Planehazza

As above, there's a link you need to deploy to desktops, and staff just run that and sign in with the PSFCloud accounts. https://help-iris.co.uk/education/financialsv6/cloud/downloading-rdp-shortcut.htm We're, however, having a mare getting it to work on W11 24H2 devices. Spent days working on it, and thus far I've pinned it down to domain joined PCs not working, depsite the computer objects being isolated from all GPOs.

OSTicket is a total ballache to do, yikes...

Very annoying as we have 6 on our team. Spiceworks cloud really isn't very good any more, so whilst it's a paint to set up OSticket, it might be a good opportunity to upgrade.

I suspect it's simply not possible but it would be really helpful so we could 'deal with' the... stu(pid)bborn users.

Possibly a stupid question and I can see a few reasons why this doesn't appear to be possible, but I'm sick of staff moaning at me when their profiles have been deleted (reimaged PC usually) and they didn't turn sync on (despite being instructed numerous times) meaning lost bookmarks etc. Other than a GPO to enforce browser sign in, are people aware of a GPO of workspace setting that can force users to turn sync on in Google Chrome? I cannot find anything out there, but figured someone here might have found a way. Thanks!

That does sound like it would work, but getting the school to splash the cash is not going to happen. Thanks!

I have a couple of primaries showing interest in signage screens again. They don't, however, understand that just because they had it years ago it will suddenly work and without any new costs. They have a 10-15 year old sony TV with a VGA to Cat6 converter, but no one knows where the other end is. This goes back 10 years or so, many years before we took over their IT support so it's not worth trying to get it working. For a single screen in a small primary, what are you default go tos? They don't understand that a standard home TV isn't really built for 12+ hours per day all year round, but that's all they're going to stretch to. Should I just tell them to get a basic smart TV that can take a USB with images? Or maybe look at one with Google apps/firestick etc and use ablesign?

Did that day 1 of iPad handover. Believe me I know how bad they run on standard spinny disks ha. It's just an old device now, needs replacing. I'm just lucky that I've managed to get 550 devices up to DEP now and that I don't actually use the mac for anything except migrating existing devices up to DEP 'retrospectively'. A very nice feature since iOS 11 (?) I must say.

The device is incredibly slow, to the point that when it's extracting an ispw the whole thing pretty much grinds to a halt until it's done. I agree; bodging an update would probably be too risky, but thanks for the suggestion. I can't recall, but I think it's EOL with Catalina installed. I can't update AC2 because it requires newer OSX and obviously newer OSX is a no go. I think I may have just found a work around. I've put iOS18 on via iTunes in recovery mode, and this time when I plugged the iPad into AC2 it said it needed an update to manage this device which it's actually managed to install... It's currently restoring, so see how it goes. EDIT: Yep, seems to be progressing now that it has entered AC2 with iOS18 already installed. Thankfully, I don't foresee many devices left to sort, but honestly it could be 5 or 50. This doesn't negate the security implications nor the iOS versions implications of the old devices.

This is also very much the case I'm trying to raise with above too. The mac mini is only ever used for me to enrol devices and is only on for a few hours a month, often months will pass before it's removed from storage. But still... same reason the fact we have 100+ iPads in circulation on iOS 12.5.7... realistically, kids using them to play drawing games, what risk to the network do they pose? But the second Lightspeed filtering ceases to work I will be pulling them out of the schools even if I have to go to HR. Guess I'm going to that school ASAP to test said devices: [h=2]Minimum OS Versions[/h]Before deploying Lightspeed Filter to any devices on your network, ensure that the device(s) is running this version of the operating system. Please note that the versions below reflect the minimums for our latest agents only and reflect which versions and platforms our software is tested against for official support. Chrome - Lightspeed Systems supports Chrome OS version 116 and above Windows - Windows 10+ (x64- builds 1909+) currently supports x86 cpu architecture only. (Please use SmartShield or CloudDNS for ARM) macOS - Monterey (12+) x64 iOS - 16+ Note: iOS 15+ requires a minimum agent version of 1.2.22. Otherwise, you may experience complete connectivity loss.

So I'm still being given old ipads that were on the old IT support's MDM. They were not purchased via DEP etc and finding out where they were purchased is not possible now. I have managed to enrol circa 500 devices using AC2 up to DEP but it's getting more difficult as iOS updates and this 2010 mac mini gets older. Getting work to purchase a new mac mini is very unlikely Has anyone had this issue where mac mini and AC2 is too old to update/be supported thus stopping you from restoring ipads to iOS 17 or 18? I thought about a VM but I haven't got time to hackintosh nor is it legal as I understand it. Anyone been here and found a solution, or do I just have to beg my boss to cough up for a new mac mini?

Blonde moment, it has to be a vendor supply thing. This iPad is brand new, and hasn't connected to any WiFi yet so even if our DEP/MDM were wrong, it hasn't seen them yet.

Just received a brand new iPad from Misco. Appeared in ASM, and it correctly got assigned to the MDM. Jumped over to the MDM, and it was correctly assigned the profile. All settings look correct with all environmments having UK en-GB etc regional settings. However, of late, I've noticed that many devices are defaulting to South Korea language and region out of the box or retrospectively enrolled to our DEP via AC2. Given that it happens regardless of straight DEP or AC2, I'm leaning towards a vendor supply thing. Anyone had this? I'm going to email Misco, see if they're buying them from a different supplier etc. Thanks, Harry

A silly question perhaps, but does Action1 have a ticket logging system? We currently use Spiceworks hosted (and it's really bad now) and Veyon for the junior techs to use, but it's also crap. I use SCCM to take over clients for remote support but I'm not opening that up for the young'ns. A singl tool that would allow for remote support, asset management (registers), and patching/vulnerability scoring and fixing would be ideal. Any ideas how much it is per endpoint once over 100? We have 1500+ windows devices.

sorry for the thread necro, but I've just come back to GAM after playing with it a good year ago. Am I right in saying you need a project per instance? Or can multiple GAM instances rely on the same project? Cheers!

So it's two things: Updating their report in SIMS to pull some UDFs and a powershell script that runs on new AD user SIMS UDFs Add your UDFs to SIMS so that admin etc add the required data. Report Login to SIMS as the locker service account. This is required so that you can see the private report that is used for Locker to do its various onboarding/email etc. tasks. Open your LockerStaffV2 report and add the user defined fields that you've created to the report. Ensure you give them a caption at the top, as this is what Locker users to refer to. Locker Tweak the script to look at the UDFs to put staff in groups and OUs. This is essentially for categorisation and auto groups on account creation. We could look at dynamic groups but it could get complicated quickly as you know teachers are like with random requests for person A to be added to group Z The script (sorry, the VBB won't retain the line breaks...) I've replaced the actual OU paths and replaced with for privacy.

What I have thus far is done via a Powershell script. Locker looks at the UDF label and uses that as a variable. Happy to share it if you like

Thanks all. Yep Locker has mail lists features where it looks at timetables and adds them to the respective mailing list. I'm trying to work out the best way to set these fields in SIMS so the admin staff can quickly put people in the right categories to hand other mailing lists like SLTStaff, SENCOTeam etc. It's the balance of giving enough resolution whilst getting them to actually do it at induction so we're not faffing about with manual group memberships every day... Thanks all!

I have UDFs in SIMS that admin enter to tell Locker which groups to put people in. It's currently very basic and 'Support staff' is too vague, so I want to give more detailed options. We have high turnover in several of our schools and IT lads are constantly replying to emails to say groups are outdated, and I don't want to give staff owner rights or anything like that. Anyone that does this sort of RBAC for groups via SIMS, can I ask how you've put the data entry fields? Have you listed every role possible so they have to scroll down a 50+ item lookup field, or do you keep it simple with 'teacher, slt, admin, support' then use yes/no or tick boxes for other things like 'Is DSL', or 'Is pastoral' etc? An example, in case I'm not putting it across well... Say we get a new member of staff in, and their role is SLT but they teach and have a timetable and perform the DSL role. They'd need groups AllStaff, TeachingStaff, SLTStaff, ClassroomStaff, DSLStaff. How would you present that in SIMS for admin to select? Not technically, I mean visually - in a way that doesn't take the admin person too long. Basic lookup for teacher/slt/admin/support then 'bolt ons' that are extra things they do? Thanks!

Very small update. It's a file within the long numbered folder within DriveFS. I do not know what file and the log files show multiple restarts matching what we're seeing, but no further forward as to which file is broken or why. Google are not helpful at all...

I see what you did there. Shocking joke.

Yup that's the fix. I've had to roll out a user policy logoff script to delete it and have it live for a week to catch all. Google have been beyond useless in looking for a reason. We have a few leads internally. We do not use AppLocker (on my list) and have a GPO that blocks access to the C drive so I suspect that may be part of the issue. It looks like the Google installer has successfully updated the client, but has failed in making changes/purging user files. Not sure if this happens in the context of the user which would account for this issue in most education IT worlds if it is.

Their synced files are just getting mapped to G, however the cache and logs etc all reside in appdata, presumably because that's the default behaviour. I've got a ticket in with Google and they have a video of the problem happening as well as bunch of log files, so I'll keep this thread updated. EDIT: yeah appdata is the standard location for all the caching of files, logs etc, regardless of where their drive location is set to. I'm not sure this would be a problem, otherwise surely Google would recommend another location? It is possible via a registry to move it, but I'm extremely reluctant to change this until I know why this is keeps happening at big FS updates... We don't redirect appdata nor do we use roaming profiles, thankfully I wish we were back on 365; I cannot stress how much more I preferred 365 over Google. Getting Windows and Google to play together in a way that that is simple and intuitive for users is a huge challenge, especially on our overly stretched team. I had a much better option with Teams, SharePoint, and OneDrive.

Fingers crossed you have no issues, though the update came out end of May and so I suspect you would know by now. Look out for users saying "my G drive has gone" and the client loading before crashing and being stuck in a loop. Beyond renaming their DriveFS in ..\appdata\local\google I do not know much more yet. In a support chat with Google.

Streaming. The options that it offers are stream or mirror, so the files sync 'up' to Google with Google cloud being the authoritative 'boss'. I've added the mapped drive letter to Sophos global exclusions.