speckledegg

Thanks for sharing your setup, that's really helpful - we may try and replicate something similar here in that case. I feel like I'm overthinking it all to be honest 😅

Good afternoon, I'm trying to set up MFA for our O365 users so staff are forced to register an authentication method before they can log on in at any location (in school or at home). To enforce this, I'm trying to use a combination of conditional access and a separate registration campaign (https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-mfa-registration-campaign). The conditional access part is working as expected when testing and enforces MFA to users who are already registered when logging on and disables the prompts when logging on at school via our public IP address added to trusted locations. However....the registration campaign will not trigger no matter what I try. From reading up on it, others have said we may need a Microsoft Entra ID P2 license as opposed to P1 and the campaign will silently fail otherwise. Ultimately, I want to set it up so staff are forced to set up MFA when logging in at school or working from home - at the moment, if they only log on at school, they will never be prompted to set up MFA on their account due to the trusted location added to conditional access which prevents them from being nagged for extra security whilst at school. There are ways we can work around it, but it will just be less automated in future - so just seeing if anyone else has experienced similar 🤔

Think I've figured it out....on step 2 you need to give the Medical Tracker role under the Medical Tracker category in the main CPOMS admin area the 'View Students', 'View Incidents' and 'Add Incidents' permissions. With the part after this about setting role permissions in the main CPOMS admin area under Admin > Categories > Medical Tracker, this part does not seem to be relevant as it looks like the Medical Tracker user role itself is hidden from this area and is hard-coded as part of the new integration. As long as the new CPOMS category for Medical Tracker is permissioned so that the Medical Tracker role which appears under it has the 'View Students', 'View Incidents' and 'Add Incidents' permissions, Medical Tracker should only use its own integration to actually send the data to CPOMS and users will not need the role added to them as mentioned in step 3.

Hi all, Any CPOMS/Medical Tracker schools out there? We've got to step 2 of the guide and have set the User Group Permissions up but can't work out if there should be an actual user group for Medical Tracker appearing for us under Admin > Roles on CPOMS (nothing there currently even when switching to 'All buildings'), or if we're actually required to create a Medical Tracker role for users to be permissioned under, or if we just permission our existing user groups...it's all a bit cryptic: https://help.medicaltracker.co.uk/en/cpoms-integration Has anyone tried this yet? I should be full admin for both systems so should be able to manage everything - I have contacted support for both parties, but don't think they understand where I'm coming from with it. Feels like I'm missing something...

No worries, thanks for letting me know - I'm surprised it's not an option. With defaulting the rotation at startup, how would we go about changing that? At least it will give us some control back!

Good morning, Is there a way to disable screen rotation on Chromebooks via Google Workspace Admin Console? We have some children who have worked out the keyboard combinations to mess with the orientation and can't see any obvious policies to disable it. Thanks in advance 🙂

Good Morning, As the title says, has anyone found a way to push Quick Assist to their PC's via Group Policy? Just looking to see if we can push it via GPO to make it easier to manage the deployment of it to our users going forward 😃

Much appreciated and glad it's not just us! [emoji28]

Has anyone else been greeted with the below error message when trying to log onto the Promethean Registration portal (https://registration.prometheanworld.com) to register their new interactive panel warranties recently? I've tested logging in under the schools I support with their known working login details and get greeted with the same error page each time - is there a wider problem?

We're also hoping to deploy some Chromebooks at some point too if we can get PTA funding for them, so would be curious to know if anyone has managed the same on that platform too.

Morning All, On our Windows 10 based child laptops we currently set it via GPO so that after X amount of days their user profiles are deleted in order to keep the storage levels down. However, this makes Chrome load as it would when first logging onto a machine and all the extensions we have applied to this via the Google GPOs install but all open some kind of welcome tab which throws all the younger children who are expecting to see tabs for Google search and our school intranet page. Is there a GPO or reg edit out there that we can use to suppress all of those welcome tabs from deployed extensions all in one go without this needing to be supported by each extension developer separately? I feel this is not possible from searching around, but just curious to see if anyone has found a natty way around it? Thanks in advance! [emoji2]

We had this problem recently and followed the steps on this post to fix: https://learn.microsoft.com/en-us/answers/questions/1162419/shortcut-icon-blank-when-ico-file-is-located-on-a

Good Afternoon, Just trying to get hold of some more CodeBugs for our school, but it looks like they've been completely discontinued everywhere I've looked....is there a new version coming out imminently, or are they just no more? We use the 'original' ones in our coding lessons as seen here: https://www.codebug.org.uk/whatiscodebug/ Thanks in advance!

Afternoon all, Anyone having trouble accessing Sway today? Access to the site is just whirring and whirring - looks like there are a load of different issues logged by Microsoft on the admin portal but for different things. Hoping others are having issues too and its not just us!

Glad we're not the only ones having trouble! Yeah that's similar to our situation here and when you check on the Health section in the Admin Centre, Sway is 'supposedly' healthy....must be one of the other advisories that's having a knock on effect with it somewhere. Hope they fix it soon but not holding out much optimism [emoji23]

Is it just us or is anyone else seeing this error when trying to access Sway this afternoon? Presuming it's the rush of everyone doing their end of term newsletters! [emoji2957]

Ah ok, that's good to know and thanks for clarifying more on the MFA side. From what I can gather after doing more research is that certain licencing like A3 has the P1 licencing included in it...but depending on the type of licencing agreement you're already on with Microsoft, it can be more economical to just retain your free A1 licences if that's all you've ever had previously, and supplement them with a separate batch of P1 licences where appropriate to get the premium features of Entra AD that are required. From speaking with our licencing reseller, it's looking like buying into separate licences for P1 is the better option for us, but if we have the budget for it, I'm thinking P2 just so we have all the functionality available. I just don't want to risk being stuck with it for a year if it doesn't do everything that's required policies wise. I may see if I can check another Microsoft tenant I manage to see if they have any Entra licencing so I can have a play as the free trial requires a credit card which is a pain and I think our Finance Officer will be hesitant to use it for this purpose just in case it backfires.

Afternoon All, We're starting to look at budgets here and would like to start setting up MFA for our staff users but not our students due to us being a 2 form entry primary school and the logistics behind getting the younger children using MFA to authenticate with. I'm hoping we can potentially set up conditional access for staff so that they don't require MFA in school and potentially for students too if it does become enforced. I just wanted to check, are other primary schools of a similar size using their free Microsoft 365 A1 licences for faculty and students in conjunction with Entra P1 licencing? and if so, is this sufficient for you in being able to determine/manage who has MFA enabled on their accounts or not? From looking at other posts on Edugeek, the Entra P2 licencing is more desirable as it allows you to set more policies surrounding the enforcement of MFA for users. I've looked at comparisons between the licencing, but still find it quite unclear, so I just wanted some yes/no clarity on it basically. Thanks in advance :-)

Sadly, I don't think our bigger iPads will be supported by version 17, think those iPads got cut off by Apple this year annoyingly!

Thanks for the info, ahh I hadn't thought of the resolution causing issues, so will definitely have an investigate into that further and potentially creating some external profiles to feed into Meraki too before contacting them directly. At the moment, I've set the profiles I've created so that they're in the iPadOS view/mode which still seems to work fine with the older Mini's oddly.....I feel it may turn into a blame game between Meraki and Apple, but we'll see!

Evening All, Just wondering if anyone has noticed any issues with web clips when deploying or using iPads enrolled in Meraki recently? We have a profile set up to lock down our student iPads which contains a home screen layout with web clips either added directly to the home screen or into containers on there with the apps we want the children to access on top. However, when the profile we've created refreshes itself on the iPads in question, it momentarily displays as it should followed by having a jumble and then dumping random Web Clips we have set up at the bottom of the home screen layout ignoring the layout we've previously set up via the student profile. The odd thing is, this only seems to affect our larger 5th and 8th generation iPads, but not all of them. Some will accept the student profile and will honour the home screen layout, and others will just play up on the web clips side. On the affected iPads, we've tried doing a factory reset and the same issue still persists even with the latest iPadOS installed. We're an LGFL school and have recently started the move to School Protect on Webscreen which has caused some teething problems across the board (HTTPS certificated based filtering). However, after running through various troubleshooting with the support team there, we now feel the problem may be more on Meraki's side but can't be certain. We also have iPad Mini 2's which all have the same profile deployed and all seem to behave as expected. It's really bizarre as the profile has been in use historically and has never caused any issues up until recently...all of the iPads are also enrolled into Apple School Manager, but we're not previously DEP or ADE supported, so had to be pulled in via Apple Configurator initially. Any advice would be greatly appreciated [emoji4]

Thanks for the recommendations all, its a great help and has given me some different options to look into

Afternoon All, Hope everyone is managing to keep cool in the heatwave! Not sure if I've posted this in the right place....for people who use 3CX in their schools where its hosted by them in the cloud, do you have a preferred SIP trunk provider you use and any that offer any good calling deals etc? I currently look after a couple of primary schools (3 form and 2 form entry) who I'm looking to move off archaic phone systems and to take the support of the phone systems in-house to break away from phone providers and so we have full control over everything. We're currently running a test 3CX cloud instance in school with a few phones attached to trial it and I wanted to go one step further and also test the landline functionality too. I've discovered you can only use 3CX's preferred SIP trunk providers on the cloud version and cant go rogue with generic ones as you can on the self-hosted set up which is a shame. Any recommendations would be greatly appreciated!

Just stumbled across this thread and wondered if anyone had found a way to set the save location globally? We'd like to have everything pointing to a network share so that our ICT Teacher can easily review the children's work and its all in one central location. I've just emailed Kodu's support, but not holding out much hope!

Good afternoon all, Was just wondering if anyone knew if Zoom were still lifting the call limit for education as long as you verify your school with them? This was the offer they had on during the main lockdown, but wasn't too sure if this was still live or not.... Let me know your thoughts!