Back to Portal
Meeting Agreements

Alaska Center for Children & Adults
Endpoint Policy Get Well Plan

A record of what ACCA and Vicinity agreed on November 4, 2026, covering the plan to align workstation policy across both environments.

Meeting Date November 4, 2026
Attendees Heidi Haas, Tiffany, Jenny Traver (ACCA) · Rob Thurston (Vicinity)
Prepared By Vicinity
Nov 17
Policy Cleanup (Evening)
Nov 18
Support Bridge, 8–10 AM
2
Reports Requested
1
What We Agreed

Every item below was discussed and agreed in the November 4, 2026 meeting. This page is the reference for future meetings so we can confirm what was decided and keep moving forward from it.

TopicWhat Was AgreedStatus
Get well planACCA approved Vicinity to begin changes to Group Policy and Entra ID policy on the evening of Tuesday, November 17.Agreed
GoalSettings and user experience match one to one, whether a workstation is on the Old Side (Active Directory) or the New Side (Entra ID).Agreed
Old policiesOld Group Policy that no longer applies or no longer works as intended is removed.Agreed
Desktop shortcuts and screen lockDuplicate desktop shortcuts and the inconsistent 15-minute inactivity lock are fixed as part of the cleanup.Agreed
Existing devicesNo profile migration. Existing devices stay as they are and are replaced as they age out.Agreed
Apple iOS devicesExisting devices stay in Unsupervised mode and are not redeployed. Every new device is deployed in Supervised mode and enrolled in Intune.Agreed
Support after cutoverRob Thurston hosts a Teams bridge on Wednesday, November 18, from 8:00 to 10:00 AM.Agreed
ReportsVicinity provides Heidi with a device join report and a SharePoint permissions audit.Requested
2
The Get Well Plan

ACCA workstations run in two environments. To keep our conversations consistent, we are calling them the Old Side and the New Side. The plan is to make both sides behave the same way, then build on the New Side for any devices ACCA adds in the future.

1
Two environments, one experience
Old Side

Workstations joined to Active Directory (server based). Settings come from Group Policy (GPO).

New Side

Workstations joined to Entra ID (cloud based). Settings come from Intune.

What Vicinity Will Do
  • Remove old GPOs that are no longer applicable or effective. These can slow logins and cause inconsistent settings.
  • Clean up the remaining policies so they are current and consistent.
  • Create matching Intune policies so GPO and Intune settings match one to one.
  • Validate the health of hybrid join between the two environments.
  • Test and validate the New Side so it works reliably for any new device ACCA enrolls.
Timeline
WhenWhat Happens
Tuesday, November 17, eveningVicinity makes the Entra ID and Group Policy changes described above.
Wednesday, November 18, 8:00 to 10:00 AMRob Thurston and the Vicinity operations team run a Teams conference bridge to help with any user issues. Any ACCA team member is welcome to join.
After the cutoverVicinity works with Tiffany on any new policies or application deployments she wants on the New Side.
What This Work Does Not Include
  • Enrolling all ACCA devices in Intune. The November 17 work is limited to matching policy between the two environments.
  • Migrating user profiles from existing devices. These devices will be replaced over time as they age out.
  • Changing the mode of existing Apple iOS devices.
3
Issues Raised
1
Duplicate desktop shortcuts
What We Heard

Tiffany reported that her desktop fills up with copies of shortcuts that GPO creates, such as Policies & Procedures.

What Vicinity Will Do

The GPO shortcut items may be set to the Create action, which can add a new copy each time policy applies. The Update action changes an existing shortcut in place. Vicinity will correct this during the November 17 cleanup.

2
15-minute inactivity lock
What We Heard

Tiffany reported that GPO does not apply the 15-minute inactivity lock screen consistently. ACCA needs this lock for HIPAA.

What Vicinity Will Do

Vicinity will fix this as part of the cleanup so the lock applies the same way across both environments.

3
Apple iOS devices
What Was Agreed

Existing iOS devices stay in Unsupervised mode and are not redeployed. Every new device is deployed in Supervised mode and enrolled in Intune.

Current Management

Devices in Unsupervised mode are still fully managed through Intune MDM, including app deployment and remote wipe.

4
Reports Requested

Heidi asked Vicinity for two reports.

ReportWhat It CoversReference
Device join reportLists which devices are currently joined to the domain and which are joined to Entra ID.Not yet scheduled
SharePoint permissions auditAn Excel workbook listing all SharePoint sites and document libraries, the effective permissions on each, and the members of any security groups involved. Heidi and her team will review it to confirm it meets their requirements and to identify any discrepancies.Ticket #94924
5
Action Items
Rob Thurston and Vicinity team · Vicinity
Remove old GPOs, clean up remaining policies, and match GPO and Intune policy one to oneTue, Nov 17, evening
Stop GPO from creating duplicate desktop shortcutsNov 17, with cleanup
Apply the 15-minute inactivity lock consistentlyNov 17, with cleanup
Validate the health of hybrid joinWith the plan
Host a Teams bridge for any user issues after the cutoverWed, Nov 18, 8–10 AM
Deploy every new iOS device in Supervised mode and enroll it in IntuneOngoing
Deliver the device join report to HeidiNot yet set
Deliver the SharePoint permissions audit workbook to HeidiTicket #94924
Heidi Haas and team · ACCA
Review the SharePoint permissions audit workbook and identify any discrepanciesAfter delivery
6
General Notes from ACCA

ACCA shared the following plans for context. We will keep them in mind as we schedule work.

  • New hires: ACCA plans to onboard 4 new employees in December.
  • Accounting system: ACCA is moving from QuickBooks to Sage Intacct in June 2027. Jenny Traver, Controller, is leading the initiative.