PHAICT2

I think the way I was looking at this was 'as google is the designated search engine for both edge and chrome on the tablets ' (via intune policy) i was trying to apply SS to results in both browsers. I understand what you mean though. Coincidentally, we are actually using smoothwall filter. So the other options is to force the tablets to through smoothwalls filter using the certificate and 'hopefully' search engine will be filtered correctly.This seems like the obviously way to do it of course, but there was a slight haste on getting them out so we initially planned to send them through the visitor wifi (which does apply smoothwall filtering still) but unfortuantely MINUS the safe search. So you cant go directly to a dodgy site, but images aren't filtered etc. It's been a learning curve with android and intune for sure. I think we will do that Tom, send them through the filter using the certificate and see what changes. It's the only way i can guarantee safety.

Apologies if this falls into a better threat category. In short: Kiosk devices enrolled in Intune (android shared mode) with preset office apps / TTrockstarts, edulink, office apps etc. All working spot on, apart from one thing. Edge browser does not seem to support forced safe search; there's no setting for it that I can see in Intune. Chrome does have this selectable in intune. These tablets are for SEN students, so the fact that edge auto-signs in the user into m365 using the AAD credentials is very favourable (chrome doesnt). Is there a nifty way to force Edge to have safesearch ON. At the minute test searches have shown clearly, that safe search is OFF. Thanks

We tried this, would not run over GPO for some reason. We may look back at it or paid solutions. Thanks so far.

So on windows 7 desktops, are we pretty much scuppered ? I was wondering whether disabling onedrive from windows start up would make any difference ?

What's the best solution to stop OneDrive from synchronising files back to the staff's local profile? It's a major, major issue as we're going around the school noticing the C drives are completely full, rendering them useless until we delete all the local profiles or whatever. Peoples Profiles are like 7GB odd....maybe more. If 20 people have logged on we quickly run out of space. We've noticed our internet is super slow lately too - maybe due to the files syncing to local profile when users move computers? We just want users to be able to USE onedrive to save / access files. We don't want local copies of everyone onedrive on everyone local profile.

Sorry should have said - Exchange, 2010.

Is there a way to force everyone's external emails that come in - to plain text?

Recently had to do disaster recovery... built a new exchange server alongside the old server. However, the old server became unstable and unrecoverable. We managed to configure most settings on the new exchange server but we now have an issue where outlook keeps asking for username and password every time it's opened, where as previously it didn't. Also sometimes the box pops up randomly throughout the day. We're looking at a number of possibilities like certificates, or autodiscover. If anyone's got any steps to suggest what we could test now to make sure all settings are correct it would be much appreciated. Thanks.

The total capacity of the HDD that the database sits on is 753GB of that, 182GB is free. We've looked at the staff edb file and this is at around 320GB. The folder that contains the database file and log files is clocking in at 557GB I am still looking at the log files however, could this suggest why we're having these issues?

Indeed we have exchange server on a virtual server cluster. Thanks for your input so far, much appreciated. So far we've tried a couple of mailbox repair requests on a specific (less vital) user's mailbox and it just gives us Request ID | Mailbox | ArchiveMailbox | Database | Server ...but nothing seems to really happen, unless it's cooking in the background? As for storage ill look into the logs event logs again and see if there's anything that I can pick out.

how long does a process like this usually take on average (250 users)....also do you know why powershell is doing that above or is it just a generic message due to our potentially corrupt db ?

Hi Roberto. We're using Exchange 2010. Ok we will look into this. Could you be so kind as to elaborate on why this would be your preferred method at this stage ?

We've had major issues with our servers recently which (among other things) forced us into doing a full restore of our virtual exchange server to a new cluster. Initially everything looked OK and majortity of staff are working fine, however today we have found that when we open exchange powershell we get.... ?*?????%??*???'??????'???→??→?+?????????*?????%??*???'??????'???→??→?+??I??????*?????%??*???'???????'???→??→?+??H?????? *?????%??*???'???????'???→??→?+??K??????*?????%??*???'???????'???→??→?+??J??????*?????%??*???'???????'???→??→?+??E????? ?*?????%??*???'???????'???→??→?+??D??????*??????'????'???→??→?+??G??????*??????'??????'???→??→?+??F??????*?????%??*???' ?????'???→??→?+??Q??????*???????↨?%??*!↑+¶§??* ?????????'????'???→??→?+??P??????*??????%??*%+???↨?%??*!↑+¶§??* ???????? ?'?A??'???→??→?+??88??????%??*%+???↨?%??*!↑+¶§??* ?????????'?=????????????BJ??7+¶▼→!??'???→??→?+??8;??????%??*%+???↨?%? ?*!↑+¶§??* ?????????'??→??'???→??→?+??8:??????%??*%+???↨?%??*!↑+¶§??* ?????????'??→??'???→??→?+??85??????%??*%+???↨?%?? *!↑+¶§??* ?????????'??↑??'???→??→?+??84???????↨?%??*!↑+¶§??* ?????????'????'???→???+▲&??+▲&?+????????*)↑▼*????????1??↑→ ?§05¶*→¶▼%?????????→?+??8??????*?????%??*???'???????'???→??→?+??;??????*?????%??*???'???????'???→??→?+??:??????*?????%? ?*???'???????'??Scope}, + CategoryInfo : ParserError: (??????*?????%??...?↨?%??*!↑+¶§??*:String) [], ParentContainsErrorRecordExc eption + FullyQualifiedErrorId : UnexpectedToken and also certain members of staff are unable to send / receive emails with the message... There's a problem with the recipient's mailbox. Please try resending the message. If the problem continues, please contact your helpdesk. and... #554 5.2.0 STOREDRV.Deliver.Exception:StoragePermanentException.MapiExceptionJetErrorReadVerifyFailure; Failed to process message due to a permanent exception with message Cannot complete delivery-time processing. 16.55847:581D0000, 17.43559:000000009E020000000000008C00000000000000, 255.23226:00000000, 255.27962:0A000000, 255.27962:0E000000, 255.27962:0A000000, 255.27962:9E000000, 255.17082:06FCFFFF, 0.18273:00000000, 4.21921:06FCFFFF, 255.27962:FA000000, 255.1494:43000000, 255.1238:13800000, 0.32865:0300E965, 6.41897:170104804000060E0F010480, 6.21970:0F01048040008F660201F065, 4.13300:06FCFFFF, 4.2797:06FCFFFF, 0.39635:0F010480, 4.54995:06FCFFFF, 4.50899:06FCFFFF, 1.45987:E924F600, 4.47913:06FCFFFF, 1.45987:04FCC600, 4.47913:06FCFFFF, 4.64297:06FCFFFF, 0.55383:0F010480, 4.5041:06FCFFFF, 4.4465:06FCFFFF, 4.6833:06FCFFFF, 0.50217:0F010480, 4.5093:06FCFFFF, 4.5318:06FCFFFF, 4.10104:06FCFFFF, 1.64937:C06B7DC4, 1.43123:04FCC600, 4.60457:0F010480, 4.4353:0F010480, 0.57449:0F010480, 4.6025:05000780, 4.5257:05000780, 4.4606:06FCFFFF, 255.1750:00000000, 0.26849:06FCFFFF, 255.21817:06FCFFFF ##We are about to turn the server off and use the eseutil to check and/or repair the database. Does anyone else have any input to our situation? Thank you.

Thanks guys i'll have a look around at your suggestions.

Aah, OK thank you. That's interesting. One more question. Is it a legal requirement in a school to have some sort of monitoring of the system ?

Does this exist? We want something on the student desktop that allows them to type a message in, click send and it goes to a single email account, which would be monitored by our safeguarding officer. For example, if the student is being bullied, they could quickly type a message or if they've heard a student is talking about suicide and are worried, they could notify the member of staff. Basically, not long ago we were told to cancel our VLE and live monitoring 'Securus' system. (I know mental). Does anyone have anything like this in place?

Tell me about it. Will do cheers. - - - Updated - - - Yeah thats the sort of thing we're after ITGURU. I might have to look into the powershell way of doing it.

Hey all, Does anyone know the quickest way to do year group based send/receive rules in O365? For example, what we want to achieve is to stop a year 7 messaging a year 11, or a year 8 messaging a year 7 etc etc . Whilst giving them the responsibility of email we're also at the same time being told to restrict them as much as possible and it's all getting tedious. Has anyone else got Office 365 setup in a school with very 'unique' kids that will inappropriately exploit a system any way they can? i.e, start cussing someone over a fight in a playground over Delve or put rude words on a personal profile ? If so how did you go about setting office up in terms of what they can and cannot do?

At the stage now where we are just rebuilding the machines that have issues. Cannot literally solve this issue and i'm hoping a rebuild will rectify it.

Tried this. Why is the download AMD64 ? Ran it and it said ' looking for windows updates on computer ' or something like that and did nothing. We are actually testing the HDD now to see if we have a load of half dead hard drives. Pissing in wind comes to mind.

We have SCCM. We only have the client installed on machines at the moment, but don't actually use it yet as we haven't really rolled it out.

OK, so listen to this, we have one of the library machines in the office. logged on this morning ok, We could get in as normal. After some testing and reboots all of a sudden now it's 'please wait' for over 3 mins now and counting. It is stuck on 'Applying computer settings '. Before it did this, whilst in safe mode I set network location awareness to delayed automatic, disable windows firewall and turned verbose on. I agree, the network / domain theory has some weight behind it as before, when we eventually got on it would say connected to public network not domain. But now we've turned the windows firewall off it's still doing this. 5 mins and counting.

Sorry, see above again. Clicked enter too quick. Twitchy little finger, ha.

We do have WMI errors. 3 crop up in a group yellow every so often. We have lots of informations logs and also some error logs where a group policy couldnt apply a folder redirect due to not finding the path (im assuming this would have been a network/computer connection issue). The WMI then...would you say this is something to look at with the regular yellow warning logs we're seeing. It says " a provider, policyagentinstanceprovider, has been registered in the windows mangement instrumentation, namespaceROOT/ccm/policy/S_1_5_21_585913135_526007781_3860785735_12963 to use the localsystem account. This account is privelidged and the provider may cause a security violation if it does not correctly impersonate user requests.

We have a random, intermittent issue in our library where the desktops hang at 'please wait' or after they log on it gets stuck on 'welcome' for up to 30 or 40 mins. Sometimes this happens regularly on a set of machines 3 or 4. Sometimes this happens on only one machine and its like it happens on random machines. Having said this, it's ONLY happening in one room, there are no reports of this happening anywhere else in the building. Things we've noticed. Problem machines, seem to connect to public rather than domain, in firewall. We will look into this. The machines have lots of locally stored profiles (corruption perhaps?). Tried disabling the Network Location Awareness service, can't really tell if it's done anything good or bad. Looked at DNS records no related issues there. Enabled Verbose on some machines and when the problem surfaced it was getting stuck on 'applying user settings'. Is this another way of referring to group policy objects for definite? Cheers.