Blue_Cookeh

I know you didn't ask for primary but...! We're running ours on ZHO simply because we have a couple of Avaya WiFi phones (coupled with UniFi's outdoor AP & sector antenna to get coverage over our playing field) and we can walk around our site without any dropouts at all. UniFi definitely isn't the best or most intuitive out there, but it's been fantastic on our budget. We've ramped up our device count significantly this year and haven't got any issues. Netbooks, phones, iPads, all sorts are hung off our system.

Think that post jumped the gun a bit, he could have been testing 6 APs, with a load more that aren't UniFi! How many clients were connected to the crashing AP @pirran; ? We're a small school but we have UniFi deployed and the APs seem to handle 45 clients per AP without crashing. Even still, we've deployed more APs now so that there's one in every classroom and a few scattered around office areas in a lower power config.

Hi guys, This might be a rather daft question, or it might not. We have a load of netbooks for our younger years that use a generic domain account for login. Now I need to update the mandatory profile for this and have them all pick it up (preferably on next login). Is this a case of me simply updating the server side profile and they'll all go and pull it down, or will I need to somehow have them delete the locally cached profile first? Any tips? Cheers

Would using something like iPlayer not fall under the same laws (or regulation, whatever) as recording live TV? Can you not use the iPlayer download software to 'cache' programs indefinitely?

I like this. You could even just use Squid to forward users to your county's proxies depending on Group if they use different IPs.

Hi Guys, Just wondering... how are people managing new Win10 builds across laptops? I feel like I need to deploy new builds but we can't have staff or student laptops sitting there for half an hour installing new builds in a lesson. Are you keeping them back until you can manually do them? Setup WOL to do them in the trolleys every night? Or am I missing something completely? We have SCCM updated to the new version with Win10 servicing but haven't had much of a play with it yet. Thanks

That sounds like a complete PITA. At a minimum I'd expect AD group filtering or how you're currently doing it with GPOs. Most suppliers should be able to do one of these for you...

Psht, if we ever saw anything back on our SLA I think I'd die of shock. Luckily our LA broadband was due to be renewed this April and the local village got FTTC a month ago so the timing was perfect.

I thought about it, then I remembered how obscenely expensive their service was, how terrible support had been, and I couldn't justify it for a failover connection anymore. We just ceased our contract with our LA and are now having Schools Broadband installed. We have a secondary ISP providing standard FTTC for a backup line.

Sorry to hijack... Does anyone mind PMing me what sort of pricing you guys got on the VRTX? Would rather see what you guys got than go through our Dell account manager when it's just spitballing ideas around my head

Give the old drivers a go, if not PM me tomorrow and I can send you the files I used to get them working on our Win7 machines. I haven't tested with Win8.1 or 10, I told management tough luck by that point.

How many pictures are they uploading? We give them two options, the teachers can use the Synology app to upload to our NAS, or they can simply e-mail from the iPads to their own accounts. The iPads have generic Office365 accounts which cannot send mail externally.

Primary school here with heavy use of IT. I'm using a 2920-48G as our core and 2530 series for the edge. Brilliant devices

Out of interest, why is this a problem for you? If the kids are turning on hotspots then let them, they're only going to access whatever they want to directly on their smartphones now anyway. I'd say it's more of a teaching/class management issue if they're abusing this in class. If they're using the same SSID, use rogue AP detection, if not then there's something wrong with your config if faculty devices are connecting.

MP and DP per site and nothing more. Restrict bandwidth use during the day for replication and let it fly at night. This is exactly what SCCM was made for, going down completely separate installs is wayyyyyy over complicating this.

Firstly I found Meraki's new interface very flaky, on the web page somewhere there should be an option to revert to the old one which works 100% fine. Secondly, make sure you're adding tags to each profile and then assigning the tags to the iPads. Give us a shout if you need any help, I've been using Meraki to manage our fleet of iPads without using our Mac server or Apple Configurator at all (although we will change this soon so we can silently push apps). I made my life easier internally, I configured a new Wireless network for mobile devices such as iPads that used a transparent proxy, then I created authentication/filtering/download manager exceptions for any domains to do with Apple (iTunes/iCloud etc) and all domains to do with Meraki, before I did this we just kept running into one problem after another with apps failing to install etc.

Aren't SMART boards still resistive touch? Why not just buy cheaper chunky styluses or pens? On the older boards at least, the pen detection was simply some kind of sensor on the board's tray it self, so you could literally use a paintbrush if you wanted to.

No, I think it's unreasonable to block entire "countries" for a couple of reasons: - The people in China/Russia etc aren't launching attacks from just their local machines, they're global botnets - You never know what services you're going to block - Country information on IP addresses aren't always correct If you've set your firewall up properly and have the IDS enabled I think you're pretty much set anyway.

You could use something that provides forms-based authentication (over HTTPS!) to an RD Web Gateway, I know TMG and Sophos both have this option and I'm pretty sure Smoothwall would too.

Yes there's no reason why you cant. We do this Internet > Sophos reverse proxy > Sophos UTM firewall/routing > Web server (VLAN 666) > Sophos UTM firewall/routing > Database/internal services (VLAN 1). Sure maybe there's a reduction in network performance going round in a circle like that, but I don't need to buy a second firewall for the amount of traffic we have coming in.

It's not exactly clean, but when I had this issue I forced them to install into a custom folder at c:\SchoolName-Apps instead.

Does SIMS have parent facing stuff now (in which case, reverse proxy using Nginx/Apache/your UTM)? Why wouldn't you leave that internal and force your staff through a VPN? I wouldn't be comfortable putting that sort of data anywhere near the Internet, but for things like web servers, VPN servers etc I would always stick them inside a DMZ. Of course, you should be putting other restrictions in place like throttling database connections etc for each client connection so people can't just dump your database should the web app have an exploit.

This happens on machines without Classic Shell, and Classic Shell still works when this happens for us. I don't think Explorer is crashing since any open windows are still usable, it's literally just the task bar in our situation. I have a feeling it's something to do with our mandatory profile permissions though.

This is a different issue, I just had a machine where Classic Shell was still working but couldn't click on any other part of the task bar (cortana etc). Quitting Classic Shell bought back the original Windows 10 start button which I couldn't click.

Yes, your supplier can assign the devices to your DEP account which will preconfigure them for your chosen MDM. Unfortunately you have to be careful of where your iPads come from, we've been stung recently because our supplier cannot add them to DEP for whatever reason, so now we're looking elsewhere.