HereIGoAgain2601

Hi I have turned on G-Suite MFA requirement for our users and given them a grace period to enroll. Does anyone know if there is a setting to exclude MFA prompts on the internal network? If so can you point me in the right direction as I can't find it. This is how we have our 365 setup.. no MFA in the internal network but forced on the external and would like to have the same setup with G-Suite. Thanks

Yeah I tried this one and everything seemed to be right but no Mfa prompts came through. Looked at the error logs on MFA logs on the NPS server and that saw me logging in but didn’t challenge me or pass anything back to the RD gateway. Going to build a new environment today and try again as need to update from server 2016 anyway. Thanks

Hello, I'm back to looking at this again and can't for the life of me get it to work. I've followed various guides and seem to get so far and everything looks OK - but then nothing happens. Are there any edugeekers out there that could help point me in the right direction? We want to use the Azure MFA as we already have this setup and licensed. I've tried using an Enterprise App and then following another guide regards installing an NPS extension and neither seem to work properly. Thanks

Same issue here

What do you guys do in terms of restrictions and policies that would normally be GPO if you are joining straight to Azure?

Thanks will try and join direct to azure AD have never done this before always done it to on prem Not too fussed about keeping SCCM be easier if we can get intune and azure AD up and running properly.

Forgive me if I’m being a bit simple. How would we authenticate a machine to azure for logging on for example? We use one drive and SharePoint for everything and have AD connect set up with hybrid join. Currently only licensing AD Premium P1 and Intune However we can only authenticate the machines to an onside DC. Where are we going wrong? Would be happy to use the new auto pilot but have to say not found out how we could actually turn it on and get rid of SCCM for imaging. If we were to get rid of on premise AD how does this work? Thanks

Hi, Does anyone know how to get Azure MFA working with an on prem RD gateway? I found some guides but ended up breaking the server and had to restore from a backup! I ended up with an Azure app proxy and you got prompted for MFA. This then let you logon to the RD web bit of the server but whenever you tried to get onto an RD session it didn't load. Ended up having to restore a backup so people could get on! Thanks

I’m not sure if this will help or even if it’s correct still - Microsoft are always changing these things - but I remember reading that 365 ProPlus isn’t supported on LTSC https://techcommunity.microsoft.com/t5/windows-it-pro-blog/changes-to-office-and-windows-servicing-and-support/ba-p/151509

Thanks everyone, what license am I asking for? I've put a trial of Google Enterprise onto our account and every Cloud identity and license I can find but the laptop still won't do anything. Is it a device specific license? Thanks

Good morning fellow edugeekers, I am looking for advice regarding Google and Chromebooks. We are mainly Windows and Apple based and use Office 365 for everything, OneDrive Sharepoint etc, but are starting to see some pressure for Chromebooks. At the moment we have G-Suite setup and have used it before with some very basic configuration e.g. sync to Active Directory, turn features on/off etc. However we now want to setup Chromebooks for management. I have a couple of Chromebooks to test - we have never used these devices before. How do we enroll them for management? I have clicked the enterprise enroll when I've booted the device up but it says we need a license. Does anyone know which license and how much it costs? Any tips and tricks would be appreciated. Thanks in advance.

We are seeing an intermittent issue across sites with office 365 click to run. Randomly when trying to launch the Outlook client the 'click to run' software update/repair orange screen will boot up instead. It will try and do something and fail. It then gets stuck in a loop doing this. If we restart click to run service Outlook loads fine and then continues to work for several days. The issue then repeats intermittently. Does anyone have any ideas? Checked the obvious e.g. installing client updates, given machine full outbound firewall / web and still the issue persists. Thanks

Hi everyone, Does anyone know if it is possible to record your Teams meeting without it posting automatically to the 'Team' channel? Our teachers are wanting to record lessons but this not to be visible after the fact to the entire group automatically. Thanks

Does anyone know how you can easily get in touch with the education team for Apple School Manager? We have a couple of old VPP accounts with paid for apps that we want to move into the Trust's ASM and one school who has forgot the credentials for their VPP. I've managed to get in touch previously but it took ages of going through departments who didn't know what they were talking about! If anyone knows of a hassle free way that would be great Thanks

Hi, I am just wondering if anyone else has deployed SIMS.net using a remote app. We are using it but having quite a lot of graphics issues. The screen will intermittently flash when going between windows in SIMS and if the user runs a report all sorts of nice things happen. It's really starting to get on everyones nerves but we don't want to go back to a local SIMS server at every site and having to have local installs. We are using Server 16 and have tried Server 19.. no difference. Tried different graphics settings for RemoteFX - nothing seems to be working. Thanks

We are using SharePoint for all shared drives now and OneDrive for user home folders. Uploaded with the Microsoft migration tool. Was a bit of a pain the first few times but figured out what files it doesnt' like etc and now all good. We don't use any third party mapping tools just using OneDrive GPOs and a few scripts. I second what TechMonkey said about users blaming the system - we have found loads of people complaining about missing files but they just don't remember where they have saved it and they tend to blame the system rather than the user.

Good morning all, I am wondering if any of you allow staff to print from home, and if so how you do it? We have been asked to allow them to print to the queue from home - we have hold printing enabled so they want to be able to release the documents when they come into school. I don't really want to set up a VPN just for this purpose. We don't use remote desktop as we are fully OneDrive/SharePoint integrated so there is no need to access internal resources in this way. Ideally something simple with the least amount of fuss/cost. Cheers in advance.

Hi, I am trying to upload some mailboxes I have received from an outgoing IT provider that need uploading into a trust's office 365 platform. This has been plain sailing previously but I'm guessing these mailboxes are in a different format. I am using Security and Compliance, the mapping file is valid and the PST files have been uploaded. We are getting an error message that we need a primary and archive mailbox for the users. Anybody seen this before? The users are AD synced. I have tried turning on archiving for a couple, but doesn't seem to have helped. Thanks

Which part of Azure are you meaning? There are so many!

Thanks everyone we have been using Windows 10 for years and not seen this before. 90% of our machines are SSD based and login times are generally acceptable / good for us. We are happy with 1 min - 1 min 30 seconds on first login and then 20 seconds subsequent. considering most of our hardware is 3/4gen i3 or i5. Just wondered if this was a common issue on 1809 as haven’t had it with any of the other previous versions back to 1511. I’m tempted to leave it as is and not try the Rey key - as it’s only the first logon for the very first user after imaging at the moment. After that everything eAnd not every time or devices some work fine. Strange!

Hi, Strange issue - not a major problem for us just wondering if anyone else is seeing this behaviour and has a fix. The first time we logon to a machine after imaging it with SCCM, we either get stuck on preparing Windows and the spinning wheel, or go to a black desktop and nothing happens - no explorer loads. CTRL - ALT - DELETE to log off and then log back in. All is fine. Like I say only happening on the first logon after imaging... Cheers, Joel

We have just removed hardware support and are looking to ditch Cunninghams in the next 12 month. The company have been awful and haven’t fixed so many issues we have reported. I am sure we are on a very old version even though we pay annually for upgrades. Can’t wait to get rid of it.

Yes once you setup all the settings correct in AD. It works 99% of the time but the odd machine will have an issue, log off and it works. I think this is down to our firewall blocking one or two ports for Azure Hybrid AD (which is also required as well as SSO). The only issue we have had is the slow first logons - between 2 and 10 minutes per user per device. This is depending on hardware. We are mitigating this by encouraging use of the web clients where this is an issue and user is in a rush. We are only primary schools so not a major issue for us now that staff have 'settled' in and used their regular devices, but appreciate it would be for secondary.

We have been using OneDrive / Sharepoint since February as a full replacement for onsite servers. We used the free Sharepoint migrator to move everything and don’t use any third party plugins. Everything we use is a Microsoft provided and SSO with Azure AD Connect. I have to say it’s working well and we are very pleased. A couple of slight issues with desktop.ini files being blocked and not uploaded. It seems this is by design of OneDrive so Just not sure why our PCs are trying to save them. We are on Win 10 1809 and using Office 365 versions of Office. It’s a bit of a learning curve for the staff and is supporting them as it’s completey different to what we are used to. Embracing the challenge and enjoying the benefits so far so good. We are moving more schools in the trust over the next 12 months so hoping for love of the same. Our medium term plan is to phase out completely servers in each school and use Azure AD and VM hosting for legacy apps completely in the near future.

We have had both solutions in schools I’ve worked at. The laptops are never a good idea for teacher whiteboards. So many times we have provided idiots guides with pictures of which cable should go where and training sessions. But they never learn. Connect VGA from the visualiser at the same time as HDMI and confuse built in graphics, don’t plug usb in for touch screen and wonder why it doesn’t work. Also seen it where they keep changing channels on the projector as they are convinced all cables are in properly so make the situation worse. We have tried docks but were expensive and had issues with these and display resolution drivers etc although this was Windows 7 so may be better now.