Sheridan

We also have remote access for staff for accessing MIS etc but I'm still dubious about the apparent 'need' to have our wifi to access their email on their phones. They all have classroom PCs and access to other equipment. When we replace our wifi I will be looking to incorporate BYOD anyway - who gets access has yet to be decided!

Ok I'm just after some general information here on staff bringing in their own devices and using the wireless. My point of view is a) the school provides computers in every classroom, staffroom, shared area and lots of ict suites (plus laptops and ipads as well) so they don't really need to and b) how can you control confidential data and what staff keep on their personal devices - ie their personal store of videos/photos etc! I'm also concerned (as we use a cloud vle) that staff will use their personal device to login to their vle account, and download data etc to their laptop - of which we have no control of security/encryption and disposal. I know some people will say a policy to enforce this may be enough but policies aren't enforced enough here for my liking. We're getting quite a few whining about 'why can't I connect my iphone/ipad/laptop/chromebook etc' (obviously because starbuck let them, we should to) and I'm probably going to be overuled eventually. So how do you fellow techs deal with this?

We're getting these sort of complaints from our primaries as well. Its hard to explain to them that in the last few years they've probably quadrupled the amount of devices they have hitting the internet. For example one primary 2-3 years ago had a barely used ICT suite of 20 computers and maybe a dozen classroom laptops. Now, they have a well used suite of 30 PCs, at least 30 ipads, laptops, the classroom pcs as before and every member of staff has their phone attached to the school wifi (not my idea!) to get their 'essential email' (i.e facebook updates) Factor in that teachers cannot design a lesson plan that doesn't involve the internet and you have a much increased amount of traffic!

Anyone planning on using these microbits in school? The only issue I have is that we need to change our security policies to allow full access to usb storage - thanks for that bbc!

Have any of the Smoothwall users out there (G3) managed to create a report to show a summary of the most popular youtube videos watched? I'm trying to find a way to do this, but haven't had time to look into custom reports yet.

I've tried both Machine policy and Preferences but its not working. If I look at the results on the test PC I can see that none of the Services settings are being applied as there is a general error: This is only happening on the W10 machine - all the W7 machines have their services managed by GPO and its working ok.

Actually I haven't cracked it - every time I reboot the Application Identity service is reset to Manual, despite being set to Automatic in the GPO. If I remotely start the service Applocker works, but I'm damned if I can find why its not starting automatically! I'll have to continue using SRP for the foreseeable.

Talk about timing - I managed to work out why this wasn't working. The Application Identity service wasn't running. I had it set to Automatic in the GPO but it still wasn't starting, hence Applocker failing to work. Manually reset the Service Security settings to Local Service and its now working!

Yes, exactly that. The start button does nothing until rebooted. There are errors logged but the user just sees an unresponsive start button.

Finally managed to get around to trying this, and even with Applock policies set like @Arthur has above - users can still open the Settings control panel. I'm starting to think I'm using a different version of Windows 10 to everyone else, I cannot get even the basic working properly at the moment!

If I run 'netsh winhttp show proxy' I see the correct proxy and port which works for Windows 7 client to update (update sites are allowed through unauthenticated) On W10, its just going straight to the firewall and correctly being blocked. I'm not sure if W10 looks anywhere else for proxy settings but I haven't found it yet.

Sorry, I meant Start tiles -which have never worked from Windows 8 onwards if you use GPO to manage them

I installed this update on a test PC. Start menu still crashes, and start menu layout deployment fails. So they haven't fixed those two bugs yet.

We do use WSUS, but this particular PC (test) isn't configured to use it. I've just got it with the proxy set in IE trying to run an update. Its definitely bypassing the proxy as all of the sites its trying to hit through the fireall are Microsoft ones!

I tried that initially but it still shows as hitting the firewall (http/s) and nothing on the smoothwall. I guess windows 10 still isn't ready yet.

I'd put windows 10 to one side for a while as it seemed to be a bit of a mess. With the latest update available I thought I'd revisit it. However, I still can't download any updates. Is there no way that Windows 10 will update from behind a (smoothwall) proxy? I can browse via the proxy but any attempt to run updates shows that the pc is simply trying to hit the firewall direct and bypass any proxies - not much use in our environment.

I've got 5222 open completely from our print server to test this and still no joy. Definitely no incoming ports need to be open?

Yeah I had to go with restricted, I can't be bothered trying to whitelist hundreds of videos!

Has anyone got this working with their Windows Print server? I've installed it on our 2012 Server and shared 2 printers, which now appear in the management console I deployed them to our test chromebook where they now appear - yet when I try to print from the chromebook it sticks at 'Printing..' and nothing else happens. Are there any other firewall ports that need to be opened? I've got 5222 open through the firewall from the print server but I can't find mention of any others.

I guess the answer is still no for smoothwall anyway? I've had to allow the whole of youtube - the most important teaching resource these days

I'm probably grasping at straws here, but is there any way to only allow specific YouTube channels using smoothwall UTMs whilst having a general block on YouTube? As usual I've got a last minute request that means the whole lesson plan will fall apart without this.....

Updated to 2.1 and grabbed a single iPad to test it out with great expectations. Crashed out immediately. Couldn't be bothered to even diagnose the error. Back to 1.7 again

I've had free and paid for surveys and they've all matched up with what I had previously planned out anyway so I personally wouldn't bother again. Knowledge of your schools buildings and how the wireless will be used is as important and measuring signal strengths and distances.

Quite an old ruckus system here, works well and has done for years. Due for replacement and ruckus would be top of the list.

These are the sort of things we're looking at: Linky Around £80 ex vat, decent screen, card slot, quite a decent quality feel as well.