ReBoot

Even SSL inspection cannot eliminate this as a possibility as no filter is perfect and none can determine whether an image is safe. SSL is a necessary evil as it breaks many of the internets fundamental principles for end to end security and individual privacy. I think used sparingly for vulnerable groups its acceptable but I question it use as the norm for all internet use including staff. What happens if Smoothwall's private certificates are compromised and your staff are subject to a real MITM attack with financial losses.

I thought Safeguarding applied to vulnerable adults and young people. I wouldn't have thought staff would be classed as vulnerable and in need of safeguarding.

This seems totally unnecessary to me. SSL intercept is primarily there to safeguard children using encrypted searches such as Google. You don't need SSL intercept to stop staff shopping online and implement your AUP you just block the sites. I don't perform SSL inspection on any staff traffic. For pupils I perform it on to Google, Bing and Youtube all of which have strict safe searches locked. If nothing else doing widespread SSL inspection uses allot of computing resources and does break some services.

I have 7 of these surplus to requirements free to anyone who wants to collect. One is missing the controller (should be able to find it if required). Most accessories are included (pens, trays, wall mounts) but cannot guarantee everything will be present. Located near Ipswich Suffolk.

Yes agreed it will reduce the scope of broadcast traffic to each VLAN if that's an issue.

You just need to set the default gateway on your new L3 core switch to the IP of the BGFl 3550. The link between your core switch and the 3550 will be untagged (no VLANs). You current edge switches will need to be setup with whatever VLANs you are planning and the links between the edge and core will need to be trunked. On the core switch you will need layer 3 interfaces for each VLAN and the IPs of these interfaces will become the default gateways for clients on the VLANs. Note if you were thinking of each edge switch as a single VLAN this would be a waste of time and you should stick with what you have. Likewise if all VLANs are reachable from any client then there is not much point in implementing VLANs - VLANs are typically used to achieve separation between clients or treat traffic differently using different QoS schemes per VLAN. If you have no need of this type of network forget VLANs.

So Eth0 was originally a trunked VLAN interface and traffic from the VLANS then passed untagged onto Eth7 to your gateway. What was connected to the other end of the VLAN trunk on Eth0 and how has it been reconfigured to put the traffic onto the new separate physical interfaces ? Do you still need VLAN IDs on the new physical interfaces on the Edge Router 8-pro I would have thought it simpler to make these interfaces untagged. It would be really helpful to have a diagram of your network. If the helper was working for the trunked interface it should work on the new physical ports provided it is configured on each port. I suspect something may be wrong with you basic setup of VLANs and trunking.

I've been using it on Windows 7 for some time with no issues. Also tried the same wpkg client on Windows 10 and it worked with no problems. Its all client side Jscript and xml so shouldn't be much to go wrong. I'm running a Linux DC so wpkg suits my environment nicely. Can take a little time to get your head around the configuration but it has good debug options and logs you can use to troubleshoot.

Yes I think that sounds right (while since I set this up). You need to setup your organisational structure (groups) then you can apply app policies to each group. Safesearch can then be overridden. Word of caution - don't use a single account for all staff as this breaks the ability to override. Each member of staff requires an individual account. Single account may work for a while but will eventually break.

Have you setup the app settings for Youtube in GSuite to allow staff accounts unrestricted access to Youtube ? No its doesn't need to be AD synced.

Thought I'd do some testing with the latest creators update on Windows Pro 10 (Build 1703). Installed on a test PC, added some applications in audit mode and sysprepped the machine with copyprofile. Restarted and everything looking good until I added another local user. Logged in as the new user and Edge, IE and Cortana broken and keyboards working intermittently. Machine generally unresponsive when logged into second local account. After some hours thinking I'd done something wrong I came across this: https://social.technet.microsoft.com/Forums/windows/en-US/9aa31760-d675-42ca-b020-6c6aec93487f/copyprofile-in-sysprep-breaks-the-start-menu-in-creators-update-v1703?forum=win10itprosetup Seems you need to clear the new Windows 10 webcache or the default profile will be broken. del /F /Q C:\Users\Default\AppData\Local\Microsoft\Windows\WebCacheLock.dat del /F /Q C:\Users\Default\AppData\Local\Microsoft\Windows\WebCache\*.* del /F /Q C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\*.* What testing do Microsoft actually do to release software which breaks in such a basic scenario and claim you can setup a classroom in an hour ?

You need to setup GSuite for Education (Google Apps) Accounts for your staff and you can then allow them to override safesearch when necessary when logged in. I do this at my primary school and it works well.

As far as I can tell there is no backup of any of the system databases inc. master model and modellog. Backup was setup by LEA team to only include the user databases. I have changed this for future backups ! I think its the master that hold all the users and SQL configuration and that one appears OK. The model is less critical. I have seen it recommended that a model database from a foreign server with the same SQL version/service packs can be used to recover the system. https://mssqlwiki.com/tag/model-database-corrupted/ I've just remembered I upgraded the disc on the SQL server last year and we still should have the old disc and contents. Might be a source for a backup model database for recovery.

One of my primary schools has a broken SIMS system. Looking at the logs the problem appears to be with the 'model' system database. Error is similar to the following: Error: 9003, Severity: 20, State: 1 The LSN (4:188:1) passed to log scan in database 'model' is invalid. LEA SIMS team have suggested I re-install SQL. School uses Redstor RBUSS for backups and has backups for the user databases including SIMS and FMS but none of the system databases including model and modellog. Model does appear to have been changed from the default which I can see in the templates folder. Is re-installing SQL going to fix the problem and do I need a backup of model to bring everything back. I have tried to start the server with the T3608 flag but even this seems to hang. At the moment I am suggesting the school gets the LEA SIMS team out (very expensive) as I don't work with SIMS very often. Anyone throw any light on how I can recover the system ?

I have Linux content filter (Dansguardian/Squid) and use the host file on the appliance to lock Restricted Mode across the whole network. Teachers have a Google Apps account they can use to override restricted mode as many useful videos are blocked. The DNS on my filter appliance goes direct to our ISP and does not go through our internal domain controller. If yours is similar then changes on your internal DNS won't affect web traffic that is proxied. The only issue I had is that a number of teachers were initially sharing a Google Apps account and this interfered with their ability to override restricted mode. They now have individual accounts and all al is working as it should.

I highly recommend C# MARC Editor as it was the only tool able to correct records with leader errors. Very useful Thanks. In the end the MARC records I recovered were incomplete so I've had to resort to building new MARC records from a csv dump of my library catalogue.

Heritage and Koha look very similar architecture wise. Main difference is Heritage is Windows Server IIS based while Koha is Linux + Apache2 with community support. I'm a big fan of the latter.

I've some experience setting up Koha and have now transferred my school's catalogue to Koha. Some observations. Setting up a vanilla server is relatively straightforward even from bare metal using Linux. Can be done in an hour or two. There are a myriad of configuration options so play around and get it working to fit your environment then reinstall. Luckily Koha keeps a very detailed log of every configuration change made so its very easy to document your preferences. You can only import your catalogue into Koha in one of the MARC variants. The Junior Librarian MARC export is broken and only outputs a subset of the information you need. I exported the complete catalogue as a csv then translated into MARC for import. There are tools to help with this such as MARCEdit but its time consuming and you will need to understand MARC basics. This took me around a week to complete. Patrons or users can be imported from csv so nothing too difficult here. The finished system looks good and has a nice self checkout feature not unlike Junior Librarian which lets pupils take items by scanning an ID card and item barcode. It can also be configured to pull title information and cover images from Amazon.

In my first message 107 is of course hex so I should have converted to decimal to correct the record.

I've given the C# MARC Editor a go and it confirms what I suspected and reports the following import error "Leader specifies incorrect base address of data." It also appears to fix it ! So thanks very much for the suggestion.

No haven't tried that one I'll give it a go. I used a trial copy of MARC Magician which can repair records and this reported multiple errors in the Junior Librarian export. It also manage to recover the records. However, the trial version is limited to 200 records. I need something which can automatically repair the pointer in the record leaders.

I'm trying to export my library catalogue in MARC21 format from Junior Librarian so I can take a look at some other ILS products. Basically I haven't found a third party product that can make much sense of the Junior Librarian MARC export file. The directory for each record with the TAGs is present but all the data fields are empty. If I look at the file the data is there but if appears that bytes 12-16 of the leader which should indicate the start of the data is incorrect. Example below. In the first record the leader has position bytes 02547 for the data. However, this appears way out as if you count it should be 00107. Setting it to this value allows data in the first record to be read by a third party MARC reader. 00000000: 3030 3830 316e 616d 2020 3230 3032 3534 00801nam 200254 00000010: 3720 2020 3435 6530 3030 3130 3031 3030 7 45e000100100 00000020: 3030 3030 3032 3030 3032 3430 3030 3130 0000020002400010 00000030: 3032 3130 3031 3830 3030 3334 3038 3230 0210018000340820 00000040: 3030 3830 3030 3532 3130 3030 3032 3730 0080005210000270 00000050: 3030 3630 3234 3530 3032 3030 3030 3837 0060245002000087 00000060: 3235 3030 3030 3730 3031 3037 3236 3030 2500007001072600 00000070: 3031 3830 3031 3134 3330 3030 3031 3330 0180011430000130 00000080: 3031 3332 3335 3030 3030 3930 3031 3435 0132350000900145 00000090: 3430 3030 3030 3730 3031 3534 3434 3030 4000007001544400 000000a0: 3030 3730 3031 3631 3531 3330 3137 3430 0070016151301740 000000b0: 3031 3638 3532 3030 3137 3430 3033 3432 0168520017400342 000000c0: 3835 3230 3030 3630 3035 3136 3937 3130 8520006005169710 000000d0: 3030 3730 3035 3232 3937 3530 3030 3630 0070052297500060 000000e0: 3035 3239 3939 3530 3030 3630 3035 3335 0529995000600535 000000f0: 3939 3930 3030 3630 3035 3431 1e41 3030 999000600541.A00 00000100: 3030 3031 3533 1e20 201f 6139 3738 3138 000153. .a97818 00000110: 3435 3338 3730 3735 1f63 352e 3939 1e20 45387075.c5.99. Any insights appreciated. Who said a Librarians life was boring !

I still prefer mandatory profiles. Unless you are using roaming profiles the alternative will load a copy of the default profile from the local machine and then redirect key folders to your server. I've found that this does lead to some differences in the user experience as there tend to be minor differences in the default profiles. Also mandatory profiles do get deleted when the user logs off something that doesn't always happen that reliably using local profiles. Seems to work better if everyone loads exactly the same mandatory profile and then performs any redirection based on this.

When I work on tablets I use a USB - Ethernet adapter. Looks like your Acers have a full size USB port so a few of these might do the job and allow you to connect to your wired network. https://www.amazon.co.uk/ORICO-USB-2-0-Ethernet-Adapter/dp/B00NP1XOOK/ref=sr_1_3?ie=UTF8&qid=1490691741&sr=8-3&keywords=orico+usb+ethernet

I have exactly the same problem. Mandatory profile with internet settings applied by GPP. IE11 and Chrome are working fine but Edge reports a proxy error. If I connect directly to the internet I then get a "cannot connect to the proxy" error suggesting that Edge is actually trying to connect to the proxy and has the correct settings. I'm now really confused as I just logged in again and hey presto Edge is now working ! I don't seem to be able to break it now. It looks like Edge should work as I had read that some were suggesting that Edge was broken when setup with a manual proxy.