synaesthesia

Just stumbled across this as we're getting a few more devices in and trying to get our smoothwall setup correct. I shall point out that if you've got 16 ipads and not authenticated, you're not complying with KCSIE so could land yourselves in trouble unless you're manually logging each one out so you know who has what device and when. Not worth me raising another topic on this so I'll basically just hijack this Google school, Smoothwall hybrid (onsite appliance and Cloud). Mosyle free MDM. Ipads don't use any account as they're managed. Currently the 3 or so ipads used are either used only by named staff, or if used by students strictly signed in/out so we can track them if needed. With the expansion now, I have further ocked down with Safari removed and Smoothwall Browser "installed" and that's the bit I can't get my head around and the documentation is diabolical from Mosyle's perspective blindly pointing people at the usual nonsensical Github pages. So yes, I can see we need a plist, no I don't understand what it should do or how to get Mosyle to actually push that alongside. And then as ipads get passed from pillar to post, can we set anything like usage timeouts so they log out after 5 minutes etc? An alternative is to use Smoothwall authentication policies - if an unauthenticated device on a certain network connects, any connection to the internet forces a login via smoothwall's SSL login page and all is good, but that's something I'd rather not faff with if possible. I keep seeing references to "SSO working alongside either Google or MS" which usually seems to link back to ASM, however I can't see any mention of that in our ASM, and that intrigues me massively as it would be *awesome* if we could get them to log into things like Google Drive.

Ah cheers, in which case they're not old/missing/deleted - do you know why they show as numbers in some cases please?

I hope they're not linked otherwise like Inventry - half the system at twice the price!

Yeah that's the bit I don't get though - all the meaty processing is done by the NVRs so unsure why they specced client PCs to do that (ours are a pair of DS-96128NI units). I knock the software a lot because it's ruddy awful, but the hardware and NVRs work well especially for the money. Made me laugh at a previous school when they fit Avigilon to run the hikvision estate - *thousands* of pounds, a stupidly high specced x86 server (off the shelf Dell) to run it and whilst the software works a mile better, it still wasn't anywhere near as good as dedicated hardware.

Am I underthinking here though, blocking comments from youtube has been achievable with most filtering system since the dark ages and am I remembering correctly you can do it with a DNS entry also?

Wasn't Flywheel/Nexus/Colwyn was it perchance? Not sure what the manufacturer would have specced, it's just standard hikvision stuff with their horrid NVR and IVMS but even that didn't warrant a dedicated GPU. Got my RAM in from home at the moment to see if it makes much difference, if it still behaves like a spoiled teenager then the whole thing get's repurposed. I'd say an overpowered doorstop but ebay is a good a purpose as any!

Oooh, I might rip your arms off for that. Need to do a bit of thinking, whilst it's a decent system I think the mainboard is an issue. I've put a pair of known good 8gb's in for now to rule out the other modules (I think they were acer branded a-data) 3200s. Cheers Dave

My office PC is an Acer "Nitro" with i7 1200f and RTX 3060 GPU. It's an absolute heap of rotten poop. It was purchased by our previous "MSP" apparently required for the CCTV system, a joke in itself but one we're glad to be rid of. However it's a shame to get rid of it. The problem is lack of ram - it only has 2 slots for DDR4, and the most I can squeeze in it with what we have lying around is 24GB. I need 32 really, but the school doesn't have the budget or means to remortgage under current costs. In normal circumstances it would be a flash in the pan to buy a new mainboard, but as it's an Acehole I would also need a new case and PSU to suit. Not fussed about the GPU, it sits there doing nothing even with 128 cameras streaming at the same time. Even though the CPU is a few years old now, there's very little out there in the refurb market. Is anyone aware of any refurb sellers that has something that recent in stock and might be happy to supply without CPU?

I should hope so - nothing against Verkada as it worked reasonably well, but very clearly and very vastly overinflated on the price front. Easy to justify when so far competition has been pretty much just Halo and a slew of consumer level crud, but now not so much.

It does indeed do webhooks - that's next on my list. Given it an hour today - email and push notifications work well. Very impressed with how easily it differentiates vape from other airbornes such as deodorant - with SLT's permission, I've borrowed one of my wifes old vapes with no real nasties in it and so far it does a better job than what I saw with Verkada back in the day (note that's at least 5 years ago so things have likely changed). It's certainly a mile better than any of the off-the-shelf chinesiums Tuya type things. Worst case scenario is that we create a user with an email list for emailed notifications - about a second from the lights going funky colours to the email hitting my inbox, and push notification was received at the same time. Very quick chat with my line manager earlier and mentioned about the AI speaker in an ideal world, but she instantly thought that it might suit quite well on the outside of the toilets they'd be fitted to. Might not even be necessary. Really struggling to find fault with the value for money side of it. UI needs work but that's about it so far!

Think I might have hit upon that whilst I quickly tinkered - alerts easily enough to email or to anyone's phone with unifi protect app installed, but there seems to be enough API tinkerage possibilities to make it doable with the MacGuyver Protocol. Quite fond of the status LED that illuminates the ceiling - green for good quality, through blue, purple to red for bad quality - and better still can turn it off so students don't make a game of it!

Is there any way to see what policy the numbers refer to when running a real time report? They seem to appear every now and then and I can't see any rhyme nor reason for it. Quick screenshot example: There is another which I'm specifically trying to track, but this provides the gist. Is there some sort of history somewhere which says that rule 1 used to be "Unblock Teams because it's needed" (or something more likely & appropriate) I suspect it came about during a smoothwall update as every now and then categories get merged or updated, as I keep meticulous logs of every change I make.

New toys arrived today after ordering on Friday! Shame I won't get a chance to properly play & test for a couple of days, but adopted them. Usual easy UniFi process, high quality packaging & fittings.

Wouldn't surprise me - they came from the laptop refurb place, can't remember who it was as they were bought before I started. No doubts about performance though - my laptop, an Aero 365 G8 lasted about an hour on it's battery just taking notes from a meeting. New battery (2 power) did 5 hours straight with youtube playing full screen when I fitted it last week!

Bought a few for us recently, for a couple of staff we went original but got 2-power for the others - 20 quid per battery difference. I'm wary of 2power though, had a load of refurb HP's (old, old though - HP 630 G3 i think?). Must have been around 50 of them in total, nearly all of them had new 2 power batteries in and *every single one* of them did the spicy pillow dance.

Kyocera here, can't wait to get away from them though, colour is a swear word and their management is questionable to poor. We've gone directly via them, and suspect you would have a better time via a 3rd party.

True, but I sincerely doubt any insurance provider would see it that way - what they do is one thing but if ratified policy states you do it another, it's that they'll be going on. Not that there's any change in hell they have insurance coverage for that - if they do, richard hammond would like their number for his next car policy

Ugh, I wasn't going to dig any deeper but after your comment making me realise I missed that, I looked at the trust-wide policies. I think it says it all - unprofessionally written, what from the outside appears to be a questionable structure, outdated and unsecure password polices (don't forget to put an asterisk after "Liverpool" to make your 8 character password fully secure and un-hackable!). Absolutely no RPA compliance there, and if there is, it'll be void shortly if not already. Shouldn't point fingers, but I don't think it takes a genius to work this one out

Hoping their IT folks are OK as are the rest of the staff. I do see a couple of concerning points in their IT AUP though - they state they do not monitor anyone's use of IT on school devices unless they suspect wrongdoing - that contravenes KCSIE - and if I read it right, they set passwords for the students and they can't change it without good reason????

Highly recommend INFB.co.uk

We are awaiting the ability to order then we're getting one immediately. My previous method of testing was a combination of sprays to check for false positives, and a vaping member of staff to come and vape underneath it I mean, there's a million confiscated vapes we could use but we have a vague idea where they've been! I might just bring in one of my wife's old vapes as you can trigger it without sucking on it (with approval from SLT of course for these purposes).

I think it's an age thing, but "unforseen consequences" only means one thing for me now.

As UEV has gone the way of the dodo, we just embraced local profiles as there's no enough reason to warrant many preferences sticking for people using shared devices which in our case is purely students. For additional needs, their profiles via GPO cater for anything extra required (screen scaling etc). Staff all have their own device so local profile just works wonders as is. Everything else fully locked down - no access to any local drives/areas, desktop etc. Is this for staff you're looking at?

nope, that sounds like an instant not-a-chance. What's the actual use case though, what does it offer that you can't do just by recording with any ipad or camera and do with as you need?

Same parent would be banging on your door when Little Johnny/Jenny picks up nasty browsing habits, because of course it wouldn't be their fault Can only otherwise echo the above comments - if it's managed/school owned then yes, it must be filtered accordingly.