psydii

recycled some dfe laptops and dedicated them for the purpose. wifi is switched off, acounts wiped by exams team after scripts handed in via usb/printing. Devices are maintained with a monthly reconnect over a weekend, and again over the holidays.

but why though?

Assuming BYOD, are you installing the root CA or the cert used by the radius server? Also what about the cert for MITM web traffic inspection? Does andriod limit the scope for these, or are you required to make personal devices trust all certs for all purposes issued by your CA?

Its definately worse this september than it has ever been.

Consider this an anecdote: My account wasn't playing nice at home over the weekend either, with similar errors, and absolutely resolutely failed to reauthenticate with a passkey or any other method.

This just crossed my radar, not seen anything yet, but not checked either. Thought I'd drop it here in case it's useful for anyone. KB5124008 Is Breaking Domain Logons on Windows 11 25H2 —… — EndpointWeekly

1996 is calling with a prior art claim. This is how I saw it done when the printers were connected to VMS, the clients were Windows 3.11 / 95 and the domain was NT 3.51.

IRMS (2020) advised DoB+31. The basis was the EHCP is (was?) valid until the individual reaches 25 years, and then there is the +6yrs in line with the limitation Act. DfE removed the bit about retaining SEND date last year. From Updates - Data protection in schools - Guidance - GOV.UK: Both can still be true - there may be no specific statutory duty, but between the final school needing to retain records in general until 25th birthday, and best practice to protect both parties in view of the limitations act, 31 seems to remain the prudent choice. However some safeguarding still needs to be kept potentially until a person's 75th birthday: Data protection in schools - Record keeping and management - Guidance - GOV.UK

We actually find it about as reliable as redirected folders - which also used a sync engine under the hood (the csc.sys driver/redirector that actually sat between the gui and network shares). That said locating missing files is much easier with OD - the online recycle bin and that "cached" files are in a user accessible folder enable self-service recovery by students/teachers.

Don't some IWB vendors offer firmware that defaults to lower refresh rates for just this reason?

FWIW our GPO architecture dates back to 2003-2006ish. When we moved over we set a policy with a higher precedence, and that policy changed redirection and applied OneDrive related settings, filtered based on group membership (because we were rolling it out progressively). That said our method predates "known folder move" by about five years, so YMMV. I would caution that we put in place seating plans ahead of the migration so students OneDrive's were basically already sync'd (after they'd logged on once in that room) when/where ever they log on, this seems to have eliminated "missing files" problems that some schools seem to suffer with. We do have a 1G/s link up and down, so syncing is pretty quick (but way way slower than just mapping a drive).

The RAM in them is probably worth more than that.

You are just asking a question, but I'm not sure anyone else who is having a problem is actually allowed to say so in public. We don't use CPOMS, so I can say with certainty we aren't having those problems! Though we are having serious issues with a similar platform from somebody else - and groupcall appears to be the common factor. Not had a chance to dig in to see if GC is actually the root of it yet though.

Dunno. Just followed the guide in the KB articles (and also as prompted via id.sims.co.uk) and this set up the new ParentPay App inside EntraID-Entrprise Applications. I assume the equivalent flow for Google is triggered the same way. To me it is very clear that the intention of this new SSO via a new app registration is to allow single sign-on as we (and DfE) expect rather than taking the spiteful path TES have chosen.

I think you are missing something. The new process complete removes the current (janky) flow to link accounts to external authentication systes. All NEW users need to do is (on the new logon page) click the "logon with 365" or "logon with Google" buttons. That action triggers the sending of a verification code which they enter and, voila they are logged on to the webapp. Future logons don't require the auth code (though MFA might be required if that's how you've configured Entra/365 or Google). But first the sims and google/365 admin need to liaise to set up the new "app" (enterprise app in 365/entra parlance) as per the KB articles mentioned above. I got to go through this flow again today when I logged onto id.sims.co.uk. However, users are not yet seeing the new streamlined logon page.

We're finding the transition from the very manual way of getting SSO working to the new automated way a little rough. I think they might not be actually lighting up the new auth flow as default for another couple of weeks. If none of your users are using SSO just yet, set it up per the instructions, ping your account manager and wait for them to confirm its fully live before testing it with a few users.

Looks like they're going live. There was a banner link on the login page for me today that took me through a page with the following: Moving to ParentPay Group SSO We're moving to ParentPay Group SSO, our new single sign-in across our products. ParentPay Group SSO will help us: Give schools one sign-in across our products Improve security Make admin work simpler A Work Account-First Approach ParentPay Group SSO takes a work account-first approach. This aligns with wider guidance from the DfE, ICO, and NCSC to use managed school accounts (i.e. their Google Workspace or Microsoft 365 accounts). This enables schools to control and manage staff access to systems and data more strictly and safely. We therefore encourage schools to use their Microsoft or Google school accounts wherever possible, and we have designed ParentPay Group SSO to make this easy. What Your School Must Do To use Microsoft or Google sign-in, your school must ensure that ParentPay Group SSO access is granted in your Microsoft or Google tenant."

FWIW on another platform entirely (completely unrelated to bromcom), all our sen provision data is missing.

This thread is eight years behind the curve. Back in '18/19/20-ish zen was mopping the floor with intel in price/performance and the features that schools needed. These days often the way that zen based devices out-perform on price is by actually being previous generations, and not (quite) directly comparable to either the latest zen or Intel kit. Recently Intel seems to have better power/performance/price in types of devices we are buying. But sometimes we still go amd because last years model is "good enough" and we "don't have any money". If the price/performance/capabilities are good enough, then there's really nothing between them, and we've had them alongside intel for eight years now. They've been fine. (actually our laptops with 3700G and 16gb of ram have been astonishing, but they are ancient now)

So what I'm reading here is, when we procure we need to put login to register load to register submit and reporting times as an SLA.

WONDE

Just starting to play with (paid for) assistants in vscode, (and as you know I'm not a dev-ops guy), so would also be interested in how you have things set up with guard rails, and how you control the assistants access to resources.

Viable alternatives? Yeah, drop the course. the on-costs of sub-par Windows based alternatives is just awful. Better to drop the course than waste everybody’s time. (Don’t get me wrong, it can be done, but compared to logic on Mac’s there will be constant little problems sucking the joy out of teaching that course/supporting that department). the real alternative to logic is pro tools, but that’s a faff in a lab environment. if the department is high performing, ripping their tools out from them is unconscionable. If the department is not, cut your losses, drop the course and save money on the teacher salaries too. what do the teachers think? They need to be the ones tasked with finding alternatives.

I had the same reaction. Definitely a high-risk character to bring out of mothballs. If it goes badly I fear SBC will end up as the latest hero/martyr for the Truth Social/Alex Jones/Tait brothers side of the media landscape. I was a resident in (west) Staines in the late 1990's, and I was not actually a fan. - While I completely recognised the type, I found the character made me feel uncomfortable as I struggled to buy-in that target of the humour was those appropriating uk-urban/Rastafarian culture, rather than those of those backgrounds themselves. Mind you I never liked the Office. or for that mater Mr Bean.

You need good leadership, continuity of management, and long term planning. You need to make teachers feel it is safe to fail in the moment. "Oh that didn't quite work, here's plan b. or c or d". Kid forgotten or broken device? Same routine as kid without book. etc etc. You need the right tools for the job. The more (tech) you have to layer on top, the more fragile things are. Some times reduced reliability is an acceptable trade-off for the benefits to be gained. You need to make sure the kids will get something they value (in the short term) by using the tools, and the teachers understand what things should be done better using the tools vs traditional tools, and then use the most appropriate ones ("IT" vs "pen and paper") on a case by case basis. I've rolled the numbers around a few times in the past, and you can make it work (financially), if you already are investing in your IT. .. but quite how anyone can sustain a 1:1 programme in 2026 when the cost ram and disks has risen 2000% driving chromebook-like devices from the 2023 price of around £200 to now closer to £500, I do not know.