psydii

After 9 years and nearly 5000 students, the highest we've got to is "2" but we use a few more letters from the first name.

This response won’t be of much help, probably: By sticking with type 3 drivers. Also if no immediate help, but to add to our headache: https://www.theregister.com/2023/09/11/go_native_or_go_home/

We move leavers to the A1 licence of which we have thousands. We also disable them and set a random password. Azure ATP/Defender for Identity keeps an eye on the inactive accounts for suspicious activity. A few years after they have gone, we clear them out. We use Salamander to most of this and dump them into leaver_year groups so we can clean them up later. Salamander also handles re-onboarding the accounts if/when they come back. Same for teachers. We always have a couple of returning staff each year, on top of the NQTs who did their training with us six months ago.

This is change is in response to security issues. I would strongly recommend an alternative solution to the registry tweak (which removes the protection). Use GPP to copy the ico files to a secure (user READ ONLY access) on the client machines, and then have the shortcut reference that file rather than the network based one.

Does your account have permission to review the results? I seem to recall edisco related permissions/roles get quite complicated. I'm pretty sure I recall once being in a position to create edisco cases, but not review them.. but that was back in 2020 and it has moved a long way since then. I think you need the eDiscovery Manager or eDiscovery Administrator role. The Compliance Administrator role is not sufficient. Under the hood, permission from the 2013/16 era for search and discovery are no longer sufficient.

Meru aps tunnel their traffic back to the controller. So that should work. Is the vlan tagged on both the controller and the appropriate switch port? Can the clients ping each other? (They should be able to if inter-client commms isn’t explicitly blocked)

This update looks like it (intentionally) breaks Exchange 2013/2016 integration. https://techcommunity.microsoft.com/t5/exchange-team-blog/coming-soon-enabling-extended-protection-on-exchange-server-by/ba-p/3911849 “Today, we wanted to let you know that starting with the 2023 H2 Cumulative Update (CU) for Exchange Server 2019 (aka CU14), EP(https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/windowsauthentication/extendedprotection/) will be enabled by default when CU14 (or later) is installed. Exchange Server 2019 is currently in Mainstream Support and is the only version that still gets CUs.” “If you are running a version of Exchange Server earlier than the Aug 2022 SU, we send you thoughts and prayers, and very strong but gentle guidance to update your servers to the latest SU immediately. The minimum SU for EP is from Aug 2022. This is not a typo. That’s more than a year ago. Seriously, why are you not updating your servers? If you don’t update them, eventually you won’t be able to send email into Microsoft 365 or Exchange Online. And no one wants that. We don’t. We just want you to keep your servers updated.” “You can continue to use our EP script to evaluate your organization’s readiness and enable or disable EP. Our recommendation is to enable EP.” Remember 2013 doesn’t even get security updates at this point! But then again who is running on prem? Cloud all the way!

Does she like audio books? Maybe try some radio plays or similar? I found The World Tonight a good gateway, it is less opinionated than Today. And depending on the newsreader, often quite soporific. The comedy is quite marmite-y, and for some reason I’ve been bouncing of it quite hard recently. I would also recommend caution. I have been through a phase of just not wanting the mental burden of having r4 on, and on the occasions I encountered it I found it very stressful. If it were forced upon me I’d not have reacted well.

....also yesterday is the big day for processing results... today is just the performance of giving them out. The pressure today is trying to run sixth form admissions and snaffle up all the best students before the competition do.

Not for several years. Once SLT realized that we had reliable infrastructure, and the exams office got e hang of doing all the pre-flight checks ahead results week, we've not been needed. So we picked up running sixth form admissions via a real "heath robinson" set of tools. That was a whole heap of work for several years. That's gone out to applicaa this year but they've collapsed under the load, so I've been manning the phones since 9, and its more hectic than I've known it.

I had been hoping you could embed actual existing office documents or components into other documents that also works on the web (i.e a modern web2.0 version of OLE), but it seems they've created a new document container/format and app that replicates some existing 365/Office document functionality, but with the added ability to be embedded in other web-based 365 documents.

I told the Head and Business Manager they were there in my 'resignation' letter. A copy of which I found hidden in the IT office when I returned. Apparently communication from the before-times was forbidden knowledge among techs working there in my absence.::shrug:: The NUT rep had a sealed copy too, in case things really went sideways.

One technique that works, is for you to go through everything (hardware, software, licenses, subscriptions, support, consumables etc) that you can recall being spent in the last year to keep the show on the road. Then look back over the last 5 years at all the "one off" expenditures that have occurred, and then look forward to all the "one off" expenditures that you can predict for the next five years. This should give you a solid idea as to what next year's budget should be. You should then repeat the process but with the actual expenditure reports from the finance system and cross check to see what is missing from each perspective. Consolidate this into an accurate view of prior (and projected) expenditure, and you have a well evidenced budget proposal. Now you might not be used to looking forward - but you should have a good sense of how old things are and what needs to be replaced. If *everything* needs to be replaced just spread it out over the next five years and stick it as an appendix 'future expenditures'. If you have an asset register that contains the dates kit was purchased this can also form part of the evidence in an appendix. I found this (20 year old guide) useful when coming at this problem from the position of operational rather than strategic staff. Hopefully much of the tracking of expenditure is done properly in your Finance package... that said I still keep a track in a spreadsheet just to be sure. fits_financial.pdf fm_expend_record.xls

I once returned to a site I'd long left to rescue them from disaster. Had to pull a crate of tapes I'd stashed in a service shaft five years previously to fix it.

I have heard the guys on the extremely pro-Apple Accidental Tech Podcast (ATP) grumble that currently usb storage on the Mx hardware/ generations of software is a bit flaky, with little apparent rhyme or reason to what is stable and what is not.

Have you configured failover? Scope do not replicate or failover unless configured to do so. https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn338984(v=ws.11)

Interestingly we've never seen the unlimited pool, ours was always reporting around to 100Tb. But now we see the new reports and accounting methods, we are about 50% of the way through our allocation. This makes sense as we previously had a SAN of similar size hosting everything. For us step one is going to be tidying up all the 'holds' we have on various mailboxes, onedrives and sharepoint sites due to the volume of SARs and investigations that keep crossing my desk. We have a few very surprisingly chonky departments (English?!) who need a closer look, but after that the bulk of the sharepoint storage usage is well known to be from the photography department, and that will age out every three years or so. Fingers crossed we should be good. Did anybody get the email from Adobe about the removal of Creative Cloud Storage from their edu offer?

We've got a computer running that started life on XP that is now running 10. It hosts the management platform for something faciltites related, we have not de-installed/re-installed that software, but it has been through three hard disks and two PC Chassis/Motherboards. It's survived being on a 2003 domain, a CC4 domain and over to a 2012-2019 domain. I'm currently pondering how to move it to Windows 11.

I've had ex-colleagues cross the street to give me a hug and tell me how much they miss the laptop centric IT here compared to their desktop based offer at their new school. (twice, different colleagues now working at different schools) Its not perfect, but done right the flexibility outweighs the occasional hitch. (We have between 0 and 4 tickets a day for classroom AV/Laptop issues which is about a 0.6% failure rate and most of them relate to the 10% of rooms still on 15 year old svga projectors).

My current laptop is covered in LGBGT and Socialist Worker paraphernalia because I got bored of cleaning them off years ago.

Twitter: https://www.electoralcommission.org.uk/privacy-policy/public-notification-cyber-attack-electoral-commission-systems

You are correct, they do not have carte-blanche rights to access their old documents under any law. Teachers taking a copy of the resources they created while employed is not uncommon, but an SAR is not the vehicle for this. If we are being pedantic, the metadata about which files they have created and edited and at what time is technically their data and so can be in scope for an SAR. However the documents themselves are not, unless they themselves contain PII such as Line Management notes, Letters/Communications (directed to them specifically) from HR/their Line Management, Payroll etc. Materials sent to / used by / created by them but not *about* the subject or not containing any personal information about the subject are not covered by an SAR. So a variation of the output of a script like this: https://stackoverflow.com/questions/35232628/powershell-script-to-view-all-onedrive-files-and-who-has-access-to-them would cover the "all files" from their OneDrive request. You would of course need to check the files names themselves did not contain any other Data Subject's PII. Combined with an eDiscovery scoped to their OneDrive you should be able to pick up everything they are entitled to have.

Yes, since 2002. (initially running Windows 2000) Always well accepted*, but that is because key members of SLT were 100% behind the strategy. (that is, not everyone on SLT believed in it, but the decision was made, and collective responsibility for that decision was owned by SLT) They are supposed to take them home each day. This is not in anyway enforced, but it could be without too much bother. On DSE issues, for those we know to have OH concerns/conditions we supply docks and monitors/keyboards. For those who just like to kick up a stink, we make the process formal, they usuallly drop it. For all staff, they complete a DSE survey each year and we scan that for people who might benefit from pro-active intervention. It is absolutely vital that the whole stack is designed around the staff having laptops. Wireless connectivity is very different to wired. You want as little configuration of the end user experience dependent on the presence of a connection to your servers at boot/logon time as possible. Staff should not be logging on/off from their laptops daily - perhaps once a week, but better still: once a month for updates only. Find/Follow-Me printers are very useful too - since you only need to map one or two printer connections, and they are generally the same for all users. OneDrive/Sharepoint for files and folder. Teams for collaboration with students. For connectivity to classroom AV we did/do try to have docks so there is one usb-c cable for laptop connectivity and the board HDMI/USB goes via the dock. We had trouble with the 2016-2020 USB-C implementations, so now have standardized on HDMI from the board and USB-C to dock for interactivity and power. All rooms are configured identically at the teacher desk, and the cables are labeled. (the cables for the teachers are the same in every room, while the actual hardware on the walls/ceiling does vary, but over the last three years we have rapidly standardized, replacing the various projector/screen/speaker configurations to a single vendor and crucially a single install team who we have now paid to replace some of the earlier cabling with the set we now prefer). Notice that with docks teachers do not have to move their AC Adapters around from room to room, this improves the teacher's experience. *well there was one time a site went from outstanding staff 1:1 laptops to a total disaster. That was because due to elements well outside of my control the whole stack was replaced and the new one was not designed around the 1:1 laptop paradigm, and it did things like redirect appdata to a network drive (over wifi!), enforce mandatory profiles, disable offline files, run outlook in online mode. It also cheaped-out on the wifi cards in the laptops(1x1!), and used a wifi infrastucture vendor that could not compete with even previous generation chantry/cisco/aruba. It took nearly a decade, the pandemic and the return of two former members of SLT and a finance director who remembered "how good it used to be" to get that site to fully move back to a laptop-only way of working but now they are, people are so very very happy. To summarise: we have mid/low-end enterprise grade laptops (that at one point would have been classified as being at the chunkier end of the "ultrabook" category, when that was a thing), the interface between the laptops and the classroom AV is absolutely vital to get right, and that reliable, consistently high-performing wifi is essential. The configuration profiles/GPO settings must be built around providing a consistent, reliable experience for the teachers no matter where they were when they last rebooted/logged on.

I’ve been doing network based OS deployment since the days of RIPL. Finding it was best to use a USB to wipe a device before putting it into intune sucked. Of course if we all were buying ‘proper’ enterprise/education specific kit, the base image is free of junk and you’d just be able to autopilot them without the need for a wipe. (fwiw 90% of our intune devices needed the OS reinstalling from USB)

The rate limiting setting remains a bit of a puzzle. I know when we had procuve experts in over a decade ago they set it on some but not all of our switches/ports; it seemed to depend on the specific model. When we had a bit of work done by an HP partner a few years ago, they agreed with how it had been done, but didn't suggest that setting on our new kit they were adding to the mix.