Jump to content

mrbios

Members
  • Posts

    4,317
  • Joined

  • Last visited

Everything posted by mrbios

  1. I've just started replacing my 64 camera hikvision system with UNVR Pro + G5 domes/bullets. You can stack the NVRs, I'm intending to get 3 in total by the time i've finished deploying. One pane of glass view, they auto balance the cameras across them (Going by what i've read rather than experienced here...) Setup the first as your master, and just "adopt" the new ones. Only key bit of info i read, was to make sure you had the same or similar storage capacity in each to keep retention periods the same across all your cameras.
  2. Pretty similar to the above, but i also recommend netsupport notify for poping up emergency messages on staff screens.
  3. Only just starting with Y7, 12 and 13 this year. Making sure those are all good then doing the rest gradually. Unfortunately i get held back in previous years due to a deputy head not wanting to lose the facility to jump into students home folders to retrieve work (we have a read only group that has access to all student home folders) As well as a little apprehensive with OneDrives past implementations in Windows, given the whole "log off while it syncs and your files stay there" thing, but that doesn't seem to be an issue now (right? It just takes its time logging off until files have finished syncing?)
  4. Been a long time since I've done it but i think you need ip helper addresses with specified port of 7 or 9 depending on which the app is using. Can't remember if it has to be on the sender vlan or on the receiving one..... or both. The way senso is made, the client is very small and almost single purpose. It just downloads the modules you use E.G broadcast is its own module and the client just downloads the updated modules as and when something changes, which is why the client rarely receives any updates.
  5. I did a quick comparison of the switch models i'd be looking at, port options, and prices to see how viable TP-Link are as a ubiquiti alternative. For my own needs going forward, TP-link just lacks a 48 port switch with multi-gig PoE to be a slightly more favorable option in terms of pricing, albeit not a huge one unless your switch count is quite high. Image attached, i've obviously only grabbed web pricing from the likes of comms express or msdist....
  6. Does look like an interesting prospect. I recently went through all my switches and worked out replacements for the whole lot. With Unifi i'd need 5 x Pro Max 48 PoE, 7 x Pro Max 24 PoE, 6 x Aggregation, 18 x Pro 48 to cover my site (Based on consolidating wherever i can) and i worked out the cost of them all to about £20k for the whole lot, or a shade under. I'm going to do the same process with TP-Link and see what it would come in at. Even more interesting if the TP-Link L3 stuff is able to cater as a replacement to my ancient 8206zl.
  7. Another Ubiquiti vote here. Their new unifi range has a ton of flexibility in models to fit every school need (minus a solid L3 option anyway, not that i'd trust them with that role anyway)
  8. mrbios

    2FA RDS

    Use this: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-web-client-admin And chuck it behind Azure app proxy with pre-authentication set to Microsoft Entra ID. So long as your users require MFA on 365 off-prem, it'll force MFA for them before they can access it. Does mean you have to login with 365, complete MFA and then login again to the RDWeb app, but significantly better than not having MFA in front of it.
  9. Have a look at this thread which was recent and on the same topic: /forums/enterprise-software/232207-office-365-backup.html Personally moved/Moving from Barracuda to RedStor.
  10. You could probably install the RHEL agent on it if you wanted to get file level backups. So far support has been really good, there's a fair bit they can do on your behalf it seems if a feature doesn't exist in the agent..... I have a remote access server for sims, wanted to back it up just for ease of restore (would be very easy to rebuild manually mind...) I wanted to exclude the Users directory, but i wanted to include the local admin and default folders within it. I can't do that in the agent, but seems support can include sub folders on my behalf for top level folders i've excluded. They proactively fixed a problem with a linux VM backing up for me too lol
  11. I had a demo, setup a trial, and backed up all my servers into it and enabled the M365 backups (it throttles your trial to only 25 accounts though on that front). It's very easy to setup and use, a little time consuming getting all on your on-prem servers into it but it's very straight forward. What it lacks: Centralised management of your backed up machines - Installing the agent is a one by one job, changing options/settings is a one by one job. However, that's relatively minimal, once you're setup it does seem like set and forget. Linux - They have a supported list of OS's and builds. I've got one VM on 22.04 which isn't in their supported list yet, but you can manually install their 20.04 version and it appears to work fine... guess i'll just be unsupported for issues in that case though, but it's only my unifi wifi controller so all i really need from it is the config backup for unifi. I also run FreePBX which was built with the FreePBX ISO, that identifies itself as "Sangoma" rather than RHEL/CentOS like it did in the past. RedStor agent didn't like that, so again i had to manually install the agent, based on their RHEL7 rpm. All straight forward enough, but you might have to ask support for some details for the manual install. It feels almost old fashioned, doing a system state backup with an agent, but with a very modern spin on it. I'm so used to just vacuuming up VMs at the hypervisor level that it felt like a backwards step, but once you get into it, it seems like a really solid product. Meanwhile, zero hardware required on prem, BUT you can setup to store a local copy if you wish. I've made accounts for me and my two techs, they've both got user accounts but with delete permissions removed, so I'm the only account that can delete data from our RedStor account. Guy on the demo did say that if i request it, they can take the delete permissions away from me too. They don't have the ability to delete, intentionally, but they can give it back to me by following a series of questions if i ever request it. If you do delete something, the data is staggered between their data centres so if you delete something you have about two weeks (I think that's what he said) before it's removed from the other data centre, so support can recover it for you in that instance.
  12. I signed up for a RedStor trial earlier in the week. Activated the M365 stuff in the space of about 5 minutes, so that was easy. I've started setting up the on prem backups now too, currently seeding my largest server to it which looks like it'll take a couple of days. Demo with them on Monday (using the trial to formulate questions in advance really) but i feel like i've already made my mind up that this is the way to go. I've got 4 x 18TB drives in a NAS that i'm going to utilise for a local copy of my backups to speed things up too. Very impressed, beside the on-site copy i'll be keeping, a hardware-less backup solution that i actually feel ticks all the boxes, very impressive stuff.
  13. Based on what I pay for Veeam+BarracudaC2C+BackblazeB2 storage each year, the redstor offering for my student count is only £400pa more. I've got a demo on the 8th, so it'll be interesting to see. If i don't need on-site dedicated hardware for it, that's another expense that makes that £400 extra worth it, then the reduced technical overhead of having to manage different products. Certainly sounds like they've found a sweet spot in the market IF the product is as good as the marketing material makes it look.
  14. I've been using RIPS based Epson printers here since 2016. Wouldn't go back to laser at this point for colour printing. We still have a handful of mono only laser devices, primarily because of unbeatable cost per print when doing mono only. We're using Epson WorkForce Pro WF-C529R devices at the moment. Significant improvement on an older model we used before. We make sure our print provider sends us the XL ink bags too....they last a very very long time!
  15. Is that secondary or primary? and do you still have some traditional IT in place for student use or is education 100% tablet based? Great for when exams go all online i guess, but personally thinking about that as a parent, I have some negative feelings towards it.
  16. mrbios

    MyTutor

    I've got firewall rules for this which work. Destinations: MyTutor Media Servers: 18.203.121.8,34.247.141.51,52.48.14.102,52.51.75.75,54.155.31.213,54.228.244.253,54.247.143.188,54.247.78.233,54.72.88.111,54.78.34.67,79.125.40.24,99.80.236.35 and *.mytutor.co.uk Services: UDP 40000:65535 HTTPS 443 UDP 443 I've no idea if that list of media server IPs is up to date though as i've not checked in the past year or so. You might also have to enable some rules for STUN and TCP/UDP port 19302.
  17. In the conditional access section there's a terms of use area, you setup a terms of use policy there, personally i just import the PDF of our staff acceptable usage policy, and then create a conditional access policy that grants permission on terms of use acceptance. Forces staff who only use the system externally, such as governors, to accept the schools AUP. It keeps a record of who has accepted it too.
  18. My policies: MFA policy - All users (students included) condition to exclude trusted locations (on prem) Block legacy authentication - As it says on the tin, i block login attempts from any legacy authentication methods Block locations - essentially any login attempts outside of the UK Terms of use (AUP) policy - Applies to staff and governors
  19. I don't think it was much, £150-£200 or something. Civica support are atrociously slow to respond but they're the only ones i know of that can do it for you.
  20. Civica have to install the component for you on your cashless catering server, guessing if that folder doesn't exist then they haven't done that bit. In classic Civica style, it is a chargeable job they'll want paying for.
  21. I was a senso.cloud customer for years, we've moved (or rather, in the process of moving) to netsupport classroom.cloud right now. Support have been good so far in answer questions, helping me get to grips with the different ways of doing things etc. Senso is currently (i say currently, because netsupport assure me they have some things in the works) the better techy support tool. Classroom.cloud is a significantly better classroom management tool for teachers. I never really had WOL working in senso, but it works in NetSupport fine (Not that i really need it, as we use MECM for waking, and don't tend to wake on a schedule anymore due to power saving) I previously used the on prem version of Impero, but always found myself getting frustrated with it. I haven't really looked at their cloud offering in detail.
  22. I miss windows live movie maker. So easy for kids and staff and worked really well.
  23. Unifi is cheap and cheerful, does a job but can bit a bit flaky at times. I've got 51 APs on Unifi at the moment. We previously used Aerohive (Now Extreme Networks) and the APs were good but the renewal price was about as much as a full replacement of new Unifi APs. If money wasn't an issue, i'd go for something more robust than unifi, but if money is tight, unifi does an ok job of things.
  24. Yes to the first, that's how i've got people logging into it. It is price competitive depending on the packages you have with senso. Senso has a range of packages of various modules, classroom.cloud has one with and one without safeguarding basically (presumably due to data size of logs). I've personally paid for a 3 year deal which they've done a deal on for everything, they've also got an offer on if you buy before end of March, so I'm getting more features for the same price as i was paying for senso.
  25. Funnily enough, i had that answered for me only minutes ago: "they do it be replacing the GINA (part of the Winlogon process that you can replace to customise functionality)" See here: https://learn.microsoft.com/en-us/archive/msdn-magazine/2005/may/security-briefs-customizing-gina-part-1
×
×
  • Create New...