Olliedawg

Thanks both will look into

my nameservers on 123reg are " ns05.domaincontrol.com & ns06.domaincontrol.com " Just tried " nslookup -q=txt mydomain.org.uk ns05.domaincontrol.com " Can't see the txt record! Only the SPF one again. I'll give them another ring tomorrow Yes I have been doing it manually the past two renewals. I don't have many services utilizing the certificates (two internal webpages & exchange server) so it's not a massive job, but yes I do need to look at automating it. I was led to believe that you couldn't automate the wildcard certificates?

I have a few domains registered with 123reg. I generate lets encrypt wildcard SSL certificates for these every 3 months using the win acme client, using the DNS-01 challenge which require the _acme.challenge txt record for verification. I've done one of my domains, however for my last one (and the most important one), I cannot seem to get the txt record to propagate anywhere. I've waited over 24hrs & still nothing. The only TXT record I can see is the SPF one. Been using these sites to check records : Dig web interface - online dns lookup tool and Check DNS results from Unbound (unboundtest.com) I've contacted 123reg & they told me to delete the record & re-add it.. done that this morning at 10AM. Just checked now & still nothing, just the SPF! Any ideas anyone before I call 123reg again coincidently, our wildcard ssl certificate recently expired for this domain which was purchased through 123reg. I stopped the renewal as i'd rather save the £299 per year & generate my own. hmmmmmm.

I must have been reading between the lines! Apologies - that is very expensive for non edu!

Curious where you have seen the £61/device pricing? This M$ blog states first year will be $1 per device Windows 10 end of support updates for education | Microsoft Education Blog

Go for a thinpad t480 with the 8th gen intel chip. Great laptops for the price

Peasoup cloud here. Veeam licence + 10TB of cloud storage worked out relatively cheap! We backup to an on site NAS in another building (2 esxi hosts, 11 VM's) Our Veeam B&R agent runs on a VM (non domain joined)

As above i don't see a problem with it. If it was student device that's another story. You could look into agent based / cloud based filters for the future? However on staff devices I don't see this as necessary. Student devices however 100% most definitely.

I was there last year with the abarth owners club - good day out

Did you try allowing UDP 3389 too? I know Windows 11 uses TLS 1.3 by default now, not sure if that would have anything to do with it

Do you block the store completely? If you use applocker it may be worth allowing the "app installer" app You can install winget directly from github, just download & run the .msix - You may be able to deploy this way per user : https://github.com/microsoft/winget-cli/releases/tag/v1.8.1911

As far as I am aware, a user must have opened the MS store to "initialize" Winget. It's hit and miss.. you can manually install the ms store app " App Installer ", which is Winget. If you check here you can manually install Winget with powershell : Use the WinGet tool to install and manage applications | Microsoft Learn - which from reading your post again sounds like you have already done. Winget is per user & i'm not sure if it will run as system either, as above post says. You could try a login script which registers Winget for each user?

Happy birthday!!

Applocker can be a PITA.. but once you've got it setup its great Lol glad you got it sorted

Do you use applocker? Try setting a deny rule for these in the exe rules section C:\Windows\System32\mmc.exe C:\Windows\system32\services.msc *edit* I'm sure you can also use a wildcard *.msc to block all msc files

Have you checked this folder on all DC's? Would rule out a replication issue

Ahead of schedule here! Finished all of my "next academic year" tasks (creating new users, shifting students up a yeargroup into correct OU's/sec groups, importing class lists into various online platforms languagenut etc..) Just have Teams classes to generate on the first official day of term. Usually come in an hour early to do this. " The quiet before the storm " and all that Replaced our LAST 100Mbps switch (HP 2520 24Port Non PoE). This was in our sports hall above some ceiling tiles. Was last PAT tested in 2014.. lol. Only feeds a few data points, couple AP's and a couple cameras.. Replaced with a much newer Netgear switch with PoE! Good riddance PoE injectors. Just today started my Win11 rollout, only doing staff machines for the time being. Made a task sequence in MDT to do this, can just leave it going & its a doddle with an in place upgrade Gave a network cabinet which has been on my job list for a while a good tidy up. IWB fittings booked in ( x5 this thursday, x5 on 20th of august ). Lots of room changes to do still. Lots of building / electrical work going on I've got next week off which i'm looking forward to!

I'm upgrading all eligible devices to W11 23H2 this summer. Anything not compatible will be staying on 10 and we will either purchase extended support, or move to LTSC to buy us time to ugprade/refresh those devices

navigate to "\\YOURMDTSERVER\productionshare$\Scripts\LiteTouch.vbs" Launch the vbs script ( needs to be run on a user which can run vbs scripts ) You will then see all of your Task sequences pop up, including upgrades

Yep, best way is to navigate to the unc path & run the script that way to kick off the TS

Only thing affected here is ParentPay too (thankfully). It seems like absolute chaos going from what i've seen on reddit, news etc..

Hey Ben, would it withstand a football being booted at it lol.. I know the BenQ boards are good, we use them throughout the school in classrooms etc.

It does work, but not officially supported I believe. So in reality will most likely be fine

You can get it to work, but yes you are correct - not supported officially by MS. This goes for the New Teams also.

Better late than never:cool: