Katy

If you had to lock them away, you'd also have to refuse to let the pupils have them unsupervised incase they took them home and/or lost them. Just somebody reading far too much into it I think!

Will try it tomorrow - although I have been testing on a freshly installed PC with a user who has never logged onto it before. Thing is everyone says "you do this and it just works" but it doesn't for me, same problem I had with Direct Access - "it just works" yet it didn't, as nobody appeared to have tried installing it on a network that was already using IPv6 (the fix there was adding a route on the core switch pointing the DA subnet via the DA server, not mentioned anywhere in any guides or any instructions). Impossible to find anything useful on a search when it appears to work fine for everybody else in the universe!

We're already using this, problem is it's relying on WebDAV which doesn't appear to have had any work done on it since windows 2000 - try and copy a file over 50MB or so and it just fails (would prefer it to say "you can't do that" or something rather than appearing to work then not doing)

It's full of ETL files but no idea how to open them, it's binary data so can't just open them in notepad.

I think they introduced domain rename in 2012 or 2012 R2. Still wouldn't trust it though.

Where's that setting? All I can see in Users\Admin Templates\OneDrive is to prevent personal (i.e. non business) from syncing.

Will try it... although if it was being blocked by software restriction it should say "Administrator has blocked you from running this" as it does with any other EXE blocked via SRP.

The only Onedrive related setting showing from RSOP is the "use files on demand" set to Enabled, unless there is one that isn't within the Onedrive "folder" stopping it? Would be nice if it actually logged anywhere normal instead of making .etl files that nothing will read. Edit: It does exactly the same thing (i.e. nothing) when logged in as local admin too so can't be a group policy setting

I've tried this before multiple times on 1709 and just given up, but trying again with 1803 to get OneDrive files on demand (or even just onedrive sync) to actually work. I have a software restriction policy but have added an exception for *.exe inside %appdata%\local\microsoft\onedrive\ which should allow onedrive.exe to run. Manually running this file shows no errors, nothing logs anywhere and the EXE runs for about 5 seconds (as spotted in task manager) then vanishes. Nothing actually appears on screen and nothing appears in the system tray. There's also nothing showing in explorer anywhere. How do you get this thing to work? What is it meant to look like? I've manually ran c:\windows\syswow64\onedrivesetup.exe as the first step, which takes ages and puts some files in %appdata% (does every user need to do this step on their first logon to each machine? How's that any good when it takes a good 3 minutes to run? Or is it actually quick and it's the fact my test PC is complete rubbish making it feel slow...) Does Onedrive rely on stuff out of the Windows store? Surely if it did then it wouldn't just be a normal EXE though. I've got the GPO settings on Computer->Admin->OneDrive to turn on Files on Demand. I can't see anything set to prevent onedrive from running. I've got the Onedrive Mapper script also running, does it not like this being there? (Shouldn't it actually tell me this instead of just doing nothing? I can't really take this away as then nobody has their mapped onedrive as they're mostly on 1607)

This. I don't see how the printers losing the digital document is any different to someone who has bought/received a printed year book losing that - exactly the same data is out there, and nobody is going to be making the kids sign agreements or reporting a breach when they lose their copy.

Best I've managed is a powershell logon script which sits in an infinite loop attempting to add the printer, success (or number of tries > 10) breaks the loop. This works better than any of the actual ways you're supposed to deploy printers (and when it fails to add, the second iteration through the loop usually succeeds so it's not sitting there forever). Only thing I've noticed since getting printers always working is that it randomly says "Unable to connect" to random printers hosted on anything older than 2016... Although it may just be that people were that used to having to log off and back on to get a printer at random intervals that they stopped reporting it.

Last time I got anything Serif I'm sure the place I bought it off in turn got it from Serif (and didn't hold stocks of it), I think the answer might be "tough, you need to find something that actually exists to ask me to buy"

No, Remote Access has nothing to do with Remote Desktop Services.

Using the Remote Access role on Windows Server. Domain joined clients connect automatically and don't need anything installing on them.

Although they've been saying this for years - and we only ever seem to have more to do, not less! Suppose it totally depends on the individual school - how easy the tech is to use, how new/reliable it is, how good the teachers are with it and the basic troubleshooting ("is it plugged in").

I assumed that "along with some tracking documents that she was planning on working on." meant some paper stuffed in the side of the bag containing pupils' personal data, turning it from just "stolen encrypted laptop" into a breach.

I'd expect it to be "Tough, pay the fine for late reporting" combined with "at least one member of senior management should be contactable at any point in the holidays" going forwards.

Please let it have been "I've TOLD you, it's Mrs $Head at work, and mum at home!"

We pay about £150* a year for each datacentre licence on our educational pricing, so not that bad considering we only need three to cover the three hosts plus unlimited VMs on them. *might be more, might be less, can't remember but it's in the £100-£200 bracket

We give supply teachers access to the staff shares and a limited MIS login (enough to do their job as supply teacher i.e. access to registration). Trainee teachers get less as we don't have a contract (i.e. contract of employment or contract with the supply agency) with them, although if the head of department of whatever subject they are training in asks for them to have access to the staff share we give it out. Neither are allocated email except for long term supply teachers.

We use a different company for the larger printers (we got the smaller printer company to quote but they were 2nd place when we scored the tender). We've got about 10 smaller printers that we own hanging around (where we buy the toner ourselves, when one of these dies it's replaced with one of the "no purchase or lease, pay per copy" printers), 3 that we pay per copy but don't own or lease, then about 10 leased larger devices (where the volumes we print make it cheaper for us to pay for the leasing costs in order to get the much cheaper price per page than it would be to just pay for the usage)

We've got three printers where we don't pay anything for the hardware (no purchase or lease, 4p/colour page), the rest are larger copiers which we lease (2p/colour page).

There's a few companies doing something like this - never used the one you mentioned but you'll find the price per page is double what it would be if you were leasing (they have to pay for the equipment somehow), so you just need to work out if you do a large enough print volume to make leasing cheaper. We use a company who does similar for some of our smaller printers, think we pay 4p/colour and 0.6p/mono on a 35ppm A4 colour Xerox device (we are at 2.1p/colour and 0.21p/mono on the bigger copiers which we lease).

I'd save it as a .ps1 file then a scheduled task to run powershell.exe with scriptname.ps1 as the parameter (unless there's a special powershell section these days in which case do it that way)

How's it get installed once it's in syswow64? Does Windows 10 just use that and do it automatically without me having to do anything? (and then set the relevant GPO settings for it to do the "files on demand" thing)