Sheridan

That setting is on the ipads themselves though? The app store isn't accessible on those due to the restrictions. Looks like I might have to manually change each one to make that work.

We've got a bunch of staff ipads managed by Meraki that have the usual GSuite apps on, and staff don't have access to the AppStore to ensure they stay the same. However we've noticed they are being told the Apps (such as drive) are out of date and must be updated - obviously they can't do this through the App Store so I tried to do this through Meraki. When I select the relevant Apps and 'Push to All', the client ipads simply say that the App is already installed in the logs? And checking the client Apps list in Meraki there is no Update button for the GSuite Apps! The only way I've got around this is to plug the ipad back into the Apple Configurator they were initially configured on and update the apps that way - which defeats the point of an MDM surely? Is there any way around this or have I misconfigured this somehow?

I'm getting this message on trying to access/delete a couple of folder son one of my 2012 R2 servers. I can't deleted it, take ownership or anything! Is there a more powerful delete utility anyone has tried to get rid of files like these? I used to use Zap back in the 2003 server days but I thought 2012 would be able to do this!

This was already disabled, however I did find that the dhcp l2 relay does need to be enabled even though its not crossing any vlan boundaries, so far so good - now to test it properly!

This is doing my head in now - I'm trying to setup a single vlan (we have several already in place which are routed) that is seperate and independent from all other existing ones, and in the setup there is a dhcp server that is physically connected only to that vlan to provide addresses without any dhcp helpers etc So the switch path is like this: Client device--Edge Switch--Stack of switches (3)--Core switch--dhcp server Now, if I plug in a device a the edge switch and set it to request a dhcp address it doesn't work. However, if I configure a spare port on the edge or ANY of the stack of switches and watch the traffic with Wireshark I can see the DHCP Discover packets passing all the way through so I know the vlan is configured correctly. The problem is that the stack of switches doesn't seem to be passing the dhcp request up to the core switch and therefore the dhcp server doesn't see the request! Now, in my testing I have found: 1) Manually setting IP addresses on devices attached to the edge switch can ping the dhcp server, so vlan must be correct! 2) Plugging into a spare port in the core switch configured to the same vlan gets a dhcp address, so vlan and dhcp are working at the core switch 3) The dhcp request from the client at the end switch can be seen at every switch apart from the core 4) With wireshark on the core switch I can see various packets arriving from the client (filtering by mac address) for services such as the antivirus, so again it seems to suggest the dhcp packets are being blocked rather than any vlan issue So I can only conclude that the stack of switches uplink to the core is blocking the dhcp request somehow, yet I cannot see where or how! We don't have ACLs in place, and there is no need for any dhcp helpers as the whole thing is effectively one single flat vlan. Its all netgear switches by the way and netgear couldn't help me fix this either, apart from suggesting a firmware update which I did to no effect. Any ideas before I lose the plot completely!

I've found our windows pc last easily as long, we don't have a problem over time as we run regular scripts to purge profiles etc. The iMacs we have are harder to update though! Putting an ssd in an iMac takes a lot longer than popping one into a standard pc case. Having said that, windows 10 is now an entirely different matter [emoji35]

We went with the attitude that 'why do you need a mac over a PC?' as in most cases the extra cost couldn't be justified. We also have a suite of 2009 Macs which are working fine still, but we also have a good amount of 2009 era PCs which are also working fine so the TCO of Macs in our case would be higher.

And the correct answer is: Its a 100V system, and a replacement 100V amp works fine!

Did anyone else get around this once after image deployment? We're seeing this on both W7 and W10 PCs. We've always used Chrome enterprise with policies, and have the home page open but recently that stupid welcome page opens now as well. Its blocked by the chrome policy so we just get an error page showing with the correct home page on the second tab and it looks rubbish! I've tried copying the master_preferences file to the same folder as the Chrome executable: I've also copied the First Run file from a user who has signed in to everyone's profile when they login but the Welcome screen still appears! We're just using local profiles as well in combination with a delprof regime so profiles are never more than a few weeks old. Its annoying that the chrome policies don't allow you to prevent this and none of the workarounds seem to be working for me!

Bit of an odd one, in our mixed 2008R2 and 2012R2 server domain, I have been looking in to some dfrs migration issues. That lead me to find a server in the Domain Controllers OU that has the same name as our domain's short (pre 2000!) name Now, this server seems to be popping up and causing errors in the dfrs migration tool, as well as the dcdiag /test:verifyenterprisereferences, as it basically doesn't exist as a server in any form (and never did to my memory!) Question is, is it safe to delete this, or does AD need this server object for some reason? The fact is has the same name as our domain short name is the only reason I haven't deleted it already! I'm wondering if is a hangover from the ealiest domain that has been upgraded since I arrived?

Yeah on of the primaries is heading down the GAFE route as well, so hosted SIMS makes even more sense. I guess the cost will be the biggest issue!

Has anyone here been involved with/works in a primary school that has opted to have Capita hosted SIMS? We have a few that are wanting to seperate from the lea for sims support and only have a handful of SIMS users in school (<6) Hosted SIMS may be overkill but it removes a lot of the obstacles the lea put in their way.

Thats slightly different to what we're doing - it looks like you have 5 seperate domains? One for the trust and 4 seperate ones for the academies? Or have I misread that and the academies are subdomains of the trust?

I'm looking into adding a subdomain to our G Suite domain to let governors have a email address (and G Suite apps/sharing) that is distinct from the main school accounts. We currently have a domain (i.e @school.org.uk) and would like to add @Governors.school.org.uk This seems possible according to google's documentation but has anyone done this and had any issues? One issue I'm not clear about is some of our staff are governors, so already have the main domain account, I'm assuming sharing etc would be allowed by default as its a subdomain? Presumably dns/mx records are pointed to the main school domain to enable this?

Lucky for us this was a very small group. Deleting and resynching meant it only disappeared for about 5 minutes. Google support couldn't answer why the ad and google groups seem to fall out with each other though.

After a chat with google they told me to delete the google group and then resynch and so far that's works through several resynchs!

I think we'll be using an open system for Guests (with generated token logins) and then open/Google portal for BYOD for staff and students when that is approved. I was just curious if anyone secured the SSID before any radius authentication or portal logins, as this would mean giving them a key and a token to login? Well, for the guest wifi anyway.

Thats my reasoning - guest access is not supposed to be way of saving your data allowance! We intend it for occasional visitors but even then we prefer to offer them a guest staff login. We've noticed that visitors who 'desperately' needed to get on the wifi suddenly weren't so bothered when we offered them the guest network login instead, which makes me suspect that a lot of the usage is nothing to do with the visit! Same goes for BYOD, unless we as a school intend to allow students to use their own devices for working in classrooms then BYOD is still not a great priority. I'd still like the options to offer both though, as it covers all the bases then.

We've currently considering whether BYOD is necessary and also probably about to add a Guest wireless for occasional visitors. How do you set yours up? Do you apply any security (i.e PSK) on the connection before its passed to a secondary authentication such as Radius or a portal? As we have Xirrus, the actual SSID can be Open or secured with Radius/PSK etc before you even get to the Guest portal (where we will use a token based system)

Unfortunately AC2 doesn't even see it, it looks like its well and truly borked!

We used a trolley of 35 Asus cheapo 8" ones - they're ok generally speaking. Biggest issue is the wireless not waking up. As the department in question only wanted them for a handful of apps we simply used the 'Kids Mode' on them to lock them down. We were going to buy a load of hudl2's but sadly they disappeared!

I know a couple of people who've been very happy with their WileyFox's https://www.amazon.co.uk/Wileyfox-Swift-Dual-SIM-Free-Smartphone/dp/B014UUQUAO Just over budget but they have gone done well with the kids who'v been given them!

Yeah used iReb with the dfu multiple times - even if I select the .ipsw file I still get the 1602 error.

I've got an original iPad that simply shows the apple logo, black screen, apple logo etc. Trying to restore through itune in windows or OSX simply gets the error 1602. So I've looked at using iReb and tinyumbrella neither of which have worked (can't even get tinyumbrella to run on windows or osx!) Before I sling it in the bin, has anyone managed to restore an ipad from this state?

Oh it's definitely a bodge alright [emoji3]! I might try and get one of the speakers off the wall to see what rating it is. I'd love to rip it all out but that would be on next years budget!