itskdog

Also, spf also has an "include" option to specify a domain, so you don't have to keep changing the IPs on the school's end.

If the DPO is external (we use Judicium, though their support can be hit-or-miss at times) they may have training for your DPL alongside the staff training they provide.

I suppose you could take the PowerPoint and add extra slides instead. The fact that the stats they show at the start have be re-surveyed since then by LGfL who conducted the original survey, and those are also a few years old too, just adds to the confusion.

Is your SPF and DKIM also accurate, with both your regular email (Microsoft, Google, etc.) and Arbor configured? Is your DKIM set to p=none, p=reject, or p=quarantine?

We buy Mifare cards from InVentry in packs of 100, and use a Smart 31 with their own-brand IDesigner software for about a year now. Haven't had any issues with it fading, the ribbon has an overlay panel.

Do you have any device cleanup rules? When the device reconnects it's supposed to come back into the list, but I personally don't have an issue with leaving them visible as I usually search anyway.

I guess a single roll-call system rather than having to use the printouts from Net2 + the SIA iPad? Especially for staff who forgot their pass so have to sign in on the iPad. On Inventry it was only a couple hundred when we looked into it (though we didn't go through with it in the end), but that was just the door add-on, as the MIS link was in the base price for us.

Good luck with that once they're part of XMA. We only have licence renewals with them but they seem to take forever to reply back, and even when we request quotes for other IT equipment to compare prices and get multiple quotes, we often don't get a reply before we've already filled out a PO for someone else. Especially difficult in February when you're trying to use the last bits of your budget before the accounts close.

I recently tried switching BrowserSignIn to 2 (Force) rather than 1 (Enabled) to see if that would help.

When we were on A1 it seemed to just work with no configuration. Just set the encryption on the email (yellow padlock icon on the "Options" tab on the ribbon) to either "Do Not Forward" or "Encrypt" The only problem was opening attachments that were made with Office as those would automatically get stamped with IRM and would cause trouble with Office 2016/2021.

By cost I was more talking about things like SSO services, patching solutions for everything other than the OS (to meet the 14-day deadline), replacing servers to have a supported OS, etc. that were already in there before, it was more that there's still no enforcement even in the updated version, which will affect the number of schools who will be ready by 2030. And of course even MFA for staff will get pushback from technophobic SLT members, and you can't really have an exception for them as otherwise everyone else will complain and you can't say "Even XYZ has to do it, we're not even making an exception for them".

Installed Outlook Classic the other day to work with PSTs, and I opened it as soon as it finished installing - said "Welcome to Outlook 2016" in the wizard, clearly M365 Apps are just Office 2016 with a coat of paint now.

Strongly doubt there will be too much buy-in from many SLTs without any enforcement. As long as it's just a stick with no carrot, the expense and inconvenience will put people off.

We use Riso MFDs here so Hive isn't suitable as they only have the Lite version in the firmware, so still have an on-site MF server. Configured Entra as our sync source, set up SAML for web authentication (found that was quicker than using OAuth). We're using Print Deploy + Mobility Print to authenticate to the printers, users just need to click "Sign in with Microsoft" once upon logging in to a PC for the first time to authenticate (doesn't support automatic Entra auth like CDM or OneDrive, unfortunately). Pushed out Print Deploy and User Client as Win32 apps, PaperCut have documentation in the manual on how to do that. (User client needs manually updating with every server update) Also make sure to change the config key to make the User Client check the UPN rather than the username, see this post for details:

Looked into CapCut - it's getting blocked on the web filter for AI, and the titles in the search results say it's AI, too. Possibly not permittable for under 13s, plus we'd need to update the school's AI policy and get that re-approved. We already have Canva as our replacement for Publisher, and AI is already set to staff-only there, so I've asked the teachers to check that out first to see how it goes.