Katy

Had a quick look and there is none applied to our DCs (as in, everything to do with UAC is "Not configured") so I guess it's whatever the default settings are.

Let's just return all our computers for refunds until a winner is announced

If the user's profile is remembering the old connection then the lines in the script mapping the drive letters to the new path will fail. You'll need to delete the drive mapping first (can't remember how to do this in VBS off the top of my head but it'd be "net use n: /del" in command prompt). Otherwise if you use Group Policy Preferences and remove the script it should overwrite the remembered old mapping, in theory.

It depends on the copier but some have a remote panel via VNC feature you usually have to enable in the settings. Used it on our Lexmarks and pretty sure our Sharps have it too.

More socks you say? I’ll take 20 pairs please. Free advertising or something... you know you want to.

I’ve had this (not DHCP but similar network weirdness) and swapping ports fixed it, but also plugging a working PC into the “dodgy” port and it carried on working instead of breaking. Makes no sense!

You’d do something like $users = Import-csv Foreach ($user in $users) { Check if group exists, if not make it Add user to group } Relaxing with only an iPad so that’s all I can do for now but should be a decent starter. Check out the Active Directory cmdlets for getting/adding group and for setting group membership.

I've done something similar in Powershell, which can be run as a script in Config Manager, although it doesn't skip logged on users like yours so more useful for a summer cleanup: https://katystech.blog/2020/07/removing-windows-user-profiles/

Used to have it installed on every PC, now we use MEMCM so use the built in remote control in that instead.

Wow things have got bad, I remember them being really good at support back when we used GC Messenger. We swapped it for the built in email/SMS facility in the MIS in the end.

Some staff and part of the 6th form were back in today. Not a single face mask and nothing like waiting for me to get off the stairs and out of the way before charging down. I may have been doing the one way system the wrong way actually thinking about it but as there are no signs... how was I meant to know...

I recently spent ages trying to get as much of my network to WoL as possible - if it's not doing anything at all I tend to stick network monitor on, send some wake up packets and see if they appear on the machine in question within network monitor - to prove if it's the network or the PC. Besides that there's a few things like turning off "hiberboot" (or fast startup where it never shuts down properly) and making sure they are using the right NIC drivers. I wrote a blog post on this a few weeks back with everything I tried: https://katystech.blog/2020/08/wake-on-lan-revisited

Another one for the rule, "it's always DNS, even when it doesn't look like DNS... it's DNS"

As far as I'm aware the only difference is you can get an MSI installer off the enterprise site, and the ADMX templates, but the installed application is identical (I've used the consumer page before and then logged in with my Azure AD account and set up sync etc) But.. this was on my laptop without applying any GPOs so probably needs testing.

Just as a heads up, the "Prevent access to" policy will break OneDrive sync client if you have it syncing to the default path i.e. C:\Users\%username%\OneDrive - TenancyName

I knocked up some screenshots/instructions for staff back in March, shows what they'll see etc on Quick Assist if you've never used it http://support.akslytham.com/ It's probably somewhere in the start menu but it's installed by default with Win 10 which is nice.

Another vote for Quick Assist - only limitation is you can't do anything involving UAC prompts, but I found teamviewer had the same problem (and wouldn't even let me click on an elevated window if I'd managed to trick my way round a UAC popup). Maybe just that I was using the free version (as they let anyone use the free licence for a while over the closedown) and it was just running as the logged in user I suppose...

I've got to look at this next week, but I'm expecting to be able to do (Get-Teams).Where{**filter team names here**} | Set-TeamsArchivedState

Probably worth adding to my post the price obviously varies by location and won't be the same now as it was a year ago

We use Aspire (assuming it's the same one, based in Gateshead), our connection is provided over Virgin but don't think we've had any problems or any downtime that I've noticed yet (we're about a year in so far on a 1Gb/1Gb connection). Roughly £7k a year (think it's just under) + VAT.

It was stopping me from running more than 1 cmdlet every 10 minutes at one point - definitely not down to the tenancy limit, this was when everyone in the world was rushing to create teams. I've made 12 new teams and populated them yesterday (with the "sleep" line commented out) and it worked fine.

I've just stuck with 0.9.6 for my scripts as it seems to do everything I need (and still has the Template parameter). You do need to be careful when writing code for this - especially if what you are doing is New-Team, then a loop around Add-TeamUser as when the back end is busy it'll just throw an Exception "429 Too many requests" and you end up with the team and half the users added. Something like doing each step within a try/catch and adding a 5 second sleep if it hits that error before trying again is usually enough to get round it (although a couple of weeks ago I couldn't do more than 2 Teams based cmdlets without a 60 second pause before the next)

We don't tend to have any kids that are persistently behaving in a way that would require an exclusion unit. Learning Support department supports the weaker pupils or those which, without support, may become challenging.

Have you installed the AzureAD module (as it's failing on the Get-AzureADGroup cmdlets)? Install-Module AzureAD in an elevated shell, then in the script Import-Module AzureAD

We don't bother for desktops/laptops, the cost of extending the warranty for 100 devices is usually more than enough to have say 10 devices totally fail and need replacements buying.