KK20

Does googledrive have versioning similar to sharepoint/onedrive?

be very careful removing lots of apps, I recommend you look at event viewer for a regular user. We had lots of problems with windows 10 onenote, calculator, "alarms and clock" for timers etc. We were quite careful what we removed too. Since 1909 we have left the apps alone and found no issues or side effects. We block apps via GPO applocker instead. Be aware that there is a bug in that once you start using applocker you cannot really stop using it. The registry keys remain so you need to clear those out if you want to stop using applocker completely.

I had a spate of issues with the startlayout once, my notes say "use notepad and utf8 but dont use notepad++". I havent had any issues using notepad to save our layout.

We have always run the following before we generalize. As stated earlier, the panther setup error log should tell you the package that it fails on. We dont touch the appx other than that (we dont remove from the image any more, it caused more issues doing it that way for us)

Found it for you: You can limit site sharing to specific domains by allowing or blocking domains for the site. To limit site sharing by domain In the SharePoint admin center, under Sites, click Active sites. Click the site that you want to configure. On the Policies tab, under External sharing click Edit. Under Advanced settings for external sharing, select the Limit sharing by domain. Add the domains that you want to allow or block, and then click Save. Click Save. That will sort it out.

it should be noted that yes I am in the staff group! Pupils cannot share externally from onedrive (I should have said earlier that I locked external onedrive sharing only to staff). I am almost positive that I got the external sharing from shareppoint locked down from either teams or azure. I suspect it might be the teams guest external sharing that locks it off (irrespective of whether it is a teams sharepoint or sharepoint site.

sure

I cannot remember where I set this up. I seem to believe it was teams that let me restrict it. But it could also have been a setting in Azure. It was some time ago and I didnt document it. Here is my sharepoint at the top, onedrive at the bottom. The sharepoint "anyone" only says that it has been restricted, it doesnt really give a clue.

I had a few issues with Salamander free not working for us. I looked into powershell "doing it myself" and that is what I do. We use isams so I created a couple of APIs for the sources and used powershell to sort the XML feed from the API into a useable format. This is then sent to SDS. Scheduled task takes care of it. I also use powershell and a CSV to keep my "manual" teams updated with security groups, that way staff can create manual groups and I can keep these up to date with pupils/staff members - we dont use premium Azure so I cannot use dynamic groups. Lastly, I use powershell to create a CSV for pupil onedrive links, I also keep the pupil onedrive areas up to date with staff as admin so that staff can access pupil onedrive areas.

We allow sharing of external data in onedrive but not in sharepoint/teams. Sharepoint/teams has the "school data" and I dont want someone sharing the whole pyramid. Onedrive is personally controlled so someone can share a link externally. Links expire in 14 days. Staff also understand how prevent downloading with the links for files but not folders - not perfect but does work somewhat.

Our delightful cherubs have found access to two groups that I didnt know about. One is named "all company" and one named "community". My googlefu has shown that these are possibly Yammer groups. I could really to with getting rid of them but have no idea what they are for. I can search for these sites from the root of my sharepoint and get: Community goes to TENANT/portals/Community/default.aspx however, I get "An error occurred during the processing of /portals/Community/default.aspx. Code blocks are not allowed in this file." trying to visit this group "All Company" goes to TENANT/sites/AllCompany.5243017.acdwrqrq/SitePages/Home.aspx and is a default site with "The new All Company group is ready" All company shows up in sharepoint admin but community does not. I can access community by scraping the available sharepoint sites and linking to it. Users have read/write access to this (hence my desire to disable it) Safe to delete? Where did they come from?

not really. if your machines download updates and install them then there is no problem other than bandwidth. I would say that the problem would only be if you DONT install updates! Since Windows 10 can peer share updates this has become less of an issue over the years. WSUS is useful but also comes with its own issues and maintenance.

WSUS here, I automatically approve critical and security. The others I tend to check at the end of the week. My feeling is that it is easier to sort issues like this than have unpatched security issues in a school. WSUS also rolls out our W10 upgrades and has done so quite well.

we have had a few machines do this. I have a suspicion it is to do with the intel onboard drivers. When this happens to us, the black screen usually has a white mouse pointer than you can move around (nothing to click on of course). I get the user to CTRL-ALT-DEL which brings up the usual options screen, I ask them to log out and immediately log back in. That has sorted it everytime for me.

that makes sense. Cheers.

I have a synology 216j at home with a pair of 4Tb raid 1 drives in it. This syncs with our personal onedrive. Our PCs at home have a H drive that maps to the synology sync folders

no, we have free Azure AD so not an option for us.

whilst assigning some A1 365 plans to a service group, I noticed this "Project for Office (Plan E1)" halfway down. What is it? If I go to project.microsoft.com then I get a "Looks like you don’t have a license to create projects or roadmaps" so I was wondering what this was.

It has done for us. I have now imported KB5001648 (and KB5001649 for those who have 1909 still) into WSUS for the majority. Set deadline to yesterday etc.

i just told our art dept to print to "microsoft PDF" -> "Acrobat reader" -> Printer as an interim. Contact sheets arent high quality by nature so this shouldnt be an issue.

We have removed flash, after all there are no security patches now. I started to warn staff over a year ago and reminded at our INSETs. All it takes is one zero day intrusion and you will have a larger headache. We had similar fun with Java - we didnt go to openJava, we simply warned and then removed.

It depends on the picture size. We have KB5000808/802 updates and the patches KB5001566/1567 installed here. No difference we can create contact sheets but large images will not preview correctly (you can try doPDF as the printer - this acts the same, however "microsoft print to PDF" always works without bands but I have no idea how much quality this loses). Also, with the Kyocera printers you can go to properties and "print preview" - this will show the bands or not. Smaller pictures will work fine, larger ones will not. If I tone down the DPI from the "quality" from 600x600 to something small such as 72x72 then it works on all our printers and PDF. Start to get around 300x300 and it fails. Smaller pictures work just fine. I have tried various JPG from 200k to 24Mb, the large ones always have bands missing from the middle. Funnily enough, the windows 10 "new" photos app prints individual pictures just fine, even the monster ones. However we need to create contact sheets and "4 per page" etc. For giggles, I tried saving the 24Mb JPG to a 170Mb BMP (!!), still had bands when printed. I have added 2 zips with 4 pictures that fail for me pcs1.zip pcs2.zip these fail even with doPDF as the printer. However they work with microsoft print to PDF and from the "metro" photo app. Edit: confirmed issue by MS. Fix "available in the coming days" https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-20H2#1573msgdesc

https://docs.microsoft.com/en-us/windows/release-health/status-windows-10-20H2 I havent heard a dickie bird from Kyocera or our rep. Our rep said she was looking into it, but I knew more than she was letting on.

I should have said, the driver I swapped to on the print server was the classic KPDL 3.3 (not PCL or XPS) - it still has support for finishing units (it worked on our Taskalfa). All our P2135, TA2551 and p6026 worked without any further changes. I didnt need to change direct printing or remove the update. If you have already changed to the v4 driver and want to change back to a v3 you will probably get an error when applying - simply remove the share, apply v3 driver, reapply the share (I had changed to the microsoft PCL6 driver as an immediate fix but I needed accounting on some printers and finisher on others)

any time I have wanted to "do something at startup" but needed this to run after x amount of time (for services to start) then I have set up a scheduled task. Im not keen on this though and was a typical adobe way of sneaking updates and runtimes in the background.