HCC

Hi, We are looking to replace our Hikvision NVR, and thought it would be useful to ask how other schools are recording and accessing CCTV. There are 30 5MP cameras, and I need an easy to use web portal for the head and pastoral staff to access and use themselves, which is very much not the case with iVMS. I'm currently considering: The Windows route, with Luxriot, Milestone or BlueIris etc Unfi protect but I don't like the online activation\portal aspect, and although it says third party cameras are supported I'm not 100% on compatibility. Replacement NVR like Cortex etc but not sure if such a system can use onvif or only works with matching manufacturer cameras. Thanks,

The latest is that it appears to be caused by a conflict between Senso.cloud and Smoothwall. If Senso is uninstalled the issue goes away. Smoothwall support theorised that it might be because Senso is trying TLS 1.3, but Smoothwall only supports TLS 1.2 the only solution I can find ATM is to add site exceptions to the Senso logging policy, or turn off Senso web logging.

Hi, I have this logged with smoothwall support but I'm not getting anywhere with that at the moment, their support has been a bit lacking recently. So maybe someone else has had a similar issue and already solved it? The issue I have is that sometimes users of youtube, myconcern, code.org, typing club, methodmaths etc (could be any site but those are the commonly reported ones) get a too_many_redirects error, and Edge gives up on loading the site. I'm guessing that this is because smoothwall is treating the tab as unauthenticated and trying to redirect to the web SSL page, but failing to do so. The Wscript is running on the computers, and sometimes auth works as expected but not all the time. Sometimes its OK on one tab, and not another. There is a transparent policy to try various auth methods (AD, Azure, idex), and then fall back to SSL redirect if that fails. Its worked without issue with the current settings for years, the only thing that's changed is the version of Edge now on 124, and we are now on the latest version of Smoothwall. So it looks like the auth must be failing sometimes?; is Edge now running every tab as a separate process, and is more fussy to redirects? Anyone seen, and solved anything similar?

Hi, We have had similar to this a few times and it was because they had somehow managed to set the logon keyboard as Slovakian or similar rather than UK. Had to go into the depths of the keyboard settings in control panel or settings and remove all random extra keyboard layouts so that only the UK one remains, then it worked again.

Hi, I just noticed there is a cert trust change mentioned in the notes of Edge 109 https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-cert-verification. In future versions of Microsoft Edge, both the certificate trust list and the certificate verifier will be provided by and shipped with the browser. This will decouple the list and verifier from the host operating system’s root store. Not sure if the smoothwall cert that we currently deploy by group policy to the OS 'Trusted Root Certification Authorities' won't be trusted by Edge in version 110 unless we disable the microsoftrootstoreenabled setting. But if so that setting will only work until Edge v111 when they then remove it. Might also need to update the instructions soon for students installing the SW cert for guest devices, that use our intercepted guest wireless? It does say In addition to trusting the built-in roots that ship with Microsoft Edge, the browser will also query the underlying platform for—and trust—locally installed roots that users and/or enterprises installed. So I'm not sure if this change is a huge concern or not, but maybe something to be aware of, if like us you use Edge with an filter SSL interception cert on most school devices.

Hi, Come join our thriving 2-19 all-through college on its journey towards excellence! Our two-form entry primary phase opened in September 2019 and we have now completed our brand new state-of-the-art development on the secondary site. New facilities include a three-storey teaching block containing 22 classrooms and SEND hub, a fully refurbished Post 16 Learning Centre and a floodlit all-weather sports pitch to complement our already extensive sporting facilities. ICT Assistant Technician – Required to start ASAP Hours: 37 hours per week – Full Time 52 weeks per year – Monday to Thursday 8.30am to 16.00pm and Friday 08.30 to 16.00pm Salary: Single Status Grade 2 point 4 – £20,441 per annum Have a look at our website for further details

Hi, We use Sign in App running on some 9th gen iPads, and I get numerous heartbeat lost emails daily, and can see they have intermittent slow peak request time. The iPads usually resolve this themselves 10-20 mins later. I've had a look in the settings when an iPad goes offline, and it still appears connected to wifi, but can't get through to the internet. This has only happened since we upgraded to new Ruckus R650 802.11ax APs and a new controller over the summer. We have another connected site that uses Unifi, but otherwise uses the same network\filter etc and doesn't have this same loss of heartbeat issue, which makes me think its something that's changed in the config since moving to smartzone. I've tried a few settings changes like increasing the idle timeout, trying wifi5 compatibility etc but no change on this issue. We have had to update some laptop Wifi5 windows wireless drivers older than 2019 which went unstable on wireless, but I can't change as much on iPads. Anyone seen anything similar, and managed to resolve it on iPads since upgrading to Ruckus Wifi6? Thanks,

Hi, We have a set of 30 shared Android Samsung Tab A tablets, that Primary students use for Apps and internet. They want to use the camera on them instead of separate Digital Cameras. I can allow the camera app, but then it would just save locally, and the teacher would have to plug them in to their staff laptop with a USB lead to manage. We use Office 365 so I could setup the Onedrive App with a shared account that the teacher can access. The issue I see with this is that won't the photos then sync across all tablets, and how would the teacher know which student took which picture. I could use 30 Separate Onedrive accounts, then share them to the teachers? or do the same with Google Accounts and their photos app? Or is there a simple camera app, or web site that saves photos direct to an online photo service, the teacher can access and not to the device? - Needs to be simple enough for a 6 Year old child to do.

https://www.hccat.net/job/ict-assistant-technician/ ICT Assistant Technician – required to start ASAP Hours: 37 hours per week, 52 weeks per year. Monday to Thursday 8.30am to 16.30pm Friday 08.30am to 16.00pm Salary: Single Status Grade 2 point 4 – £18,198 per annum We are looking for an enthusiastic, flexible, and committed person to join our ICT Support team. The desired candidate will provide effective technical and software support to a busy all-through academy. You will be responsible for: The upkeep and good order of the computer equipment Support teachers and students with the use of ICT Undertaking periodic computer checks Identifying and remedying software, hardware, and network faults. Excellent organisational, communication and interpersonal skills are essential. Previous experience in a similar role, and a good standard of education would be advantageous. We can offer: A school committed to consistency and sustained improvement A hardworking and dedicated team A friendly and supportive atmosphere A supportive Leadership Team Cycle to work Scheme The opportunity to join our Corporate Membership to Benenden Health Care, where the Academy pays for half the membership The opportunity to pay into the Local Government Pension Scheme which is one of the most generous pension schemes in the UK.

Hey, I'm trying to enable SharedPC mode on the W10 student PCs to improve logon times. Does anyone have a powershell script that checks if a Provisioning package is installed, and installs if its missing? or another way I did think about is group policy and the MDM bridge, or via intune. Background: I've manually installed a PPKG on a few test PCs to enable SharedPC to try to improve logon times over the mandatory profile we have now. We have moved all student files to OneDrive so intend to use KFM with silent SSO (and I know SharedPC has a OneDrive sync client issue, but I think I've added an GP to override that to allow it to run).

Hi, We have deployed out Edge 83 to school computers, and SSO always works for Office 365 via the new Office tab page etc. We use Firefly as our VLE, with Office 365 set as the logon method. Sometimes the SSO works with FF, and sometimes it doesn't When it fails, it quickly cycles through a few pages and returns to the sign in page with the error 'details you have entered are incorrect, please try again' I think this is specific to certain computers. The only way around this at the moment is to use browse as guest. I contacted Firefly support, but they said its an Edge issue. Contacted Office 365 support and they said it was a Firefly issue. Any ideas how to diagnose\fix this issue, so Firefly always auto signs in on Edge?

This is using the integrated scanning option within PaperCut, but also effects any notification messages and emailed reports from PaperCut as well. I have specified a 365 auth account in the PaperCut config but I'm not sure if this is used as we have it set up as Direct Send Option 2 described on this page. Why can't Papercut just use a specified send account using modern auth rather than from email sender impersonation? I'm not surprised the antispam doesn't like what it's doing. The other unknown is that the Public IP is used by other local schools, so it might not even be Papercut messages that are causing it to be blacklisted.

Hi, We use the PaperCut scan to email functions on a fleet of Sharp copiers, and its worked great for years. Recently scans and emails from PaperCut have started getting blocked by SpamHaus XBL list l can manually allow the external IP in this XBL list, but it then gets blocked again after a few days. I manually allowed to get it to work again, then looked at an sent email header. I think the cause is the HELO=printserver.domain.local rather than being the external Public IP that's being used. This is what is described as the issue in the XBL IP lookup. I've contacted PaperCut support but they suggested it's a network config problem. I've tried making a few changes to the PaperCut config - We use Office 365 and I remember it being a pain to set up in the first place but has been working for years. I have no access to the network config of the external IP addresses as that's at our ISP. I can't find any way of setting the HELO in the email config of PaperCut Does anyone have any ideas, how to permanently resolve so scanned emails work again without me often having to keep modifying a SpamHaus list?

I remember having to add several urls to smoothwall's Office 365 category that were missing, but if it works for some its unlikely to be that. Are they all on the same Office and Windows versions?

Hi, Sorry, don't know exactly what fixed it. Here are the things I remember changing: allowing the Office 365 category in smoothwall for all, and added a few allow urls I found in a Microsoft Office 365 firewall document that were missing from smoothwalls list. Switched from the normal 'Office 2016'; to Office 365 click to run with device based activation. Made changes to the internet settings as per https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso-quick-start We had directory provisioning on for azure connect to filter only user OUs. I had to tick Windows 10 Computer OUs as well https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering changed Office 365 to modern auth. Hope that helps.