MicrodigitUK

Alcatel APs are the same as HPE Aruba ones I think! So you would have a Controller (central wifi switch) or a Virtual Controller on one of the APs if they are the controller-less Instant range (IAPs). There also are the newer cloud controller variants. Anyway my point being that will be a controller based setup from the info you gave. All you need to put into the Smoothwall is the central controller for all of your access points. The only reason you would need to put individual APs onto the Smoothwall radius configuration is if they are not centrally managed. All the radius is terminated individually at each access point! And this definitely isn't true of an Aruba set up. Alcatel wi-Fi kit just being rebadged Aruba!

I definitely expect them to force the Azure AD enrolment. Just to note that: Other windows MDM solutions are available. For instance we are using VMware Airwatch and it is fully integrated with Azure AD. However the MS educational Intune offering does look very appealingly priced.

Please may I also have a copy? Thanks

Wow. I never normally win things like this, but luck must be on my side. This year I have won a prize of a gaming keyboard.

Have you looked at https://www.groundctl.com it is basically an advanced version of Configurator that is cloud based. So it dose have an annual per device cost, but well worth it. Perfect for multi site and allowing quick reset via USB.

We switched about 6 months ago from direct support with "Capita" to "Schools ICT Services". I would say yes service is much better (skilled people who have helped quickly resolve issues) and a fraction of the cost. Win Win

The only other way of doing this automatically is with an alternative to Apple Configurator called Ground Control. I don't know of any MDMs like Apple Profile Manager that will automatically apply the text to the lock screen image. Profile Manager dose not do this. See link to Ground Control, it's basically Configurator on steroids as a cloud service. Really good product can't recommend it enough, saves us hours of maintenance time with our iPads and iPhones. https://www.groundctl.com

PowerShell Script for office365: #This script will take take a user-imputed subject to delete Messages from #Every mailbox within the Organisation #ARGS [string]$decision = "n" Write-Host "This script requires the `"Discovery Management`" Exchange Role-Group PLUS `"Mailbox Import Export`" Role assigned to your Exchange onlineAdmin Account `nPlease add it before proceeding:" Write-Host "`n`nEnter Administration Credentials" $LiveCred = Get-Credential #Pass Creds to Outlook.com and generate PS Session $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection #Import PS Session/Grab MSOL Cmdlets Import-PSSession $Session $Subject = Read-Host "Please Enter a Message Subject to be deleted from ALL mailboxes:" $decision = Read-Host "Are you sure youi want to delete messages with the subject " $Subject " (Y/N)?" if ($decision -eq "y") { Write-Host "Deleting" $Subject Get-Mailbox -ResultSize unlimited | Search-Mailbox -SearchQuery "subject:$Subject" -DeleteContent -Confirm } else { Write-Host "Nothing deleted" } Remove-PSSession $Session CD .. Write-Host "Connection to MSOL closed" Using the Search-Mailbox cmd with the DeleteContent switch requires that the admin account be added to the Discovery Management and Mailbox Import Export group. If this is the situation, please go to the EAC (Exchange admin center) > permissions > admin roles to add your account into the corresponding groups to see if there is any improvement. Warning: Use the above script with caution; When using the DeleteContent parameter, messages are permanently deleted from the user’s mailbox and cannot be recovered. (It could also take some time to run over a big Office365 Tenant) For a full list of -SearchQuery parameters go here https://technet.microsoft.com/en-us/library/jj983804.aspx

Well (not that I have done it) why don't you just block the Swgfl proxys at the smoothwall with the exception of an IP range. e.g your printers and servers IP range.

personal device are all authenticated via 802.1X on WiFi via Smoothwall BYOD authentication and transparent proxy setup. So they are all on the Smoothwall. we do not give out SWGfL proxy information.

We do this on the smoothwall on site proxy. Just unfiltered it on RM Safety net and then filter it for student group on the smoothwall side.

1+ for Cutter Group. Updating our remote app servers to 2016 at the moment.

And that blocks it for all of O365 sharepoint and all other apps on O365? I think I might have to give this a try if that is the case.

How did you do that in 0365?

That might work in some cases however it is not the correct way to do it. It can case problems with intervener and even the same vendor but different firmware!! Trust me Just give it a try and see what happens.

1:3 is not untagged on the default (management) VLAN1. Try untagg VLAN1 both ends and see if it carries the two tagged VLANs 10 and 80 (these 2 are tagged on 1:3 and that is correct).

Can you post a some snippets of the switch configurations?

Problem is Lexmark's only support a small number of USB IDs one we have on our Lexmark's are RFIdeas ones. And they are about £150. You could go direct to http://www.windmill-computing.co.uk and save a few quid. I got some cheep Chinese ones off of eBay for £5, but the USB IDs were not compatible with Lexmark. Had to re-wright the firmware to emulate RFIdeas USB ID to make cheep ones work. Not a task for the faint hearted as effectively had to reverse engineer the working card readers and flash all my cheap Chinese ones. How many do you need? I could source some and flash the firmware for you, to make them Lexmark compatible. £50 each??

Your management VLAN (VLAN 1) should be untagged on your links between switches. All other VLANs should be tagged. Think of it like: VLAN 1 carries all of the other tagged VLANS across the links. That's how I was trained to do it in my CCNA and it always works for me with inter vendor support, Cisco, HP, Juniper, D-Link, Aruba, etc...

We use a Smoothwall with the SSL Login page as our captive portal. Works really well but we did already use the Smoothwall as a web filter/proxy on our workstations, so was a very simple setup to add this for BYOD. https://help.smoothwall.net/Hearst/Content/ui/auth/ssllogin.htm

// basic sequence with LDAP is connect, bind, search, interpret search // result, close connection $username = $_SERVER["LOGON_USER"]; if (strpos($username,'\\') !== false) { $usernamesplit = split('\\\\', $username); $username = $usernamesplit[1]; } $ds=ldap_connect("ldap://someschool.local"); // must be a valid LDAP server! if ($ds) { $r=ldap_bind($ds,'someschool\WebDAVPHPLDAP','****password****'); // this is bind using the user someschool\WebDAVPHPLDAP // read-only access //echo "Bind result is " . ldap_error($ds) . " "; //echo "Searching ..."; // Search surname entry $filter="(samaccountname=$username)"; $sr=ldap_search($ds, 'OU=User Accounts,DC=someschool,DC=local', $filter); //echo "Search result is " . ldap_error($ds) . " "; //echo "Number of entries returned is " . ldap_count_entries($ds, $sr) . " "; //echo "Getting entries ... "; $info = ldap_get_entries($ds, $sr); $replacestring = '\\\\someschool.local\\userstores\\userspaces\\'; $directory = str_replace($replacestring, '', strtolower($info[0]["homedirectory"][0]) ); $directory = str_replace('\\','/',$directory); $directory = 'Location: https://mywork.someschool.sch.uk/userspaces/' . $directory . '/Documents'; ldap_close($ds); header( "HTTP/1.1 302 Found" ) ; header( $directory ) ; } else { echo "Unable to connect to LDAP server"; } ?>

WebDAV in IIS by default is not installed with the Windows Server 2016. In order to get the WebClient windows service you need to activate the “WebDAV Redirector” feature I think.

Not set it up myself from scratch for some time. Basically you set up a iis virtual directory to your home drives server share and set up Basic authentication. Don't forget to get a SSL certificate and publish over HTTPS if you sing basic auth so it is secure. My server is a MS server 2012R2 and was set up by https://www.stormfront.co.uk as part of a WebDAV Navigator setup they did for me a couple of years back (so I didn't set it up from scratch). We added a bit of PHP to redirect users when they authenticate to there Documents folder so they don't need to know the long path. I'll se if I can dig out my redirection code.

How about Jamie Goswell @ RM He is on Edugeek as a user. List time I complaind about SWGfL service he jumped in on the conversation. Send him a PM: @JGoswell

I could always ring them and pretend to be you and insist that the priority is escalated and delta with ASAP. You want to PM me reference number and info and I'll give them a peace of my mind.