosity is the push to onedrive/sharepoint to use Azure Information Protection etc?

Pm cant deal with large AD Groups. I found the mac server needs read access to the user objects to pick up all the attributes.

So in terms of the right to be forgotten requirement of GDPR how does this work with filtering? Some services Office 365 etc may be allowed unauthenticated. This is true when using NTLM or Kerberos. If a staff member or student wishes to be forgotten how can you forget logs of visiting unauthenticated domains? Does there need to be a shift to use Radius /802.1x for authentication and use an intercepting proxy?

I agree it is a backwards step. You've also got the issue of no backups with an external disk. So it's either network storage or local storage with backups to external drives. The Onedrive client until 1709 has really only had 1:1 scenarios in mind.

These days the words Mac and Enterprise don't really belong in the same sentence. The files on demand feature only works in Windows 10 due to changes in NTFS as MS don't have control over the file system. It depends on the use case. If the macs are 1:1 Onedrive sync is not an issue. I'm guessing they are being used for music/video. If shared devices all you can do is use the Web version of Onedrive or look at 3rd party products

On SAC we are now on the 5th Windows 10 release and I can't see this changing. From the MS perspective it's 1:1 devices as that's what an ipad is. You could investigate user profile disks but you'll need a lot of storage. When windows 10 S mode is ready this is supposed to improve logins but you cant run Win32 apps.

Could block it in IE and Edge. But allow in Chrome. When Google finally kill it say too bad. 2020 is going to be intresting. EOL Flash,Windows 7, Server 2008R2 etc.

Has anyone started disabling it via GPO yet? Joking aside there should be pressure on sites to stop using Flash.