HereIGoAgain2601

A lot of good advice here. I would say that depending on the size of your school £40k isn’t a lot. Licenses particularly Microsoft agreements can eat into a chunk of that. We have around 150 staff at one school and our license agreement will be £10k this year. Put on the occasional SMART Board / Projecotr / C-Touch that’s another £4-5k. It doesn’t take long before it’s gone, especially when staff come out of the blue and SLT have told them they can have something. We budget every year for the infrastructure and hardware we need. Every year we spend this but are massively over budget because of all the little extras that slt throw in. Also worked in a lot of schools where all sorts of software ends up coming out of the IT budget rather than the department it belongs to. Best speaking to the bursar and see what’s actually available to spend. Everyone’s budgets are tight and have been cut not just IT, but as said previously part of the gripes could be that there has been a historic lack of investment. A good server infrastructure could set you back significantly but if the switches, WiFi servers etc haven’t been maintained so many repeat problems find their way onto the IT team, and you do feel demoralised keep trying to fix things. Nothing is worse than being expected to make things work when the equipment just isn’t there to do it. We work with a few schools and the turnaround has been significant. Big upfront spent to get things back to where they need to be, with annual replacements and maintenance. You’d be surprised how much support time can actually come down once the system is setup properly. Maybe you should get an external advisor to come in and see how things are setup and provide some guidance. would be good for the NM performance management and support to have someone to work with. Might even make them feel better to see that someone else is identifying the same concerns. Also worth looking into the abilities and skills of the IT team. Are they being best used and does the NM support them? Some examples we have seen are techs with not many skills but with a particular interest in Apple for example. We have seen NM who didn’t like mobile devices, so was able to pass over this day to day responsibility to someone who was interested with the right training. Hope this helps.

Hi how do you use the sharepoint migrator to upload home drives? we have used it to upload our network shared drives but wasn't aware you could do home folders? thought we needed a third party tool for that?

We are using Sophie XG as a cloud hosted service. It took us a while initially to get the spec and performance right but it’s definitely worth it. Each site can have a customised experience of allowed / blocked sites but we can also change on all sites in one go without having to connect to multiple different filters. We have a basic XG 135 on each site with firewall only, and then license the central filter. Also helps to keep cost down. No complaints about the filtering works well blocking categories and XG has loads more features for education than Sg. Only problem for us is getting used to the new interface as knew SG like the back of our hand and this is completely different. Happy to discuss further

Not sure if this will help. I did at one point have a script that asked the user to Enter their email, but not sure I kept it as it wasn’t what I wanted to happen! However I’ve just finished a script that gets the users logged on UPN and populates this in the odopen before it runs. Happy to share if you need PM. Thanks

I found something last week about turning off notifications from the security centre. It was a registry key for current user. Will check if it works and post as not applied it yet.

Hi, sorry only just seen your message. We apply 4 group policy file copy from the DC to local machine to copy files as below: Wallpaper to C:\Support folder BGInfo.exe to a folder on C:\ProgramFiles BGI file to set the settings for BGInfo to same folder on ProgramFiles We also place a shortcut in here that points to the EXE on C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\BGInfo-Local.lnk If we need to update the wallpaper or item level target it for departments etc we can do this all from one policy. Applies every time without fail and also on local user accounts which can be nice if people are logging in locally on laptops for example. Thanks

Hi, we have this problem occasionally and have to do a hard match as described here https://www.itpromentor.com/soft-vs-hard-match/

Hi We use BGinfo on Windows 10. Has to disable the force a walllpaper and set BGinfo to run as a logon script instead. Had loads of trouble getting it to work at first but it seems fine now. We have the BGinfo and wallpaper saved locally on clients using group policy preferences.

We have a mix of SG and XG at the moment across our sites. All the SGs will be replaced in the next 12 months. I have to say I prefer the interface on the old SG, but think this is because I am more used to how it all works. There are some nice new features and integration with the Sophos Central we are looking forward to using. Plus looking forward to moving away from a standard proxy to transparent at the same time - that has made our life much easier. We do struggle sometimes with XG doing the simple things we can do in 2 mins on an SG, but again I think this comes down to familiarity. Once we have used it a bit more I'm sure it will be fine. Functionality wise things seem to work better than SG so far, no issues during the migration other than trying to figure out how to turn on/off YouTube restricted mode!

We work with some schools who use the hosted Capita FMS only as part of a MAT. We were considering moving SIMS at one point, but the general consensus is hosted Capita performance is awful, difficulties logging on, system going down etc etc. Everyone using the hosted platform dislikes it. The help desk is also particularly poor for any issues and a lot of the senior staff who handle migrations always seem to be on holiday or off sick. The other team members claim not to know where things are up to so it adds to the delay and frustration.

Do you use Hyrbid AD with Azure? We have been using 1803 fine since September but only just started having these issues - the logon screen would stay spinning on Welcome and then eventually change the "other user" to say the username and then go onto the normal apply group policies etc. We turned Hybrid AD on during October, but only just seeing issues since the end of last week. We have put this rule in our firewall and seems to have solved it for now, but also come across Azure documentation for all of the subnets they use. The IPs reside in there so going to ask our provider to get the full list of subnets allowed.

Think we have narrowed this down to the firewall blocking some IPs for Azure hybrid AD.

Hi, In the last week or two we are seeing very slow logons to Windows 10 clients running 1803. We have been running the OS since September and not seen these issues. I am wondering if it's down to the cumulative updates - the latest we have installed is 2018-10 but just installing 2018-11 to see if this helps. Has anybody else seen this - when the user enters their credentials it sits on the welcome spinning screen. It takes a good 5+ minutes before the other user text is replaced with their username and then the highly detailed logon messages show and logon proceeds as normal. Can't see anything helpful in event viewer. Thanks

Hi all, I am curious to know how long it takes for the OneDriveSetup.exe to run in a real world environment? I have all the setup in place, but it's taking up to 10 minutes on my VM before the OneDrive client is logged in and ready to use on first logon. I'm wondering if this is because my VM isn't very high powered, or whether this is the norm! We have the SSO settings turned on and are experimenting with the known folder redirect. 8/10 everything works as expected once the initial setup has taken place - sometimes no user is logged on automatically. I have used a script found on another thread to download the latest OneDriveSetup.exe to the machine before user logon. Any feedback on using this in a live environment would be appreciated Thanks

Currently working with a bog standard HP ProDesk 400, not a bad machine for what it is really. 7th gen i5 with 8gb RAM and 256gb SSD. Fine for everyday use but need something with more power for my test VMs!

Happy days - think it's sorted! Does anyone have a way of stopping Windows Explorer from restarting once the OneDrive becomes active? Not a major issue just a little annoying seeing it flash! Thanks

I must be having a bad day then as I have this setup and it seems to be ignoring it! I'm wondering if it's because I didn't have Hybrid Azure AD setup... turned it on before lunch so will see what happens shortly.

Hi all, I am hoping some of you are having more luck than me in getting the OneDrive client to single-sign-on on Windows 10 1803. I've set all the GPOs you can find on the "not so" helpful Microsoft articles. We aren't using ADFS, but using seamless SSO which seems to work fine in all the other applications. Am I going to need ADFS is we want OneDrive SSO? Thanks

I wish we could get away with the cloud mapper but the speed issues make it a real problem for us.

We are in a similar position having issues with oneDrive installing on user logon. It works but there can be a 2/3 minute delay and a Windows explorer restart before the sync client opens with the shares. As other posters have said would be ok in a 1-1 environment. I am loathed to buy any 3rd party products as Microsoft should have sorted this out. Maybe we will have to delay out migration till next summer. Considering just putting some less critical shares up there to start with and see how we get on

Hi, I am desperately trying to get a OneDrive mapper script that will work. I don't want to use the WebDav tools and prefer the built-in Windows 10 application. I have seen this article but struggling to work out how I would populate this command. https://support.office.com/en-ie/article/deploy-the-new-onedrive-sync-client-for-windows-3f3a511c-30c6-404a-98bf-76f95c519668?ui=en-US&rs=en-IE&ad=IE Can anyone shed anylight? The email ID bit I have sorted just not sure how I will figure out the Site ID, List ID and Web ID for the Sharepoint Collections odopen://sync/?siteId=SiteID_HERE&webId=WebID_HERE&listId=ListID_HERE&userEmail=UserEmail_HERE&webUrl=WebURL_HERE" Thanks in advance

Thanks, I’ll look into the hybrid AD I’ve managed to get the OneDrive to auto configure with the GPOs and written powershell to map the shared folders as well. Just need to keep going with it and hopefully find a reasonably priced way to lock down usage from home. We have been quoted £960 a year for the P1 license so may just have to suck it up.

We are fully Windows 10 Education 1709

Hi, Is it just the P1 license we need as I have been advised by Insight that we will also require an Intune license as well?

Hello everyone, We are looking to move all our file server data into Office 365 over summer period. I have everything setup for SSO and seems to be working quite nicely for the personal onedrive client. My query is how on earth are we supposed to map the Shared drives? I have seen the nice powershell script knocking about that uses WEBDAV but have seen some concerns over the speed and reliability of this. How can I find out the site and list IDs to use the odopen:// command and is it possible to get this mapping without any user interaction? Also for anyone currently using 365 in this way, how have you setup the global admin settings? I am concerned about users being able to download bulk files to personal devices that are not secured. How do you mitigate this risk? The licenses I have been quoted for Azure premium are expensive! Joel