pow

Less help I know but if you do decide to go the classroom route set up SSO between O365 and G Suite and disable Gmail in your G Suite instance. Using Chromebooks here in a fully 365 environment. Easy as and free.

That looks purely shocking, Windows 7 (out of date), 1GB per teacher storage (laughable) and the website looks... errr... interesting?

I find the 10GB Copper stuff more than capable for our school, using a M7100X as a core and S3300 stackables as edge switches, all with 2x 10GBe uplinks.

The AAD account is the account that runs the sync service, the MSOL one is the one that is vunerable and used to sync the data off to Azure

I'm going it via AD, much easier.

Done the permissions change to all three of my sites I look after, and reset passwords as a precaution.

Missed one sorry: 4x Promethean Activboard Pro 378 - https://www.touchboards.com/promethean/activboard_ab378.html All working, no use for them as we are a SMARTBoard school! Could be delivered and installed at a small cost. Very little use as removed to be replaced by SMARTBoards. £250 per board.

4x Netgear GS728TP - Smart 24 port (plus 4 SFP) 1GB switches with PoE and PoE+ (8 ports) - https://www.netgear.com/support/product/GS728TP.aspx Very capable Layer 2 edge switch, can be set up to your school network and installed for a small cost - ideal to upgrade those 10/100MB switches and will power 8 PoE+ devices (such as the Unifi access points below!) - £100 per switch ~18 Unifi UAP-AC-Pro v1's - the older version of these: https://www.ubnt.com/unifi/unifi-ap-ac-pro/ (but square) - very capable access points with no ongoing or management costs. Removed to replace with Unifi's UAP-AC-EDUs (with the tannoy system). Will split and sell as singles/quantity required and can be programmed and fitted for a small cost - £45 per access point - can supply PoE injectors too for non PoE switches! 1x Dell PowerEdge 2900 Server – 2008 Model, Quad Core Intel Xeon Processor, 32GB RAM, RAID controller, standard spec really, will run 2012 R2 no problems, was used as a Hyper-V host and will tick along quite happily with 5/6 VMs on there. Anyone who knows these servers know how hardy they are! No disks (4x carriers supplied) or OS supplied - £75 1x Fujitsu Primergy TX140 S1p server – 2012 Model, Quad core Xeon Processor, 32GB RAM, RAID controller, ran Exchange 2013, would happily be a Hyper-V host for virtual machines. Will run Server 2012 R2 (should run 2016 with no problems). No disks (4x carriers supplied) or OS supplied - £175 No warranty or original boxes but I will ensure they are all tested and working before they are sent out - all will be as blank as the day they came from the factory. If you would like any further information, please contact me, reasonable offers considered.

I didn't Matt, thank you for that. Currently compliant with the DPA and answered my questions about data storage and usage well, I'm happy now. Thanks for your help!

Hi all, We are looking to use a product which stores data on the AWS platform in Ireland (with a backup to the US), it's some accounting information, no student/staff details. Anyone got any experience with AWS and their compliance or point me in the direction of anything to read? A google and edugeek search has turned up nada! Thanks, David.

Are you using the APs connected to non POE+ switches? Just standard POE? We saw this when the AP was trying to full more than 15W from the switch, when we upgraded switches to PoE+ it was fine.

I haven't read the above in great detail, but I always put the 'internet' on it's own VLAN - so only the router and the gateway on that VLAN. The way I've handled this at a school that has a gfl connection to a non school owned switch is to define the internet vlan with a subnet in that range (for example if it's on 10.10.10.1 then I would define the internet vlan as 10.10.10.1/24), tag the switchport that connects to the uplink as that VLAN and then define the default route on the core to the existing IP address of the router.

I often mix and match, one site I have Cisco small business, Cisco proper and Unifi Switches and APs, my main site I have Netgear prosafe and Cisco small business running Unifi APs, another site has just got big enough for warrant a core so I picked up a 3750G for them to do routing, connected to a local GfL Cisco with a Unifi Switch!

No, just Office365, then Azure SSO to G Suite

https://login.microsoftonline.com/99xxxxx4-58xx-4918-b1xx-79xxxx30a34/saml2 Removed some charaters as they are unique to us

What URL are you using under that sign-in page url? Yes - ADFS setup.

name: Single Sign-On IdP Redirection Setting: Allow users to go directly to the SAML SSO ldp page That's already set to this - but it takes you to the login.microsoftonline.com page, where you need to enter your email address twice to get to our sts page. Under Security Settings - Setup SSO with 3rd party identity provider the signin page URL is set to: https://login.microsoftonline.com/guid/saml2, no matter what I set that to (I was trying variations of our sts page url) it just won't allow it.

Ahh yes, thank you FN-GM, I'll take a look at that later, thanks for the guidance!

No, I just accepted you have to do a double username. I _think_ the new office365 signin page will sort this though - it asks for the username and then redirects to our sts page with the username already filled in which is nice!

Amen, those 1.9 PD units are aged now and annoying to say the least. Get an e39, best car you can buy for a grand in my book!

Who/where are you? I've got some experience with Cisco Small Business switches would be happy to offer some help...

I'm using Sharepoint lists and workflows to do exactly this on Office365.

As I keep saying, I'm not as impressed with the switches as I am the APs I've just gone all all EDU APs to use the tannoy feature which is working brilliantly in my school. I'm still favouring our Netgear ProSafe over the Unifi Switches.

Small update, worked out it was the proxy blocking the next button redirect, so now the next button brings me to the Office365 signin page which then redirects to our sts page - just want to land straight at that really!

So, bear with me here! I am trailing Chromebooks. I have set up our google apps tenant to link to our Azure AD which is populated by our onsite directory. I have enrolled the device into the portal, works lovely, just have to add a user to an AD group and wait an hour. I can sign into the chromebooks using onsite credentials (which are synced to Azure AD for our Office365 tenant, we use all the 365 services, then signed in via SSO for google apps) but, you have to enter your username 3 times which isn't ideal, once into the google screen, once into the Office365 screen, once into the ADFS front end. Once signed in, I get SSO into all the 365 apps which is awesome though! When the chromebook is opened, I get a message saying: This device is managed by gafe.schooname.com (I set up google apps on a subdomain and added our main domain... may have been a bad idea?). Please click next to continue signing into your gafe.schoolname.com account. When I click next I get Please Wait spinny wheel back to the same message. If I click Sign in with a different account, I can sign in using my onsite/O365 username, but I get it in this order: Google sign in page (I put in my username), O365 sign in page (I put in my username again), ADFS sign in page (finally can put in username and password). Is there any way to streamline this process?