Dipl0

JCQs requirements talk about a device being used for the exam to ensure it has no previously stored data. I'm just confused how you get around this when presumably the pupils own device still has all of their school work on? I understand exam.net locks down into secure exam browser and I understand moving out of the app is blocked but if there were a way to get out of that, a student could just open up their revision work and have complete access to previous work and syllabus? I can understand using a standalone device for exams which they login to exam.net to access the exam, I understand that because it's more closed and the previous work isn't available, I just don't understand how that is feasible using their 1-1 device that JCQ deem that as acceptable. Just to clarify this is genuine curiosity as I've never worked with an exams officer who would consider allowing students to bring in their own device (1-1 included) due to these JCQ requirements I'm discussing.

Is JCQ happy with that distinction? In my eyes I'd feel concerned about the ability to place an unfair advantage onto the computer ahead of the exam even with secure exam browser locking it down. I believe that's the opinion of my exams officer and smt also.

As in for External Summer Exams? If so is your exams officer not concerned about the JCQ requirement to not use their own devices? "• candidates are not allowed to use their own computers or other electronic devices, e.g. mobile phones."

Sorry for necroing the thread, what was the outcome of this? Did you manage this successfully? We are in the process of cloud migration and exam laptops are my only remaining domain devices. I have a few ideas. We already have a restricted SSID with a internet blocking policy, I suspect this might need to be loosened slightly to allow intune management. I understand there's some oma-uri codes to restrict who logs into the devices (Restrict which users can logon into a Windows 10 device with Microsoft Intune | Peter Klapwijk - In The Cloud 24-7) which I hope is still relevant. Then probably applocker to restrict apps other than Read/Write and EWP. We have an ever changing fleet due to the nature of our students, EWP on some, Read and Write and EWP on others and then outside of exams they get used for entrance exams where they use an online examination which we'd deal with by having a separate Wi-Fi enabled SSIDs for exams, this means I probably can't force a wifi network annoyingly unless I consider different groups for their different uses but then I'm at the mercy of the Intune Minute if(and when) I don't get told until the last minute.

I worried this may be the case, we have certain tools that aren't on all students devices but only the lower years for example which is what I was trying to achieve. Such a shame as it seems so obvious! Tags seems to be a way to do this but still involves an incredibly manual process of actually mapping devices to the tag to then tag to a group. Might just have to be like that...

I'm keen to know if anyone has tried to make an intune dynamic group for all devices of a certain year group? So for all Year 7 pupils and their devices to have a group so I could assign specific software to them. I'm struggling to find anything I can do beyond manually assigning them to groups...

Are you buying and fitting yourself for this price? I got a few quotes and the screen alone was about £1000-£1200

Bit of both but increasingly, it just doesn't work, you cast and they just fail to connect. Sometimes restarting them helps, sometimes it doesn't. It's my biggest callouts. The worst areas I changed for wired and never heard from them again.

I agree don't worry, when you go for the business panels you may as well go for touch screen with everything built in. The ms dongles are now out of support and are slowly losing their reliability for me.

Just to say, we got recent quotes and a iiyama screen fitted was about £1300-£1500 a classroom. Interactive boards have gone down alot but obviously nothing is cheaper than a consumer grade tv and a casting tool. Our projectors are rubbish though.

Following, same situation, I've suggested hard wiring but this was not wanted as staff like to "walk around the classroom" new head and new academic deputy starting in September which I'm sure will change this requirement. I've mentioned touch screens, we are still running projectors.

You need a cloud filter, and if you have managed student laptops or you have laptops that come into school for work you need to be cloud filtering to be fully KCSIE compliant. We use lightspeed which is excellent. Smoothwall have a cloud filter but last I checked it was chrome only so you'd need to ensure you had applocker and other policies in place but even then personally you need a whole of device filter which is what lightspeed offer with their agent. There's senso and many many others, I'd argue Lightspeed is the best of a bad bunch though, they all have their weaknesses. Lightspeed are also heavily developing, they've just introduced AI image filtering and also will be releasing a function to detect AI prompts and their outputs which will save me a lot of work if that is going to truly work like the way they claim it will.

I spent an hour on hold being passed around teams. We've decided to sack off BT Cloud Voice and are now moving to 3CX. The cost was hugely cheaper and BT Support was non-existent. Not to mention the fact I got absolutely harassed by a 3rd party vendor trying to renew me despite already having an account manager, I'm talking 6 calls a day multiple to my mobile. Nice to know BT shared my personal mobile (which they forced me to add to access the admin portal) with 3rd party sales companies.

@loxford01Thank you, apologies if I wasn't clear, I understand that it is licensed based on number of users but what I mean is that I'd like to make the device license assignment slicker. Currently it involves me finding the device, then going into classroom cloud, assigning it to a group and then the group assigns the license. I'm hoping for a way to smooth this process. Classroom Cloud does allow for Dynamic Device assignment based on certain scenarios but I wondered how others have done this. Students are AAD joined only so no AD group that I can lean on. Even that that would be user and not device. Just spitballing ideas really for this. Considering perhaps device year groups in Intune to allow me to do some other device assignment etc but again this is a manual process as I'm not quite sure of the anchor other than the device. Saw online Device Category was mentioned which I was planning to use for something else but I suppose I could use it for this instead. Again any advice would be handy perhaps just device management and not classroom cloud specific.

Hi All, Wondered if any of you have dealt with this that might be able to enlighten me. I inherited Classroom Cloud and it's quite a mess. I have reached out to Classroom Cloud support but I wondered how people dealt with device licensing. I'm not a fan of lots of manual moving parts and we have only got enough licenses to license years 7/8/9. I understand there are dynamic device group allocations which can be based on Entra ID but I'm not really understanding how that is really helping me? Our devices are named "PREFIX-SN" so can't use a name but could I maybe use a group based on the assigned user? Just trying to make this an easier process that it is. Any advice accepted.

Only issue with this is that it likely means your tenant identifier isn't set meaning in theory if someone slips through the net they will have access to copilot. Also might also be worth noting that by using the K12 identifier and classifying your students as non adult they are set to more tighter data control, no data sharing and their inputs aren't used to train the AI. I'll try and find the Microsoft article that showed that. It's probably worth doing to tick an extra box and it seems they're using that identifier in other ways to protect underage students data.

Yeah the solution was waiting...of course it was...basically Thursday afternoon I enabled the K12 switch. Was still working fine. Overnight it synced and blocked all access. Friday I put in place year 7/8 minor and Consent Granted (this is important as without this it blocks the office.com app page) and non adult for all other years. Nothing happened, come Monday it was all working perfectly... The Microsoft Minute Strikes again.

Hey guys, Thought I'd give me 2 cents and then ask for some help! So firstly you need to set your tenant as K12. I did try the powershell script that Microsoft suggest you're supposed to use but that just wasn't playing ball and then I came across some articles referring to how I couldn't run it that way with edu tenants...I mean that makes no sense but moving on. In the end you can actually go to Admin Center > Org Settings > Microsoft Education Tenant Identifier and set this to your type of institution. Do be aware that if you select K-12, if you haven't set the age group or consent it will block office.com and copilot for everyone. With K12 the default is block unless consented. Higher is allowed unless under the age group or not consented. Other I'm not sure on. Anyway so I had a play with my test account. At first I could set as Minor which would block office.com and copilot, if I consented it would allow copilot and office.com so I was getting a bit annoyed. Overnight however, I set the account this morning to Minor and Consent Granted which seemed to allow office.com but block copilot. Hazzah! I scripted it and put all yr 7/8s to be "AgeGroup Minor" and "ConsentProvidedForMinor" to be Granted. (Our AUP includes consent for 365 services but not copilot). The below code works but I did realise I haven't put logging and when it errors it still spits out "Updated agegroup" even though it hasn't so just be aware of that. The CSV but have userPrincipalName, AgeGroup and Consent as the headers if you want to use my exact script. $users=Import-Csv ".\StudentsAgeGroups.csv" # Connect to Microsoft Graph Connect-MgGraph -Scopes "User.ReadWrite.All","Directory.ReadWrite.All" foreach ($user in $users) { $userPrincipalName = $user.UserPrincipalName $ageGroup = $user.AgeGroup $Consent = $user.Consent try { # Update the AgeGroup attribute Update-mguser -UserID $userPrincipalName -AgeGroup $ageGroup -ConsentProvidedForMinor $Consent Write-Output "Updated AgeGroup for user: $userPrincipalName to $ageGroup" } catch { Write-Output "Failed to update AgeGroup for user: $userPrincipalName. Error: $_" } } Now this is where I'm stuck. For Year 9+ we want copilot available. So for them I did what's suggested which is made their agegroup "NotAdult" (Essentially 13-17 Year olds) and set consent to None, as that's specifically consent for minors so didn't seem relevant. Now they can access office.com but copilot is still showing as "Coming Soon". So my thinking is 1 of 3 things. 1. Wait 2. Changing the tenant identifier has also disabled copilot somehow 3. I'm missing something else that needs to be added. I'd really appreciate some insight into how you've resolved this! This has been an absolutely minefield with Microsofts advice not working and having to rethink the solution!

Hey guys, Hoping to get some insight. I've started at a new place where the students and staff members have been split into 2 tenants. The students are in the new tenant (Secondary) and then there's some form of B2B connection into the staff tenant (Home) so the students are then created as guest. This is obviously ridiculous for so many reasons and it's made the systems and processes even worse. When the split occurred there was a lot of loss specifically with Teams, assignments and tests done in teams were no longer appearing which judging by what I know is probably just as they got readded back, they don't pick up where the student left off. I'd like to avoid this but it seems our situation is quite unique and Microsoft doesn't seem to offer any specific guidance for this. Essentially what I'd ideally do is: - Make the "Guests" proper members. - Migrate OneDrive Files etc from the Secondary back to the Home into the "Guest" accounts" There will be other things to deal with ultimately such as some devices are now in the Secondary Tenants Intune and I'll need to recreate some policies, but that needs doing anyway. Keen to know if you've had any experience doing this or any gotchas to look at. I have approached a 3rd party to discuss but it's the Teams thing that is proving a challenge. Dipl0

Hey! We are working at our move into Windows 11 with all devices now on intune. I've looked at using the "AutopilotBranding" tool (GitHub - mtniehaus/AutopilotBranding) to create some defaults for the users, wallpaper, some amendments. I came across a video ( ) where this guy had configured the Right Click Menu to be the old style right click with all the options and also the search task bar to be minimised. Now I'm going to give another crack at the Pinned taskbar anyway, but the right click menu I can't seem to get right. I used his advised Reg edit of [font=arial]reg.exe load HKLM\TempUser "C:\Users\Default\NTUSER.DAT" | Out-Host # Restore Right Click Menu reg.exe add "HKLM\TempUser\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /d "" /f | Out-host # SearchTaskBarMode Icon Only reg.exe add "HKLM\TempUser\Software\Microsoft\Windows\CurrentVersion\Search" /v SearchboxTaskbarMode /t REG_DWORD /d 1 /f | Out-Host reg.exe unload HKLM\TempUser | Out-Host[/font] This particular method works for the other options I am applying such as taskbar alignment etc but these 2 do not work. I note that there is a per user reg key that you can apply for Right Click Menu; [font=arial]New-Item -Path "HKCU:\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" -Value "" -Force [/font] There is also a per user reg key for the search task bar icon but I do want to do a slightly different task bar as I also need to pin a few apps to the task bar which I cannot do within this tool. HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name SearchBoxTaskbarMode -Value 0 -Type DWord -Force Hoping someone can help to as if it is possible as so far I haven't been able to and if not I can try merge it with the taskbar setting or something...One assumes that this may be the constant battle with windows 11 and it may all be reverted in an update anyway... Dipl0

Long story short. Within the DT controlled assessment they were using iPads centrally managed by Intune. As per exam officers guidance I hid Safari and Outlook via a new device restriction policy. We already had one in place so I worked around some of the conflicts and got it working. Now, I have removed the device restrictions but I can't get Safari to come back up...the options for the policy are blocked or not configured, and I'm wondering whether it's a typical Microsoft "Well you changed it to block so now you can't unblock it it will just show as not configured" Any advice? I have tried Deploying Safari via the VPP and Intune to no avail. I know I could just wipe it but trying to avoid that if I can.

Right, so I'm after an incredibly specific cable which I'm not finding anywhere and wondered if anyone has an alternative solution. We are deploying Docking Stations to some of the boarding houses house study areas but obviously, some devices have USB A and some devices (Macs) only have USB-C. There's an absolute plethora of A to C adapters, but I wondered if there was a USB B end which then would go to USB A with an attached USB C attachment (Hope that makes sense.) This allows for the girls to choose which one of the ends they need, and most importantly avoids theft or misplacing of this adapter! Look forward to your creative solutions!

Sure as anything. They have actually been working fine for the past year or so anyway but now recently the issue has occurred. Seems like a license issue as it says "The License activation limit has been reached" but it's not activated at all currently. Zafer

Hi All, First post so be kind! We are having some issues with our Free Casio Emulator License. They appear to be showing as licensed but they're not showing up at all in the licensing server and unable to reassign them. I have been trying to contact the Casio support for weeks, sent multiple tickets to their support and normal departments but had no response. I spoke to Casio's main support and they mentioned that the emulator team is email only which is not ideal...so multiple emails and tickets later and still...no response...this has been almost a month now. Any idea if Casio Emulator support is even active or have they Furloughed everyone?! Thanks!