MicrodigitUK

Hear is the custom MS SQL in papercut for the "External User Lookup" from NRS database declare @cardserial as bigint IF IsNumeric({cardnumber} + '.0e0') = 1 BEGIN Set @cardserial = {cardnumber} END ELSE BEGIN Set @cardserial = 0000000000 END declare @hexedID as VarChar(255) set @hexedID = CONVERT(varchar(255), CONVERT(VARbinary(4), @cardserial),2) -- Reverse the Mifare CSN bytes. Declare @CardLength As Int Set @CardLength = LEN @hexedID) - 1 Declare @tempCardID As VarChar(255) Set @tempCardID = '' WHILE (@CardLength) > 0 BEGIN Select @tempCardID = @tempCardID + SUBSTRING @hexedID, @CardLength,2) Set @CardLength = @CardLength - 2 CONTINUE END Set @hexedID = @tempCardID declare @accountGUID as varchar(255) set @accountGUID = (SELECT AccountGUID FROM [Cashless].[dbo].[Purses] where MIFareNumber = @hexedID) SELECT AccountCode FROM [Cashless].[dbo].[Account] where AccountGUID = @accountGUID

We have NRS for catering tills with Mifare contactless cards but don't have there SmartID. We also have Papercut MF supplied by ITEC group. This is linked back to NRS database with a simple SQL query that looks up the Card numbers directly without there SmartID product. If you are using biometrics then maybe you do need SmartID but I expect the same link can be done. What ties it all together was importing the SIMS PersonID in to both systems as a uneak identifier. Had to get NRS to tweak son settings as their defaults from memory where admission number and staff code but they sorted that out during the install.

@eddyc If it helps the issues I was seeing reached a braking point today with the network freezing every 5 minutes. Updated the core switch 5412Rzl to the latest September released firmware and the issues looked to have stoped. Will find out Monday when we have a full number of users back on the network if it was a 100% resolution.

Is the Aruba 5412Rzl2 fully up to date with firmware. The reason I ask is we are also having very similar issues to your network. And the only major change over the summer at my school was a new Aruba 5412Rzl2. Very interesting you also have the same switch at your core.

No I'm afraid not. Can't see any way to stop it at the moment. I'm hoping there might be some PowerShell to disable it.

Is there a way to disable the Office Online Chat function in document collaboration on Word online, Onenote online, etc..? Although I can see the benefits of this in business it's really becoming an issue to manage in the classroom. From what I've read it runs through Skype for business, however our students do not have a licence assigned for Skype but are still able to access office online chat in document collaboration. Reasons why we want to disable it: We have shared class notebooks setup enabling classes of 30+ students free range to chat to each other. As you can imagine teachers are finding this hard to manage, especially when they're doing it inside of a program that work is also taking place in; making it incredibly easy for the sneaky students to hide their off topic discussions! What makes it worse is that the chats are not saved anywhere - this really does open up a host of child protection issues where cyber bullying could take place within the school without any logs of it ever happening. Any help with this would be greatly appreciated!

What is doing your routing between VLANs? It sounds like you are using NAT and that will make all devices from other VLANs show as a MAC address of an interface on the device doing the routing. Change from NAT to standard routing between VLANs should resolve the issue.

I have been experiencing the same problem with CS. I'v narrowed it down to some incompatibility issue with roaming profiles. I have noticed if you wipe a profile for a user and log in with a fresh profile Explorer is stable with CS. But after the profile has been written back to the network and on 2nd logon Explorer becomes unstable when used with CS. Unfortunately even after reporting the issue in CS forum CS cannot replicate this Explorer crash with roaming profiles and put it down to an environmental issue. Only work around I could come up with using CS and keeping Explorer stable is ditch roaming profiles. We have been looking at UE-V as a replacement for our existing roaming profiles. Tests we have done using UE-V, Win10 and CS have had a stable Explorer. Not fully implemented from the testing stages yet, but it seams to resolve the issue.

You can do this, but I think you need to have a link between the LocalAD and AzureAD using AzureAD Connect and possibly ADFS at the same time (so usernames and UPN need to match in local and Azure). We use the AzureAD join on our Windows 10 mobile devices (so the other way round to what you want), but because of our setup I have noticed if staff log onto a local AD win 10 PC with there full email address, it adds the PC to there devices on AzureAD. Not really investigated why, just a side effect of our setup for the mobile devises that are AzureAD joined.

http://www.cuttergrp.com is who we use.

We use Ground Control, it's basically a 3rd party cloud based version of Apple Configurator. We did use Apple Configurator 1 for a number of years but could not get a true Zero touch deployment. I know things in AC2 have improved but from what I tried it is really buggy. Ground control also has the benefit of running on Windows as well as OSX and fast deployments via USB so wifi is not needed to deploy. AC2 vs Ground Control is like night and day. It saves us hours of work and frustration, can't recommend it enough. Have a look at there website: https://www.groundctl.com We also have it linked into our Airwatch MDM for zero touch enroll and app deployment. However, I have seen Ground Control will soon deploy VPP apps via USB. So much faster app install times. Technically once this works we no longer require a MDM!!! Probably keep Airwatch just to track and deploy small policy's at that point. One other bonus we use is there Webhooks features to automatically name devices from our inventory software GLPI. But it will run off a basic CSV import. Cost wise for GroundCtl, it works out about £7 per device at educational rate.

Yes been fighting with this issue for the past 3 months. Might be worth posting this info and a debug log on the classic shell forum. Hopefully then they might be able to reproduce the issue and find a fix or workaround. http://www.classicshell.net/forum/viewforum.php?f=12

Bit more info: https://blogs.office.com/2015/11/19/updated-office-365-modern-authentication-public-preview/

If you are running Office 2013 have you installed all updates before setting the enableADAL reg key.

For zero touch deployments, that are not possible with DEP. Quickly reset shared class sets of iPads without having to click trough menus and manually enter information. E.g. Wifi, iTunes account...

Also to go with your MDM have a look at https://www.groundctl.com/ GroundControl is basically AppleConfigurator2 but in the cloud (and it actually works) Been running it hear in combination with our MDM and it makes re-imaging and deployments a fully non touch automated process done in a fraction it took use with AppleConfigurator.

WebDAV Navigator + App with the above IIS solution works really well. There is an iOS and Android version and it also supports MDM config for pushing out server settings to managed devices. We use it on all of our iPads and iPhones at work to access network shares. http://seanashton.net/webdav/

Sounds the same to me. That dose happen at the same time. The task bar dose not work and freezes as its part of explorer. To be clear you have to log out and back in then quit classic shell for things to be stabilized. Just exiting classic shell will leave explorer frozen. Do open explorer Windows also freeze for you?

We also have this issue. Explorer will just crash randomly. Could be fine for hours but then you can't use anything linked to explorer. No indication in event viewer of a problem just get explorer freezing. We took some debug logs and uploaded in this thread, still not found a solution other than exiting classic shell. Runs fine now (no explorer crashes) we have stopped using classic shell on Windows 10, so is 100% classic shell that triggers the freezing. http://www.classicshell.net/forum/viewtopic.php?f=12&t=5587 Maybe if others with the same problem could upload their debug logs the lovely people at classic shell can find the common problem.

All you need is ADFS setup and to set a single registry key on your workstations. The registry key is called EnableADAL and enables Modern Authentication for Office 2013, think it is already enabled in Office 2016 so you just need ADFS.

If they do not logon to the Mac as a AD user then they will not have access to a Windows print shared for AD users and it will ask for a AD user. But if they log in to Mac as a AD user and authentication is set up correctly then you won't need to re enter the user or password.

How to enable Kerberos authentication for shared printers 1. Execute the following Terminal command to enable the CUPS web interface: cupsctl WebInterface=yes 2. Open the URL localhost:631 in Safari. Login with local admin details 3. Open “Printers” tab 4. For each printer you wish to share using Kerberos: 4a. Click the printer name in the list. 4b. Choose “Set Default Options” from the “Administration” pop-up menu. 4c. Click “Policies”. 4d. Choose “kerberos” from the “Operation Policy:” pop-up menu. 4e. Click “Set Default Options”. 5.Automatic Authenticated Printing To enable auto authencticated printing as the logged in user to a windows printer share you will need to firstly find the name that the mac has assigned the printer this can be found by typing lpstat -v Then type in the following comman in the termial, replacing text between quotes with the desired printer as established by using the above command. Root is not required. lpadmin -p "mcx_0" -o auth-info required=negotiate Repeat this comand for each of the printers on your Mac. (Note do this in your master image Mac before tacking an image) lpadmin -p "mcx_0" -o auth-info required=negotiate lpadmin -p "mcx_1" -o auth-info required=negotiate lpadmin -p "mcx_2" -o auth-info required=negotiate

Salamander Soft do have a free utility to extract the Photos from SIMS. http://www.salamandersoft.co.uk/utilities.html Before I purchased full Salamander AD (that dose it all), we used this with scripts and a photo compression tool to put photos in AD. All I can say is from experience you start with this and you soon realize the full potential of the paid for Salamander products.

We use "WebDAV Nav+" app in school mode. App config with server settings can be pushed via MDM using managed app config or a webclip lead link to app with settings. Then we have a simple Windows server running IIS webdav and a bit of php to redirect to the logged on users home drive. Free version of WebDAV navigator works well but not got school mode and MDM config options, plus the adverts are in the free one.

We access the Networks Maps on the SWGfL ESI to monitor our connection. Login to Cacti No problems for years until recently it became intermittent and was responding with squid errors. But not all the time!!! Then the other day when I really wanted to access them I couldn't. So fine, I'll open a support ticket with SWGfL as it looks to be a Proxy configuration error in there proxy farm. Just thought they would ask a couple of questions and find the problem. Then this morning I basically got this response from RM India and the call was closed immediately: "network map on SWGfl ESI page service is replaced with SafetyNet Plus Bandwidth. Network map service will is no longer available." Fair enough but hang on a minute!! 1) No information was given to customers that this service was going to be removed. 2) It is working intermittently on SWGfL main proxy! It works from home ISP! It even works on the staff proxy 100%, so "no longer available" is not true! 3) This looks like a proxy farm configuration issue so what other issues are there with the configuration? 4) What technical investigation was even done into the issue? (Not much once they saw some internal note that the website will go one day!) Just looked to me like a issue they could not be bothered to fix as the monitoring network maps are going to be decommissioned some time in the future. So thought I would share this lovely support experience. What type of support is that? I cant be bothered to fix it because that website will go eventually, but I don't have a date when so Ill just lie to the customer and say service is no longer available. If it was any other website than one of there own they would have looked into it and not given an excuse to why its not working. Not impressed and that level of support on top of the Proxy outage issues the other week I think its time to look elsewhere. RM and SWGfL Support you have let me down! @JGoswell