mdrabble

We have some Pupil Premium laptops that were handed to students and I was told to ensure they were filtered etc. I want to bring them in so I can update them and send them back out to those students and I wanted to check if it was really needed especially on Pupil Premium laptops (as I understand if PP it basically becomes their laptops) unless I’m wrong

Can someone point me in the right direction about requirements for Offsite filtering and monitoring please - for the life of me I cannot see the wood for the trees........

I use this Script https://tinyurl.com/y3wmsh7o - essentially BGInfo A script used to download, install and configure the latest BgInfo version on a Windows Server 2016, 2019 or 2022. The BgInfo folder will be created on the C: drive if the folder does not already exist. Then the latest BgInfo.zip file will be downloaded and extracted in the BgInfo folder. The LogonBgi.zip file which holds the preferred settings will also be downloaded and extracted to the BgInfo folder. After extraction both .zip files will be deleted. A registry key (regkey) to AutoStart the BgInfo tool in combination with the logon.bgi config file will be created. At the end of the script BgInfo will be started for the first time and the PowerShell window will be closed.

@tom_newton - No upstream devices in place (or so I am told by the ISP) Had an engineer on for most of the morning and the logs show it works, but the browsers show a time out. @David44 - I use M247, who do you use? Can get to mft.nhs.uk - with no issues Bit of a head scratcher........

Can anyone who has a smoothwall box please test the following url for me please. https://childimmunisationconsent.mft.nhs.uk Cannot access via ours and have an engineer remote in who is also struggling to get it working. Cheers

Currently being hammered by IP 93.184.221.240 which according to AbuseIPDB is know for port scanning. I have switched the outgoing IP address on our smoothwall box and within seconds this IP picks up the new IP address and carries on. I'm wondering if this is just a port scan or do I have an infected device on my network. If is possible to see which internal IP this address is trying to reach via some cmd line wizardry as the live firewall report only shows that ip hitting the our External IP. Just wondered if this is possible before I try calling Smoothwall. Cheers

https://learn.microsoft.com/en-US/sharepoint/block-file-types?WT.mc_id=365AdminCSH_spo Under SharePoint admin -> Settings and the OneDrive Sync, you can enter blocked filetypes.

Think it could be Cloudflare proxying the DNS and providing a valid certificate - as when I disable the DNS proxy to DNS only, I suddenly get the same issues externally. Just on hold waiting to speak to the hosting providers to check the current SSL Cert.

Well smoothwall reboot did nothing and I'm scratching my head Website is externally hosted and managed, so all we do is add content. When viewing from school network, I get https error - connection not private, as the certificate has expired. If I view from any device not connected to the network, it works fine and I can see the new certificate. Thoughts and ideas welcome on what to look at try next.

After doing some testing, could be smoothwall causing the issue - as any device not connected to network, works fine, soon as laptop or mobile connected then they get the SSL error. Think a reboot is in order.

nope, cert no installed on PC - have searched for the cert using powershell and not on local PC

Interesting issue appeared yesterday on our externally hosted website. The SSL Cert used was set to expire on the 18th and the hosting providers have since renewed it - so https working fine...... BUT Externally, access is fine Internally I and getting connection not secure, and the certificate being shown is the old one. I've cleared the cached certificates in smoothwall and also cleared same via internet options and cleared browser cached etc. But issue still exists. Anyone any idea what I can try next?

Anyone know if they will be offering Exams again this year?

@Bankesy - are the MDT and Intune deployments the same? or is it just the Intune Deployment that has Teams includes? Sounds as if the Intune deployment is installing over the MDT deployment, which is why Teams is being installed (if they are different) I would put any Intune devices into a separate group and deploy Intune apps to that group instead of all devices.

Are you devices hybrid joined and do you have Intune deployment of Office 365 set to all devices? This caught me out with a similar issue - where I had Office 365 deployed via SCCM including MS Access without Teams and then shortly afterwards Access was gone and Teams installed. Turned out all devices are Hybrid joined as part of the deployment, as since I set Intune to deploy Office 365 with different packages to all devices (without access and with Teams) - Intune, then kicked in and deployed the Intune deployment of Office.

Currently use Smoothwall and it is hard pressed to beat filtering wise, it just the reporting side of things that suffers. - Firewall, is simple but works. Looking at Sonicwall - firewall looks good, yet to test the filtering side of things. - have also a Fastvue trial key to install with Sonicwall. Sophos, will be downloading and testing after Christmas, once I have looked at Sonicwall. Both Sonicwall and Sophos can use Fastvue - and the reports from Fastvue look good.

Mods - how do I remove the public option from the poll? Cheers :-)

I'm looking at the different options available - and taking an age trying to slot testing etc in between other day to day bits - which is proving difficult at times. Currently use Smoothwall - but not happy with the reporting, but cannot fault the filtering side of things or the firewall. - so still on my list of contenders. Plan to look at Sonicwall and Sophos, Fortinet with FastVue Downloaded VMs for Sonicwall and Sophos, - but only just getting round to looking at Sonicwall. So, I'm just after a quick poll to see what the majority of schools are using.

Solved the issue - purely by accident - as it didn't occur to me check the area causing the issue. Stations are images and managed by SCCM and all stations as hybrid joined. We have some intune devices, Which has Office deployed out which does not have MS Access deployed in that package..... following so far...... Intune deployment set to deploy to all devices............. So - co managed devices, show in Intune, so are classed as part of all devices. So, Intune kicks in and removes Office I install and then installs the Intune Package! :censored: :censored: :censored:

will change it after school - to make sure I can do some testing to make sure I've not broken anything :-)

Sounds like you may need to whitelist the verkada URLS. I have a no https inspection and no auth list which I added them to.

Yea, will change those once the domain name have transferred - or is it better to change the NS servers first and then transfer the domain name? Currently DNS and Domain Name are with the currently provider who we are moving away from.

No, had a green light which flashed every 5-10 seconds. My issue was on their side of things - something to do with device setup loop

I've signed up for the free version for now - added my domain and it has imported DNS settings. Looks like I just have to transfer the domain name and should be good to go - I'm nervous as never done this before and dont want to it up and yet I cannot believe how easy the transfer process it!

We are moving to a new internet provider soon - and need to move our external DNS domain name from the current provider to a new 3rd party provider, so we can continue to manage our domain and DNS enteries. Any recommendations - and how quickly and easy is it to do? Cheers