SimonInOz

Sorry, I don't think I was very clear. I want to prevent any transfer of desktop/documents/pictures to onedrive, is there a way to turn this off with group policy?

Hi, I have just noticed that Onedrive is now backing up documents/pictures/desktop to Onedrive automatically. Is there a way to control this via Group Policy? My students will be back next week, and I want to prevent a mass upload of data. Cheers

Thanks Jack, I will certainly send you a msg. Thanks for the link, much appreciated. Any documentation, particularly workflow/checklists would be appreciated.

Thanks Roby (and other responders). Are you able to point me to information on how you set it up for things like assignments, etc? I also need to know how to log conversations, share files etc. Cheers

Looking for advice on how to manage it with students. We spent a lot of time locking down Skype, just wondering what is best practice in rolling this out in a school so it can be used, but not abused...

Hi, Experiencing this recently, two chrome icons are appearing on my users taskbar. I know I can delete them, but is there a way to do this for multiple users in a domain? Anyone know why this is happening now, is it the version of chrome that is causing this? Thanks

We use a VPN to connect staff in to our campus, and yesterday when at home, I got the following error: 'A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file' My system clock was fine, and was syncing with an external NTP source. We use SSTP to connect, and I am having trouble locating the actual certificate. Can anyone assist in troubleshooting this, and working out whether this is an expired (etc) certificate error, or something else? Many thanks

I have it ripped now. This site did it for me: https://o365info.com/enabling-outbound-dkim-signing-verifying-the-process-of-outbound-dkim-signing-in-the-office-365-environment-part-10-10/ It steps it all out, and makes it pretty straightforward to implement and test. Includes DNS setup as well, as a bonus.

Thanks. Also, when I used get-dkimsigningconfig it also shows an entry for Exclaimer, which is our Email signature product. Do I have to enable DKIM for this also? We route email through to them for signature addition.

Thanks Martin, I was using this webpage as a reference: https://docs.microsoft.com/en-us/office365/securitycompliance/use-dkim-to-validate-outbound-email#SetUpDKIMO365 Is the key generated from the powershell commands?

Hi, Can anyone assist with setting up a custom domain with DKIM? Specifically, I need to know: How are the DNS entries formed, i.e. how should they look, and Do I add entries for the onmicrosoft.com items also when adding my own domain? Want to make sure I do it right.. Cheers

Yes, the mystifying part of it all. I guess the time loss/gain is too much to pick up through increments.

VMWare, I know how to fix the issue, just not sure of the cause. Cheers

Thanks, yes, I do know how to solve it, just trying to work out why

Yes, as I said the time setup is pretty regular. Not my first domain (netdom /query fsmo and w32tm /config /reliable:yes) - - - Updated - - - Thanks, no different hardware, just random really. We have a stock of around 350 surface pro devices, all new. Yes, using w32tm regularly.

Hi, no it is not the timezone. It is correct.

Hi, I have an issue with 'some' W10 Edu clients (v1803) losing time sync with the domain. (Surface Pro 5th Gen) In some cases, hours are gained or lost. A bit mystified, as this would be about half a dozen clients at most, but reasonably regular in occurrence. Any pointers on troubleshooting this? Our NTP setup I believe is fine, and I have no other issues with time other than this one. A problem in lots of ways, but mostly as Group Policy doesn't apply, etc. Help? PS. Timezone settings are correct

Cheers, thanks for the info - - - Updated - - - thanks a lot, appreciated.

Hi, thanks for that. In relation to: Add the Run command to the Start Menu: Disabled This also seems to prevent me from using UNC paths and in fact any network location through group policy/AD. Is this correct?

Cheers mrcrazy, appreciate the information.

Thanks a lot for the updated info. Cheers

Hi, Is there a way to prevent powershell being launched/accessed by students? If someone has a straightforward way, preferably with group policy, that works it would be appreciated. I have tried SRP with a powershell hash entry, still launches. (Other items in the SRP do work though) Cheers

I ended up doing something like this. I put the delete (all drive letters) at the start, and then set the drive maps to create. Seemed to work well, but killed the home directory mappings which must hit first I guess.

Hi, We have a number of drive map objects, preceded by a delete object which deletes all mapped drives from F: upwards. Sometimes, one of these won't apply, is there any reason for this? I can map it in dos ok with 'net use' Any ideas? PS. Also, the personal mapped drive for a user might not necessarily appear also (user profile/ Home Folder/ Connect). Would this be affected by the delete object removing all drives?

No, I just have a small concern that a student(s) have managed to bypass the group policy and delete their history in chrome. Not sure if this is even possible TBH.