Blue_Cookeh

Thanks guys I'll get in contact and see if they can do it. I'm really annoyed about this to be honest, I have 40-50 odd iPads in our school that I can't enroll in DEP now

Hi Guys, I'm looking around for a new supplier for all our Apple stuff since our current one doesn't seem to be able to add our purchases to DEP, making deployment really awkward. Who are you guys going with nowadays? I don't think we make enough purchases to go direct to Apple but maybe someone else has experience with this? DEP support is a must! Cheers

Recommended!

iOS will prompt for a trust approval, but the device still won't show up on your computer if the option has been selected (which it is by default on supervised devices IIRC).

Are the iPads Supervised using Apple Configurator? They will not show to any computers apart from the one with the correct Configurator certificate installed if so.

You should enable F8 Command support in your boot image settings in SCCM, try running the TS again and when it fails hit F8 to get a command prompt and grab the CCM Logs directory (I believe they'll be in X:\_SMSTaskSequence or something).

It was due to systems running System Restore after a failed boot in our school, this means the Machine account password between the domain and the local computer gets out of sync if the restore point was taken before a recent machine password change. Disabling automatic system restore fixed this for me. Also stop rejoining, log in as a local admin and use the Reset-ComputerMachinePassword PowerShell cmdlet if you have PoSh 5, or use netdom.

Create a Package in SCCM (not Application) that includes your bat file and the file you're trying to copy. In the bat file I use this: xcopy.exe "%~dp0Kar2ouche.lnk" "c:\Users\Public\Desktop" exit /b 0 You then create a Program inside the Package in SCCM and give it the full bat name (in my case SCCM_Install.bat) in the "Command line" box. I use this method to run a bat that unzips our Kar2ouche files to the local device over the network and then copy the shortcut to the desktop.

Managed properly (both technically, and in the classroom) there's nothing wrong with laptops. Mobile devices are the future but plan your Wireless infrastructure and group policies properly!!! Our kids are assigned specific devices and they hold responsibility for them, once they feel a sense of ownership it's surprising how little damage there is. Our VeryPC netbooks have had a couple of drops (no intended damage) and they survived. Same goes for our iPads with Griffin Survivor cases. +1 for @VeryPC_Colin_M very nice guys over there

This is called split brain DNS: https://blogs.technet.microsoft.com/teamdhcp/2015/08/31/split-brain-dns-in-active-directory-environment-using-dns-policies/ You need to mirror your external DNS internally, it's a bit of a pain but I find it's easier than renaming your AD domain. We're set up this way so any probs give us a shout.

Their new Firewall OS is getting there.... slowly. This will replace Sophos UTM eventually as an upgrade (I think free) but it doesn't have the complete feature set yet so worth waiting a year or so. https://www.sophos.com/en-us/products/next-gen-firewall.aspx

Setup some FSRM monitoring! Our's e-mails me with the machine information, and the user telling them to shutdown their laptop ASAP. https://community.spiceworks.com/how_to/100368-cryptolocker-canary-detect-it-early

Can you post the config of your core switch (or just the VLANs and ports concerned)? You don't necessarily only tag ports on "trunks" (Cisco speak, a HP Trunk are bonded ports). So long as ports 9-10 on your smaller switch, and the ports you're connecting to at your core contain the VLANs on their interface config you should be good to go, it could be your routing/ACLs are screwed up somewhere instead.

I don't see UPSes as things that really need replacement. If they're still working and have enough capacity, good batteries are generally all you need. If you're looking at more space then by all means swap out your 3000s for the 5000, but definitely put the management cards in. We don't use UPSes of that size (we don't need them) but I found putting management cards in our older UPSes gave us all we needed at a fraction of the cost. Run time is a difficult one since it depends on what your servers are doing, what PoE you're powering etc, but I'd look at managing it. We set ours to start powering off non-essential services earlier so we can keep things like phones and DCs running longer.

I use Anker cables for ours, and at home. Really nice and not had any break in the last year. Also MFi certified. http://www.amazon.co.uk/Release-Anker-Lightning-Connector-Certified/dp/B00UBLKS6E We just put ours in our netbook trolley since we had a load of space left in one of them.

I've used @VeryPC_Anthony_L (VeryPC in general!) for a couple of batches of netbooks recently, and get our Lenovo gear through @Millgate Both very helpful, quick delivery, and very patient

Turns out you can't route between a management VLAN and standard ones!

Yeah, I set both devices to the switch's relevant IP for that VLAN. (10.0.99.1 on VLAN99 and 10.0.0.187 on VLAN1)

Hi All, Just trying to move our routing away from our Sophos UTM and onto our core switch but having some issues. I have enabled IP routing and given all VLANs an IP address on our HP 2920, but I still cannot ping from one VLAN to another. My Linux box is coming back with this: xyzadmin@monitoring:~$ ping 10.0.0.248 PING 10.0.0.248 (10.0.0.248) 56(84) bytes of data. From 10.0.99.1 icmp_seq=1 Packet filtered From 10.0.99.1 icmp_seq=2 Packet filtered From 10.0.99.1 icmp_seq=3 Packet filtered Any ideas? My first thought is that the HP switch must implicitly deny any routing between VLANs, in which case I should create some ACLs. I created an ACL to permit any traffic from anywhere and then applied it to the VLAN but still getting the same message. I'm sure it's something obvious that I've missed but any ideas? I'm trying to ping between VLAN 1 and 99. Example of our config is here Running configuration: ; J9728A Configuration Editor; Created on release #WB. - Pastebin.com

Just r.e. Sophos UTM... they still fully support the old UTM OS, they know the new product is a bit sub-par and will give you free downgrade rights on any Sophos hardware, so you can still upgrade later on whenever you're ready.

If you have problems on the MS Activation phone it usually transfers you to their call center and they can sort it for you. They're off shore but they've always managed to fix it for me.

Deployed UniFi (both indoors and outdoors!) and haven't looked back Controller will run on any Windows or Linux server you have around (or they can run with it offline but it's not as feature rich), and the newer APs will run off standard PoE if I remember correctly. All ordered through @Millgate;

We had similar scaremongering with our LEA on various topics and told them where to shove it. We now have a go live date set with SchoolsBroadband. I won't mention the fact our LEA expect us to send their equipment back... which is locked in a cabinet they lost the key for...

We sucked up the cost and replaced all our SMART boards with CleverTouch screens this year. Teachers are loving the ability to use them without a computer, with a computer, as normal TVs, streaming iPads etc to them. It's a really nice solution, and they're far easier to see in bright classrooms than the old Casio/SMARTboard combinations we had. ... plus we have way more support with them, I barely touch them now

What VPN server/client are you running? It sounds to me like you're using a full tunnel rather than split tunnel, the latter will allow you to access both local and remote resources whilst connected to the VPN.