DavR

OVS agreements should be still available, we started a new one just this month. Do you actually own your licensing outright, or do you just have the licenses which came with the machines? If you were using the OVS agreement, it's likely you were using that as a "top up" for certain things.

If you're using extended desktop, my understanding is that this is using two monitors as one big monitor. I don't think there is a way to remotely control an application from one side of your desktop to the other. It sounds like you're either looking at running that app blind, or, using duplicate displays instead. That said, it does depend on the application. What are you using on the blind screen? It may be that there is a secondary way to control that. Eg, an Intranet page could be displayed in a web browser, but you could be looking at the backend in a different program at the same time.

IIRC, when you rebuild a workstation, the workstation will need to redo the hybrid domain join. It may not do this immediately, it might take a short while. Although I must admit in my experience, it's always been ready in time for first login. If you run the PC for a few hours, do you see an update on the machine account in Azure? You can force the hybrid domain join by running a task from Task Scheduler - Go to Task Scheduler Library > Microsoft > Windows > Workplace Join and manually start the task “Automatic-Device-Join“. If you still can't get SSO to work after running that task, it would suggest to me that hybrid join is failing for some reason.

I assume it'll be msiexec /x{GUID} /qn That's the usual silent uninstall command for Windows Installer applications.

Not InTune, but for Adobe CC deployment generally, we create an install package that is just the Adobe CC client, and within that package give the user the option on which packages to install. It's going to depend on your usage scenario. If you know you're going to definitely use a set of applications, then by all means deploy those. We only use it sparingly with a few teachers though, so I deploy the client and let them choose the apps they need themselves.

You could just drop the "if folder exists" condition to simplify that mapping. If the folder doesn't exist, it won't map, and will fail silently. I'd second using a group. You'd then only need one condition, if user is member of group, and that will map the drive to the targeted user. For what it's worth, we don't use "Run in logged-on user's security context".

Just to bump this one up - I'm still getting this error on notification emails from various threads. It's very odd, I get into the headspace of the thread in question, and I get the last message on the above thread - "Its much better than Hot Potatoes" - which is such a bizarre sentence out of context!

Personally, I wouldn't bother - when they first logon, it will happen automatically. If for some reason you did feel the need, I'd say you'll want to write a PowerShell script or something to automate the creation of folders and setting perms. I'm not aware of a native feature that does this automatically, like AD does with home dirs for instance.

Why would you want/need to do this? Profiles are created at logon only, I don't think there's an inbuilt way of pre-creating them. The permissions involved are fiddly enough that I really wouldn't bother unless you've a very specific usage case to do it.

Yup! Not sure which brand you've seen, we've been using Lock N Charge. The basket-ised storage concept though has been a game changer for us. One person can now easily and safely carry at least ten devices, rather than kids walking around with teetering stacks of laptops.

Our trolleys mostly stay where they are, and teachers come and collect devices as required. Most of our trolleys have removable baskets, which carry up to five devices, so these are a convenient carry option for staff or designated children. Chargers are contained within the trolleys and cannot be removed, so, devices have to be returned for charging. On the whole, they are. I can relate pretty hard to this. On the whole, I leave it up to staff to make sure devices are returned at end of day, but I do check and then lock devices up during the school holidays. Which usually means I spend the first half day of the holidays hunting round the building for strays, muttering increasingly rude words!

There is I think an option for exclude from census in there somewhere, but that's not really been our problem. Ours is more that we don't have time to set up single-day supply teachers before they need to take the register at 8.45am. I suppose we could use a dummy account in there to create a generic supply account, excluded from census to avoid mucking up our numbers. Maybe I'll consider that next time the question arises.

Is replication between the 2 x DCs on each site working OK? I wonder what would happen if you pointed NIC DNS from a DC on site 1 to point to a DC on site 2, and vice versa, to try and force a zone replication between the two? Although is sounds like potentially your replication situation is already beyond that trick :/

The fact that you can't resolve names of some of the servers suggests there's definitely a DNS problem. Without DNS working, there is no AD replication. Can you ping DC1 > DC2 by name, and vice versa? What DNS server is each DC looking at? I've always had each DC as a DNS server, with the NIC settings pointing first to itself, to ensure a reliable DNS connection. In your DNS zone, both DCs should be name servers, and be listed name > IP in the zone.

Same, FWIW. Don't know if that makes a difference. [color=#333333]SourcePath="D:\Software\MS_Office\office setup files"[/color] Can the client access this source path when installing Office? D:\Software almost looks like a path on a server, that network clients wouldn't be able to access without a UNC.

Our MIS (RM Integris) doesn't allow us to create generic supply accounts, and will only (as far as I'm aware) allow accounts to be created if they're attached to a current staff personnel record. When I've asked support I've always been told to revert to paper registers. Obviously, this doesn't happen. Another teacher in the vicinity logs in and I see and hear nothing

This is a known issue with ActivInspire 2.24, particularly with text boxes. See discussion on Promethean forum - https://support.prometheanworld.com/s/question/0D56f00008Y8ApcCAF/when-typingediting-text-in-activinspire-the-cursor-jumps-to-elsewhere-on-the-page?language=en_US

[color=#333333]setup.exe /configure configuration.xml[/color] with the following in configuration.xml Does the silent install for us. There's other stuff in our XML like choosing which apps to install / exclude, autoactivate Y/N, etc but I think those are just our preferences I think. Have you run through the Office Configuration Tool to create a bespoke configuration.xml, or are you using a default/downloaded one?

Not just us, then. I'm no prude, far from it, but that just seems inappropriate for general consumption.

I had a call from my head this morning where he started talking about monitoring website traffic.... before he asked the question I said "you've read that article about Ofsted early warning, haven't you?" We are "due" Ofsted, but I think I've put him off the idea. I was greatly amused though

Sadly not. Although that could be a useful method if it could be replicated outside of Smoothwall.

Brill, I'll search for that thread and look into it If that was a targeted ad, I dread to think what the rest of the teacher's search history and behaviour is.... I was just surprised that YouTube were allowing semi-obscene content in their ads I guess. I've been using Adblock Plus for so long I have to admit to being pretty naive and inexperienced on that score.

Had an interesting call this morning from a teacher who got a very adult advert on in the middle of a fairly innocent YouTube video she was showing her class - a cartoon character simulating masturbation to a pretty girl, I'm told. To date, we've taken the position of leaving YouTube on the loosest filtering setting, for staff use only, on the logic that we trust our staff to vet their content before showing it to a class. Historically we've found the various restricted modes too restrictive. But that's the videos themselves, I don't think we ever considered the ads would become a threat. What have other schools experiences been on this? Have you gone to moderate safe search for staff, or, are we recommending Ad blockers? I use Adblock Plus for personal use, does anyone have a blocker they recommend for general usage?

In theory you should be relying on the BIOS-embedded Windows 10 license key for reinstalling machines. Anecdotally though, I know people have had success getting a limited MAK key from Microsoft support to cover those devices which didn't come with a BIOS license. Not sure if they'll go as far as KMS keys, but probably depends on how hard you argue.

We were too small for EES, so had the option of a new OVS, or buying into M365 as a separate item, which wouldn't have covered our servers.