toffee_paul

I'm having the same problem here. After installing and activating the ESU key we purchased from our reseller ("Windows 10 ESU Year 1 (2025 - 2026"), the Windows Update page in the Settings app is showing "Your version of Window has reached the end of support". I get confirmation the product key has installed and activated successfully. This is all 5 devices I've tried so far. All the devices are using Active Directory Based Activation against a KMS host server. We have the Volume Activation Tools role installed on a server and this has been setup with our KMS key and has always worked really well, activating everything. In the registry (HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU), the ESUEligibility value is 1. Not sure how reliable this is an indicator of whether we will receive future security updates though. I've contacted our reseller and asked them to escalate this to Microsoft on our behalf but not heard anything back yet.

Anyone had any luck with this yet?

Anyone else having an issue with the 'Configure Start Pins' setting? User Configuration > Administrative Templates > Start Menu and Taskbar > Configure Start Pins I've followed instructions here https://learn.microsoft.com/en-us/windows/configuration/start/policy-settings?tabs=start&pivots=windows-11#footnote24H2 and here https://learn.microsoft.com/en-us/windows/configuration/start/layout?tabs=intune-10%2Cgpo-11&pivots=windows-11 but it doesn't work and pressing the Start button doesn't show the start menu. The Application event log shows this: Faulting application name: StartMenuExperienceHost.exe, version: 10.0.26100.5074, time stamp: 0xb9d79793 Faulting module name: StartMenu.dll, version: 2125.21001.0.0, time stamp: 0x688955cc Exception code: 0xc000027b Fault offset: 0x0000000000111b11 Faulting process id: 0x4D74 Faulting application start time: 0x1DC386E75B27ED3 Faulting application path: C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe Faulting module path: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll Report Id: 6ac99f4d-39d9-47a2-869f-47cea6da11f4 Faulting package full name: Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App An entry like the above is logged every time the Start button is pressed. Here's the JSON file contents: { "applyOnce":false, "pinnedList": [ { "packagedAppId": "Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" } ] } As you can see, the JSON is as basic as they come, just pinning the Calculator app while testing. I've tried pushing this out to to a test machine using Group Policy and also tested on my own machine using the Local Group Policy Editor, same result. Any ideas?

That would be helpful if you don't mind Matt.

Have the YouTube improvements been released yet? We're on Maiden 22.

Thanks Tefters. I've had a look at their website, and wow, absolutely nothing that gives any idea of how it looks/works etc! We have a fixed/primary menu here and SLT would like it to be done via students' fingerprints as it would save messing with cards/tills etc. Does Live Register support this? Do your catering staff use a till or a tablet and how effective is it?

Hi all, We're looking into setting up cashless catering for the first time. Can anyone recommend a supplier what will work well with our Arbor MIS? Regards.

Hi, Has anyone had their BMS software upgraded from Trend 963 to IQVISION recently and can share what costs were involved? We're a smallish school with 2,000 points and have been quoted around £10k. Seems step to me for basically a software upgrade. The company claims the costs are mostly labour due to a CAD engineer needing two weeks to redo the schematics as our existing 963 ones can't be used. The IQVISION documentation says a migration tool is provided with the software that should make migrating quick and easy. Just after some thoughts from others who have gone through this and if costs seem fair? Apologies if this is the wrong forum. Thanks.

Anyone using Touch Portal here? (https://www.touch-portal.com/) I was originally looking into a Stream Deck (https://www.elgato.com/uk/en/p/stream-deck-mk2-black) but a colleague mentioned Touch Portal as an alternative. It lacks the dedicated hardware that Stream Deck has and so relies on you using an Android/iOS phone/tablet to launch things but very handy for quickly executing scripts and apps etc. I've set up a couple of buttons that run scripts to execute a delta sync (Azure AD Connect/Entra ID Connect) and another to sync the Apple VPP token after I've purchased an app. Saves a few seconds here an there so very handy. Wondering if anyone else is using it and for what purposes?

That's really poor of Pearson. This morning I've just had an email from Syncfusion informing me that they've released updates software development components but when clicking the link I get the Smoothwall block page "The server's certificate did not match the domain name" message. Looks like they are using a third-party to send emails out too. Also staff have been having the issue recently with emails inviting them to sign up to webinars and such like. Very frustrating.

Anyone still getting this error? Been getting reports from staff about this more and more lately. Is it all down to sendgrid or are there other causes?

We had a leaflet from this company delivered today. Seems to be the same letter others have received. Ours says £399p/m for 1G. Seems decent enough although I'm yet to see how it compares with others price wise. My concerns are the same shared by others on here already though, particularly @paulkerton so they're not a company we'd consider. I'm not averse to switching from our current provider and giving a smaller company a go but they have to realise there are people out there who do their research into firms and are massively put off when they see the basics aren't in place.

Hi, Is anyone using Arbor to send emails the the default school email address (e.g. [email protected]) where that email address is associated with an existing Microsoft 365 Group? We're looking to use a M365 group as an alternative to 'Shared mailbox'. I've tested it and it seems to work well, allowing multiple staff view the mailbox within Outlook, and both can see the sent items for the group and multiple staff are able to send as the group too. Just wondered if anyone is using an M365 in Arbor for this purpose or an email address associated with a single individual mailbox? Thanks

As subject really. A couple of colleagues and I are attending for the first time and thought we'd just meander through and stop at what takes our fancy. Having to pre-book time slots for Connect@BETT is a right faff. What happens if we turn up and haven't booked time slots?

I'm not worried they won't implement something I've asked for, it's more like where does their remit end and by this I mean if what they have set up e.g. SSID wise, needs changes need to be implemented on other equipment e.g. the Smoothwall appliance, will they advise on this and be able to implement if we need them too or will they be strictly hands off with the kit they are not supplying themselves?

Hi, Our CtC supplier Stone Group will be installing new Cisco Meraki kit in the next couple of months. I'm yet to have a chat with their networking person about the Wi-Fi setup so just wondering how this stage tends to go? As they're responsible for installation and config of the Wi-Fi and the core switches which are also getting replaced this will mean some changes to VLANs and Wireless SSIDs etc. Do they tend to look at what's already in place and replicate it or are they generally open to doing what the customer wants? Our current setup is quite rudimentary as it was set up originally by a third-party IT company who were subcontracted by the building firm during our move to new physical premises a few miles away. They ceased trading years ago. I've not changed too much as it seems to work ok for most of our usage scenarios but with the new equipment coming in I'm wondering to what extent things may need to change. We have a Curriculum VLAN on for all our classroom/admin devices and other VLANS for door access, security etc. Wi-Fi networks wise we have SSIDs for Curriculum and Guest Wi-Fi.

Is anyone else using predominately Lenovo client devices in their place of work having issues sourcing replacements replacement parts at the moment, specifically keyboards and laptops? Lenovo's official parts service provider, Flex, consistently show no stock and when contacted directly said there's huge 6 month lead times. I know we've just had a pandemic and Chinese factories are probably not yet at full capacity but wondering whether this is just affecting Lenovo or all laptop manufacturers?

Which reseller?

I’ve recently federated about 210 users into ASM from our Azure AD tenant and although there were two members of staff who had previously set up personal Apple IDs using their school email address / Azure username as personal Apple IDs, the sync went through really quickly. I didn’t have to wait 60 days for all the other IDs to sync over. Maybe Apple changed their procedure for this recently or I’d enabled something else in ASM for this to happen but just saying it is possible to do without having to wait. Maybe there’s a threshold and only having two accounts out of 210 was under it.

Not heard of Mosyle before but just had a quick look, seems decent. I've moved from Meraki for iPads to MEM as we have everything else in there (laptops/Samsung tablets and phones) so thought why not have it all under one roof!). Wouldn't say I'm completely regretting it but the MEM way of creating configs etc is so unintuitive it's unreal. I love and miss the device tags feature in Meraki SM so you can switch the purpose of an iPad so quickly. It's a right faff in MEM. That said it is handy having just one portal.

Thanks @KK20 and @Brimstone for the replies. At least I'm well informed now when the teachers start moaning I mean asking questions.

Thanks. For iPads that arent Shared iPads, where enrolment is done with user affinity, I'm guessing the SSO solution would work? So as soon as the iPad is enrolled and they open up Word it sign's them in automatically?

Thanks for the reply @Brimstone. So as things stand, if we want to continue to use Shared iPad, and the teacher wants the pupils to work on documents in the Office apps, the pupils would have to sign in manually, and repeat this process on every shared iPad they use?

Hi, I've recently federated our Azure AD users with Apple and set up some iPads in Shared iPad mode using Endpoint Manager and assign a couple of test devices (settings used documented below. This seems to work fine with users signing in to the iPad for the first time with their Managed Apple ID and password. They are then prompted to set up a Shared Passcode. I'm now looking to get a true single sign-on experience for the Microsoft 365 iOS apps I've deployed such as Word and Excel. I've read the docs on this and deployed Microsoft Authenticator to the devices and also created and assigned an iOS Device features profile with the 'Single sign-on app extension' option (settings used documented below). I was hoping that this would mean that as the user had authenticated by signing in to the iPad once, they would not be required to sign in to the likes of Word and Excel but they are being presented with the "Get started wih Microsoft 365 screen with the following three options "Try 1 month free | Existing Microsoft 365 Users? Sign in | Not now". I'd expect to see this screen if I hadn't enable SSO but I thought with the SSO enabled the user would be seamlessly signed in to M365 apps without the need to authenticate? Has anyone had any joy setting this up? Is it by design that it's this way or am I missing something? Cheers, Paul Enrollment profile settings: User affinity: Enroll without User Affinity Supervised: Yes Locked enrollment: Yes Shared iPad: Yes Maximum cached users: 24 Maximum seconds after screen lock before password is required: 5 Maximum seconds of inactivity until user session logs out: 5400 Require Shared iPad temporary session only: Not configured Maximum seconds of inactivity until temporary session logs out: 0 Sync with computers: Allow All Device Name: Apply device name template (supervised only): Yes Device Name Template: SHARED-{{SERIAL}} iOS Device features profile: Single sign-on app extension settings: SSO app extension type: Microsoft Azure AD Enable shared device mode: Not configured (also tried this with 'Yes' option enable too, same result)