NegativeKillDeath

Salamander creates the basic account ahead of the start date. We get email from HR to let us know the new users start date and department/role. Manually add them a handfull of AD/Entra groups. Time agreed to give basic IT induction (give passwords, set up MFA, set up WiFi, short Data protection speech). Release into the wild.

I'd go lowtech. Either a comically oversized keyring or a deposit required.

Ah yes, the exception option doesn't present itself until you've fleshed out the condition and action in Outlook on the web.

You need to create 2 rules, First rule should match any mail sent that include your domain the senders email address and does what ever you want with it, delete, move to folder etc. It should then stop processing further rules. You then create a second rule below it that forwards all emails to the forwarding address.

Unfortunately its a faff. You can shell out for a Sassafras key server which should help but thats extra cost. Look at the autoupdate settings as well, you want to prevent it. Even a minor version update will break the unlock.

It sound like you need to copy the unlock.cfg to the programdata file as per Authorizing Live for all users on Windows (without Sassafras) – Ableton If you've done that then check the app data of the student accounts and remove the ableton folder from roaming profiles.

An excuse to promote the excellent Steve Mould. It might not answer your specific questions but its a good watch.

A bit of reading suggests that IOS keeps the same private MAC for each wifi profile it has. What I am having trouble finding out is how Windows DHCP server handles requests from previously leased clients. Is it possible that it will continue to allow the client to renew its lease and the deny filter will only kick in when the lease is no longer valid?

Getting the deny rules working isn't addressing the problem that non school devices are talking to the wrong DHCP server. Looking at Ruckus you will be able to see which SSID the clients are connecting to, if they are on your device SSID then there is something wrong with that SSIDs authentication, if they are on your BYOD SSID then there is something wrong with client isolation or VLANS.

Do you see the MAC addresses connected to any of the Ruckus APs? Is it possible someone has plugged in a consumer grade router/ap somewhere to try and get internet access?

Do you have an incorrectly configured AP that isn't applying the correct VLAN to the BYOD SSID allowing it to leak to the main DHCP?

Always tricky and you will not be able to stop the parents finding out as students will send messages from their phones.

No technical solution was put in place. Curriculum leaders would be added to all classes by the teachers at the CL request to monitor homeworks and this would be feed up to SLT during their regular meetings. There didn't appear to be much of an appetite to go beyond this but that may have been due to the Head and both deputies retiring at the end of the same year and their replacements concentrating on other areas of the school while they bed in.

The builtin app is called Insights, I never got round to using it as when we rolled out Teams it was lacking in features and didn't provide SLT over view. IT Admin Guide to Education Insights in Microsoft Teams - Microsoft Teams | Microsoft Learn

I've tended to find that the teachers can figure out there is a powercut. Our website is hosted so can add a message to that via a mobile phone to let the wider community know.

We used Netsupport Notify, initially as a way to communicate a school lockdown but broadened to Internet/Email outages. Other uses are being discussed, eg school buses are late or other whole school last minute updates that might get missed via email.

As others have done we have a group the student gets put into that is linked to a smoothwall group that has additional restrictions (an allowed rule preceding a total block rule). We also have a small suite of pcs for students that 'internally excluded' that have static IPs and those IPs are in a location group that has the same restrictions as the user group. There is a relatively high turn over over of students using the IE pcs so having a location frees up some admin time of assigning students to the group.

A couple of stumbling blocks my teachers had with MS Teams assignments. Students added to a team after an assignment has be set but before the due date won't necessarily see the assignment. There is a tick box when setting the assignment to control this behaviour. Similarly if a student move from a class/team that has an outstanding assignment it will remain visible to the student until the due date. We had some teachers be clever and set up all the assignments at the beginning of the term but set the due date for the end of term. It triggered a lot of the situations mentioned above.

A shared mailbox has an underlying user that doesn't log on so the presence will show offline. Ours show status unknown.

I tend to go broad on the initial audit and then export to csv to narrow down. So for this I would get all "Moved to deleted folder" activities for the approx time frame and search the csv for the mailbox in question.

They can try changing the alias on the personal account. Which account do you want to use? - Microsoft Support

We are looking for a forward thinking, innovative and creative leader who will work in collaboration with the staff to drive excellence in the use of IT across the school. We want to release the potential of IT to enhance learning and teaching, to help deliver an outstanding provision of blended learning and to continually review and enhance our services. We want to ensure our students can benefit from the advantages a high-end IT system can deliver, staff to receive regular and purposeful training and for the school to embrace the challenges of continual change. https://www.priory.e-sussex.sch.uk/419/staff-vacancies-25

AnyDesk has password protection, MFA and access control list to allow only certain AnyDesk clients access to a remote session.If you have multiple people who will need access then MFA maybe a problem unless the device with the authentication app is also shared around.

54% play rate of my library Negative Kill Death · Steam Calculator · 76561197961123721 · SteamDB a lot of the unplayed ones are Humble Bundle activations that I had no real intention of installing.

RDR2 now under £20. Do i take the leap now and add it to my play list or wait till I've cleared the list and hope its cheaper still?