3s-gtech

An impact driver is the best thing for stubborn and tight screws, where a drill can be useful an ID applies an impact torque rather than a hammer action as a drill does. Awesome things.

Over the top seems to work fine - it recognises the existing install.

To an extent, but firewalls and auth do change that aspect a bit. An internal attack, or an authenticated user account on a domain joined PC will differ significantly from an external user and device. Of course, internal security should be as tight as possible too.

The security of your network, protection of data on it (= safeguarding) and continuity of service all trump the easy availability of these features. Allowing them to work needs to be a secondary consideration, in that you enable them to work in an isolated and safe way or not at all. That's not to go all 'no one can do anything because it's not secure', but that certainly needs to be the baseline.

If your Net2 is interfaced to the alarm it should do - it depends what your common interface point is. What do you want it to do?

I had a look at alertus this week - seems to be a flexible solution with the integration to fire panels etc. It could be a way for us to go with a new alarm going in.

Any server that needs very quick restore (like a MIS) should really be on a full backup, so you can restore it directly (it's how I had our SIMS server set up when it was on-site). I could copy the virtual disks from last backup straight onto a new VM too.

I *think* you'd need to script that, run a scheduled task (or a service) that looks at the folder, adds any MOVs to a batch transcode, then deletes them. https://handbrake.fr/docs/en/latest/cli/cli-options.html

Are your new backups in place and working properly? In which case, archive the VHDXs off the host if you can, and you can delete them completely within a few months - an old DB like this is not a useful thing to keep around after a few months, because if you had a complete data loss you'd have to put too much work into updating it when restoring. Triple check that your new backups are good and ransomware proof.

Ooh the licensing PS is horrible. It was awful with msoluser to be fair, but it's now just worse. https://learn.microsoft.com/en-us/microsoft-365/enterprise/assign-licenses-to-user-accounts-with-microsoft-365-powershell?view=o365-worldwide This page gives a good illustration of that. I don't need to do it often, but when I do it should be quick any easy.

I've done it. It was to do with scopes - man, I read some absolute **** online to actually cut the junk out. Connect-MgGraph -Scopes "User.Read.All","Group.ReadWrite.All","Directory.ReadWrite.All","Organization.ReadWrite.All" Then authorise the app with Entra via the popup.

First time I have tried to manually license a new user using Powershell since September. It seems that MS have finally switched off the msol module - at least, I now just get an unspecified error. Great. So, I want to license a M365 user using Powershell, and it looks like I need the MgGraph module now. I have the module installed, but I just get 403 errors when running commands. Does anyone have any idea how I give myself permission to run the commands? The module has had access granted in Entra, but only read as that's what it asked for. Our Salamander install can do this, and I'll probably get it modified to do so, but I always did staff manually due to the faff of constantly coming and going supply teachers. Anyone done this and got a decent guide? I have only found absolute junk online so far.

How about refurbs? Only that a refurbed business grade laptop (Thinkpad/Probook etc) tends to be better made than consumer stuff - certainly in my experience - and you’ll get something plenty fast enough and Windows 11 ready for the price of a budget home machine. When I have the option, it’s Thinkpads all the way for me - the only thing that’s got worse is USB-C charging is pants. Some still have proper charging ports.

Does it need to run Windows Mike? Can a Chromebook do it? Mahjong surely comes in a browser version somewhere.

I push out the wifi settings on build, then student PCs have the wifi settings hidden from the logon screen, settings app and taskbar. They can’t add the machines to other networks because they can’t get to the UI.

The stump is alive, they will try to coppice it and a new tree may well grow from there. It may well be a bit odd looking, but a tree is a pretty resilient thing.

That looks like it was done with a chainsaw with a very large bar. Not the sort of thing vandals just have. I'd suggest something fishier than an attention seeker or 'youths'.

Do you have spanning tree enabled on your main network? If I plug a switch into a regular configured port on our main switches (one not set as a trunk) the port will instantly disable and give the same symptoms you're seeing. I have to edit the switch config, or plug the port into a trunk-configured port on the switch.

SMB v1.0 will be disabled when you go through that process, so check it’s not needed (it stopped some of our old NASs working back in the day, so I binned them).

I've felt similar many times over the years, and I'm pretty stressed currently with getting kit back into stock, Apple profiles, lack of funding, bought in kit not working properly, a desk covered in broken old sh...hardware, etc. What gets me through is the perspective of leaving work on time, then doing something with my time - not going home to dwell on it. Amazing how your brain will allow you to separate the important things in life. Imposter syndrome is a feature of the job. If they want the best IT Manager in the world, they'd have to pay handsomely for it so just do the best you can and be content with that. They definitely do not pay you to be stressed.

That’s the one, but in bulk that’s not going to happen - and it may be a synced attribute if you happen to have onsite Exchange too so will be read-only.

I don’t remove them from the GAL, but I do use the hide from address lists functionality. Students can only be emailed by typing the full address. This can be done in bulk with an AD attribute if you sync from on-prem and have Exchange attributes, or you’ll need to PS it.

I derped a bit there, sorry. You can turn on .NET 3.5 for clients with a startup script, I think it’s a DISM job. I did it a while back. You’ll need an install source that’s accessible. Not got the syntax to hand but it is very simple. No newer version that I know of.

Can’t you add 3.5 as a feature to the server?

2012 R2 in-place upgrades beautifully IME. As long as you're licensed, don't stress that. If you have an Exchange server on that OS, do stress. Do not update to 2016, skip to 2019 at least.