Ben_Stanton

I do them in-house and as a side-hustle. Easy to do, but harder to do right. 9th gen is £90 with me and that's including VAT and 12 month no-quibble warranty. I'm also Hertfordshires only certified Apple Independent Repair Partner, having access to genuine parts, tools and diagnostics (if I told you the certified training direct with apple for all models or MacBook, iMac and iPhone totalled in the hundreds...it's taken a considerable amount of time) Anyhoo, happy to discuss.

Howdy boys and gals Does anybody happen to have a final report from an IT infrastructure audit? I get these will be different from school to school, but it’s more the general gist I’d like to have a gander at (redacted, obviously). Things likely to cover would be the obvious physical/virtual servers, cloud platforms and provision, networking/wifi/comms, MIS, end user devices, printing etc Thanks in advance and happy to donate to a charity for the help, 👍

Hi all, We have a load of various model HP x360 screens damaged and replacements are like rocking horse poop. Any models considered, Pavilion, Spectre, Envy, 14xx 15xx etc.. Or if you have a route to purchase spares, that would be great. Thanks a bunch, Ben

2× B Grade 2× C Grade £100 each plus postage. Can do deal for multiples. Thanks, Ben

Has anybody got Microsoft Booking running for such an event?

Has anybody got Microsoft Booking running for such an event?

DON'T DO IT - same reason as above. It used to be there were some functions not available in the web experience, but for 99% of what our staff use it for, the browser version works hunky-dorey. So we've just put a link to teams.microsoft.com in the start menu, SSO sorts the rest out

PM'd

Thanks for this - what great service. If only all devs acted so promptly Ben

This is great. Demoing it with exams lady today - thank you. However, we also require split-screen for Read&Write Gold. But...our monitors cannot go to that resolution. Can it be done on 1280/1024? If not, can't use it which is a real shame. Will never get the go ahead to swap out all the monitors in that room for new and bigger. Ta Ben

UPDATE: Just digging around and noticed that HTTP was taken out of the default website bindings, added that back and it seems to be ok… will keep testing. I'm blaming my techie Thank you for your time so far Nik

Yes, only Windows Auth is on. I get a login box, I have tried a test account and mine (which usually works) and get taken to an unauthorised.aspx page

Hi Nik, Thanks for the reply. Sorry, probably me not making myself clear. If I replace the existing code in the web.config file with the above and usable anonymous and forms, enable windows authentication (advanced settings, extended protection is off and enable kernel is ticked) then it still comes up with an Internal Server Error As this breaks the system for staff, I have been re-enabling anonymous and forms and disabling windows. But like you say, that then breaks it further with the replaced code. SO i'm having to revert the code back and do it that way so the system can be used. Any further pointers? Cheers and sorry for the hassle

In fact, only just realised that using the code above actually breaks the booking system even with Forms and anonymous switched back on. Grrrr.

Thanks, replaced but no change. Will keep digging.

Does this help? Server Error in '/booking' Application. The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'WebHttpBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.NotSupportedException: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'WebHttpBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement. Source Error: An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. Stack Trace: [NotSupportedException: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'WebHttpBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.] System.ServiceModel.Channels.HttpTransportBindingElement.UpdateAuthenticationSchemes(BindingContext context) +7770229 System.ServiceModel.Channels.HttpsTransportBindingElement.BuildChannelListener(BindingContext context) +106 System.ServiceModel.Channels.Binding.BuildChannelListener(Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters) +173 System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession) +16380721 System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result) +946 System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost) +1406 System.ServiceModel.ServiceHostBase.InitializeRuntime() +85 System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout) +48 System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout) +301 System.ServiceModel.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity) +129 System.ServiceModel.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity) +741 [serviceActivationException: The service '/booking/api/livetiles' cannot be activated due to an exception during compilation. The exception message is: The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'WebHttpBinding' ('Anonymous'). Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly. Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement..] System.Runtime.AsyncResult.End(IAsyncResult result) +610714 System.ServiceModel.Activation.HostedHttpRequestAsyncResult.End(IAsyncResult result) +231 System.Web.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar) +177 Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.2106.0

Hi Nik, Thank you for that. Editing the I misunderstood what you were saying in the video. Switching 'Extended Protection' off in 'Advanced Settings' of the windows Authentication now gets it logged in automatically. From the video, it sounds as though that change is only necessary if using cards and/or tracker. Apologies. However, I now get an internal server error. This happens whether I log in via AAP or internally. Error 401 (IIS log) when first hitting the page 2018-03-09 15:05:32 fe80::d178:aa68:16db:b35e%12 GET /booking/bookingsystem/ - 443 - fe80::d178:aa68:16db:b35e%12 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+rv:31.0)+Gecko/20100101+Firefox/31.0 - 401 2 5 1725 Any quick ideas? Appreciate your busy so thanks for getting back to me.

Hi all, I have been trying to get Azure App Proxy working with v10.6. I'm banging my head against the wall to be honest, I can land on the HAP login page but it will not SSO - even though i'm sure everything is set correctly. I just get the standard HAP username/password page. I can log in from there - just not automatically. Also, something else (slightly more alarming) I noticed is that after editing the HAP config to replace Forms with Windows (AuthMode="Windows") - I can log in with any password as along as the username is correct. This is via AAP and internally browsing direct to HAP server. A small point i'm sure isn't relevant, but we actually only use the booking system so everything points to that directly https://server.ourdomain.abc/booking (it was in the hapconfig of the booking folder I made the authmode change). Any ideas? No doubt it's a config error our end… but like I say, going round in circles and now found this odd behaviour that anybody can log in regardless of password - which is a tad worrying. We can even replicate the login with random password on a fresh, clean install on a local machine! Any thoughts on either problem? Cheers in advance… Ben

Our wildcard was/is up for renewal. £551 from godaddy. But, I just ran this https://github.com/PKISharp/win-acme/releases and now have lets encrypt SSL certs for FREE. Literally 5 minutes and done, it installs the certificate and even created a renewal process in scheduled tasks. Wowsers (said again to reemphasise my happiness - usually hate renewal time but this was truly painless)

So, is anybody benefiting from Azure Active Directory Basic for Education? If so, how? Ta...

Any further update on this? Any particular law or regulation? Ta

Hi edugeek collective, A member of our Alumna staff would like the school to send an email to all parents we have contact details for - going back to the oldest on the database (some 10+ years). The more current parents will have ticked a box to say they are happy to receive emails and/or marketing from school. But I only got this put in place a year or 2 ago. So, the other 8+ years worth of ex-parents did not sign anything to say they would be happy to be contacted by the school in the future. How do you think we stand? My feeling is it's a no no, even though the reason is purely harmless (the idea is to see if there are ex-parents that would like to come and give industry talks etc. - it's not gold digging per se). I've already said that if they ignore my feeling, that I would not send it through our serves. It should be done via the alumna system or something like mailchimp. Just because a parent was happy to receive communication from school when their child was here, it does not mean they are happy to receive it once they have left (especially up to 10 years ago) Your thoughts please, Ta

Well that has made the decision easier - thanks guys We won't be going down this route

Hi all, We need to turn a small space into a multifunction room. We're looking at the funky desks that flip or slide to reveal or pop up computer etc.. What have people got and can recommend (as cheap as possible without compromising reliability/ease of use)? Cheers in advance

Yep, already thought of that. Nearly all rooms needing an upgrade are standard box partition walls so a floor stand would be needed if we went with a big LCD. But, most of our rooms are quite small so this actually has quite a negative impact and wastes lots of space. The main bulk of teaching is done in a block with split levels and stairs here there and everywhere (which puts a spanner in the works for LCDs on a mobile trolly). I think we'll end up going short-throw interactive projectors