jthompson

I've been posting the steps required for this over in this thread - /forums/cloud-services/227943-exam-marker-2-a-6.html#post2038524

I can't see how Chrome OS Flex comes into it. Can that even be installed onto a Chromebook? Also, it will likely run into the same kinds of issues, with certified models only being supported by Google up until their listed end date https://support.google.com/chromeosflex/answer/11513094. After that, it's running the same kind of risk as a Chromebook past its EOL.

Yep, now seeing the patch installed successfully.

Just noticed that it's from 2018, so quite a few years ago, and I'm running GAMADV-XTD3. I think a more up to date guide might actually be this one - https://taming.tech/installing-gamadv-xtd3-on-google-cloud-shell/ They also describe a nice one-line method to upgrade the isntalled version GAMADV-XTD3 to the latest - https://taming.tech/upgrading-gamadv-xtd3-macos-linux-cloud-shell-windows-easily/

I used this guide originally, and just dropped my existing JSON/credentials bits into place. https://basuta.com/posts/installing-google-apps-manager-gam-on-google-cloud-shell/

Also, as an aside, I'd recommend installing gam into Google Cloud Shell and running it from there. You're not then having Google Workspace superadmin credentials sitting in a JSON file on your computer!

That looks better, yep. Pretty much everything Classroom related will rely on you giving it a course ID to work with. The cheat sheet I linked to earlier is handy for determining what commands and parameters you need to put together.

I can't work out what you're trying to do there. Your first gam command makes sense (fetching a list of active courses owned by a particular teacher). What are the other two attempting to do?

I'd be interested to know how you include a custom attribute in the contact card, and for that to not be public. Where we have name matches, we append a tag in the display name (which might be something like "Jo Smith [Year 9]")so that it would appear in recipient suggestions to immedietely differentiate. Being able to not include those in the public profile would seem nice.

In the Wonde developer console you eed to speicfy which MIS fields your app can access. A least privilege approach here seems sensible, and Wonde need to approve any changes you make to that. On the receiving end, if the data is being fed into a spreadsheet, SharePoinit list, etc. then taking care over privileges to those files ought to cover most of it. If those are living in M365 then you can rely on whatever account security is already in place. An important point to consider is the security of the Wonde API key, since you don't want that lying around. Where we're querying Wonde using on-prem PowerShell scripts, we store the API key in a SecretStore vault to keep it out of plaintext as much as possible.

This is probably stretching the definition of the word "Business" somewhat, but... ArsTechinca: Humane AI Pin is a disaster: Founders already want to sell the company

Today I learned that DuckDuckGo draws its results from Bing.

I suspect GAM will be the way forward there, making use of its CSV batch commands. https://gamcheatsheet.com/GAM%20Cheat%20Sheet%20A3.pdf You'll need to run some commands in order to gather the course IDs that you will then need to list in a CSV file to archive or delete them. With a list of target course IDs in a CSV file with a column named "courseID", you'd run the following to archive them all: gam csv coursesToArchive.csv gam update course ~courseID status ARCHIVED

Power Toys Text Extractor.

But how will Copilot be able to assist me in my important corporate work if a pesky admin deems a page unscreenshotable? \s On a more serious note, I wonder if this is going to use the same mechanisms by which DRM video content in a browser is made unscreenrecordable. Reliant on having hardware acceleration enabled in the browser... or so I've heard.

T-OTP won't be going anywhere anytime soon.

Ask them to write again but with more American bon homie. "Hey there! Do you like emoji in your essays? Come and check out AI Essay Write..."

So many initial thoughts. I'd have a hard time feeling confident that the OFF switch for it would actually remain in the OFF position through each monthly Windows update. Certainly a bold new way to waste energy. Not quite as useless a use of energy as Bitcoin, but not far off.

Haven't tried it but maybe using the RDP option within the pages of Windows Admin Center?

Beyond the "user the web version" option, I suppose "use the Android app" or "use the Linux app" options are worth investigating. For file sync, Google Drive for Desktop on the Windows machine would be an easy option. You could also look into Syncthing, with an Android or Linux app on the Chromebook.

As I often say to people here, it's not about how many shiny new computers we have, it's about how many crummy old ones we have.

I would expect that a device that far past EOL would have a encountered a number of issues, not all of which are necessarily going to be noticeable to the end user. Whilst they may have appeared to be fine the day before they bricked, they could well have been riddled with errors for a while already, with features not working under the hood (cipher suites moving on, etc). I should imagine that the risk of that increases as time goes by.

I'm not seeing the 2024-05 CU for my 2019 servers. I think Microsoft have held it back for the language pack issue. Interestingly, a couple of off-domain 2019 servers here installed the update right after patch Tuesday (before it was pulled?), but on my domain-joined servers which are configured to defer quality updates for a few days, there's no sign of the update yet.

Are you using AD-based activation? If so, you may need to check whether you have a suitable KMS key in AD that will activate Windows 11. A server 2022 KMS key ought to do it, IIRC, since a server 2019 KMS key will activate Win10 clients but not Win11.

Shared 2SV is perfectly possible if that's what you're having to do. When setting up T-OTP (i.e an authenticator app), store the secret or the QR code and just reuse it when setting up each person's authenticator app. If you have security keys, just add each one (I don't know if there's a limit to how many security keys an account can have). I'd make sure that they use Chrome profiles to keep accounts separated in their browsers, too.