CHiLL

We have also had our VeryPC socks, just in time to show them off over Christmas! (Though my bah humbug is kicking in after learning that other people had gotten free socks/gifts with their purchases with VeryPC, but we didn't, despite a significant purchase over the summer holidays!)

I can confirm that running that script with my test group details, it worked! The user gets an automatic denied email bounce back email when they try. I'm going to ask Salamander to apply that setting to all our students/class/teams email groups and also for future groups that are created. Thanks for your help!

Thanks, the issue that led to me looking into this has fried my brain today. I've ran the command and can see it has written to AD. I'll check on Monday whether my test user in that test group can send to it.

Cheers. I'm just trying to figure out the Exchange Online Powershell command to change that flag. I can see it with: Get-DistributionGroup -Identity 'DsitributionGroup' | Select-Object 'dLMemSubmitPerms' I just can't remember how to modify that value.

Ah, nevermind then. We've not had an on-prem exchange server on this domain. We started from scratch in 2015 and prior to that (and my employment), we were using a hosted Zimbra solution. I'm not sure I want to start installing exchange stuff now, for the risk of breaking things.

Unfortunately those options aren't there if the groups are created and synced from an on-premise AD. Ahh, OK! I can see that entry in Attribute Editor: [ATTACH=CONFIG]70512[/ATTACH] Hopefully setting that to the "All staff" group would work. I'll give it a go with a test group I've synced. Edit: Sadly I cannot do it in Attribute Editor, as when I edit that field, I get an error message: "There is no editor registered to handle this attribute type.". Guess I'll have to do it the Powershell way like you suggested!

Thanks, though I can't seem to find an equivalent attribute in Attribute Editor on our AD security group. I'll keep digging.

We're trying to figure out how to block students from emailing other distribution lists, but can't seem to get the rule working. If Sender is a member of this group - The sender is a member of '[email protected]' and The recipient address includes any of these words - The recipient address contains any of these words 'intake' or 'allstudents' or 'students-' Do the following Block the message - reject the message and include and explanation - Reject the message with the explanation 'Not allowed' And Block the message - reject the message with the enhanced status code of '5.7.1' That reads as though it should work, but it doesn't, emails go through anyway. We've tried all sorts of combinations of options, but cannot get it to work. Ultimately, we want it so that no student can email distribution lists that either start with or contain specific words. For example, instead of entering each intake year individually, we'd like to just have 'intake' to catch them all. This is also the same for each class group that we have - as each Teams group has it's own unique email address, but they all start with the same pattern. Using that pattern would save manually entering dozens manually each year.

We have Sophos and if reporting is important to you, Sophos alone isn't going to meet your requirements. The reporting in Sophos is poor, but Fastvue can be used (additional purchase) to have better reports. We don't have Fastvue, so I can't comment on it.

A colleague in a school I was consulting at previously was using specific passthrough RJ45 adapters and crimping tool. Instead of cutting the wires to the right length and hoping they're not too long or they'll reach the end of the RJ45 connector, you just cut off more than enough sheeth, straighten the wires, put them in the right order and feed them in. They'll just pop out of the end of the RJ45 connector, you crimp and it just cuts off the excess. It was basically this tool, though the only downside is that you need to buy speific RJ45 connectors, which are slightly more expensive than normal.

As @triggmiester pointed out, the salary for a semi-skilled job is simply too low. It's known that lower paid support staff are leaving the sector because they can earn more per hour stacking shelves at their local supermarket. I didn't read the advert, but assuming it's 37.5 hours a week at 52 weeks a year, that starts at about £11.85 an hour. You're putting them in line with basic admin, assistants, cleaners, etc, while presumably listing a number of experience required skills that the applicant must have.

According to the spec sheet, it has: It doesn't specifically state alt mode, though I'm assuming that and what they've described is the same thing? I can set the resolution to a lower one manually, though it won't remember it. As soon as the dock is disconnected and reconnected, it will go back to 1024x768, because that's what Windows is showing as the recommended resolution.

We have and it also had the same resolution limitation. - - - Updated - - - A limiting feature maybe.

We have purchased some Belkin 11-in-1 USB-C docks (INC004btSGY), which provides a one cable solution for charging, display, USB connectivity, audio, Ethernet, etc. So far they've been pretty solid. However, we are noticing that when the projector is connected via VGA and set to Extended display, the display resolution is limited to 1024x768 (Recommended) as shown in the Windows settings. But if we use Duplicate display, it will display at the laptop's native resolution, 1920x1080. The projector we're using is a Casio V10X, which we know 100% does 1920x1080 over VGA (as we've been using it for years this way with the previous desktops and does it via duplicate screen). When in extended mode, Windows display settings won't show higher resolutions as an option and the Intel Graphics Command Centre doesn't have the option to change resolution in the app and directs you to the Windows settings. We've tried two different types of USB-C laptops; HP ProBook 450 G9 and Dell Latitude 3520. We've also tried a similar dock; an i-Tec dock (C31FLATPRO112WUK), which has the same sort of configuration/layout as the Belkin. If we connect purely HDMI to the projector, it works and outputs at 1920x1080. So I've narrowed it down to the dock VGA output, but I'm not sure why it's doing it. Our next steps are to either; - Replace the dock with one that someone recommends, that also has VGA output, 100W PD, Ethernet, etc - Replace the VGA cable runs with HDMI If anyone can recommend anything that would be great!

For those that encounter this, you need changed "Force Encryption" from "On" to "Off". To do this: 1) Log onto the SQL server that hosts your MECM database 2) Open MMC and add the snap-in "SQL Server Configuration Manager" 3) Expand "SQL Server Configuration Manager (Local)" 4) Expand "SQL Server Network Configuration" 5) Right click "Protocols for MSSQLServer" and select "Properties" 6) In the "Flags" tab, change "Force Encryption" to "No" 7) Press "Apply" then "OK" 8) Restart the SQL service (SQL Server (MSSQLSERVER)), either in services.msc or via "SQL Server Services" in SQL Server Configuration Manager Note: I had to keep "Force encryption" set to "No" even after the update completed. I had set it back to "On" and restarted the SQL service, but I found that after the admin console updated on the server, it couldn't connect to the site with the error "Configuration Manager cannot connect to the site ". Turning Force Encryption back to off and restarting the SQL service again allowed me to connect the admin console immediately.

We block YouTube for students but not staff. We use "override codes" in Sophos, where a teacher can provide a code to allow access to YouTube for the duration of that authenticated session. The only disadvantage is that the code can be used anywhere if the students get or remember the code. It was better with Smoothwall, because we could use location blocking based on name. For example, I could create a group that contains specific hostnames of an IT suite (PC01.domain.local, etc) and also replicate the timetable for the lessons/periods. With those two configured and liaising with subject staff, I could specify that YouTube was unblocked on those specific computers for a specific period.

I was looking at upgrading our MECM site server from 2303 to 2309 and it's getting stuck in a checking prerequisites loop without proceeding and not timing out (unless I use CMUpdateReset.exe). Looking at the C:\ConfigMgrPrereq.log file, I'm seeing a lot of issues with the SQL server, specifically: *** [08001][-2146893022][Microsoft][ODBC Driver 18 for SQL Server]SSL Provider: The target principal name is incorrect. *** [08001][-2146893022][Microsoft][ODBC Driver 18 for SQL Server]Client unable to establish connection *** Failed to connect to the SQL Server, connection type: SMS ACCESS. ERROR: Failed to connect to SQL Server to check application catalog roles I've also noticed weird behaviour when accessing the database via SQL Server Management Studio 19.2. If I have the FQDN, I can connect fine. If I have only the NetBIOS name, I have to have "Trust server certificate" checked in the Connection Properties, otherwise it throws the following error: Cannot connect to . Additional information: A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.) (Microsoft SQL Server) Target principal name is incorrect Microsoft ODBC Driver 18 for SQL Server is already installed (manually), which is required for this update to installed. It isn't installed as part of the upgrade and without it, the prerequisites check will fail. I have checked the SPN and it appears to be correct (both NetBIOS and FQDN entries for the site server (also SQL server) on port 1433 with the domain service account for SQL. I have also checked the site's server certificate, which was issued in 2015 when the server was commissioned and has an expiry of 2115. While our MECM appears to be working correctly at the moment, with deploying OS and updates, adding and deploying apps, etc...I wonder if this could be a sign of more significant issues to come.

Then maybe they should be brought to you, rather than sent on their own. Or alternatively, arrange a time for you to come to them. We have an induction schedule for staff, which involves key meetings or information they will need, ranging from having their photo taken for the ID card, IT induction, safeguarding meeting, subject/department meeting, etc. They are taken from reception, by a member of the office to their first meeting and handed over, then when they're done there, the person from that meeting takes them to the next. The benefit we have in this school is that we are an extremely small school in terms of footprint area, which helps with the coordination of meetings.

It's more OS upgrades and features for that version of Android will be developed until then, while security patches will still apply for longer. Developers will likely support several OS versions, so it's unlikely apps won't be supported for another 4/5 years after receiving the last OS update available to the phone.

I need some new wireless earbuds as mine gave up the ghost. I'm currently torn between the Google Pixel Buds Pro for £129 or the Sony WF-C700N for £75. My use case is mostly going to be gym or wearing in work during the school holidays. I'm also after a <=42" TV for my little gaming room. I have a LG OLED in my living room that I've used for gaming on before and it's spoiled me. Does anyone have any recommendations for a TV that will still look good for gaming, whether that's hooking up my PC (RTX 3080) or a PS5/Switch/Steam Deck?

8GB is our minimum spec now, as browsers love to eat RAM. We refreshed a lot of our desktops in summer with VeryPC, which includes a 5 year on-site warranty. We went for the 12th Gen Intel i5-12400 CPUs (2021 models), with the reasoning being that the architecture improvements were pretty large from 11th Gen to 12th Gen. I wouldn't have said no to AMD, just we were offered better performing Intel systems for the price point. At the end of the day, your price point is going to dictate what you can buy.

SCCM (using WDS and MDT). Once all configured, deploying Windows is a basically zero touch. We don't capture/modify any Windows images, we just get the ISO from Microsoft, import it to SCCM, create a Task Sequence with the necessary drivers, essential apps and other amendments (such as join domain) and it goes off and does it. Just PXE boot a PC on the network, select the TS and then specify a machine name if necessary. It just does the rest automatically. I just need to manually move the machine into another OU and add laptops to our dot1x groups, that's it. Once imaged, SCCM will automatically install all the other apps/updates that are targeted for that machine/group.

It's basically a 1080p/low 1440p machine. Xbox Game Pass is a compelling option too, though Microsoft's proprietary expandable storage isn't cheap.

We are paying something like <£5000 for our 1Gb/1Gb line, which is our main Internet connection and <£1500 for our 1Gb/1Gb (100Mb upload) backup line. Both are FTTP.

I'd recently got my girlfriend a Steam Deck and was looking to get a dock for her. One of the most recommended ones is currently on a Black Friday sale: https://www.amazon.co.uk/JSAUX-Compatible-Ethernet-Charging-Deck-HB0603-Grey/dp/B0B9RBLBQS/ref=sr_1_3?crid=3RYKVRJSLI15A&keywords=stream%2Bdeck%2Bdock&qid=1700470703&sprefix=%2Caps%2C46&sr=8-3&th=1. It's not actually 42% off, as it was listed prior to the sales at £39.99 and has frequently been down to £31.99 before I was looking for it.