DigiBen

Is it possible to setup a photocopier to prompt for an individual users code when photocopying, but NOT prompt for a code when printing via the network. This photocopier is a Olivetti d-ColorMF304, but interface is very similar to a ricoh etc. Cant go down the option of popping up for printer codes, as the pupil laptops dont always remember to prompt for the code! Saving codes is fine for teachers, but 2 in 5 laptops would fail to prompt for the code so pupils would wonder why there print jobs wouldnt come out. So my best option is code on photocopying, but not on printing. But for the life of me I cannot seen how this can be done

Still no clue on it, I can monitor it in the realtime report log off the smoothwall box and no sites are showing as blocked. I would say a port issue, but the caching server is working on site and I can download apps via the app store. Its just this problem with pulling down profiles etc

On this site it's just 30 iPads, certificates are all up to date on Meraki, got nearly a year on them both. Monitored a test ipad on smoothwall and watched it try to pull down an app, no blocked sites flagged. Although I hadn't heard of "app-management.com" before when they pull apps down

I have a weird problem, keep in mind this school has been working fine with Meraki upto May 5th of this year. These are iPad Mini Gen1, and iPad 2's, so they are all on iOS9.3.5. For some reason, all iPads on the Meraki console are showing as offline, and not checked in since May5th. But, their GPS location is updating. I can't refresh profiles, app lists, or get activity. On the iPads it is letting me re-enroll the iPad in Meraki by using the m.meraki.com website, but it doesnt show this as connected on the Meraki console. On the network side of things, its a county smoothwall system, but I have seen the real-time filter and nothing is being blocked during this process. Also I can manually download apps via the App Store with no issues. I have tried static IP's, restarted our DNS and DHCP servers, I have gone direct to the proxy via IP. I have wiped the iPad fully, re-supervised it, installed Meraki and had the exact same problem. On the iPads I didnt wipe, and can still get into the Meraki App, I can see the app I just added today, hit it to download, and ... nothing! Although in the web filter it shows activity to the deployment site, but no app on the iPad. But the kicker, if I tether my phone to the iPad via a hotspot, everything works perfectly. Where could the problem be, if Meraki is setup fine. Filters are showing nothing being blocked, yet I can download from the App Store directly?

Yeah thats going to be my first thing to try, but I am sure I had this a couple of years back and it ended up doing the exact same thing? Its not that flicks thing is it?>

I have a teacher that has shown me a problem that has developed with her board. She is on a Toshiba R50 laptop, and a BenQ interactive display. SMART Notebook 11.3 used to work fine, but in the last 2 weeks, she cant select the pen tool via touch anymore. It works fine with the mouse and laptop, but even if she clicks on pen with the mouse, once she goes to draw with a pen or finger, it just tries to select everything. Has anyone had this issue?

I had the same problem, and I found the best solution here (http://bobbitco.com/2015/10/14/how-to-remove-old-folder-redirection-and-internet-explorer-maintenance-policies-from-gpos/) Basically just take out the reference to IEAK in the policy, in AD - It really works! Firstly you need to find the GUID of the GPO. From Group Policy Management find the GPO in question, select it and click on the Details tab. Make a note of the Unique ID. From AD Users and Computers make sure Advanced Features is turned on (View /Advanced Features). Browse the tree to System > Policies > GPO GUID (the Unique ID). Right click the GUID and select Properties. In the dialog box click the Attribute Editor tab. Scroll down and double click gPCUserExtensionNames attribute. A dialog box with a long text string appears. N.B. This lists all the Extensions associated with the user GPO. It’s difficult to edit in the small text box so I like to cut and paste the entire text into notepad, save a copy as a roll back then edit the text and paste it back, ensuring the existing text is completely replaced. Each extension is enclosed in [] square brackets. To remove Internet Explorer Maintenance Policies delete ONLY the following from gPCUserExtensionNames: [{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}] Ensure that all other entries in gPCUserExtensionNames remain intact in their [] brackets or you will break the GPO. Click OK and check it has worked by refreshing the GPO settings report in the GP Management console.

Thanks mullet_man! That post thread is exactly what I needed!! I couldnt find: If (oTS.SelectSingleNode("//step[@type=BDD_InstallOS]") is nothing) and (oTS.SelectSingleNode("//step[@type=BDD_UpgradeOS]") is nothing) then In the ztiutility.vbs file at all to change, which I thought was very odd. But I did see later in the thread they mentioned that if you have "joindomain=" specified, capture doesnt work? Well I commented out that line and guess what? IT WORKS!!! I dont get why this line is causing an issue, it never used to! Rather than starting a new thread, does anyone have an issue that after the imaging completes, Windows 10 doesnt automatically rejoin the domain? I have to do it manually....

I hope someone can help out with this. MDT was working great at a school, I could do a capture of an image, it would save to the server, and then I was able to deploy that image out. I have come to try to do another capture (on a fresh windows 10 installation, nothing on it just to test), I can select the capture task sequence, it goes through set image build, set imageflags, set phase, configure, and then goes off. And it even runs the cleanup script because the drive map becomes unmapped. The mdt deployment share has had permissions set to everyone=full to narrow down whats gone wrong, the network drive is mapped as a domain admin to rule that out too. I'm not sure if anyone can follow this, but I have atached the log file. It seems to close with no errors, so what could it be? smsts.txt

I can not push out apps to this schools iPads for some reason? This is for all iPads in school, and affects all apps too. I have tried removing Meraki profile, reinstalling it. Rebooted the iPads. Removed the app from the app list and recreated it. I have 200 available licences for the app too iPads are Mini Gen1, iOS 9.3.5 Push Certificate is up to date. VPP settings in MDM are correct, in VPP I can sync the licences with Apple VPP. And I can see the device serial numbers next to the app in VPP too. In the Apps list I have it set to VPP device assigned licence, so its not a user based issue. But whenever I push the app to the iPads, I get the error [TABLE=width: 1277] [TR] [TD=bgcolor: #F8F8F8]Nov 18 12:14[/TD] [TD=bgcolor: #F8F8F8]Install app 'Meraki Systems Manager'[/TD] [TD=bgcolor: #F8F8F8]Error - The iTunes Store ID of the application could not be validated. [/TD] [/TR] [/TABLE] This is on the Meraki app itself! I have tested an update of the Meraki app on two other schools from here, and they worked completely fine so please help me figure out what I am overlooking?

But arent all users Authenticated Users? I thought this would mean if I added Group A additionally, anyone would match this policy as they are all authenticated?

I used to be able to filter out GPOs by using security filtering, this was really useful if you wanted to apply a policy to only people that were members of certain groups. This doesnt seem to work anymore, if your a member of group A. And your in the OU with the GPO (which is filtered to Group A) then it just doesnt process. The only way it will process if you take the filtering out, and just leave Authenticated Users in. Anyone found a way around this?

Has anyone else got that bug where google chrome stops showing the mouse pointer after being it has been operated by touch for a while? I know closing chrome can fix this, and I have used the flags to make touch work in the past. I thought it would be fixed in an update, but it still doing this on interactive displays, and also my touch screen laptop does it too after a while. The mouse will simply fail to appear over the google chrome window, but appear over anything else. Force close chrome and reopen, and its fine again...

One of my schools has asked an advanced question... Is it possible for the pupils to have a BYOD setup with their personal iPads, which will install an app when they enter the schools geofence, but remove the app when they exit? Also limit the use of non-school apps whilst in the school... I honestly dont think this functionality exists just yet, especially on non-supervised devices. They are on Lightspeed MDM atm, but we could bring them to Meraki if the option was there. What do you think?

Hi, I was just wondering what the preferred way of deploying Windows 10 is? Up until now I have been doing it via MDT, same way we have always done Win7. But I have heard some people using WICD / DISM instead? Has anyone had any success with this?

Got a weird problem in one of my schools where the school admin will open an excel file on the network, but be told its already open or that there are not enough resources to open the file. No one else has the file open in the last couple of days, and the PC itself is fine for resources. I cant see any issues on the server, and this is an ethernet connection. Can anyone suggest where is best to look for the cause?

I have two teachers in a school saying that sometimes during bootup, and sometimes during middle of a lesson, the flame in the top left of the board will go red and the pen will stop working on the board. I cant see any obvious causes, the cables are attached firmly, no changes have been made, cables arent more than 10m long either. Has anyone ever had this problem before?

Has anyone used Microsoft InTune (or any other cloud service) to lock down a Windows 10 desktop? In the past it was just a case of using GPOs to lock down the PC for pupils. But we are trying the option in Windows 10 to sign in with an azure account, but when this is done you get a very unrestricted account with admin rights. I cant see the options in InTune, so is it down with custom OMA-URI settings? If so, wheres the best place to get a list?

If they have a microsoft account, which they need to get on the store for their assigned apps, then they will be able to download any app they see right? We have found if we have InTune, then we can use a OMA-URI that hides the public store, and only displays the company store instead

We are looking into InTune today, so far we can see a basic list of configuration policies for iPads. Quite similar to Meraki, but none of the ios9 features. It suggests creating configuration policies in apple configurator, and upload them to InTune to push out? Microsoft Devices dont have much for locking them down, it may be a case of hunting down OMA-URI commands for hiding features

We are just looking into this now, and wondering how it would compare to Meraki. The pricing in the education sector is less for intune, than it would be for Meraki for 100+ devices (enterprise licence). If anyone goes for this, let us know!

Yeah thats the one. I didnt have any luck deploying the offline apps via MDT. You can assign apps to users, but it means the user has to go into the microsoft store to get them from their apps list, this means they see every single app that is available in the general store and causes a bit of an issue.

Fresh Paint is a Microsoft app tho, so they do the offline. So far Ive got Microsoft Translator, Book Creator, Fresh Paint and Sway as offline apps. Pic Collage though is online only, so is Explain Everything and Showbie. Would I be right in saying the only way to get the kids access to these apps is either by them logging into a microsoft account (Which would have to be automatic some how in a primary school) or to tie it into an Azure AD?

Ah, it appears only certain apps do "offline". Microsoft ones are fine, but Pic Collage doesnt seem to have an offline licence option

I got them from the store logged in as an admin 365 account. But I didnt know about offline licencing until you just mentioned it. So I am on the store, I can add the apps to my store but its for online users only. It mentions offline licencing, and a tick box to enable it. But if you go on the store there is no option to buy an offline licence or to make it offline. Has anyone been able to do offline licencing