T_Lister

I'm currently looking at blocking out Windows 10 and lower with none enrolled devices, but it just does a blanket block, even on my enrolled devices. From this thread I'm getting the impression that Microsoft are forcing apps and blanket block browsers. Therefore any A1 license is not going to be able to use a personal device unless we implement an approved browser like Island Enterprise?

I have recently setup a new DPM server using Server 2025, Management Studio 21 and DPM 2025. Out old server is still running 2012 everything. As far as the local backups are concerned, I'm not bothered about transferring this data, quite happy to just decommission it, or at least once all our none azure backups have completed their full local cycle in case I need old data, which wouldn't be more than two or three weeks. However I want the Azure to resume from the new server, not start a fresh. I have connected my Azure vault to the new server but it displays 0mb used, where as I had hoped it might identify the data used in the Vault already. Before I install the agent onto one of our servers, thus cutting it off from the old DPM, I want to know if this will result in a fresh Azure file rather than updating the current one, if that makes sense? If this is not possible, is this because I should have done a full backup and restore across matching versions of SQL and DPM, and then rolled everything up to the latest? Many thanks for any and all input.

Smoothwall came through with the below. Worked for me. Not pupils and staff just authenticate once they've logged in. There are a couple of things we can try. In Web Proxy > Authentication > Exceptions could you add the Connect for Chromebooks category to the exceptions. https://kb.smoothwall.com/hc/en-us/articles/15301667846684-Creating-authentication-exceptions Next, create a web filter policy (Guardian > Web filter > Manage polices) for the same category, with an action to Allow for all users. Place it at the top of the list. https://kb.smoothwall.com/hc/en-us/articles/360015987639-Create-Web-Filter-Policies

We had this issue some months back, and now it's back with a vengeance. Google had no answer the first time around. I put it down to 'life extension' updates, however this is proven wrong by devices that have not had a life extension. We use Smoothwall and already have the gstatic.com filtered, but also the problem is happening on Chromebooks that have been taken home, so that surely proves the firewall wall theory to be wrong and points back at Google? There are only so many times one can Powerwash/factory reset these devices! Are there any other theories?

Bit of a random one. Does anyone know what the below is, what it is referencing and how to fix it? It came out from a cyber security check we had done, yet that's all the information they give us. The remote hosts support the use of SSL cipher suites which comes with multiple benefits but in old versions there have been multiple vulnerability found and SSL Medium Strength aka SWEET 32 is one of them. https://support.microfocus.com/kb/doc.php?id=7024780 The machines the scan identified, we cannot find anything to do with 'verastream' on them.

Am I reading this correctly, you need the E3 or P1 paid license, won't work on the A1 Free?

ahh, I have found the error of my ways. The laptop was still on our domain, and it would appear it cannot be on the domain as well as in Intune/Entra. It is now joined. Although... what I hadn't realised with the original two devices, I can only reboot, wipe, format etc. I cannot actually 'lock' the device. Is this correct if it's all done this way for free? Or does setting up SCCM correctly for Azure help in this matter?

We do have SCCM setup, so I will go with that first if it involves paying nothing extra. Failing that, then if Intune is as cheap as that then we will consider it.

If I do, it's on a page called InTune. Sorry, I've been a bit out of the 365 network since moving jobs to a Google school. Attached screenshot.

Dear forum, Last year I managed to get two laptops enrolled into Intune MDM without having to upgrade our licensing. I'm not 100% sure how I actually managed to do it, but I did. I am now trying to do it again, but it feels like something has changed? We only have standard A1 licensing, and as a Google school we are not looking to purchase any upgrades. The limited ability I have with Google is to lock out Drive and Sign Out users on GCPW. I think I just signed into the laptop as admin, then added my work account and allowed the Device Management, I also got to this via another settings window which looked familiar, but it denies MDM due to a missing license. Do I now need to purchase something InTune, or is there a free work around so I have the power to lock and wipe Windows devices?

I have a script to clear out old downloads from redirected user areas. I know the script works as when I run logged in as an administrator, it works. Any other user... just hangs until it gives up and logs you out. How do I get standard users to have permission to run this script?

Installing a blank OS, no problem at all on both physical and virtual machines. Doing a role up from 10 to 11 on the other hand is proving somewhat annoying as it gives me the glory code of 0x80004005 that's not very helpful. So digging around logs and forums I'm currently under the belief that the issue is compatibility. Running a cmd "SETUP.EXE /Auto Upgrade /NoReboot /DynamicUpdate Disable /Compat ScanOnly" tells me that my VM won't role up because of TPM 2.0 not being there. I have found a number of Reg hacks that can tell my computer to ignore the pre-req, TPM/SecureBoot/CPU etc, however it is still failing our on me with the same errors. These are the error messages that I have been getting. Windows Setup failed with hexadecimal exit code 0xC1900200 (decimal 3247440384). To identify the type of issue, lookup it against the table of known values of Windows Setup errors online. Failed to run the action: Upgrade Operating System. Error -2147467259 The execution of the group (Upgrade the Operating System) has failed and the execution has been aborted. An action failed. Error 0x8000400 Failed to run the last action: Upgrade Operating System. Result -2147467259. Execution of task sequence failed. What am I missing?

Can this script be used with an entry that only deletes say, over 30 days old? Also, can it be used to purge the recycle bin in the same manner?

We've had the air-con unit fail and the new one hadn't been setup correctly to come back on with the power. Thus our desire to cover as many options as possible.

We have two hosts for our servers linking our SAN, as one might expect. One host has the c:\clusterstorage\ folder, the second has this folder + c\clusterstorage.000\. Best guess as to why is it was renamed for some reason when originally setup as one of the folders in it is a standard folder linking to nothing, rather than a mounted drive. When this host reboots, sometimes it will load the Disk Cluster Volume correctly, sometimes to .000 folder. This causes the hyper-v file paths of our server VHDX hard drives to chance root folder to the offending .000. Then if this host reboots/goes off, the failover fails as the other host doesn't have this file path and on occasion this has broken the virtual server. Currently it is looking at the .000 folder. I've looked around Cluster Failover and I cannot find anywhere where I can update the volume file path back to the correct c:\clusterstorage\ Is there anywhere, or will we need to delete the volume and recreate?