KK20

1 per VM here. Different VMs get different backup destinations, retentions etc we also have different diskcopy for certain backup jobs but not for others.

Anyone intending going? For the first time in a long time ive been given permission to go! Yep a term time jolly - overnight too. This does mean using the train from here up North though. Signed up for the ticket but ive no idea what this connect@bett is, things have changed a fair bit since last I went. If you have to book all your intended slots beforehand then I might not bother - I was hoping to wander around and see what there was on offer rather than trawl through prospective suppliers first then hope they have the product demo/information I want.

yes. Depending on your licensing you can also set up a caching server to take the load off your internet connection https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/microsoft-connected-cache we found client P2P just fine though. Log analytics is a bit clunky and annoying that it is always going to be at least half a day out of date with its data but it works, the most annoying part is that you cannot rename the solution (pick sensible names).

Well this just gets worse. Deleted all the videos (around 200Mb worth) , all seemed well for a few hours. Then it filled up again without any new photos being taken! Worse still, once this happens it is really hard to copy photos with the cable, onedrive client freezes etc. Delete a couple of pictures and you can get going again. As you can see from the screenshot, 15Gb free...

a touch under £5 licensing for each "faculty/FTE staff/whatever microsoft call it these days" member - GN9-00010 for faculty and a nominal number of "zero cost" LE6-00001 students. This may be different for your licensing, we are hybrid still so im still on the "old" style desktop licensing. Oh and here are the MS doucments for user exclusion of policy https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policy-common

We use CDM with old fashioned roaming profiles, we dont have a fully intune/AAD setup, we are still hybrid. Our libraries also have various sub folder permissions in each. CDM uses the 365 logon to attempt each library you want mapping - no permission no drive. I only have one policy for all our libraries, pupils get one drive letter, some staff two others a few. You can have one overall drive letter for everyrthing but I found that took too long to map.

You dont need P2, its P1 security -> conditional access. Just add the groups to the excluded section of your MFA policy. It is a good idea having P1 conditional access because you can also restrict MFA initial signup to trusted locations.

there is no config, its just a mapped drive. The same would happen if you were saving to a regular network share and you log out. The log out pauses and asked if you want to force close - obviously if you do that it wont sync, but then again on a network regular share it wont save AND probably corrupt.

oh yes. been here. older PPT created by someone who does not know how to compress images. It was a 150 page art demonstration, each slide had up to 4 images, each images was the original JPG. The PPT was monstrous. Obviously I migrated our onsite to sharepoint library. Once this file was attempted to be opened it locked the file, it was an old PPT so it would just kill the machine that you tried to use. I needed to pull the original from the backup, compress images, convert to PPTX and it then worked relatively well (it was still a few hundred Mb in size). Then the drama department started to upload the raw video footage from the digital cameras. Single huge files. That didnt work well when trying to edit them in premiere. So our video library is still a QNAP NAS with a request not to try and use the sharepoint libraries! the main problem with these errors is the file locking in sharepoint, I dont know a way to release a lock early. In the old file share days you could simply close the open file on the server but there isnt a facility to do that in sharepoint online. we use Cloud drive mapper for our sharepoint and onedrive access. Live access to files, no caching on save so the logoff wont fully process until it has saved.

I use intune as an MDM for shared ipads. Enrolled in ASM, assigned to intune as MDM, enrollment into intune as shared ipad with a couple of configuration profiles and app installation profiles. All seems to work well. I have one user who takes a lot of pictures and video and they have seemingly run out of space on the ipad. The ipads are 32Gb and there is 13gb free on the ipad but the user is told there isnt enough space. I cannot find anywhere in intune to set a quota or remove one. Worryingly, if I click on the device in intune, I can see the user and there is a line that says "has data to sync = yes" "data quota = 0" "data used =0" . if I click on a pupil ipad and look at a pupil user I get "has data to sync = no" "data quota = 6,278,144 KiB" "data used = 999,836 KiB". The ipads all use the same configuration and enrolment profiles. These two ipads have only ever had a single user log onto them so there arent multiple users clogging up the ipads (and in any case there is plenty of space on them) I cant find any information on what this is, where to set it etc. Ideas?

we use yubikeys. They are fantastic for using as windows hello logon devices for youngsters. We have them for our infants in the junior school - secure 365 logon and no worry about 5 year olds having resilient passwords... There is some admin time at the start of the year as you might need to delegate access for someone to help with the initial setup but it is worth it in our book. Teachers use them for 2FA if they dont want to use a phone, ironically not many use them as windows hello logons.

We dont. But I dont sign the invoices when they inevitably get sent to me from accounts. Then they get hauled over the coals. The downside is that I do get all sorts of invoices that look vaguely IT related heading my way (USB pen drives or digital voice recorders etc) but they arent too bad to send back to the proper person.

take the opportunity to throw WSUS away, you wont regret it.

It took me two years to wean people off using their desktops and my documents as storage areas. Two years of limiting quotas. Now staff use onedrive all is well both home and away.

GPO at 60 days plus redirected appdata works well. Profiles are only 10/20mb with redirected appdata. Even our ancient 110gb SSD light use machines dont have issues.

shared mailboxes can only use internal addresses as member authentication so your external Dr will need an internal account. However, you can just have a mail enabled group with an external "contact" for the external address. You can then have a "send on behalf" for users who are allowed to send as [email protected] 365 distribution groups can have calendars too, useful if they want to book something (but you are skirting towards teams if you head down this route)

you can manually recreate an EFI partition. I would ensure a good healthy backup is present before I go into diskpart and remove/recreate the partition that lets the OS boot :-) I would also run diskpart/bootrec/bcdboot from recovery commandline too so that nothing in the OS is locking. You may end up needed to bootrec/bcdboot anyway if you use a partition manager to move the EFI

VEEAM can back up physical hosts and could do so with the community version: I used to do this before I licensed for more features and VMs a few years ago. Physical hosts used to consume two licenses though rather than 1 for a VM, that could have changed.

echoing the above, we found it hard to get USB adapters that suited all. I have three on the shelf here we use USB21000S2 SMSC7500 chipset for the surface and some dell (small XPS). We also have USB31000S 88179 chipset that work on some latitudes. We also have a toshiba USB3 dock that will PXE boot, that was used for older latitudes.

so, chrome remote desktop appears to do everything I want. I enabled the service in our google tenant for staff, installed the MSI on the teacher laptop (academic network). The teacher installed the google play client on their android tablet (guest wifi). Teacher enabled their chrome remote desktop with pin code. Opened the client - nothing was visible at first - added their school google account on their tablet, laptop appeared, input PIN and voila remote control works. They are going to play with it today and see how practical it is to use. First glance was well received, lag was low, control was spot on (they use a cheap pen on their tablet, writing looked fine with a little zooming and scrolling). I will try with an ipad later this afternoon.

laptops are on the main academic network (school supplied). tablets arent (at the moment these staff are using their personal tablets), sorry that wasnt clear. I can make "exceptions" for the few tablets we are talking about. However, I know that once people start to see the benefits then it will be rolled out further. I like the look of vivi so far, I will look at a demo to see if this would work without swiss cheesing the firewall. Another local school IT admin says they do similar with chrome remote desktop, so that is another for me to look at.

I dont undestand? It isnt being overcomplicated - the software cannot be installed on an ipad - im not talking word documents (word documents already have a drawing tool and simple word collaboration would work anyway, or microsoft whiteboard) Here is the scenario the teacher presented to me. They dock their laptop into the docking station (well, port replicator) as our teachers walk between classrooms with their laptop. The laptop has a CAD program installed. Teacher opens their CAD program, teaches and the pupils are dotted about the workshop. the large screen can be see by all. The teacher uses openboard on the laptop as a transparency over the top of the CAD program. What the teacher would like to do is walk around the workshop with a tablet in hand, if they need to do something with a pupil they will use the tablet to annotate on the board from a distance, not walk backwards and forwards. Perhaps they are drawing arrows, perhaps a diagram - I have no idea. Whatever it is the teacher CANNOT install the CAD program on an ipad. Another teacher is in the robotics lab, this room also has pupils spread out. Some pupils are working on hardware, some on software. Teacher moves about and uses visual studio. We have limited licenses for visual studio and it is installed on certain teacher and lab PCs. Teacher again wishes to annotate on a smaller tablet whilst walking about the classroom. This teacher laptop also runs VR software for an oculus and is quite a heavyweight laptop, it cannot be carried about the class easily. Again the teacher wishes to avoid walking backwards and forwards to the screen. The software would not be able to be installed on an ipad. We do have graphics tablets for some teachers - some teachers do not want large interactive screens, they prefer projectors onto whiteboards. These teachers use graphics tablets instead of touch screens, none of these teachers have asked for roaming tablet control though. I hadnt thought of a wireless tablet as an input control onto the screen - the teachers who have asked for roaming control of their laptops would probably give this a go.

yes. The use case is from the more technical teachers who put something up on the board and use openboard to annotate as they go. They want to wander about the class and make live notes on the openboard overlays. This means that there is software involved such as visual studio, CAD and science logging type software that the name escapes me at the moment. As for SENSO we wouldnt need the extra safeguarding, filtering, network utils etc but would be interested if the remote control works. Its one to add to the list of demos.

I hadnt. We dont run a classroom management as traditionally we havent needed one. I have heard of SENSO but thought it was a teacher monitor -> whole class, I hadnt thought of running it in reverse with the tablet being granted "control" permission. I will look at a demo as the prices seem ok for a few devices.

Ironically I didnt bother clicking the email, I responded to say "please dont enable, please disable and remove as I don't need it". I had a response back saying that it is an opt in paid feature so I only needed to activate if I needed it.