lmrogers

Hoping someone might have managed to configure this successfully. Has anyone managed to get Macs working in a shared enviroment with Intune using Platform SSO with devices enrolled without User Affinity. I have managed to get it working in that users are able to login with their emails and passwords, but the SSO part is not working and users have to sign into all the Microsoft Apps and services still. Thanks in advance!

Just wanted to reach out to anyone that is using Wonde's MyLogin product. How do you handle printing and auth with PaperCut? If anyone is doing this would be great to hear from you!

Good Morning, Does anyone know of any audiobook subscriptions that schools can use? Cheers

Is anyone using and having issues with LibreSoft and SSO with Microsoft? I've run into and issue with it where users hit the Sign in with Microsoft button, enter their details but then nothing happens. The auth dialogue box disappears but LibreSoft remains on the front page asking for a barcode or to sign in with Microsoft. I've got their support looking at it as well but with a test Microsoft Account I gave them they were not able to replicate the issue. Cheers

Just make sure you have that enabled for whatever role your account has.

The users just need to have the right permissions set to have the Evacuation List option at the top.

On the web portal you can print an evacuation list which shows all the people that are currently signed in. We have a shortcut to that page on out staff devices and when the alarm goes they quickly click the shortcut print the list and get to the evac point.

I have managed to use OSDCloud for ZTI from USB boot. I am still working on getting it to work over PXE.

Was the cert valid or had it expired? I remember sometimes those messages could be misleading so it might also be worth having a look in the Event Viewer for the errors when trying to connect Always On VPN Authentication Failure After February 2025 Security Update | Richard M. Hicks Consulting, Inc. - this is slightly different but might be worth checking as well Always On VPN – Basic Deployment Guide – Jon's Notes - This might help with understanding the setup of AOVPN a bit more.

Sounds like the VPN is using machine certs to auth the connection but has not been able to renew the machine cert. You can check the local certs on the machine and see if there is one that has expired. You should then have a CA somewhere with some templates so have a look around in the CA and see what certs it should be issuing. I have also seen this where the machines are managed through Intune and use SCEP profiles to get certs, again could be something in that profile that might need looking at if the machine is not picking up a new cert.

Lenovo Yoga 300w - decent laptops for students general use, stands up to daily use and comes in at a decent price point... if you can get a Lenovo partner to work with as well they can get decent deal reg pricing.

I have worked at a school previously and had a similar setup, except with the addition to cashless catering. At that school Civica had a piece of connection software that worked with CardExchange so that when cards were printed it would write the card number back to the cashless database, the Civiva connector would then write that back to AD and Salamander would handle the Net2 entries. I'm sure other cashless providers could offer something similar. Or script something to update their system from AD if you have a table with a decent primary key in both to match users. The biggest problem I've ever had and not come across the solution for is entering card numbers into sign in systems like SignIn App, Inventry and EntrySign.

So I went with CardExchange Enterprise Edition v10 with the LDAP Plugin. Think they also used to do a Net2 plugin but it made more sense to have AD as the source of truth and then sync everything from there. I go all the hardware and software from ID Card Center - ID Card Centre | For all your Identity and access control needs

I've got a similar setup. I went with a Magicard 300 card printer with encoder paired with CardExchange for design and printing. This also allows us to read the card information and write it back to in my case Active Directory. I am storing 2 versions of the card information in there and then from PaperCut syncs directly from one of the attributes and then Salamander syncs the other card number over to Net2.

Migrated to Furlong SchoolBase this year and it has been a dream, easiest MIS I've ever come across. Still using Sage for accounts but there doesn't seem to be a desire from our accounts department to change that as yet. Integration between the 2 is all good though and works really well. I'm happy with the solution.