highsky

Yes, this is what we used: https://www.deploymentresearch.com/using-mdt-with-windows-autopilot-for-existing-devices-task-sequence-template-and-scripts/

Using the latest Admx for this? With 24H2 expiring October 27 any reason to be working on an new version that adds only 1 year extra EOL? With 24H2 we use intune for this, haven't tested with the fresh version.

I suspect is the new hardening rules. There's is a gpo setting to allow reuse of existing devices to rejoin and witch groups or users are allowed to do so

Yes, similar issue. New laptops come with 1920 x 1200. The issue occurs in duplicate mode. What seems to be working, like it remembers the setting? Open display settings, In Duplicate mode, Advanced Display, Select settings for the projector, Then advanced, In display mode set this to 1920 x1080 Select Keep changes. If done by shortcut using nircmd tool doesn't seem to save changes.

Too late? We are migrating so this was a requirement: I had this links not working initially, Library folder and subfolder ; https://yourdomain.sharepoint.com/sites/Repro/Shared%20Documents/Forms/AllItems.aspx?FolderCTID=0x012000EE9FF102EEB31B47938FC6F86AB5DCD3&id=%2Fsites%2FRepro%2FShared%20Documents%2FScans https://yourdomain.sharepoint.com/sites/Repro/Shared%20Documents/Forms/AllItems.aspx?id=%2Fsites%2FRepro%2FShared%20Documents%2FGeneral%2FScans&newTargetListUrl=%2Fsites%2FRepro%2FShared%20Documents&viewpath=%2Fsites%2FRepro%2FShared%20Documents%2FForms%2FAllItems%2Easpx Then tested their top level one from the example to another site, to test our setup: Shared%20Documents/Forms/AllItems.aspx/ This worked, but oddly enough the above links started working too. Not sure why, will see confirm if works for the staff too. Thanks,

Entra joined? You can explore these: https://github.com/SkipToTheEndpoint/OpenIntuneBaseline Hybrid? You can export you gpos as xml, import them to intune, and then select what you want to migrate to intune and what to keep if still using DC..

This piece of "software"... Ok, so you need to enroll for their update notifications, as if not the lab version will stop working. They have instructions for scheduled task updates, as these are frequent. Every update takes 4GB and leaves behind the previous ones. Terminal only option with the installer to remove the previous one. The new version requires whitelisting a few domains in order for their browser login verification to work. If the cloud one works go with it. They posted domains to allow for this to work behind firewalls. The license works when selecting educator or student options.

How many clients? Is SCCM an option? Do you want to move away or having it working again will do? An option will be a full migration and reusing the same ip, sharess, and builds afterwards. https://community.spiceworks.com/t/migrate-mdt-to-new-server/1012432 Any experience with Friends of MDT?

Gam if it's your thing. ClassRight was quite handy for bulk tasks, free: https://www.goldyarora.com/guides/classright And he has more for workspace: https://www.goldyarora.com/apps

Are these baseline apps across the board? I think I had something similar happening. Not the perfect solution but this is what I do: Deploy them apps as required to the desired collections aside from the TS. So if any fails during the imaging the client deploys the missing ones short after.

Two more secondary schools got attacked in South West, at the end of February and end of March. It took them more than a month to restore their services, no details yet on the attacks. On Microsoft tennants there are now preset conditional access policies for the admin portals and the admins to activate. As by default they give read access to all members. I would like to see this one presented by them as an interactive quiz with a 6-9 months mandatory retakes: https://www.ncsc.gov.uk/information/cyber-security-training-schools The training sites for CPD i would expect by no to have some sort of training for this too.

The gpo settings for all the browsers are here: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sso-quick-start

As above ms authenticator and the mobile number option for any outdated devices. Azure conditional access to exclude the school ip. Hopefully you aren't a Google school for this atm. For any pushbacks key or no access externally. On top geolocation in Azure and firewall.

Yes, if SLT care dor the teachers and students experience between them two products Google Classroom is a more mature product. For automation Salamander can do both, Wonde used to do only GC. Not sure if Google sync can do it too. The only pain point, if you are a gui person, was the admin part of it. Saying that i haven't been supporting it in the last few months so can't tell if this has improved.

What is your current solution? Munki recipes is set and forget solution for quite a few apps and their updates. Does anyone uses any cloud mdm to push Adobe packages or music apps and their libraries? Can someone give some figures for Jamf School?