Webscreen 3.0 - any news?

[DavR]

Anyone heard anything about where we are with Webscreen 3.0?

 

When I spoke to Atomwide at BETT, they said this was being implemented over the half term, but there's nothing on the support site about it :/

[bald_pig]

Paging @JohnJackson

[JohnJackson]

We're on course to launch in April and there will be more than a sneak preview at the Technical Services Conference on the 29th March!

[JohnJackson]

Dave, we could have launched then but we wanted to spend a bit more time getting help videos and documents together and adding some features following feedback from schools.

[fiza]

@JohnJackson - If you are looking for a School to be in the first tranche then our Primary School is about to join LGfL so would be ideal candidates. Save us doing IP based policies and then changing to AD Integration after a few weeks.

[DavR]

Thanks for that @JohnJackson, understood you want to get the product right before launch. Look forward to it in April

 

Might have been nice to have some communication though, as "Webscreen 3 available after Feb half term" was one of the big takeaways from BETT for us.

[bald_pig]

Is anyone else on day 4 of the webscreen update? service desk updates stopped on Tuesday evening saying it should be done by Wednesday -.-

[JohnJackson]

It will be done by today! Everything working. Just final testing. Updating over 3000 schools took a little but longer than expected but its a thumbs up for today!

[DavR]

Mine went through yesterday I think, I saw some new screens. Haven't been doing much desk work this week though so haven't investigated yet.

[fiza]

Mine went through yesterday I think, I saw some new screens. Haven't been doing much desk work this week though so haven't investigated yet.

Which new screens? I thought webscreen 3.0 had its own website and not handled through the usual atomwide support portal?

[DavR]

As in, block.lgfl.org.uk has been revamped. We use a base IP policy, but staff can login there for the higher level of access.

 

Haven't looked at the management pages yet.

[JohnJackson]

New management screens will be available today!! Much more user friendly.

[PaddyNewman]

Which new screens? I thought webscreen 3.0 had its own website and not handled through the usual atomwide support portal?

That is indeed the case, it's a full revamp and changes based on feedback. I/we can't wait to get some feedback on it.

[gh5000]

The announcement says it is open now. But can anyone actually log in?

 

I'm getting stuck in a redirect loop.

[bald_pig]

The announcement says it is open now. But can anyone actually log in?

 

I'm getting stuck in a redirect loop.

 

I'm in, it's very shiny!

[PaddyNewman]

The announcement says it is open now. But can anyone actually log in?

 

I'm getting stuck in a redirect loop.

 

That should be resolved, feel free to test and provide any feedback!

 

Shiny indeed!

[JohnJackson]

Great news. A lot of hard work went in to get this right.

[MS2011]

Great news. A lot of hard work went in to get this right.

 

[emoji106]

 

Is there any plan to update or change mailprotect?

[JohnJackson]

No immediate plans but happy to look into this. What would you like to see?

[DavR]

Usage update from us - I've just put the AD Link scripts in place. We are now, in theory, AD integrated to Webscreen! Testing seems to be OK, the real proof will be next week.

 

One thing I did find is that the login scripts Atomwide provided did not work with our group policy setup. As far as I can see, the scripts they've provided call the WebScreenADLink.exe file without specifying the source directory, which won't always work. I've worked round that though, and fed back on the support site.

[PaddyNewman]

Usage update from us - I've just put the AD Link scripts in place. We are now, in theory, AD integrated to Webscreen! Testing seems to be OK, the real proof will be next week.

One thing I did find is that the login scripts Atomwide provided did not work with our group policy setup. As far as I can see, the scripts they've provided call the WebScreenADLink.exe file without specifying the source directory, which won't always work. I've worked round that though, and fed back on the support site.

 

Would you be able to share what you did differently?

 

The testing I performed was through AD script for login (.exe and .bat in Netlogon naturally) and GPO to enforce logoff (using the show files + paste .exe and.bat into the specific script folder.)

 

This appears to work from our end, but keen to know how you did this so we can advise if schools have issues.

[DavR]

Hi Paddy,

 

I put the whole folder into \\MYDOMAIN\SysVol\MYDOMAIN\Policies\{GUID-OF-A-POLICY}\User\Scripts\Logon, and added login.bat as a group policy logon script from there. The script did not work in that configuration.

 

Given that we have multiple policies and multiple scripts, I don't use NETLOGON for login scripts, haven't for a long time. I always keep login script within the policies these days.

[DavR]

@PaddyNewman, a bit of advice please!

 

I've found that my Webscreen credentials have expired, so I've lost the extra access groups I was signed into at login, and reverted to my IP scope default policy.

 

Is there a timeout on the ADLink system? If so, can this be changed somewhere?

 

OR, is it because I've been logging on to other machines around the building, and logging off again? Can a domain user only be signed in to Webscreen on one PC at a time?

 

Thanks!

[PaddyNewman]

@PaddyNewman, a bit of advice please!

I've found that my Webscreen credentials have expired, so I've lost the extra access groups I was signed into at login, and reverted to my IP scope default policy.

As in you have authed and just used the machine, its then just forgotten who you are?

 

Is there a timeout on the ADLink system? If so, can this be changed somewhere?

There is a timeout, however it is not for AD accounts, purely USO. I'd be keen to see whats happening here from your end.

 

OR, is it because I've been logging on to other machines around the building, and logging off again? Can a domain user only be signed in to Webscreen on one PC at a time?

That should not matter, essentially all we do is accept username you send and add it to the IP address you are coming from in the database.

Ideally, I'd need a support case, as you can hopefully understand I need to account for my working etc, I am more than happy to look into it further with you but from a support perspective, I can only do so much here before I cross the line

Edited April 17, 2019 by PaddyNewman

[DavR]

Righto Paddy.... will stick this in a support case FYI.

 

I've logged on to my main office PC, and then have been logging on to PCs around the building for maintenance. Upon return to my main desktop, I've lost access to my additional groups. Weird!