Koldov

Just had an email from a teacher requesting Flash be installed on his laptop as he wishes to use this resource: Ancient Greece - The British Museum Obviously I fired back an email with the standard response... But on a serious note, does anyone know of a similar resource I could point him to (and save him crawling the internet and clicking on random things)...?

Yeah, I'm sure I started a thread or posted on one ages ago... It still confuses me though! When I created the ASM account I just opted to add the domain we use for our email, this was the same one we used with our old VPP account (which is 3rd party hosted, so possibly not the brightest idea - it was an LEA thing though so I don't think it's going anywhere). This is the one that shows up in ASM as a 'Managed Apple ID'... However, it bothered me enough to add a couple of other domains that we do actually own, in case we ever need them. All these were verified and everything was fine.... then we started getting emails about verifying domains.... I didn't even know they existed, but I drew the line on the ridiculous appleid.ourdomain.org.uk and ourdomainorguk.appleid.com domains, because I didn't create them or ask for them and I still haven't got a clear answer from anyone on what they are, why I need them, or what the actual point is of going to all the bother of having to setup sub-domain DNS to do so...

Ordered... Thank you!

Having difficulty logging in to ASM today... Apple ID = entered Password = entered 2FA = entered Back to log in page! Had a recent email asking us to verify a domain, but it was a domain that Apple created (@appleid.domain.co.uk - some sub domain of one we have) but not actually related to either the log-in domain Apple ID. In fact we don't actually use domains in Apple (that I know of)... Anyway, that shouldn't stop me logging in to ASM though, right? EDIT: Now it isn't even sending me a 2FA code... EDIT 2: Seems to be a Chrome thing... OK with Edge...

Judging by the responses so far it isn't 'normal'... What size educational establishment are you at? We are only a small school c.350 pupils, but if it's any good for reference: SIMS.MDF = 1.98 GB SIMS.LDF = 61.9 MB This was installed by Capita and (I'm not in today, but from memory) runs a backup every night (scheduled task calls a .BAT file which calls a .SQL file) so I'm guessing that does the heavy lifting in reducing log file size as mentioned above. Plus I have been known to run the Capita supplied 'ShrinkDBLog.bat' when I remember...

Yeah I think a lot of people know how this goes and have experience of it, even if not on this sort of scale... Our logistics contract was taken over by a few different firms in the years I worked there, it was crazy to see the 'terms and conditions' change with each successive company. Originally working conditions were very good, at the end I couldn't wait to get out. And then there's MAT takeovers...

Most of us have seen on the news about the devastating consequences of storm Arwen (including the very sad loss of life) and the fact that it has left thousands of people without electricity. Although in terms of big storms it wasn't really (although gusts of nearly 100mph puts it up there - duration and lack of torrential rain peg it down a little I guess) it was enough to leave vast areas without power and as much of that appears to be reasonably rural, makes it difficult to repair. It did make me think though about the shift from fossil fuels (including those that produce electricity of course) and appliances that work without electricity to those that rely on it and rely on it to work. We had a very, very old gas boiler when we originally moved in to our house and somehow that could work without electricity (it had a timer but if you turned a knob and pushed a button it would heat some water) as do some oil fired heating solutions, we also had a gas hob that you lit with a match.... Oh and my car still runs on petrol... Now we have moved onto to a newer boiler (before ASH and GSH before you ask) and a nice induction hob (no electric car or solar panels yet though). So my thought today on the way to work, that in terms of even though I'm not stuck out in the Highlands of Scotland but being in a cosy suburb, I wouldn't be much better off without electricity...

Just did a search for "Arm was sold to Japan's SoftBank in 2016 for..." $32 BILLION! I can't believe they think any tech firm would do this sort of thing though... The US watchdog said: "The proposed merger would give Nvidia the ability and incentive to use its control of this technology to undermine its competitors, reducing competition and ultimately resulting in reduced product quality, reduced innovation, higher prices, and less choice." And this would be nice... if you believe it... Nvidia had promised to maintain Arm's open-licensing model, retain the brand, keep the company based in the UK and hire more staff.

Ah, sounds about right then!

So, interestingly SERVER 1 has just decided to randomly stop complaining and isn't filling up its event logs with those Kerberos errors about Server 2 anymore.... There doesn't seem to be much info about it, but at least I found something to corroborate the fact that I'm was not going mad or that it's just my set-up... https://community.spiceworks.com/topic/2338789-event-id-35-and-37-kerberos-on-server-2019 The Key Distribution Center (KDC) encountered a ticket that did not contain information about the account that requested the ticket while processing a request for another ticket. This prevented security checks from running and could open security vulnerabilities. See https://go.microsoft.com/fwlink/?linkid=2173051 to learn more. Ticket PAC constructed by: SERVER 2 Client: DOMAIN.COM\\SERVER 1$ Ticket for: krbtgt Nothing has changed with either server, no updates, no reboots... Maybe SERVER 2 just needed a bit of time to think about what it had done wrong and got itself together... Previously it logged this error pretty much every hour and then Wednesday at 18:00 it seems to have just stopped... no entries for this error after that!

Sorry, might of edited my post after the fact...

Is there a tool that can password protect a zip file and have Windows open it natively? I'm going to run it through Handbrake or something to try and get 2GB. Think I might of just had my bubble burst unfortunately... Hi Ho, Hi Ho, it's off to the DPO I go... Is this done for unlisted YouTube videos of Christmas plays too...?

Mostly backs of heads as far as the pupils go, but a few faces unfortunately...

Tutor suggests 'WeTransfer' anyone got any objections?

We don't have a school OneDrive (and I presume 'personal' is out of the question) we have Google, but limited as a domain so that no external users can access.

We have a teacher who needs to have a 2.5GB, 1 hour long video of her lesson sent to her tutor... How, please (bearing in mind the subject and the implications)? So far the teacher has asked if we could "put it on YouTube... or post a USB recorded delivery"...

Have you changed Print Servers recently? Point and Print Restrictions in a GPO applying? I had this recently while I was testing Print Nightmare workarounds. I forgot what Print Server I was supposed to be connecting to and typed in the Production Print Server when trying to add a printer (but the GPO with Point and Print restrictions was enforcing the Test Server as 'Users can only point and print to these servers' was set to the Test Server).

Complicated stuff! I've only read a little bit about VMs on SAN vs NAS and thought the whole point of SAN was redundancy and resilience...? @cdwyersandysecondary are your switches on your UPS?

One (of the many) things I know I am pretty bad at, is documentation... I've got loads of Word documents and Excel spreadsheets detailing various parts of the network or services we use, but I know that it would be pretty tough (actually impossible) for someone else to come in and have a clue about where a specific piece of information is! Unfortunately I think I'm going to have to start from the ground up and have no idea where to start or what to document (or actually how to pull it all together in the first place)... Also, what is the best format to have all this in, how to secure it and how much detail do I need to include? Does it need to go into things like what GPOs are configured and why, or should it just state the Admin password to the server is X and the new IT person should be able to work it all out from there (extrapolate this for all other variables too numerous to list)... I know this is a pretty open question and everyone is going to have their own ideas, but I need to start somewhere.

On the face of it I'd say power issue (surge/spike/brownout), some equipment can handle it better than others and don't show any signs of it having happened, some it has drastic consequences for. Do you have any equipment on UPS (and if not, now may be the time to invest - especially for servers/SAN)...?

A while ago I decided I would take the plunge and enable the following for my DCs: Network security: Restrict NTLM: NTLM authentication in this domain - Deny all I had enabled the AUDIT version of this policy for a while beforehand and it only seemed to pick up the Head's MacBook... so I thought it would be worth doing and then seeing if it broke anything (he uses the Microsoft Remote Desktop app for Mac to connect to a VM on the server for SIMS) as I figured I could reverse it if it did. However, following recent updates I had to reboot the servers and among the event viewer logs I found this: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699. The link basically tells you to use the AUDIT mode first... Also, I will occasionally get the following: Domain Controller Blocked: NTLM authentication to this domain controller is blocked. Secure Channel name: LAPTOP-1 User name: USER-1 Domain name: DOMAIN Workstation name: LAPTOP-1 Secure Channel type: 2 NTLM authentication within the domain DOMAIN is blocked. In the Details tab: - System - Provider [ Name] Microsoft-Windows-Security-Netlogon [ Guid] {E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC} EventID 4004 Version 0 Level 3 Task 1 Opcode 0 Keywords 0x8000000000000000 - TimeCreated [ SystemTime] 2021-11-08T08:15:48.412185900Z EventRecordID 24987 Correlation - Execution [ ProcessID] 712 [ ThreadID] 59704 Channel Microsoft-Windows-NTLM/Operational Computer DC.Domain.com - Security [ UserID] S-1-5-18 - EventData SChannelName LAPTOP-1 UserName USER-1 DomainName DOMAIN WorkstationName LAPTOP-1 SChannelType 2 But I can't really figure out from this what is using NTLM and why (is it attempting a log-on with NTLM and failing - then going Kerberos)..? Nothing appears to be broken within the Domain, all printing (before the Nightmare) and shares work OK. Occasionally other laptops will pop up, but I've never been informed that this is causing problems (not that it isn't, just that I haven't been informed). I will also say that during my 'Print Nightmare' testing the occurrences of this go through the roof! But mainly the question is whether I have successfully blocked NTLM or not, as the GPO seems to produce event logs saying it is blocked, but the reboot event log says NTLM is currently being used... The only thing I can think of (and have just noticed) is that I still have the AUDIT policy enforced, but would that prevent the 'proper' GPO from applying...?

Well, I bit the bullet and ordered a new touchpad. Not too much of a faff to replace and it all went ok (and more importantly the new one worked). However, as for the old one, upon removal and inspection a fair amount of detritus fell out when given a blast of air... I'm guessing food as the user sits at their desk a lot of the day and eats/works... I should have possibly refitted the old one to see if that had in fact actually fixed it, but I couldn't be bothered taking the laptop apart again (so I will file that one away in 'learning experience' and have it possibly 'spare' in case it ever happens again).

We seem to have narrowed the issue down to using 'White Rose' maths resources... Absolutely no idea why this would be an issue, obviously something to do with the content or settings in their PowerPoints, but I wouldn't have a clue where to start looking!

I held off on putting the heating on at home until I couldn't stand the earache anymore (no, not from the cold)... I turned it on but have it limited by the thermostat (in the warmest room) so it only actually comes on when the room reaches a level (BELOW the temperature the A/C for the server room is set to here)! Still trying to determine the optimum temperatures to get the condensing boiler to condense as it is supposed to be money saving... but it's very difficult to actually tell. I also turned the hot water down by about 5 degrees (which also hasn't gone down well with the OH)... I'm quite a warm person so it doesn't bother me, but obviously for a happy wife/life... however, in all honesty what I did actually start to notice and think about is the actual house, rather than its inhabitants (but don't tell her that's the only reason I actually put it on). All the information about money saving by turning off radiators and keeping doors closed in rooms you don't use doesn't really take into account the condensation on the windows and the damp/mould that starts accumulating in corners and behind furniture...

TL;DR - Creative GigaWorks T40 Series II speakers... Amazon = £109.99 / Creative Store = £84.99 Just a reminder to be aware even though it has been posted earlier... Really have to be careful and try to stop the 'Amazon Black Friday' craziness as I've been looking for a decent price drop on these for a while (actually for so long there are probably better options now)... https://www.amazon.co.uk/GigaWorks-Multimedia-Audiophile-Configuration-Technology/dp/B001IZZ2PO/ref=sr_1_9?keywords=creative+speakers&qid=1637935210&s=electronics&sr=1-9 but... https://uk.creative.com/p/speakers/gigaworks-t40-series-ii