the_dude

used to run rds gateway but figured it was open to exploit. VPN now

Right! I guess I'm probably just a control freak.

Intune is great, but it lacks the granular control that you have with GPO. It has some control, but not on the level of GPO. PolicyPak seems to fill that void, looking to see if there are other options out there. Thanks.

I'm looking for an alternative to GPO that can be deployed in the cloud. PolicyPak is one product that we are looking at. What other options are out there? Intune seems to be lacking in that regard. Thanks.

Looking at standing up some VM's, syncing AD. What cloud architecture do you recommend? Cost is the biggest factor(we are K12). Thanks in advance.

Airwatch is good too, JAMF is about £3 per device and we like the focus app for teachers to be able to reset passwords etc: Classroom Management Software | Casper Focus | JAMF Software

We are in the market for an iOS mdm at the moment. Currently using Meraki free but we need to start using ios9 features like pushing apps to devices (btw meraki quoted us $240,000/year WTF? I guess they don't want our business). With the amount of devices that we have (7,000) we need a way to tag or group the devices based on who they are checked out to. Example: iPad get checked out to Johnny Smith in Mrs. Jones Class. iPad gets tagged with "iPad - Johnny Smith, Mrs. Jones, 3rd Grade, Washington Elementary School". Apps can be pushed to any of those tags. INTUNE has no way of doing this. That's a deal breaker for us. EVERY mdm out there has a way of doing this. I've expressed our frustrations to our MS rep. I also have serious concerns with how quickly they adopt new technology. I think they only recently started supporting VPP which has been out for numerous years. So far JAMF and MobileIron are looking much much better.....good luck.

"1. Reduction in the time in between synchronizations of your on premises Active Directory and the cloud. Prior to today the lowest you could go is 3 hours, with the new iteration today you can reduce this down to a 30 minute interval. Technically you could set it to whatever you want now, but it will not honor less than 30 minutes." That's lame. I sync every 3 minutes right now.

Is this the same as the E3 Azure Rights Management? Has anyone set this up? I would appreciate a few simple instructions so I don't have to try to read technet....

I just noticed that in my portal this morning, haven't done it yet but I probably will. MS no longer forcing their crappy social network on us.

It won't auto login, but if you connect an SSO to GAFE you could use the same password. Not single-on though...

use the exchange server deployment assistant: https://technet.microsoft.com/en-us/office/dn756393.aspx

admin console >> apps >> gmail >> advanced settings >> content compliance >> edit >> fairly straightforward here I think.

you need to link meraki with apple's DEP

@spr that is my understanding. @AndrewTechGuy, we do the same thing but this requires an itunes account registered with vpp. We maintain 4,000 of those right now, like to get away from that.