psydii

Honestly Amazon Basics have proven to be the most consistently reliable for us. Their 10m was the *only* one that worked every time we used it. It is no longer available We're buying Lindy for our 10m now at 5 times the price, these are also 100% reliable but much bulkier.

Not many primary schools (or even MATs) have a 20,000 user footprint. Organisations where DNS Admin was a specific role allocated to specific people are of course likely have dedicated non-windows DNS servers. We are not operating in that context.

If you still have AD you need* a Windows DNS server its usual for the AD DCs to be the DNS servers of the network. Once you no longer have AD your DNS server can be anything/where. *or a load of non-standard config on a 3rd party DNS server

We do the same CC App and the end user installs as needed, but 'white-glove' acrobat and photoshop in many cases, including IT Suites etc. (though we use CM rather than intune for the moment) Related: How are people keeping the CC App suite up to date? We've set it to auto install updates, but I'm not convinced it is working that well....

Unbundling Teams is being reported as a step to get ahead of an Anti-Competitive behaviors suit being pursued by Slack/Salesforce in the EU. If the EU side with Slack they will likely not accept MS's making of the installer separate to the MS 365 App installer as adequate, but instead require it to unbundle Teams at the licensing level too.

Slightly worried that Slack might make this all very much more expensive for us. Hopefully the EU take heed that Teams is just a webpage that integrates LiveCommunicationServer/Lync/SkypeForBusiness and SharePoint, which many people were paying for in their 365 licenses as far back as 2011 (at least). I wouldn't mind a proper per-computer installations as an option (for all software) to be mandated by the EU. Maybe us out on the fringes would benefit from that.

Filter by user, then by access to drive? Otherwise it has to try to access the share/folder for all users in order to evaluate this condition. (I'd have thought. Never actually tried this combo of filtering rules) Addendum, applying policy/security/ACEs really should be done to groups rather than individual users, even when there is only one (or two) user to which the policy applies. I tend to align group names with policy names (and settings if we need to get that specific).

Filter by user, then by access to drive? Otherwise it has to try to access the share/folder for all users in order to evaluate this condition. (I'd have thought. Never actually tried this combo of filtering rules)

Is it a BYOD VLAN? If so you wont want to directly expose your printers, but instead you can use PaperCut Mobility Print to advertise them...

Officially: Portage, and then remaining in classroom to support /witness any tech problems during initial logon. (these days, mostly just turning the wifi back on). In Practice: We trust some regular fliers to pick the laptops from our office as they are passing, and for them to use students to return them. This is a teacher lead arrangement, at their discretion / convenience. Laptop trolley administration, portage, support and maintenance is the most important role of our junior technician since we replaced the legacy IWBs with touch screens. Typically the junior tech does it all., but at least once a day it takes two or three of us to deliver devices. I should note that 6 trolleys are permanently assigned to departments, and these departments are responsible for their own porterage. They work closely with us to report problems and sometimes book us in to attend lessons so we can witness pain points etc. It is the role of the senior techs to make sure these devices are well maintained, and are configured to meet the needs of the departments.

The closest we've seen like that is where the user (unwittingly) moves or deletes from explorer a sync'd copy of the files. Is there any chance there is some other sync agent also running against the user's files (legacy Offline Files, FSLogix, roaming profiles?) that may have tripped things up?

Secret Starbucks hack if you just want a black coffee and are in a hurry: order a filter! They turn from the till pour you a coffee and hand it to you immediately. Also they don't offer you milk since the milk for this is at the self-serve sugar station. Tea from Starbucks (or any coffee shop), however is emergency-only territory.

Given half a chance, my 6yr old will devour sashimi by the handful.

and the tech you choose to deploy to meet those needs, the desired responsiveness of the IT Service to problems and change requests, and the scope of their responsibilities. Strategy, Implementation, Project Management, Procurement and Tenders, Systems Management, BAU change requests, Problem Management, Incident Response. Business Continuity and Disaster recovery The intersection of GDPR, Information Security and KCSIE responsibilities. Technologies: Classroom AV, Portable AV, Theatre AV. PA System, CCTV, Building Access Control, Building Management System (well, supporting and securing the 'server' and 3rd party that support it), Solar Array, IT Suites, Servers, 365 solution design, change requests and service enhancements, knowledge of business process, SharePoint management, Azure AD, exchange/smtp/DMARC etc, Teams (which is its own massively complex under the hood), Google Apps, Telephony, 2 way radios. Wireless and Wired Networking, Maintenance of Laptops / Chromebooks / iPads hardware, administration of Laptops/Chromebooks/iPad configuration, Firewalls, Internet Connections, Mobile Phones. Visitor Management, Attendance Management, Printers and Photocopiers. 1800 Students 270 Adults with IT accounts 750+ Devices (if you don't count the DfE stock which are still used, but mostly remotely) all of the above responsibilities 1 NM/Head of IT Services 2 Senior Techs 1 Junior tech Honorary mentions to the non-IT staff who undertake some duties that might otherwise land in the IT Office: Repro Admin, Music Tech, Media Tech, Art Photography Tech, School Office Manager.

That is a very relevant anecdote. As long as it's less than 180 Days, and no one does anything daft like grabbing the FSMO roles you should be good! "The primary DNS is set to the other server with the secondary DNS server set to itself." As has already been mentioned (and assuming you've not been in this state more than 3 months) this might well be the source of the problems. On the DC's NICs TCP/IP settings set the primary DNS server to be 127.0.0.1 and the secondary to be another DC (perhaps a working one at a remote site if the can communicate over TCP 53) Try it on one DC first and then REBOOT IT. This should allow it to re-initialise itself properly. If that doesn't cure it for that DC, then follow the diagnostic steps in this document: https://learn.microsoft.com/en-GB/troubleshoot/windows-server/identity/active-directory-replication-event-id-2087 While you've not listed that event id as present in your logs, documents on learn.microsoft... relating to event ID's you have reported refer back to this document as steps you can follow to get to the bottom of DNS problems.

did you try get-adgroup -identity SID? Only asking because I just saw an unresolved sid in some security logs, and after a moment of panic when get-aduser returned nothing, realized that it might be a group (it was).

I seem to recall that we contact the MFD supplier to check if they need to do anything to keep things running smoothly. But, we usually just update server-side and the rest just follows along.

FWIW while we do nominally follow the process outlined by@%1;, we update at least three times a year and have been for *years* now. Never had a problem.

Does anybody else think this: https://stackoverflow.com/questions/71849384/windows-hello-validation-with-c-sharp-windows-forms-app-net-framework might be an really good idea for SIMS?

Try: psexec to launch cmd.exe as system. Takeown to give SYSTEM ownership of the folders and files cacls to grant SYSTEM full permissions Now as SYSTEM delete the folder subfolder and files. You could also use cacls (running as SYSTEM) to revoke the remissions for the unknown user.

The Register is re-reporting that the ransomware gang are starting to sell off access to the data allegedly stolen during the Capita incident: https://www.theregister.com/2023/04/18/capita_breach_gets_worse/ The only new piece of information presented is that as of Tuesday, Capita still have not confirmed whether or not the data on offer is from their incident, which really is just confirming the status is unchanged since last week. Unless it turns out either the data on offer is not from the Capita incident, or that there is an operation afoot to contain the breached data, seize the infrastructure and arrest the responsible criminals, I can't imagine that any of their customers will be at all happy in the way Capita are handling it.

It's good for the soul. The bugs apparently are where Legacy LAPS is installed after the April update has been applied, and where April Update has been applied but Legacy LAPS is not installed and Legacy LAPS GPO Settings apply. https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview#legacy-laps-interop-issues-with-the-april-11-2023-update Simplest solution for us will be to uninstall Legacy LAPS and Legacy LAPS GPO settings, replacing them with functional equivalents from the modern LAPS policy options.

The Times appear to have now verified that write up: https://www.thetimes.co.uk/article/110a6d24-db97-11ed-b1e2-4c4ae98cfe2f

Social-Influencer driven sales. Kind of surprised they didn’t/haven’t managed the pivot to social. Though I did see a load of vintage Tupperware being rediscovered by the millennial/gen-z side of TikTok last year.. so perhaps they were trying but didn’t manage it.