Search the Community

I'm in a new post. One of my responsibilities is to identify any policies which fall under the area of responsibility of the 'ICT Systems Manager'. I have the obvious one's Disaster Recovery, Acceptable Use Policy, Communications policy and Printing policy etc. but I'd be interested to know if there is a definitive list of policies which every Trust organization should have. This would be a useful resource for many as it would help ensure that all have a comprehensive list of policies etc. Any contributions gratefully received. Thanks..

Hi guys, I've been scraping by with PowerShell and Teams however I can't seem to find a reference for the PowerShell Policy types. Here's what I know so far: -PolicyType [b]TeamsMeetingPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsMessagingPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsAppPermissionPolicy[/b] -PolicyName Education_SecondaryStudent [color=#ff0000][/color]-PolicyType [b]TeamsAppSetupPolicy[/b] -PolicyName Education_SecondaryStudent -PolicyType [b]TeamsCallingPolicy[/b] -PolicyName Education_SecondaryStudent I just wondered if anyone knew the full list of names for Policy Types in Teams PowerShell? Thanks! A

I have a teacher that can't create any more forms as it says she's out of space. Where are they stored and what policy governs this? EDIT: ok the actual error is reaching the forms limit!

Hi everyone, I'm looking to roll out Intune across the school I work in and remove the onsite AD. I'm looking into what policies we should be applying at both a user and device level, should we just be applying the same as we have been doing using AD or do people have a tick list that they use when creating new tenants? Any help would be greatly appreciated!

We run a fairly large tenancy, large enough I don't really want to have powershell each individual users Teams policies individually. Only some of the policies now offer Group Policy Assignment. I noticed the other day Teams Admin center now allows you to create your own custom Teams Policy Packages and apply them to security groups... result! Or so I thought. I built one for our students, applied it to a security group of around 200 students on Friday, it's now Wednesday and it's only part applied. It is showing each student has an applied policy package but the actual policies for Meeting Policy and Messaging Policy for example haven't changed from Global (Org-Wide Default). I've done some reading online which suggest the process can be slow but 5 days?!

Hello, I have been asked to block a student from all teams chat and messaging. We set up a policy some time ago for just this purpose, and it worked fine. But now it appears to be totally ineffective. Student accounts with the policy applied can still reply to chats in teams etc. I can see the Disabled Messaging policy is applied and is the effective policy. But it is having no effect. I've tried searching for clues, but keep finding page after page of instructions on how to apply the policy. Which I know how to do. But nothing about ineffective policies. Just wondering if any of you have had similar issues or heard about any updates affecting policies? Thanks in advance for any input.

Hello everyone, After using RM CC3 with Windows 2003 and XP for the last 14 years, we are now about the start building a brand new network! Applause!!!! We are awaiting licences for Windows Server 2012 R2, and will be building the virtual server/s very soon. We cannot start the big change over until the summer (which gives us 5 weeks to install the network, change over PC's to Win7 about 210, 80 of these will be brand new) but some things we can get started with. One thing we want to get done now are the Group Policies, we obviously have our current ones for 2003 and XP (Not sure if I could export these to 2012) which may not include some policy settings but does anyone know where you can get pre-configured GPO's for schools/education from Microsoft or similar for Windows 7? We have decided not to go for Windows 8 just yet! I have started to create my own, but I am unsure for some settings and would like to at least compare my own to someone else's as I go along as this is the first time I have ever done anything like this. Ideally if Microsoft provide one that is pre-configured for schools that does the basics to stop the students changing settings etc that you can tweak to your own need that would be awesome. Any help would be greatly received.

Hi, I am not sure where the best place to post this is? I am trying to get a non school laptop (not part of our domain) to use our 'staff' filter rules via smartcache. Unfortunately the laptop reports 'default' policy, and on the smartcache logs the domain and username are blank shwoing an ip address as the machine name. This ip has to be dynamic so setting the laptop to a static ip is not an option. Any ideas, can this be done? Thanks in advance. Tony

Hi everyone, I'm having some trouble getting a new group policy object (for Google Chrome, using their provided ADMX file if that makes a difference) to apply. In an attempt to troubleshoot what's going on I've run the Group Policy Modelling wizard from Group Policy Management against a classroom workstation and a student user account. Once the report has run, rather worryingly it tells me that "The following GPOs have special alerts" and then lists what looks to be the majority of policies applied with the alert "Inaccessible, Empty or Disabled". The new GPO in question is a user only policy, however the alert is displayed for both computer and user GPOs. The environment is as follows: Two DCs, both Server 2008 R2 Clients are Windows 7 Professional SP1 64 bit Can anyone shed some light on this? The wording of the alert suggests that the policies aren't applying at all, but I know for a fact that all but the new one are. If I run GPRESULT /R on the physical machine as the student user account, in the "Users Settings" section I see some interesting anomalies, one being that it claims to have applied the Group Policy from a server for a domain which hasn't existed for at least 3 years or so and isn't actually still around, the DNS zone, let-alone server entry doesn't even exist for that old domain! Thanks in advance, Gary

Hey Everyone, I am curious to know what your school's policy or stance is on video games being played and social networks being played accessed on campus. For example, My school allows students to "use their laptop for leisurely activities" during breaks or lunch. The rational is that students need to manage their time and be able to make choices about what they do. Any and all comments are greatly appreciated.

Hello, Think this is the correct place for this to go as I believe it to be an issue with permissions or a gpo. We have a few user types, students, staff and system admins. When a student user goes to open a .html file (or any similar, .htm ect) the page, instead of loading, just redirects the browser to the users home page. I have done some testing, removed all policies from the user and the issue still remains, so I believe this to be a problem with the file server permissions for the user area. I have checked that and everything matches the staff users file permissions from the root of the server to the file location. Any user above student can open a .html file with out any issues. It just seems to be with the student accounts. Would anyone have any idea what the cause of this could be, Im running out of ideas here?! Thanks, Joe

I'm sure we can all pick holes in this set of standards for all the Hardware and backend systems need in a modern Primary, Secondary and MAT. But it does present some interesting points of reference if wanting to convince SLT or Governors for the need for hardware replacement or Cyber security etc https://www.nen.gov.uk/advice/standard-network-design/ My personal gripe is I would not recommend 5 years warrantee on a chromebook as that would cost as much as the chromebook itself....

Having to say no can upset staff, so I've asked SLT to approve a policy for software adoption on the school domain. I did use co-pilot for this but I had a lot of prompts ((btw my first actually useful interaction with it)) School Software Installation, Cloud Services and Support Policy 1. Purpose This policy outlines the procedures for installing, supporting, and removing software and cloud services on the school domain to ensure security, compliance, and effective use of resources. 2. Scope This policy applies to all staff and contractors using the school’s IT resources, including both on-premises software and cloud services. 3. Software and Cloud Services Installation 3.1 Approved Software and Cloud Services • Only software and cloud services approved by the IT department may be used on school devices and networks. • A list of approved software and cloud services will be maintained and regularly updated by the IT department. 3.2 Requesting New Software and Cloud Services • Staff may request new software or cloud services by submitting a Software and Cloud Services Request Form to the IT department. • The IT department will review the request for compatibility, licensing, security considerations, and the presence of a recognized legal entity behind the software or service. 3.3 Legal Entity Verification • The IT department will verify that the software or cloud service is developed and supported by a recognized legal entity (e.g., a registered company or organization). Homemade or unsupported software and services will not be approved. 3.4 Licensing Verification • The IT department will verify that the software or cloud service licensing terms are clear and that the school can legally use the software or service. This includes ensuring compliance with all licensing agreements and copyright laws. 3.5 Open Source Software • Open source software must have vendor backing to ensure professional support and maintenance. The IT department will verify the presence of a reputable vendor providing support for the open source software. 3.6 Installation and Configuration Process • All software installations and cloud service configurations must be performed by IT department personnel. • Unauthorized installation of software or configuration of cloud services by staff is prohibited. 3.7 Implementation Timeline • The IT department requires up to 30 days to implement new software or cloud services following approval. This period allows for thorough testing, configuration, and deployment to ensure smooth integration with existing systems. 4. Software and Cloud Services Support 4.1 Support Requests • Users experiencing issues with software or cloud services should submit a support request via email to the IT department. • The IT department will prioritize and address support requests based on urgency and impact. 4.2 Free Software or Cloud Services Without Support Contracts • For software or cloud services provided for free or without a support contract, the IT department will offer best-effort support. This means that while the IT department will attempt to resolve issues, there is no guarantee of resolution due to the lack of official support from the provider. • Users will be informed of the limitations of support for such software or services at the time of installation. 4.3 Updates and Patches • The IT department will manage and deploy software updates, patches, and cloud service updates to ensure systems remain secure and functional. • Users will be notified of scheduled updates and any required actions. 5. Software and Cloud Services Removal 5.1 Criteria for Removal • Software and cloud services that are outdated, no longer supported by the developer, or pose security risks will be identified for removal. • The IT department will regularly review the software and cloud services inventory to identify such items. 5.2 Removal Process • Users will be notified in advance of any software or cloud services scheduled for removal. • The IT department will handle the removal process to ensure it is done securely and efficiently. • Alternative software or cloud service solutions will be provided if necessary. 6. Compliance and Enforcement 6.1 Monitoring • The IT department will monitor software and cloud service usage to ensure compliance with this policy. • Any unauthorized software or cloud services detected will be removed, and the responsible user may face disciplinary action. 6.2 Policy Review • This policy will be reviewed annually and updated as necessary to reflect changes in technology and school needs. it looks nicer in word any input?

Hi all, I hope someone can help me. I am currently trying to deploy some shared printers via group policy using Server 2008. I have a printer attached to a local machine called ART-10. I have added this onto the server, sent a test page to it and it worked fine. I then deployed it to the relevant machines. The machines pick it up, but when something is sent to print to it, it fails without any explanation, it just says it 'failed to print'. I wondered if it was because I was using a printer attached to a local machine as opposed to a printer that is attached directly to the network with its own IP address. Therefore I am not sure of a workaround. It's definintely not a problem with how I have configured the printer, as it printer fine directly from the server. Thanks very much for any assistance.

Hi, Does anyone have a policy for student and staff printing they wouldn't mind sharing? Just looking for inspiration so we can get ours sorted. Just started using PaperCut to manage and monitor print credits and usage. Any help would be greatly appreciated! Thanks

Hi I have a governors meeting later on and have been brought in to tell the governors what other schools do regarding their ICT procurement procedure. At the moment staff seem to be able to go out and buy a camera for their department and we wouldn't have a clue! We're aiming to stop this and centralise everything. Does anyone have any documents relating to this or (fingers crossed!) have a School ICT Procurement form?! What happens in your school if a) A Staff member wants to purchase a camera for their department. b) A staff member thinks they need new computers for their room (do theyhave a say?) Related to this is our Audit Management. We currently use a simple excel spreadsheet, which we try to update every time we purchase something (Obviously if staff buy something its not on there!) What do other schools use? Thanks in advance!!

All my students are requesting to have VPN put on their laptops for when they go home. I've managed to add the VPN connection to their laptops via Group Policy but I could see no way of adding the desktop shortcut, which they prefer to use, in the policy settings! If I were to add the VPN connection manually to the XP laptops then you get the option but not in Group Policy! I don;t fancy manually adding it to ALL of the laptops so... Does any one know how you can add a desktop shortcut to a VPN connection via Group Policy or is this another one of those annoyances that Microsoft forgot about?