markwilfan

Yeh I have . Will dig it out laterz

You set up a FSRM rule for the cryto locker traps and then get the disconnect script to run if they get tripped. Sounds like you have misread it

I have 2 firesticks. Love em. You can sideload kodi or tvmc onto them dead easy. Also look at firestarter for a non root launcher replacement. Can't beat it for the price

I've always wondered this too

We use a powershell script deployed on a schedule via sccm to a collection. First looks at the time, if after x time it runs, this is to stop devices running it if they were off during the scheduled deployment as sccm runs missed schedules too. Will dig it out when I have a chance. May help a bit

That sounds like something like a script running or installation that is generating a uac elevation

Just a wild stab in the dark with my edufork, have you tried creating the package with powershell. have you check you are running the latest console?

No probs @GRitchie I feel your pain. We have quite a big site and sprawling network. Spanning tree hadn't been configured here as it is quite scary if you get it wrong. Definitely worth a look. 1 looped cable floored our network without loop protect and spanning tree so it is defo a possibility. Needless to say STP and loop protect is sitewide now

Could be a packet storm if it is not Impero. Look for any looped cables. Your HP switch will be able to help with that if it is. Worth a read into spanning tree. But loop protect will help if it is this loop-protect all loop-protect trap loop-detected loop-protect disable-timer 60 what are the LEDs on the port doing? Are they blinking or solid

We trialled about 20 Kingston v300 128gb and 20 ocz arc 120gb drives and as everyone has said even c2d pcs are amazong for the average user. Be wary of the cheap drives though. The v300 drives have a bait and switch problem http://www.extremetech.com/extreme/184253-ssd-shadiness-kingston-and-pny-caught-bait-and-switching-cheaper-components-after-good-reviews The ocz trion are basically cheap toshiba drives with ocz packaging. You could argue for the price it doesn't matter but I prefer to get bang for buck with public money and the Samsung evo seems the best for performance/price/reliability at the moment. You can get the 250gb on amazon at the moment for about 50 quid ex vat, they come with a 5 year warranty and are rated at 75tb total writes. With this in mind we are buying the ssds now, popping them in old pcs and will just switcheroo them when new hardware is bought. 45 arriving next week yay

For other Hyper-V peeps, you'll need to convert the vmdk to a vhd. The vmdk is a virtualbox vmdk so... Install VirtualBox then cd %programfiles%\Oracle\VirtualBox vboxmanage clonehd "C:\tmp\file.vmdk" "C:\tmp\file.vhd" -format VHD Hope that helps ---- no credit accepted... pilfered the answer from here http://superuser.com/questions/483756/converting-a-vmdk-to-vhd

oohhh shiney! *Runs away to spin up a new VM* Good find @Blue_Cookeh

Check out Check_MK Makes nagios much easier to config

@halbaradkenafin Just wanted to say thanks for the really comprehensive post on this and to all other contributors. Great PS script by the way, awesome idea. We have implemented this using SRPs but whitelisting rather than blacklisting ie all disallowed apart from the obvious places for what it is worth. Just rolling it out steadily now to stop too much disruption.

ah actually just found out we dumped our old isos a while back. sorry

64bit or 32bit?

Remember that every day is a school day and that security and convenience are directly opposed

To be fair 7.166 has been out for weeks. It was release on 3rd Nov to us and we upgraded on 13th November after waiting a while for re-releases and have had no issues reported.

Also check the cache size is adequate

Tbh I prefer the captive portal for byod users. I like that it times out after a while. This stops peoples devices caning out tinternetweb when not in use. Less convenient for sure but they are getting free wifi so they can deal with it I agree with what you say. My way of thinking with edugeek os even if it helps 1 other it's worth documenting

Can't take much credit. Just confirmed we had the same problems. Ice to know you are not going mental though lol

Yeh it does this in android even when away from the network which is nice. Haven't seen it in any other os

Any body at all using this setup? Just need a yes if you are. And to know if you vlan at the vnic level or sw level

Check in user activity in sw mate. Are there radius entries for staff. Sounds like the groups being sent by radius accounting aren't matching

CArp indeed. That was the initial problem I had which is why we did it this way round. I never solved that and just put it down to a ruckus bug