mrwoberts

@FN-GM As par for the course, I manually install the following updates, post-install, to get Windows 7 on the right path... The following links are for 32-bit version!! KB971033 KB982018 WUClient-SelfUpdate-ActiveX-x86.cab WUClient-SelfUpdate-Aux-TopLevel-x86.cab WUClient-SelfUpdate-Core-TopLevel-x86.cab KB2670838 KB2841134 For the MSU files wusa D:\updates\Windows6.1-KB971033-x86.msu /quiet /norestart wusa D:\updates\Windows6.1-KB982018-v3-x86.msu /quiet /norestart wusa D:\updates\Windows6.1-KB2670838-x86.msu /quiet /norestart For the CAB files DISM /online /norestart /add-package /packagepath:D:\updates\WUClient-SelfUpdate-ActiveX-x86.cab DISM /online /norestart /add-package /packagepath:D:\updates\WUClient-SelfUpdate-Aux-TopLevel-x86.cab DISM /online /norestart /add-package /packagepath:D:\updates\WUClient-SelfUpdate-Core-TopLevel-x86.cab DISM /online /norestart /add-package /packagepath:D:\updates\IE11-Windows6.1-KB2841134-x86.cab IE11 must be installed last! Followed by a REBOOT.

Thank you. Yes, I put in the DfE number and postcode as usual and then provided a password. It brought up the address and it certainly looks registered.

Thank you for your reply Gg, that may well be where the problem is. I just assumed, since other schools have not shown this kind of behaviour, that the upgrade itself would be sufficient. I'll contact the school and ask them to contact their patch provider. I'll keep you posted. Thanks.

Here's an example (basic) for looking at. ATTACHED It has the clause, "I understand that all my use of the Internet and other related technologies can be monitored and logged and can be made available, on request, to any Senior Leader." Acceptable Use Policy.pdf

Ok, so I upgraded a school to Solus 3 on Friday (note to self, don't do that kind of stuff on a Friday). But things just didn't seem to click into place. 1. Solus 3 wasn't offering the 2015 Summer Release, which I knew needed to be applied - resolved by running Solus 2 and updating. 2. Then post the Solus 2 update, each SIMS client reported the database was an incorrect version - oh, that old chestnut. 3. So I manually updated the clients using the old and trusted way. But Solus 3 still wasn't doing anything! The updates list just sits there, looking like this... It doesn't look/feel like it's working. What am I doing wrong? I've even resorted to the naughty method of emptying the 'Update repository' folder in the hope that it would repopulate the list, but I may have just added to my woes.

@abillybob Just remember what @localzuk mentioned before, that true browsing history can very very easily be hidden. In fact, most browsers now have a 'incognito' type of feature where nothing is stored once the window is closed! You're going to need something a bit more substantial. Thanks for raising this thread, it's made me think a bit more about an area I'd perhaps just assumed was sorted.

That's a bit better... thanks @abillybob Ok, in my view, and I know this might be over-kill, but checking at random times per year isn't pro-active enough for me. I prefer to stop inappropriate browsing habits the moment they come up on my rader - in actual fact, I've had a case in the past whereby something slipped passed the AV, mentioning no names, aaaaaaachooooo sophos oooooooo. The only way I spotted it was when they brought the laptop back into the school and the filtering kept blocking requests for certain sites!! That was the trigger I needed to take action. It wasn't necessarily the teachers fault, but I did need to look at their laptop asap. For me, this is still a work in progress, finding the best tools that prevent such activity, and finding the tools/scripts to flag up any unsual activity.

The term, 'duty of care' is absolutely the right way to be going about our role. It has even been suggested, and I have some personal experience of this, that Ofsted are picking up on things related to eSafety, primarily with the children/students, but in my mind, why should it stop there. I want to protect the staff too. I don't want them to have a cloud over their head because something made its way onto the school laptop and showed inappropriate material in the classroom - all because the logging wasn't in place that would have triggered an alert... Is anyone else feeling that our jobs are getting a bit harder, those nasty people out there seem too clever to be wasting their time with depraved pursuits. I'm so thankful for the Edugeek forums where we can help each other to stay ahead of the game. Here's to you guys :thumb:

I really think the OP needs to come back here. @abillybob He hasn't told us the full story, which is crucial to this thread. Responsible traffic logging of school owned equipment is absolutely essential, we'd probably all agree on that. If the staff have not been told they can't use the school laptop for non-work use, at home, then there is a huge hole right there, which make the OPs request wander into 'snooping' territory, but where a good AUP is in place, then it follows that the school should have ways to investigate breaches of AUP, enter the logging traffic solution. (I'm starting to lose the plot myself now, I really wish the OP would come back to us...) Edit: A red faced mrwoberts quickly changes the word monitoring to logging, in admission to the difference of those two words. Edit 2: Then wonders if his previous edit was justified {bubble above head - what about the term RMM}

BitDefender Seems to top the AV testing charts quite regularly. av-test.org

@abillybob, can I just ask how this came about? Is it because you suspect, or have evidence of misuse? If so, does your AUP not already cover that? Is it because staff are installing stuff on 'the school' laptop? If so, could you improve your GP... Is it because they are subjecting themselves, inadvertently, to malware? If so, could you improve your AV solution? You're probably beginning to see from our responses that this is such a grey area, especially if the staff don't see the need for why you would want to do that. If they themselves have had the embarassment of knocking on your door, laptop in hand, suggesting the website seemed innocuous but has done something to the laptop, then the staff may have more sympathy for this type of restriction. Summary - what are the symptoms, and is there a better way?

+1 for including in a revised AUP - perhaps look at what other changes you'd like to introduce so that the staff aren't bombarded with changes to the AUP. You really need them on board with this one!

This works for me, but I also like yours, thanks. To block takeown /f C:\Windows\System32\Utilman.exe /A icacls C:\Windows\System32\Utilman.exe /deny Everyone:RX To revert icacls C:\Windows\System32\Utilman.exe /grant Everyone:RX

NewSid, by Mark Russinovich, is no longer available for download. These two articles explain things https://technet.microsoft.com/en-us/sysinternals/bb897418.aspx Blogs - Mark's Blog - Site Home - TechNet Blogs SysPrep is indeed the way to do it, but if you are still interested in checking out newSid, here is a link NB: Link will be removed by the end of today, so grab it while you can.

As a general rule, if the maker of an application has already provided a way to install their app silently, then I tend to use that method, but if you need a good open source app for creating custom installations, silent... try Inno Setup.

Give this a try (using the normal exe installer) AdobeAIRInstaller.exe -silent -eulaAccepted AND, I normally switch off the updating nag screen by this reg setting... REG ADD "HKLM\SOFTWARE\Policies\Adobe\AIR" /v UpdateDisabled /d 1 /f /t REG_DWORD

Thanks Muz That's rather interesting, because earlier today I was in another school where they use a Ubiquiti wireless system. A similar sized school and they only have 3 APs, however, the system seems to be running without issue. The speed they're also happy with. What's more, I checked the channel usage in this setup and they were all using the same channel, which I thought was going to be an issue, but it isn't apparently. Then, just to check, I wondered if my laptop could see each AP... and it could, with the exception of a few corners around the school. So, my understanding of this is, mileage varies when it comes to different manufacturers. Some have no issues, some have more than their fair share, and the rest are in between. I guess it is also worth looking at how good the after sales support is - I don't have any experience with HP Support, or Ubiquiti.

Just sent them an email. Thanks.

@Millgate - looking at the OP, could you give us an idea of what you best fit this situation, and all the associated costs. PM me if you prefer. Thank you for all your comments so far, it does look like the 1910 series are highly favoured. Just to make sure, the suggestions so far .... 1x 1910-24G-PoE 24 Port Gigabit PoE (365W) Switch JE007A (to replace HP ProCurve 2520 J9138A) 3x HP 1910-24G 24 Port Gigabit Switches JE006A (to replace non PoE switches)

Thanks njc I just did a quick search on Misco, to find those prices. What supplier would you recommend? BTW - lovin' your signature

Scrap that idea then Finally, at least for tonight, you wouldn't happen to know what the main benefits of a managed switch that would be relevant to us?

You're right. I'll speak nicely to one of the teachers to see if I can monitor a session. I'd also like to establish where the demand is going (internal/external)

Anybody know what would happen if I temporarily disconnect the controller (HP MSM760) ? Would the APs carry on without the controller, or would I bring the whole lot crashing down

Thanks again James. If those switches do become available, that may be a big help. The APs are connecting at N 300Mbps speed to a client; I connected my own laptop and checked the connection stats. I also did a bit of browsing around and fetching/pushing with the Server, but that was after the children had gone home so.... It didn't seem that slow, but I could tell there was room for improvement. I'm really curious how the management side has been configured for the switch and controller of those APs. But since I couldn't login I certainly didn't want to instantly suggest we reset the thing

Thanks Chris If my memory serves me, I believe they said the WiFi system (and probably the HP switches) are relatively new!! I don't understand why they didn't put in Gigabit switches in that case - possibly budget related At the moment, it would seem the options are... A - Upgrade HP PoE switch and other switches to Gigabit or, B - Upgrade entire wireless system and switches (probably more cost than option A) For this scenario, what benefit would the managed switches instantly provide over unmanaged ?