Olliedawg

Yes this is concerning me also. Going to let SLT know about it & go from there. Many thanks to everybody for the replies/suggestions

Most likely will be an apple device, not 100% sure on that though. In my UniFi controller I can see the hotspot, which AP it is near along with the MAC address (possibly private like you say). If we had one AP in each classroom this would have made it easier to find

Oh he/she will be in big trouble.. that is if we can find who the device belongs to.. I did try and search for the MAC address on the Student-WiFi network, but no luck..

No unfortunately.. We have Sophos XG Firewall & UniFi Network Onsite WiFi (self hosted). Can't seem to find any way to block it with either of these.

We have a student which has decided to call their phone hotspot something rather racist and rude.. Is there anything I can do to stop this showing on other devices? Only information I have is the SSID & WiFi Address

This looks interesting - I'm going to look at this to potentially replace out WSUS setup. I do agree that WSUS can be a pain sometimes (more often than not!)

Know the feeling regarding the WSUS. When I started at my current school they were manually doing updates on every machine (what..). They did actually have a WSUS set up already on its own VM - although the tool crashed every time you opened it. Probably due to being neglected for a number of years. Did a fresh install and got it up and running again - saves a lot of time

We had a batch of Dell AIO's for our last classroom refresh in July last year ( Dell Optiplex 3240 21.5" Intel Core i5 All in One Refurbed grade A ). Been very happy with them so far! Zero issues.

Just checked event viewer, this does seem to be the case with regards to updating the version. I can use this as a double whammy now to also upgrade older versions to the .msi version Thanks again for your input Mako

Lol no worries - i missed that too.. Absolute legend that has worked! Thank you very much. Now another question - can this be modified to also install the newest version ontop of a previous installation of Sophos Connect? I'm presuming that if I remove this section then this will be the case? IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG IF NOT EXIST "%ProgramFiles(x86)%\%Sophos_Connect%" GOTO INSTALL exit /b 0 :X86_PROGIF NOT EXIST "%ProgramFiles%\%Sophos_Connect%" GOTO INSTALL exit /b 0

Many thanks for the response, I have edited the code as follows. SET Sophos_Connect=Sophos\Connect\scvpn.exe IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG IF NOT EXIST "%ProgramFiles(x86)%\%Sophos_Connect%" GOTO INSTALL exit /b 0 :X86_PROGIF NOT EXIST "%ProgramFiles%\%Sophos_Connect%" GOTO INSTALL exit /b 0 :INSTALL pushd \\server\Sophos Connect VPN Client SophosConnect.msi --quiet Popd pause Which is now giving this message 'SophosConnect.msi' is not recognized as an internal or external command,operable program or batch file.

Hi all, Trying to deploy Sophos Connect to staff laptops following this guide : https://support.sophos.com/support/s/article/KB-000040793?language=en_US - seem to be running into problems. I have the .MSI for sophos connect located in a shared folder on one of our servers " \\example\Sophos Connect VPN Client\SophosConnect_2.2.90_(IPsec_and_SSLVPN) " This share is used for other .MSI files such as teams( \\example\Teams Deployment), so I know the permissions are set right. .Bat file for sophos install is located in " \\example\sysvol\scripts\sophos connect push ". When I run the bat file a Windows Installer dialog box appears, along with the cmd window which states " UNC paths are not supported. Defaulting to windows directory. " I can press " OK " on this dialog box, although this then closes the installer window, along with the CMD window. Any pointers will be much appreciated,

I shall give it a shot - thank you

Does anybody know how I can hide the Intel HD Graphics system tray/notification icon? I know I can hide the entire system tray with one GPO, but I don't want to do this - as i like students to have access to the volume control icon. TIA

There is a GPO which can remove local profiles after a certain amount of time not being logged in. Computer Config > Admin Templates > System > User Profiles > Delete User profiles older than a specified number of days on system restart. We will be setting this to 30 days, so any user profile which has not been logged into after 30 days will be removed. We will only be using this for staff accounts - students use a mandatory profile.

Roaming appdata is awful.. We are still using roaming profiles.. Looking to move away from this next half term. Causes some very long login times for some users with larger profiles, especially on a new PC they haven't used before. Looking to move them onto Local profiles, with local documents redirected to their H:\ folder & leave appdata residing on the local profile

Brought it to the attention of the MIS manager.. I don't think she realized this was happening, as staff always come to me for any IT issue..

Thanks for the response - I don't have massive involvement with enrolling staff onto Bromcom it's self - I rather use it to pull staff from, onto AD / O365 etc.. I have checked the config under Settings > Data Boundaries & come across this. Like you say, it seems to default new staff onto the 2020 - 2021 interval, instead of Nucleus which is what it should be on.

I started as an apprentice around 2 years ago & I soon discovered that I had the exact same permissions in AD as the current NM, which i thought was brave! I'm not one to tamper with things that I'm not knowledgeable about, but somebody else could have caused some damage lol (accidental or malicous).. So yes I would recommend what others have suggested above

Does anybody know how to set a default interval for new staff in Bromcom? Any new starters we have seem to default onto 2020 - 2021!

We have been using o365 SMTP for a few years also, no issues at all!

Likewise to howartp's suggestion, I would create a domain user account with restrictions similar to what a student user account would have (no permissions to access any network drives, locked down OS etc..) If the machines they are using are on WiFi, i would put them onto the Guest WiFi to just allow internet access. I would maybe even go as far as to monitor what they are doing via some classroom management software (senso/abtutor etc.)

Well done! Took me 4 attempts to get a grade C in GCSE Maths too, definitely my worst subject!

We're going to try some from Amazon (£19 for a pair), which somebody linked earlier on in the thread. If they suffice then that will be brilliant, save us some money!

We are a fairly small secondary school (just over 500 students), so I would imagine the 1-2KM range would suffice. Thank you for the suggestion though I will keep this in mind.