AvaFX

Hi all, I'm looking for some advice please on the best way to monitor user activity and run reports. I've inherited a tenant and a number of users are vulnerable children. The organization has asked me to provide as much information as possible with regards to their wellbeing. Things such as activity times, files/folders, communications, profanity... anything that will be an advantage in keeping them safe. Im curious as to what kind of reports and information I can extract from Azure and 365, what would you recommended I look into? Any advice is greatly appreciated, thank you!

Thank you Rob, I appreciate the links. I will give this a go!

Thanks, yeah I saw the same thing. Runtime was already on the machine, and I've since repackaged and deployed C++ 15-19 and its installed but not made a difference.

Sure, the app is an MSI so it has been uploaded as an MSI line-of-business app. And here's the app settings attached. (The prerequisites of .NET and C++ 2015-2019 are already on the machines). Edit: Just to clarify, the command works perfectly well when ran from the command-line. I did a bit of a deep dive into the registry keys for Intune on the device and it gets stuck at 'error 50 - EnforcementInProgress' - and never moves on. Here's the link for context:

I did, and they said that they didn't have any advice for Intune but to try following their Group policy guide. It wasn't that helpful.

Hi guys, This may be a bit of a long shot but is there anyone here that makes of Foldr (https://foldr.io/) and has it deployed to Windows 10 devices via Intune? I've rode my luck with app packaging for Intune and I've hit this like a brick wall. My install is continually stuck as the 'Enforcement' stage and never installs. It would be great to hear from anyone else who has also run into this problem! A

Thanks for your reply! There's no backups or tasks scheduled for that time (only out of hours) and I've monitored the DCs performance in vSphere and there's no spikes in resources. I can't see anything network-related that might cause an impact on this.

Hi guys, I just wondered if someone could please help me troubleshoot a Group policy issue on Server 2019? During a brief window of around 45mins-1hr at around 1pm every day, Group policy updates can't process. I've pasted the error from the command-line (see below), I was hoping someone could please point me in the right direction? I'm not seeing any obvious errors my end as of yet. Thank you [EDIT: All the machines are wired] ... "Updating policy...Computer policy could not be updated successfully. The following errors were encountered:The processing of Group Policy failed. Windows attempted to read the file \\\SysVol\\Policies\{624EAD89-2A6B-47FA-9142-C0E054B8F51D}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:a) Name Resolution/Network Connectivity to the current domain controller.b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).c) The Distributed File System (DFS) client has been disabled.User Policy update has completed successfully.The following warnings were encountered during user policy processing:The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results."

Hi guys, Just curious if anyone has had a positive experience with deploying SIMS into an Intune environment? Posting on behalf of a a friend who is struggling to deploy SIMS using Intune, as Solus is very reliant on AD (on-prem). All of the new devices that are rolled out are AAD joined, no longer linked to on-prem AD, so getting SIMS out to the devices has been a painful experience. Have any of you had similar issues or could perhaps point us in the right direction of an effective way to get SIMS out to these new devices? Grateful for any help! Best wishes, A

Hi guys and gals, Has anyone successfully managed to deploy mapped network drives/enabled UNC paths using Intune? The closest I have come is to deploy a PowerShell script however it doesn't appear to work. I can enable the UNC path when I run the command below locally on the device, but I'm not seeing the same result with the Intune PowerShell script. Intune is telling me that the script was deployed successfully to the device but I've not seen any evidence to support that. net use \\\ password /user:domain\user /persistent:yes Any tips would be awesome! Thanks! Best wishes, A

Life-saver! Thank you Jawloms, I had to turn off the self-service password reset option! For anyone else with the same problem, here's the Microsoft article to enable/disable it: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

Hi guys, I'm having an issue where all users are prompted for 'more information' when logging in to Microsoft 365 services. 'Enable Security Defaults' (Under AAD > Properties) was turned off over 3 weeks ago yet the prompt still remains. Is there somewhere else in Azure where this needs to need be disabled? A lot of Google searches suggest that turning off Security defaults *should* be enough, but it hasn't stopped the prompt. Any help is greatly appreciated! A EDIT: MFA isn't enabled for any users.

Hi guys, I have seamless SSO enabled within my environment and can confirm that it is working, however OneDrive (despite being able to sign in with SSO) won't sign the user's in automatically when logging in and won't move the 'important' folders to OneDrive despite having a GPO configured to enforce this. The GPO seems to be applying ok, no errors to see with RSOP, gpresult or Event Viewer. My user and PC are both domain joined to Azure AD (hybrid) and Azure AD has been setup to use Password Hash Synchronization. I just wondered if anyone had any ideas on how might troubleshoot this? I've tried following the documentation on Microsoft's site but I'm getting nowhere. Any help would be amazing! Best wishes, A

I gave it a whirl and it worked, thanks so much for this link! A

Hi guys, Has anyone managed to successfully archive Teams in bulk? Our SMT have decided that they'd like to archive all Teams (around 600) however on Microsoft's documentation I can only find a GUI option (one by one). If so, I'd be very grateful for some tips Thank you! A

Hi guys, Our vCenter root password expired today, so I had to go via the process of resetting it via SSH. The new password works, as I am able to enter it for another SSH session, however the VAMI will not accept the new password? Has anyone come accross this problem before? Best wishes, A

Hey Kenny, it's a tad misleading as this command actually requires the Skype for Business Module - it caught me out too. Here are the steps to connect to it: https://docs.microsoft.com/en-gb/office365/enterprise/powershell/manage-skype-for-business-online-with-office-365-powershell

Thanks Rob, that's a perfectly good workaround. You're a star! A

Hi guys, Does anyone know if it's possible to invite another Team or Group to a meeting when it's scheduled? Or is this a limitation of Teams? The reason I ask is that a teacher, at times, may be required to teach two classes rather than one and it would be really hand if they could schedule a meeting where both classes (Teams) could be invited. Thanks! A

Hi both, I've just tested this script and with a few minor tweaks for my environment, it worked well! Thanks TechMonkey!

Hi guys, I've been scraping by with PowerShell and Teams however I can't seem to find a reference for the PowerShell Policy types. Here's what I know so far: -PolicyType [b]TeamsMeetingPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsMessagingPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsAppPermissionPolicy[/b] -PolicyName Education_SecondaryStudent [color=#ff0000][/color]-PolicyType [b]TeamsAppSetupPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsCallingPolicy[/b] -PolicyName Education_SecondaryStudent I just wondered if anyone knew the full list of names for Policy Types in Teams PowerShell? Thanks! A

Hi guys, Does anyone know if there are any capabilities within Teams or through a third-party app to take attendance when conducting an online lesson within Teams? SIMS have advised that nobody should be taking registers after Easter however school's will still want to know who has attended an online class/meeting. Any help is greatly appreciated! Thanks A

Hi guys, Our teacher's are currently using Teams to deliver remote lessons, however the students appear to have the ability to mute each other and the teacher. Is there a way to combat this, can the option be disabled at all? Thanks for your help! A

Thanks Psydii, that's really useful and gives me something to build on.

Hi all, Unfortunately we've have had to roll Teams out early due to recent events. Staff are using Teams to teach lessons however Students have access to most features, which isn't fun! I was wondering if anybody could please recommend any reference material for setting up Teams & SharePoint for Staff/Students? I'm struggling to find a useful guide about locking down the features of O365, especially for Students. We've only just begun our O365 journey so it's all a bit new to me! Any advice would be greatly appreciated, thank you! A