LSDWho

IT Manager Full Time Alleyn’s School is one of the country’s leading HMC co-educational schools and offers both pupils and staff an excellent working environment in leafy Dulwich. The School seeks to appoint a dynamic, innovative and experienced IT Manager to join a well-stocked, enthusiastic and professional support team. It is an exciting time to join the team as we are about to embark on major improvements to the School’s IT infrastructure and we are looking for someone who is able to see this project through the planning stages to completion and beyond into further developments. The successful candidate will also run the day-to-day operations of the School’s IT facilities, meeting the academic and administrative needs of both pupils and staff members. They will be required to be the face of the IT team and build positive relationships with the whole school community. The role requires a technical specialist with experience and knowledge across many disciplines. It is particularly important for the role holder to take on responsibility for the management of the School’s physical and logical networking, as well as management of the IT team to ensure they have clear expectations of their roles, and that high performance standards are achieved and maintained. The successful candidate will also be required to upskill the team as necessary to ensure there is a broad set of skills across the department. The job is available on a full time basis, working throughout the year. The starting salary is competitive and based on Alleyn’s own scale. The closing date to apply for this position is 9:00am on Monday 5th November 2018. Full job description and application details may be downloaded from our website www.alleyns.org.uk/vacancies, by contacting Human Resources on 020 8613 5016 or by email at [email protected]. The School is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. The successful applicant will be subject to an enhanced DBS check. Alleyn’s is an Equal Opportunities employer.

IS Manager Full Time This leading HMC co-educational school seeks to appoint an IS Manager to join the enthusiastic and professional support team. The successful candidate will run the day-to-day operations of the School’s IT facilities, meeting the academic and administrative needs of both pupils and staff members. The role requires a technical specialist with experience and knowledge across many disciplines. It is particularly important for the role holder to take on responsibility for the management of the school’s physical and logical networking, as well as management of the IT team to ensure they have clear expectations of their roles, and that high performance standards are archived and maintained. The job is available on a full time basis, working throughout the year. The starting salary will be between £35,000 and £45,000 per annum. The closing date to apply for this position is 9:00am on Wednesday 6th June 2018. Full job description and application details may be downloaded from our website www.alleyns.org.uk/vacancies, by contacting Human Resources on 020 8613 5016 or by email at [email protected]. The School is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. The successful applicant will be subject to an enhanced DBS check. Alleyn’s is an Equal Opportunities employer.

Director of IT and Digital Strategy Full Time This leading HMC co-educational school seeks to appoint a Director of IT and Digital Strategy to join the enthusiastic and professional team. This post provides an excellent opportunity to make a real difference to one of the country’s leading academic, independent day schools. This is a role requiring an experienced professional with a strong background in IT and excellent skills in management and communication. The successful candidate will advise, in consultation with senior staff, on the development of the School’s future IT provision and will lead the implementation and development of IT projects. IT is important to teaching and learning as well as to the smooth running of the School as a whole. The new appointee will have the technical and management capability to ensure both that the current systems run smoothly and effectively, and that they meet the needs of all stakeholders. He or she will appraise and develop the use of IT to enhance learning, within and beyond the classroom and ensure that the School is well positioned to implement new developments in the field. The job is available on a full time basis. Normal working hours are 9:00am to 5:00pm with the expectation to work such hours as are necessary to complete the work when required. The salary will be between £50,000 and £70,000 per annum (depending on skills, knowledge and experience). The closing date to apply for this position is Wednesday 14 March at 9:00am. Full job description and application details may be downloaded from our website http://www.alleyns.org.uk/vacancies, by contacting Human Resources on 020 8613 5016 or by email at [email protected]. The School is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. The successful applicant will be subject to an enhanced DBS check. Alleyn’s is an Equal Opportunities employer.

Just wanted to update since my last post. Have been running the demos of both Acronis and Centrify now for around a week. Had a bit of an issue getting the macs to look in the right places for Documents, Pictures, Music and Videos in the same way that Windows does. Thanks to a pointer from BLau at Centrify to try using relative rather than absolute syslinks we've managed to get it all working for our needs. Pointing Mac and Windows to same "Documents" folde... - Centrify Community Thanks for the advice gshaw. Cheers, LSDWho

Thanks for your response gshaw. I've contacted with both Centrify and Acronis (they've changed their product from ExtremeZ-IP to Access Connect now) to get an idea of the costs involved. I'm hoping they won't be prohibitively high. Cheers, LSDWho

Over the past few months I've been looking at various methods of ways for our pupils to use both Windows and Mac networks within our school. At present we have a Music dept that has its own Open Directory setup - so pupils have a separate login for the Mac network, and centrally store of Home folders on a NAS. Separate to that, within the Art dept we have a number of macs that are connected to Active Directory allowing pupils to use their Windows network login. In that case, their mac home folders are local to the mac that they log into - not ideal! This also regularly causes keychain issues, particularly when the AD account password is changed. However, this does allow them to access their Windows home directory fairly easily. We have tried setting the Mac home directory to be the same as the Windows home folder, but this stops some applications from working (such as iPhoto) as they need an AFP formatted partition to work. Also, this doesn't seem to be generally recommended practice. So, how best to achieve what we need? In an ideal world we'd like both Windows and Mac networks to share a single login (we're pretty much tied to using AD for this) and have a single home folder that works on both OS's (including all required applications). OK, this is something that's pretty unattainable. So what's the best we can hope for? Two separate logins and passwords - one for Windows and one for Mac networks, each with its own centrally stored home folder (using NTFS and AFP respectively). We can live with this, but what our users would really like is to easily access their Windows home folder whilst logged onto the Mac network (the reverse isn't really required). Ideally we'd like to easily present the users Windows Home folder on the Mac doc when they log in - but with two lots of account credentials in play gives authentication issues. Of course users can save their AD credentials in their keychain when they access the Windows home folder for the first time, but it's a somewhat inelegant solution. I'm curious how others have their Windows / Mac networks living together in a school environment. Has anyone come up with a magic solution that works really well for them? Cheers, LSDWho

Cheers BrentC, I'll give that a try. I assume this is something I'll need to change on all the client Macs, not just the Mac Mini running the server app? Thanks, LSDWho - - - Updated - - - Cheers BrentC, I'll give that a try. I assume this is something I'll need to change on all the client Macs, not just the Mac Mini running the server app? Thanks, LSDWho

I'm a bit of a Mac newbie as I'm more used to working in a Windows environment. However, there's a couple of things I'm trying to achieve. To explain the setup we have a Mac server (running on 10.9.5, Server version 3.1.2) which is integrated into Active Directory via our Windows 2008 domain controller. Also all the mac client machines are set up with the Golden Triangle too. Users can log on to any of the macs with their AD credentials with no issue at all. The problems lies in the home directory. I am able to allow users to access their Windows home directory, BUT this isn't the default Home location. That defaults to a local folder on the Mac client. This means users are saving work to this local folder, then going to another mac and unable to access these files. What I would like to do it one of two things - neither of which I seem to be able to implement. 1) Set the default Home location on the macs to be the same as the Windows home directory - and therefore not have a local home folder on the Mac. In effect having a single shared Home folder on both Windows and Mac networks. I gather this may not be ideal though at the Macs generate a large volume of data in the Windows home directory before even the first user file is saved. I would still like to explore this however, especially if what I have been led to believe isn't too much of an issue. 2) Set the default Home location to a folder separate NAS share for logging onto the Macs, and also allow users to access their Windows home location as an additional share. That way both Mac and Windows folders should follow them round as they move from Mac to Mac. My problem with implementing either of these options is that I don't seem to be able to change the "Home Folder" setting for AD accounts in either the Server Application (the option to change the folder is greyed out when selecting an AD account, however OD accounts - which we don't use - works fine) or via Workgroup Manager (which gives an Unexpected Error - 14140). As we have a large number of users, and a fair few Macs I would need to be able to implement a solution centrally. Any suggestions or pointers would be much appreciated. Cheers, LSDWho

A pleasure. Took a load of scrabbling about to get all the info together into something that works. Glad is was of use! Cheers, Lee

Hi, Here's the complete group policy settings used for our exam login that as far as I can tell restricts use of pretty much anything you wouldn't want access to in an exam: http://web.alleyns.org.uk/upload/ExamLoginOffice2010.htm Cheers, Lee

Hi Enjay, As it was a while ago I can't exactly remember what each of the disabled ID's that I entered into the policy do. In the hopes that it helps below is a full list of all the IDs I disabled. And below that all the disabled Shortcut Keys with modifiers. Disable commands 11323 11455 11546 11562 11564 11910 11911 11912 11914 12316 12843 13800 13808 15283 15551 15552 15780 16166 16331 1715 1716 17948 17949 17950 18355 18732 19243 2 20392 2041 20574 20904 20905 21186 21439 22095 22144 22145 2349 2350 2566 2788 30475 3217 3754 6137 6231 6232 6233 6237 6238 6239 6241 6242 6244 6245 6968 7021 7343 7685 790 9056 9317 9318 9319 9321 943 Disable shortcut keys 118 118,0 118,16 118,4 118,8 69,8,4

Just a further update - have just tried adding the 5 ID numbers in the Word 2010 ADM Template within Group Policy and the result is the same. Just saves having to do a reg hack to the user. Once you've installed the Office 2010 ADM templates go to: User Configuation / Administrative Templates / Microsoft Word 2010 / Word Options / Disable Items In User Interface / Custom / Disable Commands Enable this, "Show" the IDs and add 16631, 18355, 20392, 30475 & 7021 Hope this helps - different method to the same outcome. LSD

All, Just in case anyone else is looking for the answer to this I got a reply on the MS Technet forum with the answer... You can use following registry key to disable "Look Up", "Synonyms" and "Translate" option and its sub-menu items, from right-click context menu. [HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\Word\DisabledCmdBarItemsList] "TCID"="20392" "TCID1"="30475" "TCID2"="7021" "TCID3"="16631" "TCID4"="18355" Make sure this registry key is applied to all concerned users (via log-on script or other means) since this a HKCU registry key. You can restrict access to registry editor to prevent users from changing these settings. I didn't have any of the Key values below "Office", but if you manually create the keys and then add the String values listed all works perfectly. Here's the technet forum link if anyone wants to take a nose there... Word 2010 - remove right-click context menu Cheers, LSDWho

Hi, We're looking to upgrade our Office version in our school from 2003 to 2010. As part of that I need to recreate the account we use for exams / controlled assessments that restricts use of Spellcheck, Thesaurus, translations etc within Word. The task is almost complete (ribbon options locked, keyboard shortcuts removed etc) using mainly group policy with the odd thing locked with a mandatory profile. However, there is one problem that persists that I have yet not been able to solve - the right-click context menu within Word. Ideally I'd like to remove just the "Look up", "Synonyms" and "Translate" options, but as a fallback we can lose the entire context menu if needed (or indeed possible). I though the solution may lie in the disabling the contextMenu control ID's in the word 2010 Admin Template in Group Policy, but I can't seem to track down the ID's for these functions. Anyone managed to resolve this problem by any means? Cheers, LSD