jthompson

Wow. I care, but I'm not sure I care quite as much as that! Faced with that I'd be tempted to make a pointed performance of turning up for work at 8am.

I'm fairly sure that when using the Storage Migration Service, you can opt out of the cutover aspects that would see the new server being given the old server's IP address, etc. After the data transfer phase, which see data and permissions copied/transferred, you just skip the parts of the server cutover phase that you don't want to perform. It's a whilse since I did it myself, so it might be that after the transfer phase is complete, you have to bail out of the migration as a way to avoid any subsequent steps.

BBC Sounds might be a place to start, so that you can listen to some comedy or a more podcasty thing together. Intros and trails can begin to grate a bit with too many episodes in one go, though. Even if you just subscribe to a whole load of different programmes, it means that you can dodge the things that are going to be an instant turn off (for me, that would be Beyond Belief, The Kitchen Cabinet, Poetry Pleas and Any Answers) and try to focus on things which are of most interest. Agree that the comedy can be marmitey (musical comedy, yawn) but if Just a Minute works, for instance, there are plenty of series to listen to. On car journeys, I might ask to listen to the news, which on occasions will translate into me getting to listen to PM before switching back. I really like the serendipity of listening to R4, though. I would likely never seek out a radio play based on the imagined diaries of Cheetah the chimpanzee from the Tarzan movies, but when I accidentally listened to it whilst washing up, it was joyous.

That information is part of our staff handbook. Our helpdesk address is in the global directory, too, but I do occasionally have to sent a friendly reminder to not send request emails directly to all the individuals in our team. One has to pick the timing of that very carefully though, so as not to appear totally passive aggressive.

I don't, but the exams officer and data manager do. For quite a few years now, the only problems encountered have been things that require a call ot the exam boards, rather than anything local. We do make sure that at least one person from IT is working on those days, though.

I have a weird issue. WUfB reports have been working for me for ages, but now they seem to be stuck with a 'last updated' date of 18 Aug. I had made some Group Policy adjustments on that day, but made a mistake which left computers configured with telemetry disabled over the weekend. I corrected that yesterday morning, but I'm still not seeing any telemetry data being ingested into the log analytics workspace behind WUfB reports. EVen if no new data were coming in, though, I would still expect the WUfB reports workbook to show a 'last updated' date of the day before. I've tried accessing the reports from various places to make sure that I'm loading the most recent data (either http://aka.ms/wufbreports, or Azure > Monitor > Insights Hub > Windows Update for Business reports). Has anyone else encountered similar? Might I have broken something on the Azure side?

Perhaps they've adopted a homeopathic approach to combating fun. One infinitesimally small dose of fun, in the form of a fast moving symbol of inanimate mechanical part, will be enough to cleanse the entire OS by the time of next scheduled release on the semi-annual channel.

So that's a "no", then.

It does feel like Google's MDM offering is basically a case of mandating use of Google apps in order to completely ringfence Workspace data on iOS. To ringfence Workspace data whilst allowing use of third-party/Apple apps, then go use some other MDM. Fair enough for a free option, I suppose.

So under Basic iOS MDM, there's still useful restriction available in preventing saving stuff to the Files app and preventing AirDrop. Those only apply when using the Google apps though (and not even all of them, just Gmail, Drive, Docs, Sheets, Slides, Chat and Meet), so it may need to be used in conjuction with not allowing the Apple Mail app to be used with Workspace accounts.

I've been able to do a bit of testing and this is what I've worked out so far: The setting I've been testing is Devices > Mobile and endpoints > Settings > iOS > Data sharing > Data actions, set to its most restrictive setting. The user I tested with therefore only needed Basic iOS MDM. Allow users to copy Google Workspace items to personal apps: I couldn't get this to do anything under Basic MDM, even though it's apparently supported. With the option unticked, I was still able to copy text from a work email in the Gmail app and paste it into the iOS Notes app. The only way I could prevent work account content from being pasted into a third-party app was to up the MDM to Advanced and to set Gmail as a managed app. That then involved a few steps of onboarding to get the Google Device Policy app installed, an administrative profile downloaded, installed and trusted, and then the Gmail app updated. After that, content copied via the balloon menu when a chunk of text is highlighted was not available to paste outside of the app. Allow users to share Google Workspace items to personal accounts with iOS share sheet: Similarly not seeing this working under Basic MDM. I was able to select a chunk of text from a work email in the Gmail app and use the 'share' option in the balloon menu to attach it to a new note in iOS Notes. Allow users to share Google Workspace items to AirDrop with iOS share sheet: This option works under Basic MDM. Highlighting a chunk of text in a Gmail email or a Drive item and then selecting share form the iOS balloon menu, the AirDrop option is not shown. Allow users to print Google Workspace files: I wasn't testing on a device that had any printing option available anyway, but it might be that it does work, similar to the AirDrop and Files options do. Allow users to save Google Workspace items to Files with iOS share sheet: This option works under Basic MDM. Highlighting a chunk of text in a Gmail email or a Drive item and then selecting share form the iOS balloon menu, the "Save to Files" option is still shown but results in a pop-up stating that file sharing has been restricted by admin. Allow users to save Google Workspace images and videos to iOS photos: Haven't been able to test this properly, as I haven't been able to see what saving to iOS Photos looks like anyway, even with a non-work file. Allow users to assign items to Contacts with iOS share sheet: This option works under Basic MDM. When selecting an image in a work email or in Drive, the iOS share sheet hides the option to assign it to a contact (i.e. for adding a mugshot).

So in the case of the Gmail app, is there any scenario where it makes sense for that to be a managed app, given that it could quite easily be being used in a personal capactiy, too (and pulling the app off, rather than just wiping the work account data, would be unhelpful)?

Thanks. By the sounds of it, I don't want to be setting any managed apps on personal devices, then. What I'm really hoping to achieve is to prevent users from copy/pasting Workspace data over to personal apps/data on their device. Android work profiles allow me to do that, but the Google Admin setting "Devices > Mobile and endpoints > Settings > iOS > Data sharing > Data actions" has me a bit puzzled. It suggests that it apply such a restriction, but I'm not clear exactly on the mechanism by which Google Workspace is able to achieve that on the device.

Hi all I'm looking to tighten up our staff access to Workspace accounts from personal mobiles. I've always been an Android user, so have been able to get Work profiles (which I love!) and app allowlisting all sorted out for Android. I'm after some guidance on the iOS front, since I don't have ready access to device to test policies with. Basically, how does a 'managed' app behave on iOS? If I were to set the Gmail iOS app as managed for staff, would that: provide them with a second, separate instance of the app to use with their Workspace account, entirely separate from any personal instance that they might have? or: leave them with just a single instance of the app for all of their Google accounts (be they work or private) but one that would get uninstalled when the management profile disappears from their device? Nothing I've found online is clear about it.

More info on this: https://arstechnica.com/security/2023/08/how-an-unpatched-microsoft-exchange-0-day-likely-caused-one-of-the-uks-biggest-hacks-ever/ TLDR: 0-day against an up to date on-prem Exchange. Likely by a Chinese group.

This! At the risk of being facetious, one downside of assigning laptops to staff is that there will always be some googly-eye stickers or "Me-wow" cartoon cat stickers to have to scrape off every now and then. I can live with that, though.

Teaching staff are all issued with laptops here. No desktops for them. AIO desktops for the support staff in designated offices. It's been that way since forever, so it's very much the norm. The laptops afford teaching staff a high degree of continuity, where they can just keep their windows/tabs going through the day even if they're moving from one room to another. You do need to always have some ready spares available, in case of technical issues or the occasional forgotten laptop, but that gets easier the longer you've had laptops around.

From their notice: "Personal data contained in Electoral Register entries: Name, first name and surname Home address in register entries Date on which a person achieves voting age that year." So for some people, then, that's going to be their date of birth (effectively) in the data.

Futuramananarama

I can recommend Gregg Wallace: The British Miracle Meat. Imagine an episode of Inside the Factory crossed with Soylent Green. I do genuinely enjoy watching Inside the Factory, and Gregg's performance in this is superb. Raw meat plopping unceremoniously onto a conveyor belt. LAHHHVLY!!

There's a dll that ought to be bundled with that spreadsheet that you'll need to register on the machine that you're running it on. You'll then need to be running the spreadsheet with a user with suitable privileges to create users etc. Maybe try run as admin when launching Excel, too.

Did you know, there was a period of time where the number of films that she appeared in doubled roughly every 18 months?

Old, but still use it from time to time when creating sets of exam accounts and so forth. https://wisedataman.com/account-management-spreadsheet

AppLocker rules will be being enforced by the Application Identity service, and I suspect it'll all be tucked away at a pretty low level inside the OS. The nearest you might get to an exe or dll for it (or for the dialogue) might just be some very general purpose stuff like svchost.exe. https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-processes-and-interactions That dialogue seems to shade the rest of the screen, a bit like how a UAC prompt does. I know that UAC prompts sometimes interrupt certain remote access tools, as it's someting happened above the current user session (or something).

I tend to use Google Docs when writing any user guides for staff. It tends to lend itself to searches better (in Google Drive or in Gmail) and also to announcing things in the first place. A newly written guide can be announced by way of sharing with staff from Google Drive, or attaching to an email. We use Gmail, so that allows the document to be viewed without leaving the email. Not everything will be relevant to everyone, so separate documents allows for that more easily. I'd argue that the responsiveness to mobile screens is just as good with Google Docs as it is with Sites, assuming that you're not one of these people who doesn't use styles when writing documents. It even follows dark mode on Android We don't have a KB site as such, but if we were to do one, I'd probably look to just use Google Sites to present shortcuts to existing docs.