artfulmatt

Hi all, So I've got the mandatory profile as I need it and its removed on logoff which is great. Last thing I cannot work out is the start menu? Initially all I had logged in as a student was the start menu with no tiles, which was fine. But after a sysprep all I get is search and settings in the start menu? No other programs? I can browse %userprofile%/appdata/roaming/microsoft/windows/start menu/programs/ and everything is listed, just not shown in the menu? No tiles either although have a GPO pointing to the xml file? Anyone got this working stable? Thanks, Matt.

Thanks, i'll have a google - I enabled the same GPO for cached profiles and although we have one already for windows 7 machines, I created a new one and that seems to work? Why I don't know. plus rather than assiging a load of GPO's to the machines, I've modified the registry hive to remove access to areas of the OS. Starting to get somewhere now. FINALLY !!! haha

I hadn't but that permission as I understand is only used to get the tiles working on the startmenu?

No temporary profile? And the profile in AD is unchanged (%systemdrive%profile/student) we've used this for windows 7 for years. I'd need to keep that whilst we have both windows 7 and 10 on the domain. NTUser has been changed to .man and permissions are correct (Authenticated users = read)

Sorry meant V6 - just checked the profile and it is V6 lol

Hi all, We are now looking at rolling out Windows 10 and upgrading from Windows 7. We currently use Windows 7 mandatory profiles which are saved locally to reduce logon times. I've entered Audit mode and modified the profile/start menu and then using unattend.xml I've used sysprep to save the profile back as the default profile. I've then used the copy default profile method and saved it as student.v7 as we did for .v2 profiles. What seems to happen now as I logon as a student, is it seems to ignore the v6 profile which is 11mb and create a local profile which is 7GB ? Has anyone got a working guide as to how to setup mandatory profiles which are removed on logoff? Thanks, Matt.

Hi all, I've searched and looked at the rules available and can't see a way of setting up an auto response rule globally (well all staff) without them having to create a rule individually? Can it be done via powershell or something? Cheers, Matt.

We've just told all staff to encrypt usb with a plan to removing them completely over the next year. I now need to update GPO on each laptop....We have Sophos, but doesn't detect devices that have bitlocker. Onedrive guides are now being sent out.

Is that via GPO on the connection broker?

Well our headteacher has banned sims.net via remoteapp from home - I've removed the external DNS record so as of today it can no longer be used and already there are talks about unions getting involved, as they don't have the time to complete marksheets in school hours...... Now looking at multi factor authentication - what do you do when the session is active, do you have any policy in place on the connection broker for inactive timeouts?

Not sure if its link with the subscription you have? we never moved across to it? it was always there, we just needed to enable it.

We receive them ok from suffolk, but they use the old method of message.html (the original method microsoft used for encryption) - we can open them fine. Problem is outlook 2010 or below cannot open the latest version of encryption (message_v2.pmsg)

Just had a quick look - would that need installing locally or is it web based?

Hi all, I've been tasked with reviewing our Music Suite which at the moment consists of windows desktops, with cubase 9 and the odd machine with sibeleus too. What does everyone else tend to use? Thanks, Matt.

We do have complexity and could change time limits? ok thanks for the link - i'll show that to SLT

Hi, Been reading quite a few threads about GDPR and seen a post about schools in breach with password for both website and MIS system which raised alarm bells with how we use sims. We use MS RemoteApp to access sims.net and other very sensitive information. Staff have encrypted laptops, but use their domain account to sign into remote app, then sims is set to use their network account to logon. If that one password were to be compromised then there is access to sims, email, sharepoint and remoteapp. How many schools allow access to sims from home? From what I've heard about staff attending courses in Suffolk is that we are 1 of very few around here? Matt.

We have outsourced using one for schools from local council - I have a long list of questions awaiting him or her hahaha !!

They don't need to be opening the attachment, just follow the link within the email and sign in using their work email account. I think like badaz52 says, users are getting confused and trying to use an outlook account or opening the attachment. My testing was as follows :- Wife - open ok, they use office 365 with Outlook 2016 and it opened the link in OWA. Norfolk Police (friend) - opened the attachment within outlook, which tried to open in Adobe Acrobat, which she stopped and opened in word instead. (yet to find out what version of outlook they use) Thorpe School (friend) - use googlemail and opened fine. Suffolk CC - told their email client doesn't support encryption? Sent them instructions and not heard back since? I have heard from another Suffolk CC employee that Adobe acrobat was trying to open the attachment, same as Norfolk Police so guessing the version of outlook is pre 2016.

We use 365 which sends a rpmsg attachment, I've been testing with friends working for different companies and getting mixed responses. My Wife can open it fine, others seem to default to adobe acrobat when opening? there is defiantly an element of user problems. Matt.

Hi, I've recently enabled the rule for office 365 encryption, but Suffolk and Norfolk are coming back saying they are unable to decrypt? I've had one explanation saying the encryption level is too high? Has anyone else had similar issues? Thanks, Matt.

Hi, Im now looking at a ban on the use of pendrives, all our laptops are encrypted but I've found some without passwords and no lock screens, turns out we have no policy at the moment so thought it best to find one. Matt.

Hi We are soon to begin adding followme printing using sharp MF copiers, but been told that the followme bit within papercut will have to be completed by me. Does anyone have any guides to setting this all up? As I understand it, there is a virtual queue and then a rule to pass-through to the print queue once their ID has been entered? Cheers in advance Matt.

Hi, Staff use laptops which not on the domain (some windows 10 machines are azure, but windows 7 are non domain) and these are taken home - Does anyone know what the GDPR says about lock screens eg:- if Mrs Smith takes laptop home and accesses sims via remoteapp and then gets up to make a cuppa, Mr Smith comes along and has a nosey through sims. Our staff would be lost without access from home, but im also very aware of the potential risk to data breaches ?? Cheers, Matt.

I currently have an issue with PE sending video footage to the moderator - best and most secure way I've found is to share a folder on onedrive/sharepoint 365 which emails the moderator a link who then has access to the footage. We then keep control of the permissions, (set to read only)

Any Crossfitters on Edugeek?