HereIGoAgain2601

Hi guys Yeah SLT are concerned about the possibility of something getting through that shouldn't be also the same issue about wasting time. When I have had a look on YouTube in restricted mode there are hundreds of videos that kids will watch just to waste time. Granted this is for the teacher to discipline in the class but we won't get approval unless we can go down some whitelist option. We are only just allowing students access to Office 365 email so our SLT are very conservative !! Thanks

Hello We are looking for a way to grant YouTube fess for students. SLT have made it clear that this needs to be on a whitelist basis, and we have seen through our G suite that we can set different levels of access for staff and students etc. I have already setup the YouTube dns changes so that the YouTube is resticted by default, but I need to make it so that only the videos we approve are allowed, and not all the ones that YouTube alllws by default. I was hoping that we could use ADFS to SSO into the google accounts and then set restrictions on them. Has anyone had any joy in this? I have ADFS providing logins for google apps at the moment, but the users still have to enter their email address to get logged into google, so it's not a true experience. Is this the best we are going to get? It swems to take ages for the ADFS to authenticate, but I'm still testing and setting up for the first time so chances are I've missed something. Curious if you guys have another way that we can get around this - unfortunately it's a definite no from SLT on allowing YouTube without the whitelist feature. At the moment one of our techs has to download the videos which is a bit of a pain... Thanks in anticipation

Hi, Don't suppose you ever found a way to get this to work with YouTube? We are just looking at this and would like to get a true SSO to YouTube so we can force students to view only approved content. The restricted view isn't restricted enough for us! Thanks

We have a login script that runs - it writes to a network share so we can quickly find out all the machines that a specific user has logged into - useful for tracking misbehaving students, and also who has logged into from any particular machine on the domain. Very useful happy to share

I was reading this article https://stackoverflow.com/questions/28127730/how-to-install-pygame-on-python-3-4 Towards the bottom of the page there is this link https://bitbucket.org/pygame/pygame/downloads I downloaded Pyhon 3.4.4 (32 bit) psi and then the pygame 1.9.2a0 win32 for py 3.4 msi from that site and everything is working. Done the test game and seems OK.

Thanks, managed to find an MSI for Python 3.4.4 and seems to be working OK. Deployed it last night on SCCM seems to have gone out correctly. Cheers

Hi all, Hoping someone will know how we can deploy modules to Python 3.4? Our new computing teacher has asked for the following modules: pygame and pygame.mixer.music Module Anybody any ideas on how we can deploy them? Many thanks in advance!

Hello all, Just wondering if anyone else is seeing strange behaviour with the Remote App publishing to the Windows 10 start menu. We have a few remote apps set with the GPO to map automatically for all our users. The mapping works and I can see they are connected to remote app (tray icon is there). If we look in roaming app data I can see the folder has been created on user's start menu, it just doesn't show on the Start Menu itself. Is it because we have redirected appdata to the network drive? Tried on 1607 and 1511 not tested on 1703 yet. Joel

I have it working on in place upgrade and a fresh image so long as the update is installed KB4020102

We installed an update as per one of the other posts on this forum and it solved the issue. KB 4020102

Hi Liam Not sure if this will be what your issue is - we have seen issues with our firewall blocking the root certificates from being updated on the client machines. It appears that when the remote desktop tried to start a remote app, it want's to verify the certificate you are using is still valid and hasn't been revoked. Our Sophos firewall was blocking the root updates, and we noticed on the logs traffic was being sent to our certificate signer's domain (Go Daddy in our case). As soon as we put the firewall rules in, the connections went down from approx 3-5 mins to 30 seconds. Good luck!

That's not a bad idea, think I was over complicating things. If I write a BAT file to schedule the shutdowns in an order this would solve the problems at site where we can't use SCCM. Cheers

Hello, Thanks for your answer. Yes we are a MAT and we use SCCM at all MAT sites, but you guessed correctly we also support some local schools who are not in the MAT and run their own networks with no links back to the main network. These smaller schools don't use SCCM and rely on WSUS instead. I have looked into the SCCM maintenance windows before - is there any configuration we need to do with GPO's on the server side in terms of allowing them to reboot if admins are still logged on remote desktop etc or will SCCM just force it? At the moment the updates go onto the servers with ADRs but they just stay on forever pending a manual restart. Thanks in advance

Hello all, We run Server 2012 R2 on the majority of our servers, and 2016 on some of the newer ones. I am wondering what you all do with regards to scheduling updates on the servers. We currently have around 200 servers across the network and are looking for a way to schedule reboots. We use SCCM predominantly, but some sites only use WSUS. What is the best way to get these servers to reboot, but only at night i.e. the early hours of the morning so nobody notices. I was considering a scheduled task but this could cause issues if the Hyper V host shuts down at the same time as the VMs? Open to suggestions on the best way forward Thanks

That's strange, we have the issue on Office 365 with Windows 10 Education and Windows 7 x64. Happens to us with Roaming profiles and local... not tried mandatory.

I don't think this is possible but just wanted to see if anyone knew of a way to create SIMS accounts using a script of some sort? Thanks in advance

Hi Nope not sorted it yet.. no major rush as they aren't using it till after Easter. We are running Windows to host MySQL if that makes a difference.. but these are the commands: source C:\CreateUsers.SQL The contents of which is CREATE USER 'Test1'@'%' IDENTIFIED BY 'Test123';GRANT ALL PRIVILEGES ON `Test1\_%`.* TO 'Test1'@'%'; Still getting the same error as above.. The commands work if I run them manually, just don't want to do this for 50 users! Cheers

Did you manage to find a resolution to this? We are having the same problem but direct the OST files to the user's home directory on the network.

I get an error saying that the file "is not a compiled character seta nd is not specified in the file index.xml" Charset is not found .... Thanks for the reply

Hi guys, Been following this thread and thanks to your help managed to get MYSQL installed and running. I am trying to find a way to bulk create user accounts.. I have generated a list of users and passwords for them but need a way of getting into my SQL. I have been using this script below but doesn't seem to want to run from a .SQL file.... any ideas sorry if this is a daft question never done mySQL before! CREATE USER 'jthornton'@'%' IDENTIFIED BY 'password';GRANT ALL PRIVILEGES ON `jthornton\_%`.* TO 'jthornton'@'%';

Hi all, Looking for a way to speed up our logins.. the slowest part at the moment is Group Policy printers. I'm assuming this is because the machine is downloading the driver. Wondering what people are using to deploy printers, do you deploy the drivers as part of your image? We use group policy printers as we like the preference item level targeting options. We did have a delete all preference as we saw issues with roaming profiles under Windows 7. Now that we are going local profiles on Windows 10 what does everyone think is the best way forward? Cheers

Hi guys, Thanks so much for taking the time to reply in detail. I like the sound of the security group memberships as a way to manage everything. We already have the SCCM infrastructure setup and scaled appropriately with the distribution points but I will have to check the configuration for the management points as I think we may be running with just one. We are around 3000 clients so we do just have the one standalone site. I think we may need to increase the CPU / disk / RAM allocation on our VMware infrastructure for the SCCM server as it seems to run incredibly slow. We are going to clear everything out and having a fresh start with both our AD and SCCM infrastructure so just wanting to see how others do it and what works well. I tWe have been doing OS deployments to unknown computers and to existing collections for a while now but the issue we have faced is with overloading the task sequence with every bit of software in the trust and then putting the variables in that don't always work. I think collections is definitely the way to go for us for software deployment groups but maybe using security groups to map the membership would work well, particularly in terms of linking it back to AD for things like printer deployments. If you are free to discuss and talk through it with during the new year I would appreciate it just to get a clearer idea of how your environment is setup? Thanks again and Merry Christmas, Joel

Dear edugeek, I work as part of the IT team in a MAT in the north west of England. We are currently using SCCM 1606 to manage our OS and software deployments. Due to a number of issues we are looking at reconfiguring our environment to be more consistent across the trust. I wonder whether there are any others out there using this technology, whether individually, or as part of a trust, and would be willing to share how you do things? We have a very experienced SCCM administrator, but believe that the system has become too complicated for end use. Our technicians are struggling to use the software day to day and need to rethink how we do it. We currently have 1 master task sequence that uses a wide range of variables based on machine name and OU to choose an OS version and appropriate software as part of the PXE boot sequence. This is used across multiple sites that have a wide range of software. Unfortunately the trust has now grown, and we have so much software and so many variables that it is difficult to keep track of, and deployments continuously fail. We also have device collections in a mirror of our active directory to deploy software on the fly using queries. I would be interested to know if you deploy software as part of the imaging process or whether you do it through device collections and what your experiences have been? SCCM also manages our antivirus clients and we are starting to use the servicing plans for windows upgrades. We are looking to achieve: A consistent OS deployment task sequence that can be used across the trust, and can be easily scaled if new schools join. The ability to deploy software to groups of machines, whether this be individual trust sites or departments. Thanks in advance - i would appreciate any input

Hi, any chance you could send me the script you are running once at startup? Just updated our school to win10 and seeing this issue on all our machines during the first login. Microsoft really need to get their act together. Thanks

Hi, did you manage to find a fix for this? Our users are going to have to use local profile due to the issues with roaming and don't want edge to be default as most of their logins will be "first time" to different machines. Thanks