localzuk

It really depends what you mean by admin control for IT. What tasks do you wish to complete with it from the IT admin side?

One option - https://www.digitalid.co.uk/product/idp-smart-bit-ribbon-shredder-2593

I have set up a Graylog server here, with an OpenSearch server behind it, and then have Beats winlogbeat sending logs from a couple of servers, plus a syslog input to get some data from our firewall etc... Early days at the moment. Its a complicated system with total flexibility in what it does. At some point I'll sit down and set up some alerts - there's a plugin for Teams, so we could theoretically get it to post alert notifications there.

The notice that comes up has flagged some serious concerns about compliance with data protection rules for us. I've pushed it to our DPO to investigate. Specifically, the blurb says that OpenAI would be a data controller etc... Which, as they're in the USA and we don't have any direct contract with them raises some serious GDPR concerns. We're leaving it disabled for the time being. At least until our DPO can provide us with some advice. I think it fits into the wider questions about AI in education as well. There's a much larger conversation going on regarding it all, and I don't think we as schools should leap in and get it wrong. As it stands, the notice we're shown if we click on the icon as admins does not make this clear. It is very apparent that Bromcom is implementing this new feature quickly, and the notice tries to remove any responsibility from Bromcom - which is very concerning.

For us, 4G is available at 50% of our sites. The other 50% barely get 3G and often have no signal at all.

How would they know their email addresses? We don't list them anywhere publicly, and they're not guessable. Whereas if they're on our email system, they have access to our address list (unless we limit them to a custom address list like we do our students).

One thing to note is that in some areas, regardless of who you choose for your leased line you may end up with an OpenReach line anyway... That's what we have here. Doesn't matter who we choose as the retailer, they all end up using an OpenReach line. So for redundancy, we'd end up with 2 OR lines. Unless we get FTTC (as FTTP isn't a thing here yet)... And that's fairly limited too. So there will be limits to what you can do for backup lines for a lot of places.

We used one of these in that sort of situation - https://eu.store.ui.com/collections/unifi-network-routing-switching/products/usw-flex-mini

This thing is a workhorse. Think it may be due for replacement soon. 5.2 years of being switched on.

We disallow any shared accounts like this. The only exception is a shared mailbox that is linked to people's personal accounts. So, each PTA person would have their own account, and we'd delegate the shared mailbox to them. Not that we've had any requests for PTA emails though. If we did, there's also the consideration of access to mailing lists etc... We would not want PTA members being able to email people randomly, so they'd have severely restricted accounts if we allowed them.

Oh, absolutely. We paid specifically for our legal team to check and double check every aspect of the process, including going through the contract to ensure we didn't have anything that'd bite us. Cost us a bit on top of the process, but I think with any high value process like this it is a necessity these days.

One thing to take into account is modern server architectures. For example, we refreshed our server cluster recently. Instead of buying new servers, we bought 3 refurbished servers, each with 192GB RAM, dual 28 core CPUs, multiple 10GbE network cards etc... Then put some Micron Enterprise SSDs in them for the storage, and utilise hyper-converged architecture - so Hyper-V and Storage Spaces Direct on them. Entire cost of the refresh? Less than £10,000. Servers have 3 year warranties, and we're more resilient than our old more traditional servers + SAN setup, as we can theoretically lose 2/3rds of the cluster without losing functionality. This compares to roughly £70,000 for our server refresh the previous time around with brand new kit. So, its possible to get massive cost savings, whilst also not moving to cloud. Lifting our existing workloads into Azure would've cost us more than £10k in fees in the first year alone.

Announcing the next EduGeek Modded Minecraft server FTB Skies Server address: mc.edugeek.net:25566 This is a 1.19.2 Forge modded Minecraft pack. You can download it via the FTB App Current pack version: 1.3.1 As always, to be whitelisted on the server, please visit your Profile on the site and add you Minecraft username to the field there. The server updates the whitelist every 5 minutes. Up to date information is always available via the Discord channel.

This pack is now offline.

Moving wholesale to cloud requires significant planning. You would need to identify every function your onsite solution provides, and then ensure the cloud replacement can do all those things. There are potentially also training implications for staff should any of the cloud replacements be in any way different. We are slowly but surely migrating all our onsite services to cloud services - but only when we're sure the cloud solution can provide everything we need at a sensible price. Simple lift and shift is not cost effective at all. And certain services, when you look at cloud provider options, can be significantly more expensive than running it yourself (eg. for us, moving our VOIP phone system to a cloud provider would be extremely expensive vs the price we pay to run 3cx onsite). "Cost savings" are not a given for such a project.

I would suggest such a super admin account should be locked away in a safe, along with a physical token for 2FA.

We used G-Cloud for our procurement due to the size of the contract, and the fact that using the framework allowed us to avoid a full tender type process. It was a very simple process - but is a bit different to that which most of us are used to. You don't go out for quotes/bids. Instead, you determine your spec for how you'll choose your result, do a search on the system, which identifies options, you then you compare to your spec. You get the prices from the list prices on the G-Cloud site and build your own pricing model to compare. The companies involved aren't allowed to actually send you a quote - or at least they weren't under G-Cloud 12 when we ordered.

I would suggest that sharing an admin account is not particularly GDPR compliant as it wouldn't really tick the requirement that personal data is processed securely by means of "appropriate technical and organisational measures" per the security principle. Having 2 admin accounts costs nothing extra, and ensures traceability of actions. So, I would suggest the first thing to do is get them each to use an individual admin account for admin stuff, and then have 2FA protecting each.

Happy retirement!

Is it me or is there only half the message in the first post?

The numbers are sometimes a bit different if you use non-dairy alternatives to milk. My experience, tea with (good quality) oat milk is darker generally, so if I use that it'd be 4-5. For soy its 3-4.

Pack updated to 1.5.

Note: there is a bug with Integrated Dynamics that makes the server think any chunk with ID stuff in it is a cave, even at the height limit of the world. So, we advise not using ID.

Pack updated to 1.0.15.

Yes. With Boxafe on Qnap you could add as many as you wanted - as it does it by domain specifically, if you have different subdomains/domains on your Google account, you add each one individually.