localzuk

The issue appears to be that the support team/licensing team don't appear to have any mechanism to feed this stuff back to higher ups? So, they just go "this is how it is, because it isn't up to this team". How do we get hold of someone who CAN do something?

We have 2 offices (in our 2 biggest schools). The office that my technician and I are based in is shared with one of the finance team, the caretaker, our part time data manager, and our CEO's PA. Children do not come here. The other office is for our senior technician, for them only. I can actually see some logic, if you have a reasonable sized team, in having a public facing space for your technician - easy for children and staff to approach etc... But, I wouldn't put the entire team there - you'd never get any work done.

I suspect we'll see the introduction of "mileage tax" in the next 20 years to be honest. Along with mandatory black boxes/gps tracking.

That's annoying. It means we can't just update AD groups and leave the sync to do it all for us. We have to run a command every time we update the list of delegated users.

I'm setting up some shared mailboxes, and want to delegate rights to them to a group of users. So, as an example: [email protected] should be delegated to [email protected] The group is maintained via active directory. I don't seem to be able to delegate this way? with GAM I run gam user sharedmailbox to [email protected] and receive the error: ERROR: 400: Delegate user not enabled for Gmail - failedPrecondition. Is there a way to do this?

The last time I checked, the license didn't allow it. You have to buy a non-SMART hardware license to use it, and even then you'll still get a watermark on the screen I believe.

I've not had any speed issues. We have it running in a VM on our VMWare cluster, but at this point pretty much all our machines are now SSD based, including all our servers. We had a number of issues with synchronising groups and computers in it, but they worked to fix these for us, with new versions released. There's about 200 machines all reporting back in to the single server VM from multiple schools.

We use Exa for our connections generally at the moment. We've got 1 x 1Gbps internet leased line & 4 x 1Gbps PTP leased lines with them. We get our filtering/firewall separately - Sophos XG for that (except for Securly for our Chromebooks).

We use the paid version of Securly with our 1:1 Chromebooks. Had no issues with it at all so far!

Yeah, that's for setting up a separate LDAPS server - not setting up AD as LDAPS.

As far as I know, this would still be current - https://www.elitedangerous.net/multiple-accounts.php I don't think you can do it with Steam directly.

We used to run RAID 10 on our storage server, back when we had 100GB SSDs. 8 of them forming 800GB, mirrored. These days, we use RAID 6 though for storage.

I put mine in its own directory in C:\ and pointed it at the full path for it.

Due to the OAUTH part of it all, I found I had to use the same Windows account to run the scheduled task as I used to create the config file. Other than that, the task is as @keithu says.

Server updated to version 1.3.3

Yeah, your RDP file would need to be signed by the server IIRC, and then you need a certificate installing on your Broker. However, all that said, port forwarding to a RDS Farm without a gateway in place is highly inadvisable. You're exposing port 3389 which you should never do.

We run 46 VMs across 2 hosts... Indeed it is. We pay for 2 of them for our 2 hosts. Covers all of our VMs. No it isn't. A new version of Windows Server comes out every couple of years. So, buying outright is simply not cost effective in schools. VL agreements save you funds so long as you're upgrading when new versions come out. My aim is to provide the best solution to the tasks we have, with up to date technology and resources. If that is by spending with Microsoft, so be it. If that's with Google, fair enough. On topic - we run our CA server in its own VM as a member server. We've had no issues, and its a small VM that barely uses any resources. So, can't see any reason you wouldn't go this route.

Not sure if any of the other lines are key. We also have lines for: full address:s:Brokeraddress workspace id:s:Brokeraddress use redirection server name:i:1 alternate full address:s:Brokeraddress Other than that I don't know, sorry!

You can, but for the life of me I can't remember how I generated the rdp file I use that does this. Basically, when you're connecting to the Broker, you need to be specifying the loadbalance info. In an RDP file this is a line such as "loadbalanceinfo:s:tsv://MS Terminal Services Plugin.1.MMS_Pupils". So, somehow you need to create a RDP file with this info included. I say somehow, because if you make it my hand it won't be signed so you'll get complaints about security.

OK. So I've just done this here. I have PKI set up. So, I exported the CA's root cert, and imported that into the java keystore using: c:\Program Files\Google Cloud Directory Sync\jre>bin\keytool.exe -keystore lib\security\cacerts -import -file c:\cs2cert.cer -alias cent-cs-01 The default keystore password is changeit Then I edited the 2 files config-manager.vmoptions and sync-cmd.vmoptions in c:\program files\google cloud directory sync to add 2 lines: -Dcom.sun.net.ssl.checkRevocation=false -Dcom.sun.security.enableCRLDP=false Opened the configuration tool and edited the LDAP configuration to use the FQDN for the DC, port 636 and connection type LDAP+SSL. Tested and working OK.

I would personally go with "no" on this. Mainly because of the extra notes that can be seen from register screens. Eg. in SIMS, you can see other data - SEN status, PP status and message notes. That MUST not be broadcast.

Was this an in-place Windows upgrade? If so, you probably need to reinstall the SMART drivers - as the Win 7 drivers differ from the Win 10 drivers.

I've had this happen with a bad cable.

We looked at Cloud Connect, and we just can't understand the high cost for it - what is the middle-man offering between Veeam and the actual hosting? That's the big question that no-one has been able to answer me so far. So, we ended up going with Cloudberry (which is pretty cheap as a one off purchase!) and using Azure archive storage. The big costs are the upload and download. Data just sitting there is pretty cheap - so storing yearly backups is very cheap to do. We have 64TB in there at the moment, with a weekly upload of data anywhere between a full backup (17TB) and 1TB (block based changed data). We spend £194 per month on this now, but I have plans to change how we back things up (we currently back every VM up every week to it, but this is unnecessary, so I'm going to tier my backups - SIMS/Data etc... every week, infrastructure stuff less often). We've also not been very tidy with our data - so there's probably a chunk of it we can simply delete.

This is handled by devices resetting to their own individual original password, printed in documentation or physically on the device (like your router etc...). There's no need for a single universal username/password.