DavR

What do you mean, when you say "user based" apps and profiles? Are you trying to use these device in Shared iPad mode? We have iPad Air 32GB, and IIRC, when I looked into it they were considered inadequate for Shared iPad. Also it was slow as heck. We run them in device management mode only, no users. Checking on the specs, Air 2s are supported, but, minimum size recommendation is 32GB.

So, I added updated KB5040527 (Aug CU Preview) to my Windows 11 image, and, it works perfectly with ZTIWindowsUpdate now. Except, the reason is works perfectly well, it that there are no updates to download and install from WSUS in the first place - as KB5040527 is the most up to date update - so it can't error during the download Thus, I won't know if this fix works until there are new Windows Updates to install. Must admit I'm a bit wary about rolling out an image with a preview CU package installed. Might go back to my April image, which in theory shouldn't have the bug in it in the first place. That would resolve the bug during the Task Sequence. It may pick it up again through the next update, but at that point I don't mind, as I'm no longer trying to install updates via script, and can allow the usual mechanisms to take over.

Well spotted @locksat, that known error contains my error code exactly. KB5040527 looks to be a preview of August cumulative update? I'll have a play and let you know if I found out anything useful.

Just to confirm.... I just ran a Windows 10 build using much the same process, and that works fine. It's something between vbscript, Windows Update, and Windows 11.....

I know it's not officially supported, but, it does (mostly) still work, and I know others are deploying Windows 11 successfully through MDT, so I thought I'd ask the question here I've nearly completed our Task Sequence to roll out Windows 11 23H2 in MDT, and everything seems to be working, except the Windows Update step. This fails with the following error in the logs: Has anyone ever seen this error with ZTIWindowsUpdate? It's pointing to our in-house WSUS server, and gets as far as registering its presence, but, doesn't report or download updates. I've tried it without the WSUS server and let it go out to Windows Update on the Internet, and that fails in the same way, which suggests it's something around the script/Win11, rather than our WSUS server, that's causing the issue. Any help, or alternative strategies for installing latest upgrades in a task sequence, gratefully received! I've seen a couple of powershell scripts that claims to do it, but nothing I can use.

I think at this point I would pass it on to Arbor support tbh. They've been pretty good for us, we generally have an answer within 48hrs over email.

Are you using merged fields about the student/s? IIRC, you can't use "Regarding all students" if you've got merged fields, it needs one message per student. When you say recipients receive one notification per child, is that one email per child, or one in-app notification? Not that I'm sure there's a difference.

From which you could, if you wished, argue the semantics that as a Nominated Contact, they've been nominated to be contacted about things like service outages In my mind, if they're not able to interface with the school's tech providers, then they shouldn't be a Nominated Contact..... but I will concede different schools have this set up different ways, and often non-technical people do end up in these roles.

Hiya Paddy, I mean, even just an email with the subject line "Failure in Service X reported", with the body of the announcement still being on the support site, would be a start. Something that lets us, the Contacts, know by email that there might be a service outage. Currently, there is no proactive messaging to tell NCs about service outages. As it stands, unless a call is logged specifically naming your school, you don't get any email notifications at all when support desk makes announcements. Personally, this means I sometimes won't see these announcements for weeks. Re the NetSweeper and RedStor problems this week, I use both services, and received no direct communication. Thanks for looking at this for us!

I think I was just using that newsletter as an example, of the many many mailing lists or notifications we all get added to. Fair play to LGfL, yes, it is an optional thing we can unsubscribe as per mailing list best practice, and yes, it's a different entity to the support desk. IIRC, if you have the 'Contact' role, that means you are a nominated contact, and that is what picks you out as a technical contact. So shouldn't be too hard to alert nominated contacts, or maintain a mailing list of nominated contacts, based on that 'Contact' role, for when there's a service announcement, I should have thought.

Huh, first I've heard of the RedStor thing being a wider issue. Like many people, I spent time today re-trying my backup to potentially troubleshoot, unaware of a wider fault. The Netsweeper thing didn't impact me at all, but if I'd been trying to make a policy change, it would have been good to know. I've always found this; a really odd place to draw the line re email alerts. Just today I got an email from the LRC Team with the "LGfL Curriculum Newsletter", which someone somewhere chose to sign me up to without my asking (it's fine, it's sometimes useful, but as an example). And yet, when I've asked in the past about email alerts about LGfL service outages, which could affect the day to day running of our systems, not only have I not been given an email alert for that, but I don't even have the option to subscribe to one. Like I say, seems like a strange line to draw. Of all alerts, surely these are the most useful? If said alerts bother me, I'll unsubscribe, or set up a mail rule to deal with them. It's not the biggest issue, but, as a Nominated Contact, I've always felt it would be nice if I got an email notification when there was an Announcement on the support site (which could be turned off if necessary, I guess.) In an ideal world, perhaps there could be a Service Status page in the model of https://netsweeper.statuspage.io/ that we could subscribe to, perhaps only subscribing to the elements we wanted to monitor.

This is the route I would take first. If you can't see UNCs at boot, then better to fix the reason you cannot see UNCs at boot, than try and work around it. We've got plenty of scripts running on UNC paths, including those that kick off MSI installers, never needed to copy files to the local drive, or, use drive letters. The GPO setting name is "Always Wait for the Network at Computer Startup and Logon" (also, apologies to OP if this is long since resolved - the original question was over a year ago)

I did a quick Google - turns out 100 is now the lowest you can set version history down to, which strikes me as pretty rubbish - https://sardhianto.medium.com/microsoft-onedrive-file-versioning-setting-4aa7567c48ba Don't know why mine's letting me go below that, or even turn it off completely. Anyone would think it's in Microsoft's interest to sell you more storage space

Sounds more like either a permission thing, or a setting further up the chain somewhere, that's restricting you. I'm on pretty much the lowest possible license for OneDrive and Sharepoint, so I'd be surprised if I had more licensed features than you do. Just to confirm, it is this page you're looking at, and "Keep the following number of major revisions"? I just set one of my users down to 20 revisions without it complaining. Does your head have any Admin permissions at all? I wonder if Admins can't change certain settings on other admins.

I went to M365 Admin page, Active Users, select the user and the OneDrive > Create link to files. Follow the link to edit that user's SharePoint site; Settings cog top right Site Settings More Settings Return to the old Site Settings page Site libraries and lists Customize "Documents" Versioning settings It's the same page, just two different ways of getting there.

PM sent

I can't find a copy of it online now, but not being very au fait with GAM, I use Alice Keeler's Google Classroom "List classes" management scripts. They're built into a Google Sheet and run as add ins. It's made administering our Google Classrooms so much easier, I don't have to be an admin in each class to do things, just an admin in our Workspace tenant.

Ah, same filtering solution as us, that one. I run reports on the filtering every Monday, for our Safeguarding Team. I usually then evaluate any porn hits to see if they're genuine or not - almost always they're not, or like Shutterstock, they're sites that could potentially host porn, but it is not their primary purpose. Interestingly, for a while, we were getting porn hits that were genuine, BUT, we really didn't believe the person in question had attempted to access those sites. This belief was reinforced by the fact that the same obscure porn sites kept flagging up for different users. I think it's something to do with how certain hosting site IP addresses are evaluated (it's always DNS, right?) but I couldn't quite get my head round the theory I was offered. Luckily, this has calmed down now, because it was getting impossible to know whether to reprimand people for their history or not....

I'm in the very early planning stages for Intune, but am already aware that Intune is not really geared towards shared devices. As you've seen, changes of policy aren't evaluated immediately, they're staggered, which is no use if different people are logging into a device. Our shared devices are staying hybrid-AD with regular GP for now. What I'm looking to Intune for is for managing hybrid/off domain devices, that get assigned to particular users long term 1-to-1. That's the model Intune is designed to work with, really.

If you've only got one of two people troubling the limit, you could try going into their OneDrive sites, and lowering the number of versions of files that it keeps - by default, it keeps every version, ad infinitum. I had an art teacher breach 100GB with massive PowerPoint presentations. Each one had multiple save points, in some case multiplying the storage used by an already large file by 10 or 20 times. I manually set her site to keep only 5 versions and that halved her storage usage. May not work so much with video files though, as I guess those would usually only have one version. But just something to think about. We, too, have the Apps for Enterprise/Faculty, so that does give us up to 1TB limits, but I'm choosing to stick to a 100GB quota per user for now.

Came here to say the same as @aac, if anyone is still stuck on the A1 Plus expiry. If you're mid-term on your OVS agreement when A1 Plus expires, as long as you're buying your MS Office licenses through the OVS, you can request "free" Microsoft 365 Apps for Faculty/Students licenses from your reseller. If you add those to the A1 license on a user, you should get a) install rights for Office back and b) a lift on the limit of your OneDrive allowance for each licensed user. This should see you through to the end of your agreement, without the costs of jumping ship mid contract.

Ha! AI can do many things, but it'll be a while yet before it masters English dialects..... Shame about the identity thing, that would be a key feature for us. That being the case we might trial a third party service first, see if it's any better.

This is my concern, to be honest. With a straight Teams meeting, every identity on the meeting has a name (their Teams ID) and is tied to an individual mic. When you've got a group of people all sharing the same Teams ID and the same mic, I do wonder how well it's going to distinguish between people on the transcript / minutes.

Could you argue that, because you're making a saving by not renewing the VMWare license, you could use the £2200 you would have spent there on some external support to help with the migration?

Will you need a new backup solution? When we moved from VMWare to Hyper V, we kept Veeam and now use it to backup our Hyper-V estate.