mdrabble

Before I removed it, they were in a isolated VLAN but due to not really know what was connected, I played the Cyber Security and Safeguarding cards which worked - as I was backe by the DSL and I'm hoping he is still on my side!

just over 2 years ago I managed to persuade SLT to drop student wifi (BYOD) access for the following reasons. Cyber Security issues/concerns Web Filtering - either blocked due not installing SSL Cert or the use of VPN to bypass it. Now, there could be rumblings of the 6th Form team asking for it to be reinstated. How many other schools with 6th Form allow Student BYOD What Firewall/Filtering to you have and what APs? Did have Smoothwall and Unfi NanoHD Aps and now have a Fortigate with Unifi U7 APs. Any info welcome. Cheers

Sorted, had a typo in the gpo for the print server name. I lost count the number of times I checked that gpo as well. only took me 2 days to spot the typo!!

Have a bit of a weird one with printer not being installed correctly. During the summer, reinstalled desktop to 25H2, apps, the lot. Staff and Student get the same User GPO for installing printers which has taget level assignments. All users get mono and staff get added colour regardless of where they log on. Worked fine previously Staff still get printers but Students are failing to get the printer assigned. - Students can install printer manually if i give access to a shortcut to the printer share (so ruling out a driver install issue) I have tried creating a new User GPP GPO with no targetting for all authenticated users and placed on student OU, and still same issue. Scratching my head on this one - anyone any idea on what to try next. Cheers

Use some generic letters at the start, their DOB and a special character at the end.

How are you managing to get students/parents to move over to the Authenticator app? I would say the vast majority of students/parents use SMS when accessing emails etc off site (despite info being sent out for MS Authenticator)

Well……. when I try and pin them down to exactly what their issue is, I just get “my profile must be wrong or have an issue”. And in fact when logging on to a different computer she wants to manually add a secondary email account (yes I know I can add this automatically, but wants email notifications on this account and this is the only way it works) and a couple of other things. - this is the main issue. they do this once in a blue moon! she doesn’t like the answers she had been given so is trying to kick up a fuss as her favourite phrase is “I’m working at capacity” and having to redo “her profile” is having a “impact on productivity” I have point out it is the same for all users including myself. i am right in saying trying to redirect her domain profile to a network location and the use of one drive won’t solve this. cheers

We use OneDrive and local profiles and all fine except for one member of staff who constantly complains that when she has to use a different computer it takes her “hours” to sort things and as a result “impacts on productivity” normally they has an intune laptop with a dock in their office but periodically they have to logon to a domain joined desktops. because of we use one drive I can’t redirect any profile settings as it breaks and Microsoft have acknowledged this. as all known folders are redirected to one drive, isn’t still possible to have a profile redirected to a network location just for them? No Matter how hard I’ve tried to explain why we use local profiles and how roaming profiles break with one drive, they insist it is sorted or escalated (not sure who they want to escalate it to) the urge to resist using a baseball bat is becoming increasing harder and harder!!! any advice welcomed.

We have MFA for students and a phone ban in place since Sept last year, where phone are collected in and stored away until end of the school day. anyone who needs help with phone related app issues either come between 8am and 8.30am or after school. We only set MFA for students to use text messages, so we can just set them to re-register MFA 9 times out of 10. So far no real issues.

dipping my toe into OSDCloud, which version.... V1 for V2? What are the pros and cons? Cheers

Apologies for resurrecting a very very old thread....... Short story, our site manager retired and I have picked up some of the "IT tasks" he did - one of which is supporting the heating system. Software is still on Windows 7!!! and running 369 - I never knew this thing existed as not on the network - but I've told SLT it needs replacing. If you can remember, could you pass on the names of the companies who you dealth with when moving from 369 to IQVision. Cheers

Yep had it confirmed the free FortiVPN client won’t do always on, need the full paid version.

Just been ask to provide a laptop for a student who will be off site for a couple of weeks. Laptop itself not an issue as can be sorted using intune. The problem I have is providing offsite filtering. Currently using Fortinet, have VPN in place for staff using a split tunnel,so how would i get this single laptop to connect automatically to the VPN and send all traffic throught the VPN to ensure filtering takes place? Or suggestions welcome. Cheers

probably not very helpful but this is how we register students. We use the tills themselves to register students. on the first day in September, they have a small windows where all year 7 are taken down in form groups and registered on mass using 4 tills. tills are windows go tablets with the civics bio readers on, so very portable! seems to work quite well and doesn’t have any involvement from IT unless there are any issues.

Each form group has a box with foam inserts where students slot their phone into - on the box lid and a layout with student names with the slot location. Morning registration, all phones are collected in and placed into this box and then the boxes are taken to nominated cupboard for the form group by staff and are collected by staff at the PM Registration at the end of the school day. Each cupboard is fitted with a Paxton Reader and Maglocks, etc and only accessible with Staff ID Cards (we also have 6th Form with ID Cards) CCTV Camera on each cupboard in case anyone tries to force to cupboards. Paxton installed by myself, so just the cost per cupboard We been using this since the start of the year and been going well. If staff are told to check student turn phones off in front of them before putting to the box, try and avoid some students trying to pass off old phones being used in order to keep their "proper" phone.

Wondered if I could pick anyone's brain about updating the Firmware on Dell Latitude 5420. Dell Command seems to ignore or doesn't appear to install the firmware when applying updates. Windows Update not applying the firmware Action1 not applying the firmware even though it is available and says update completed. The only way it appears I can apply the firmware update it to manually download and manually update the firmware. I have 100 laptops to update and I do not fancy having the pull them in and do they manually! Any one had similar issues or able to apply the updates remotely? Cheers

we have these on our student toilets for over a year due to vandalism and no issues (touch wood)

I have 3 Dell r740 with iDrac9 licensed and have a puzzling question. Should the storage show even when the server is powered off? I've mainly used iLO, so not fully use to iDrac. Storage shows in iDrac when servers are powered (Booted) on but soon as powered down I am seeing no drives and the this message They are connected to a HBA 300 (non-Raid) controller, so not sure if that has anything to do with it. Powered on I see the drives and they are listed in the summary and Physical Disks Soon as I power down I get this They disappear and do not even show under Physical Disks - even the controllers disappear! Is this a call to Dell or is this normal behaviour? Cheers

Another +1 for action 1 alredy use for intune updates and software deployments, looking to include domain devices - installing across my estate to get an idea of how many agents would need to purchase.

Yea the CSV stays online without Node 1 being available. will have a play later and let you know how I get on. thanks for the help 🙂

All the drives with issues are on node 1, cleaned the disks, added the node back and still stuck in the repair loop. The issue is that the cluster still sees the old drives and is trying to remove them but won't remove them until it repairs. Cannot remove the drives as the cluster says there is not enough capacity - (as it is still trying to reference the disks and therefore wouldn't have enough capacity to keep things repairable - is how i understand things) Adding them back should say fresh disks and kicks in to repair mode - but then gets stuck in a repair loop. (is my understanding and take on things) Decided to run things through ChatGPT and it more or less gave me similar commands to run, although it wanted me to try and remove disks using friendly names which would have affected all nodes 😁 which when I pointed out it kept saying good catch! - Good job I don't blindly trust the info it gave me. It confirmed it might be in a repair loop but insisted it was fixable and kept giving me the same commands over and over. Checked the StorageJob and it have processed 0% with 0 bytes processed for 15+ hours on the CSV regeneration and Cluster Performance Regeneration and then nearly 6 days on the CSV Repair. Other than purchasing brand new drives is to nuke the cluster. I have an old HP DL380p server with 128Gb Ram and 8TB of Storage, so will test restores on that and check the VMs run, so When I nuke the cluster, I can have the Main Systems online should I not have things up and running in time.

Cluster is a 3 way mirror, nodes 2 and 3 running Server 2019 and are Running Degraded but stable. Node 1 is now Server 2022 Of the 2 NVMe Drives that are Journal Disks, 1 is find but the other is flagged as {Removing From Pool, Transient Error} Unhealthy The HDD are similar, in that some are same error, or Lost Connections or {Removing From Pool, OK} Healthy I suspect the repair/regeneration is down to the drives being flagged as Unhealthy and the Pool keeps trying to evaluate things (although I could be wrong) Repair is currently on just over 5 days the CSV Regeneration is currently on under 7 hours (they were on the same timings previously) I'm hesitant to use ChatGPT or another AI as they are not always correct - but it may be time to stick in what has happened and let AI see if there is a way to fix things. Node 1 has no VMs, not CSV attached to it, so i am wondering if to evict again run Update-StoragePool and then reboot node 2 wait until back up and happy before rebooting node 3 Once Both happy (as happy can be with a missing node) wipe all the disks on Node 1 - using either diskpart of powershell to remove all data, to ensure any meta data is removed. Check any pool flags on the pool and try and resolve/remove them before adding node 1 back into the mix Or Contact either Microsoft or any company to come and fix the issue. Either way I've not been able to relax as if anything happens to another node then it squeaky bottom time!

Cheers for the script, it won’t let me reset the disks as a repairs keeps trying to kick in. I’m just waiting for the current job to finished which has been running for over 4 days!

Was originally set as a 3 way mirror, but currently degraded with just the 2 nodes fully working. Spoken to the head to let him know the situation and he happy with how I am handling things. I think you are right with the nuke option - I am going to spin up and old server to restore some critical services, eg, VOIP, SIMS, making sure that happy before nuking the cluster - will be done over a weekend (not the next 2 as at Blackpool Brass Band contest this Sunday and then Wife's birthday the following weekend) - so will give me time to build and test the temporary server and do so test restores before proceeding with the nuking of the cluster. So, would you option for 2022 LTSC or go Server 2025? Then will need to think if better to PowerShell script the node configs or use Windows GUI to do each one......

I am getting too old for this bring back the days of the good old Econet networks and BBC Micro S2D does not want to remove, fix, reset the "unhealthy" disks - which are actually healthy, but S2D for some reason does not want them. I'm at a loss as to what to do next, so the options I think I have left..... 1. Pay someone to "fix it" 2.Nuke the cluster, fresh install to Server 2025 on all nodes and the restore data. What are people thoughts?