chazzy2501

I'd think that as long as you install the correct version of Windows 10 (home or Pro) then the slmgr.vbs /ato would use the local key and work. Not sure how to automate that.

We've had a member of staff leave us and come back. Originally she was on the o365 system, after leaving her active directory account was moved to disabled (and disabled) this takes it out of the o365 scope (thus deleting the account from o365). a year later she's come back, we had her in the disabled accounts (in ad) so just put her back with her old password. At this point office 365 should have made a new account. Now I'm unsure what her email status would be. I thought i'yd just make a new mailbox but it seems to think there is a local exchange account that need migrating. The local exchange server still thinks there is a o365 mailbox. How should I proceed? (and what should I do in the future)

The big happy for me is that they're bringing Edge (chromium Edge) to Windows 8.1 and 7. Super useful.

2nd that, the free version for schools is A1 plus (the plus means you can have the office installers) This will work with the ipad store apps, just login with the correct credentials. Apply the A1 Plus for faculty to the headteacher and you should be set. as long as your schools has an .sch.uk or an .org address it'll automatically accepted as an educational institution. Otherwise you'll have to get hold of M$.

I have an untested theory that SIMS prefers CPU speed over cores. When I went from 2 to 4 virtual cores reports were slower? I know that the XEON CPU on the host can boost higher with only 2 cores than 4 so that's what I concluded. What I can definitely say is that doubling the core count didn't improve reports at all. (still I only use 8gb RAM for 800 pupils)

Part of raising my secure score is to apply auditing to all mailboxes in O365, they send you to GitHub to run this PowerShell #This script will enable non-owner mailbox access auditing on every mailbox in your tenancy #First, let's get us a cred! $userCredential = Get-Credential #This gets us connected to an Exchange remote powershell service $ExoSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $userCredential -Authentication Basic -AllowRedirection Import-PSSession $ExoSession #Enable global audit logging Get-Mailbox -ResultSize Unlimited -Filter {RecipientTypeDetails -eq "UserMailbox" -or RecipientTypeDetails -eq "SharedMailbox" -or RecipientTypeDetails -eq "RoomMailbox" -or RecipientTypeDetails -eq "DiscoveryMailbox"} | Set-Mailbox -AuditEnabled $true -AuditLogAgeLimit 180 -AuditAdmin Update, MoveToDeletedItems, SoftDelete, HardDelete, SendAs, SendOnBehalf, Create, UpdateFolderPermission -AuditDelegate Update, SoftDelete, HardDelete, SendAs, Create, UpdateFolderPermissions, MoveToDeletedItems, SendOnBehalf -AuditOwner UpdateFolderPermission, MailboxLogin, Create, SoftDelete, HardDelete, Update, MoveToDeletedItems #Double-Check It! Get-Mailbox -ResultSize Unlimited | Select Name, AuditEnabled, AuditLogAgeLimit | Out-Gridview: Has anyone already run this, any negative effects or a reason not to?

I didn't know DirectAccess had been depreciated but it is still fully supported in Windows 10 (at the mo) so does server 2019 have it? Otherwise it is actually easy to setup (wizard with GPO settings, win8and10 super easy) and requires no user training! (just 2 consecutive external ipv4 addresses) not the fastest file transfer but my users like it and can use our local SIMS remotely (very happy teachers doing reports at home)

is their default browser different? I'm not sure how powerpoint calls URLs but this kind of thing happens with SIMS reports when users install chrome.

if the identity doesn't match then the head altered something and didn't inform you. They're going to attempt to blame you for their error, more troublesome is that the head doesn't trust you. They ignored your advice and they have the responsibility for loosing their data, unfortunately they're your boss, so you're up poo creek. F

I have a projector and a 5.1 atmos system at home, I can say it matches a cinema experience but I can have a pee break and make a cuppa. All I have to do is wait 6 months, then watch everything later than everyone else..

I've resisted chrome for years. I don't want 3rdparty programs infesting my PCs with weird problems. I lament that I still need adobe pdf reader as the built in option still isn't good enough. All other 3rd party programs are ancient and have no updates (but are not online). Office obviously get updates through wsus and doesn't require elevation. Having a 3rd party browser and a 3rd party updater just seems like inviting a whole new specrum of issues. manually pushing an msi (if you can get an msi) every month sounds like a pain.

All my pupils would have to create a google account for policies to work in chrome? That's stupid.

so if a pupil wants they can search for "unlimited boobs" in chrome / google? I assume I can turn off the chrome store as well as configuration options in the GPOs? So the updates don't require administrator elevation or you push them via SCCM

I may be forced to go chrome in the future How to chrome: how do you deploy, auto update (every week) without admin, group policy, FILTERING using SSL interception with RM filtering if you can't spoof google certs.

OK Final post I hope, the more I read the more I think @snagrat is correct. I'll blame my M$ support helper. She was trying to help me with my spam worm, the advance treat protection for email and azure threat protection have the same acronym. I don't think I'm getting those bricks for free

I wasn't aware of an azure version but the version that allows the ATP options under the security policy. This plan said it included "advanced threat protection" (of course I can't see it now!) although it wasn't in the title but a description. The Microsoft helper told me to purchase it, so we could tackle my spam worm. At no point though did it mention Azure. This was a plan to get me the ATP bricks in the security policy menu. (which I still don't have btw. M$ getting back to me today.

@snagrat this is it's full name: Exchange Online Advanced Threat Protection for Faculty Academic EDIT: no it not! Wait a mo. EDIT2: I can't find it but in the description it said it included advanced threat protection and somin: else.. The description doesn't show now I've purchased it?

@snagrat I'm not sure, if I go to security, policy, I have no ATP options at the moment. (still haven't figured out how to apply purchased licenses) as part of a1 plan we get exchange online 1 that has no ATP.

hugh? it under educational > Other. I have just a normal ees agreement. I've not purchased (at any cost, atp coverage)

I remember when the self cert expired on my DA server, stopped all staff laptops for a day.... ERK!

I noticed in the purchase section that you can buy ATP for zero cost for student and faculty. I think with certain plans students could get it at a 15:1 ratio but I just got a 1000 student and 150 staff, for no cost. Has this been a thing for a while? I really could have used this as I'm weathering a spam worm at the moment! We have the Student/faculty A1 plus 'unlimited' at the moment, it says I don't need to assign the licence, so haven't figured that bit out yet?!

even without wsus you can use GPOs to set an appropriate time to do updates (e.g. out of hours, during lunch, after 15:30) and what action to take for missed updates.

Don't mean to sound daft, but why would staff need 7zip anyway? Windows can natively handle zip files (with and without encryption) and can mount iso files if really needed. EDIT: I'm wrong it can't handle encrypted zip files. EDIT2: ok it can extract encrypted zip files using zip encryption but not aes256.. but I can't find away to encrypt natively.

I love Meraki, I think that it is the superior solution. Unfortunately I'm running a Unify network as I don't poop gold.

wow, I've got staff coming to me for the wifi. The data and texts are not working.. I've never seen a nationwide outage before!