Koldov

Fortunately it wasn't the carnage I was expecting (it's practically the end of the world if they can't print)... It appears that the firm that delivered it transferred all the settings (I mean everything, passwords, job accounting, scan settings, I.P.) from the old MFD to the new one and people were using it already by the time I walked into the building... So it's just a case of renaming, changing the I.P. and settings on the old one adding it to the print server, changing the port in the room it now sits in and pushing that out. The only thing they couldn't do is add newer drivers to the print server for the new MFD obviously, but it seems to be working OK so far on the old ones (so I wonder if it's even worth the hassle of doing it).

My Business Manager informed me that we were getting a new MFD delivered over half-term. Usually this would have been no problem, but it is the main admin MFD that only admin and SLT are allowed to use and I had booked this half-term as holiday... Slightly more complicated due to the fact they want to reuse the old one in another part of the building for general staff. I'm sure the expectation will be for me to have it all working as soon as I walk through the door tomorrow, so I'm just trying to think of the quickest/easiest way to get this done (plus I have safeguarding training 09:00-12:30)... Printers are deployed via GPO and only certain staff can use the old main MFD, now this is to be used by all the other staff. So, do I change the I.P. address on the new one to the old one, change the drivers on the print server (do all the other set-up) and no need to do anything else (if the GPP is set to 'update')? Or do I just set this up as a completely new MFD and create a new GPO to push it out to the relevant staff. Or is there any other way that is better?

Might not be what you're looking for but a quick internet search of 'roller shutter bathroom cabinets' comes up with some ideas... This one might be big enough for a screen - 53.6cm H x 60cm W x 25cm D (not cheap. but I'm sure once you know what you're looking for there will be alternatives out there): https://www.wayfair.co.uk/furniture/pdp/ebern-designs-asyra-60cm-w-x-536cm-h-x-25cm-d-wall-mounted-bathroom-cabinet-gdhd1027.html Not lockable, but if you're handy or have site services I'm sure a cheap cam lock could be fitted?

If you are a student, you should speak to the teacher who has organised this... ...and it sounds like they should talk to someone who is authorised to make changes to a policy clearly set to stop you plugging things in!

Yes, I got the bit about needing to host the config file somewhere... seems to be beyond me so I guess just live with the warnings?

Yes, although we don't 'own' the full domain as such the sub domain which our O365 tenant sits on, only relates to our school, all parties were happy for us to request the change with the registrar so that the required DNS records reflect that. Anyway, I thought I would reach out to the domain registrar just in case it was something to do with DNS and got a reply to the tune of the internet version of RTFM!!! https://techcommunity.microsoft.com/t5/exchange-team-blog/introducing-mta-sts-for-exchange-online/ba-p/3106386 I got halfway down and zoned out...

Yes, we have a sch.uk domain and it has a M365 tenant already (long story about Word on an iPad)!!! We are also an LGfL school so I've had that all that set up in the background for years, we also have a Google Workspace domain, a website domain... plenty of alternatives. I doubt it but it might be the push I need to convince them to move email address, even though it is a pain with the amount of media with it printed on (let alone many years worth of contacts, website sign-ins, resource logins etc), I've tried over the years to move them onto something else but it has always had a lot of resistance from SLT.

Thanks I think I'm going to query it with E2BN. Unfortunately when the tenant was set-up, the 3rd party created all schools that were under the previous LEA as a sub-domains of the higher level domain name, so I don't think there would ever be a way to buy it. So, for us it goes something like @school1.PRIMARYTOWN.CO.UK and the school down the road is @school2.PRIMARYTOWN.CO.UK

For years (well almost as long as I've been here) we have been using a 3rd party Learning Platform for our email. Back in the day I believe we had an onsite Exchange server (but it was gone by the time I started) and then I think we had an LEA Exchange server. At some point the LEA decided it would no longer provide this service (or any other IT support) and 'helpfully' sourced 'a 3rd party' to provide a Learning Platform and email solution (and a new IT support service staffed with previous high level LEA IT support staff - who had suddenly become consultants). I think I hadn't been here long and so had no say in the matter (not that I would have at that time) but Staff here were never really interested in the Learning Platform side of things.... the email address has become ingrained obviously (printed on everything, website, not to mention years of contacts). I think they also used to originally use Exchange but a few years ago, moved everything on to an O365 tenant... how they license this I don't know (probably a free version)... Some of you may be thinking that it's not difficult to change a school's email address, but I'm not keen and have no support for this anyway (I have tried). Added to this is that somehow the Domain Name is not actually owned by us (not even by the LEA, it was created by the 3rd party), then a former employee of said 3rd party started a company (named as Director - yes, all very strange) owned them for a while, then another company (with the same Director) and now I think it is E2BN, therefore we can't easily make changes to the DNS and such, which brings me to the other issue... We signed up to NCSC and I am now being bombarded daily with this email: MyNCSC events between 5:01am 4 Oct 2022 and 5:01am 5 Oct 2022 New findings detected (1 Urgent): • Urgent | Mail Check | TLS Asset: school.domain.co.uk Certificate host mismatch. The certificate Subject Alternative Name does not match host 1234567890.mail.outlook.com. (Host: 1234567890.mail.outlook.com.). Support has been unable to resolve it and have all but said that they are possibly looking into alternatives (which might include washing their hands of it and dumping the O365 tenant on us - something I'm not particularly keen on having never been responsible for an email tenant/domain before). But for now, does anyone know if the above error is more of a DNS issue to do with SPF, DKIM or DMARC settings on the Domain and if so, will a quick email to E2BN be able to sort it out?

I was going to mention that on the rare occasion GPP has failed there was slightly more to go on in Event Viewer. Even reminding me that one failed due to actual 'Policy Restriction' which led me to remember that although I thought I had redone all the policies after moving DCs and Print Server (including all Point and Print restrictions), I'd forgotten to include the bit about non-packaged Point and Print (yes, we have some old printers with drivers that are probably written in Basic or something)....

Ah, I thought so given your Event Viewer screenshot. I haven't seen printers deployed that way in a long time, (does this come from the Print Server and right-clicking on a printer > Deploy with GPO?) I think we used to use that after we stopped using start-up scripts. Have you thought about doing it with a more modern method such as GPP (or a least trying it on a test user). I've seen that some people don't find it very reliable, but we've never had any issues with it (until Print Nightmare obviously, but I think that messed nearly everybody up)?

Me: Deploy printer please GP: No Me: Why? GP: Error description: ........... Classic! So on a newly imaged machine an existing AD user account logs-in and gets the printer, but on a newly imaged machine a new AD user account logs in and gets nothing (presuming both users are in the same OU and users are members of all the same 'groups'). Still seems like some kind of 'Permission/Security' issue somewhere because GP obviously tries to deploy the printer at least (as it appears as an error in Event Viewer). Back to basics... Do all the other GPOs apply correctly? How are these printers deployed (in user configuration I presume)? Start-up script in GPO? Group policy (as in 'Print Server > Right-Click > Deploy with Group Policy')? GPP 'Preferences > Control Panel Settings > Printers? Nothing funny going on with Loopback or Security/WMI Filtering? Did you apply any of the 'Print Nightmare' workarounds to any of the users/computers?

Actually on my computer I have the setting "Allow Windows to manage my default printer" set within the client and in my list of printers there is actually no 'default' set. However on the GPP that sets the printers one of those is ticked as 'Set this printer as the default printer'... so it appears to override GPP. Staff here are used to selecting their printer each time they print. I don't actually set a default through the GPP as all staff have two or three printers they can choose to print from depending on what they are printing. The pupils only have one printer per room and that's set so they can never choose another anyway.

I presume the GPP has 'use as default' set on the policy that deploys the 'local' printer (I guess you mean 'local' as in 'local in the same room but networked' and not 'local as in locally attached via USB or similar') also not sure if this overrides the manual setting on the machine that @RLR mentions or not though...? Also what is your GPP set to... Create, Replace or Update?

That's a really good point, I know everything is relative and house prices rise... ...but my house was c.£45,000 in the late 90s and I was earning c.£18,000 (so 2.5 x single salary) and that was a 100% mortgage which is rare these days. Now my house is worth c.£300,000 (I don't actually know, but similar in the area sold for around that last year), but I'm actually not earning a huge amount more than I was back then (yes, I know that's probably my fault for going into I.T. support in a school)! Meaning I would need roughly to borrow roughly 15 times my salary (let's say £20,000) to buy it now, or come up with a £250,000 deposit... Even if I'd gone 'Private Sector' and earnt £50,000, it's still 6 times that salary (of course less with a deposit)! Haven't even had to think about it for many years (paid my mortgage off early) so I'm actually not sure what the lending criteria is now. EDIT: Quick Google** sorted that out... Different lenders use different multipliers, but a rough rule of thumb for single applicants is around 4.5x your income. So (very roughly), you need to earn £56,600 and have a £45,000 (what my house originally cost) deposit! Meaning (unless my maths is way off) there is no way I could afford to buy my own house now... **Other search engines available.

Not much help to the OP, but I haven't been clean shaven since I was about 20 years old (and that's a long time ago)... In a previous employment I was required to shave every day and wear a shirt and tie. I also had to cut off my long hair (something I've regretted ever since and never managed to get past the in-between scruffy stage to grow it back). This was back in the day where to look 'smart' required you to have short hair and be clean shaven... The shaving rash around my collar was so irritating and I eventually found electric seemed to suit me a bit better (still not great though), but since I left there I've rebelled and it has been some combination of either stubble or short beard depending on whether I can be bothered or not and I can probably count on one hand the amount of times I've actually ever needed to fully shave since.

Microsoft has acquired Clipchamp, I think to finally move on from Movie Maker > Video Editor and give Windows a better built-in app. AFAIK it's available on the store for Windows 10 also. In fact when launching the original Windows 10 Video Editor it now recommends installing Clipchamp. Reviews are mixed... EDIT: Just had a quick look and it appears that it needs a sign-in and to be used with an account (MS/Google/Email) and seems to suggest it will be using their website for some reason (cookies/data/info)...?

Yeah, good shout thanks! Too many variables (and not enough knowledge on my part) to mess around for a job that is only a 'favour' so I'm only doing the bare minimum and obviously want the least hassle (but the teacher is OK really and doesn't cause me any issues)... I've emailed the teacher that the slow mechanical hard drive is the main problem and she should get the 'Samsung 870'.

I don't want to open it just yet as I haven't spoken to the teacher about it. Couldn't find anything in the spec on the HP site, but this seems to suggest it does: https://h30434.www3.hp.com/t5/Notebook-Hardware-and-Upgrade-Questions/NVMe-M-2-Support-for-HP15-bs104na/td-p/8071723 Forgive my ignorance, but honestly I've never looked into M.2 or NVMe, so it's probably best just to do a like-for-like swap as I'll probably end up with the wrong type...also would it make anything easier or cheaper, I don't have anything to clone to an M.2?

Teacher bought her personal laptop in today asking if I could have a look at it and find out why it was so slow. Only a couple of years old, mainly used for University work, web browsing, emails etc. Obviously at some point it has upgraded itself to Windows 11 Home and so full of bloat which probably doesn't help. Average spec HP Notebook - 15-bs104na: Intel® Core™ i5-8250U 8 GB DDR4-2400 SDRAM (2 x 4 GB) But the worst part....? 1 TB 5400 rpm SATA - Seagate ST1000LM035 1 TB 2.5-Inch 5.4K SATA Hard Drive (really....?). I don't really do personal work anymore as I just can't be bothered to deal with clearing out people's junk, Windows bloat, dodgy apps, being personal I.T. for life once I've touched it and being responsible for their precious photos of dogs/kids etc. I'm thinking just advise them to buy a 1TB SSD from Amazon and I'll do the clone. Obviously I don't want to spec £400 drives, so something about £60-70..? Samsung 860 QVO 1 TB SATA 2.5 Inch Internal Solid State Drive (SSD) (MZ-76Q1T0) Samsung 870 QVO 1 TB SATA 2.5 Inch Internal Solid State Drive (SSD) (MZ-77Q1T0) Crucial BX500 1TB 3D NAND SATA 2.5 Inch Internal SSD - Up to 540MB/s - CT1000BX500SSD1 Anybody with experience of these drives? Probably not even worth a few £ more for Samsung EVO or Crucial MX, in this scenario... but really I don't want any issues/comeback...

Sorry, went over my head as I've never watched it (OH is a big fan of it though and Ashes to Ashes). I hope said Shool ISP also offers free DDoS mitigation... It's an interesting debate... for T&L (what to teach and when) but in general for all sorts of child-rearing questions. The more 'liberal minded' and the more 'conservative minded' to endlessly assert their opinion is correct (which is what the internet is for after all). You can say let them do what they want, they'll just do it anyway, or don't ever let them see anything 'wrong' until they are old enough to have a fully (in)formed sense of the world and all its beauty/horror/right/wrong/morality/immorality (and that just depends on who you ask).... You can exaggerate either claim and take them to the nth degree, but there are some good points to both sides of each argument and I'm sure as always the 'truth is out there' somewhere in the middle. I'm not entirely sure what benefit the teaching of 'hacking' actually has though (like teaching someone to drive and also teaching them the 'theory' of how to hot-wire a car)... and I believe there is some truth in saying that there are those children who have a certain interest in computing may well discover these sorts of things on their own. We certainly have never taught 'hacking' in the computing curriculum at our KS level and yet have had an incident where a pupil (year 5 or 6 I think) was found trying to plug in a USB loaded with 'hacking' tools. But there is also a lot of truth in saying that exposure to certain aspects of life may well pique their interest in something that they never would have normally if they'd never heard of it (of course you could say that about learning Henry VIII cut the head of a few wives)... and (if we're being impartial) they will see worse on the news most days! As for other crimes, those can take resources a lot of youngsters don't readily have (especially large scale fraud, being out at 2 a.m. for car theft/burglary, cattle rustling) not saying it's unheard of though... But a lot of children have time to sit unsupervised in their bedrooms with their laptops and instead of cat videos or stupid TikTok stunts, they decide to look up what they learnt at school that day! Again, depends on the child as with most issues... I will actually be honest and blame the Half-Life mod Counterstike for my current career path in I.T. (not hacking, although I was tempted when I regularly got my A$$ handed to me on a plate)... The worst I did was change skins when playing on my own against bots.

1st lesson kids: This is the internet... there is no 'discussion'... there is only opinion... (and a few facts - but as everything in life, even these are open to interpretation by the 'internet users' and are rarely if ever, taken into account)... Oh, look! Cat videos...

Damn, it's those pesky cattle rustling kids again... I knew we should have blocked that search term in school!

How much of the curriculum depends on this one part (DDOS) and how much is really necessary for them to research themselves? Asking purely out of interest as we are not at that level, for our KS level it's only Scratch etc. Could you provide a carefully worded 'research' document for them? Agree with the 'they will just go and do it somewhere else' sentiment, but if you can craft the information in a way that satisfies the curriculum but doesn't pique anyone's interest too much...? Of course if it is a success, next they'll want you teaching the lessons...

There was a thread on here a while ago but I can't find it now... IIRC the issue there was that the school's ISP had given out I.P. addresses that had either previously been used or were registered on a database somewhere as being outside the U.K. EDIT: Just read your OP again... So, maybe that wasn't the issue!