Koldov

Can you put the laptop into an empty test OU, then link just one policy and see if it always processes it and then work up from there? I get that sometimes they get the GPOs applied and sometimes don't, but is it completely random machines or do the same laptops always have the issue? EDIT: FORGET THE ABOVE... I don't normally see any errors and I don't think I've ever seen 55 days! There's something sticky going on there I think, they should be fairly similar, like within a minute or so (well mine usually are). Source DSA largest delta fails/total %% error DC01 38m:58s 0 / 5 0 DC02 39m:06s 0 / 5 0 Destination DSA largest delta fails/total %% error DC01 39m:06s 0 / 5 0 DC02 38m:58s 0 / 5 0 Everything else passed OK though?

Over 13 years later an AI bot finds a forum post about Word 2010 and thinks it's a good idea to reply... I think we're safe for a while yet...

Also found this... https://parentpaygroup.service-now.com/sys_attachment.do?sys_id=28041d9ffb5cea1085b6f92abeefdc4b#:~:text=This document guides you through the process,Discover software are supported on SQL 2022.

Don't know if you can view this, don't think it's restricted (a few of the old websites that used to have instructions, the pages have mysteriously disappeared)... https://static1.squarespace.com/static/50e965eae4b0e6a1b5e24274/t/56096b29e4b0796afc6aebad/1443457833689/SQL2012Migration_21835.pdf There's quite a few old threads on here too (probably one of mine as I did it years ago!). https://www.edugeek.net/forums/topic/201966-sims-server-migration/ https://www.edugeek.net/forums/topic/134641-what-is-the-best-way-to-move-sims-amp-fms-sql-databases-to-a-new-server/ https://www.edugeek.net/forums/topic/21448-migrating-sims-net-to-new-hardware/ https://www.edugeek.net/forums/mis-systems/203758-de-attaching-re-attaching-sims-database-sql2012-2014-sql2016-resetting-passwords.html https://www.edugeek.net/forums/mis-systems/156675-moving-sims-new-server-2.html https://www.edugeek.net/forums/mis-systems/231705-help-sims-fms-discover-migration-fail.html Might not all be very up to date, but should give you an idea of the process (I don't think it's really changed much, but the Capita SIMS Migration Tool did get updates). I also found this, but YYMV, I haven't read it fully so UAYOR etc... https://fyr.io/post/migrate_sims_net_server

OK, I'm sure I'll regret this but... I was one of those teenagers... and I did a LOT of bad 'stuff'. Now, this was in the early 80s, before any of this internet nonsense. In my adult life I've tried to make sense of my behaviour many times and as an adult I abhor this type of behaviour (in children AND in adults). Now viewed through an adult lens, as I'm far less tolerant and honestly, I fail to recognise that child and I've got no magic solution as to what could be done about it (I will say though I had my fair share of corporal and non-corporal punishment and it didn't stop me), but I'm also not sure if being given a one-to-one, or taken to the office to play games would have helped either (I was often excluded, taken out of lessons, etc. Never managed expulsion for some reason though). I'll keep my conclusions to myself as to the reasons why and not get into the 'nature/nurture' debate, but I will say that I do agree (as I'm sure most of us do) with some points in the previous post by @GeneMoody-Action1 about the ease of access to the influence of social media and the internet in general. In those (back in the 'good' old) days, peer groups were small, so influences were small. Generally the group you hung out with were known to the parents and came from the local area. We all knew the trouble makers, the bad influences, the troubled families, the adults to stay away from and the areas to stay out of. But, I'm going to say times were different then, weekends and holidays we went out in the morning and came home for dinner... we didn't have mobile phones with access to $deity knows what, computer games to spend all day in our bedroom with and we didn't have influences from various websites and social media platforms. Yes, I did some bad things, and I had some 'bad' influences, but they were limited and we only generally had access to limited resources... the only p*rn we had access to was if we found a dirty mag in the woods... the only drugs we had access to was if someone's older brother sniffed glue. There wasn't any knowledge of internet hardcore p*rn sites, or county lines drugs gangs. There wasn't any access to hundreds of thousands of people all over the world trying to influence us into doing something bad to ourselves (or other people or property). There were no internet social media platforms using an algorithm to force feed us dangerous content. So, I will say that although it didn't stop me doing anything, I would say that at that time if I had access to some of the things I see on the internet today, I think it could have been a lot worse. The OH and I often have the conversation as to whether things are genuinely worse these days, or whether there is so much more reporting of them. I mean are there actually more paedophiles, murderers, anti-social behaviour, drug use? I started smoking at 15, as did a lot of my peer group. Do more teenagers vape than used to smoke? I will admit I do think certain things have certainly become worse in recent years, in my day although the chances of getting beaten up were high, the chances of being stabbed were almost zero, it was rare anyway and for young teenagers...? I certainly never heard of it growing up. In conclusion, yes there have always been 'bad' children, but today's child has a whole new world of things to cope with and I do think that there is a much wider and more dangerous circle of influence, which leads to a greater prevalence of such anti-social behaviours...

Can't remember where I got this, but I occasionally run this on my DCs: #Query Role Holders Netdom Query FSMO #Query Domain Get-ADDomain #Query Forest Get-ADForest #Make sure that domain controllers are in sync and that replication is ongoing Repadmin /replsummary #Make sure that all the dependency services are running $Services='DNS','DFS Replication','Intersite Messaging','Kerberos Key Distribution Center','NetLogon',’Active Directory Domain Services’ ForEach ($Service in $Services) {Get-Service $Service | Select-Object Name, Status} #Domain Controller Diagnostic tool (DCDiag) DCDiag /Test:DNS /e /v #Detect unsecure LDAP binds Get-WinEvent -FilterHashtable @{ LogName = 'Security' ID = 2889 } You need to press enter at the last one and it should return an error if it finds no unsecure LDAP binds.

Are you saying no Group Policies apply or just a specific one? I thought other policies would still apply... "If one Group Policy setting fails to apply on a client computer, the rest of the settings in that Group Policy (GPO) and potentially other GPOs may still be applied. The client will attempt to reapply the failed setting at the next scheduled refresh, and the other settings are likely to be applied without issue. " What was the output of GPRESULT /R (or RSOP.msc) does it list other policies applying. Also run GPRESULT /H GPReport.html as indicated in the error text. The error text specifies one GUID of a policy. If the issue is just one GPO, have you seen these? https://learn.microsoft.com/en-us/answers/questions/1184338/hoe-to-fix-the-processing-of-group-policy-failed https://learn.microsoft.com/en-us/answers/questions/733852/the-processing-of-group-policy-failed-windows-atte Basically, check this file exists for the policy: Edit the policy, see if it changes.

In CMD GPRESULT /R That will give you a bit more information and tell you where Group Policy was applied from.

Do you have a 'wait for network' GPO?

Yeah, actually that does make sense 😀 I guess depending on the set-up and which end has to read the settings in the signal! If the projector doesn't auto sense the signal and it's not set-up to auto adjust etc. Have you gone through all of the projector settings for something like that?

We have a ridiculous set-up for our hall projector... all VGA as massive run up the wall and across the ceiling! It was set-up when everything was VGA and I have no inclination/need to mess with it. It was set-up to be a monitor and projector, just running from a PC. We had an old ATEN VS-102 powered video splitter and it worked OK (can't remember which connection was on the DDC though). Then all the teachers (including SLT) decided it was easier for them to bring their laptop to the hall rather than saving their document on the staff drive and using the computer. So, I had to find a way to get the PC to the projector and the monitor, but also the laptop to the projector. Oh and audio from either into the amplifier or powered speakers! To say it's a bit of a spaghetti jungle of cables inside the cabinet is an understatement... but if iirc it includes a passive Y cable splitter from PC and laptop going into the 'in' of the powered splitter... then one of the 'outs' to the monitor and the other to the projector (I 'think', although now I'm sure I had to change things around and the solution didn't actually make sense)! The audio is even more convoluted and if I'm honest I'm not sure how, but at some point when I was swapping cables it just worked, so I left it well alone... Obviously we do get some issues when the PC and a laptop are both on. I also get some similar issues as yours with classroom projectors (but no splitters)... because the teachers want to duplicate instead of extending (because that's too complicated, right?!). As their laptop screen is something like 1440x900 or higher, the projector does weird things (letterboxing and so on) and I can't be bothered to teach them about the GFX GUI. I just set their laptop screen to a basic 1024x768 when connected to the projector, which makes everything on the board readable and everybody (apart from one... 🤬) happy and it snaps back to the proper resolution on the laptop when unplugged.

I thought the way Egress worked was that you only ever get a 'you have a new Egress message' email. The content of the 'message' is then viewed through the Egress site. So there is no 'other' email to search for or include.

Just a couple of thoughts... Maybe when the projector is on first, the gfx in the computer picks up the signal when it is started and negotiates a setting.... ...and when the computer is on first the graphics are unaware of the connection to the projector, so no negotiation (this may then happen when you press the auto/input/scan)... ...also, when the DDC is being passed between the monitor and the computer, duplicating the screen would duplicate the monitors settings to the projector (as no DDC on the run to/from the projector). Just interested to know if there is any GFX GUI panel on the computer and what it picks up (if anything) for dual display, maybe there is a panel fit/fill option in there?

Long shot, but is it somehow tied in with this thread...? https://www.edugeek.net/forums/topic/215527-windows-11-22h2-blocking-terminal/#comment-2000191 As in, do you have any SRP/Applocker policies at all in your OU? Originally I had heard you need separate policies for 10 and 11, then I heard it was OK to use the same... maybe there are now a few settings that require Windows 11 only ADMX files?

I'm guessing this is because Trellix detected NetSupport hooking into some Windows processes? iirc Sophos & Malwarebytes have been responsible for a couple of our programs going sideways... they were also fine for a long time and then one day something in the definitions must have changed and BAM! Maybe worth getting in contact with Trellix so they can tell you where to look to be 100% certain, there must be some sort of log or alert. I also seem to remember one of the programs that had files deleted, the vendors spoke to Sophos as there can be times where false positive detections can be coded into (or rather out of) the definition files, rather than using exclusions/workarounds.

Interesting, I only asked because iirc doing a SIMS update pretty much just involved logging on to the SIMS server, opening SOLUS and clicking 'deploy now'... and I wondered if somehow you were doing something different (maybe testing, or completing the updates on machines out of hours etc.).

As the title says... TL;DR - Are M365 web apps as good as office installed locally for things like Excel? Is the web version of Excel fully featured? Also does going M365 mean having to go OneDrive/Sharepoint? There is some talk here about Chromebooks and a fair amount of resistance from the Finance and Admin departments. Thing is, I'm guessing if we have to go hybrid (classroom staff/students on Chromebooks, office staff on OVS) I'm doubling my workload and if we go Chromebooks (all staff on Chromebooks and using M365 apps with OneDrive/Sharepoint for office staff) I'm doubling my workload... Don't tell me going Chromebooks is like halving my workload... maybe eventually, but initially there will be quite a change to our working practises... I am having to decide if we sign up to the legacy OVS-ES licensing or 'modern licensing', for 1 or 3 years and whether the full FTE or just the office staff. If I sign up to OVS for three years and go Chromebooks (either all staff or just classroom staff) halfway through year 1 (2 or 3) could I change the FTE or go 'modern'...?

Why?

At home we are both blessed and cursed. We have a lovely South facing garden, unfortunately next doors massive extension blocks the late afternoon/evening sun from most of it (although when we get to 30c plus we might be grateful for that)... made even taller by being 'stepped up' as the road we live on has a slight incline. Anyway, the house is a 1950s bungalow with a modest extension at the rear. The extension is reasonably modern (well compared to the age of the original bungalow), has a solid concrete slab floor, well insulated walls & flat roof and big South facing patio doors... it's warm! The other side of the house (the original bungalow, or 'North Wing' as we like to call it), has poor cavity and loft insulation, floor boards, smaller windows that get hardly any sun, big rooms and an open fireplace... it's cold! In Winter it was quite hard to heat, so we practically lived in the extension, but we've joked that when it gets hot this Summer, we'll be moving into the North Wing!

This is actually currently causing a 'heated' (sorry) debate in school at the moment. Having quite a few female teachers of a certain age, air-con (more just the heat of classrooms) is high on the agenda. We have most classrooms with South facing windows, working air-con in about two of them (and in a couple of offices). Most classroom windows have security hinges meaning they can only be opened a couple of inches at best...

I'm going round in circles with this, so just wondered if someone here could clarify... I'm looking for Google Gemini 'chat' history settings for Workspace, but can't seem to find any. I'm not bothered personally, but when testing before rolling out to staff I tried to delete a chat but there was no option. I've read that: "If you're using Gemini with a work or school Google Workspace account, your Gemini Apps activity is primarily controlled by your Google Workspace administrator. This means that you, as an individual user, may have limited or no ability to directly delete your chat history." Which seems to suggest that the 'administrator' has some control over this option, but then there's this: "Currently, if you use the Gemini web app or mobile app with your work or school account, your Gemini Apps Activity is turned on and your conversation history is retained for 18 months." Which is it?

Actually from what I remember I think it should... I often thought that before and wondered why.

Good shout! I remember taking the plunge and removing the S: drive mapping a couple of years ago and used the connect.ini, SIMS definitely still worked. EDIT: I did need to arrange alternative mappings for one or two staff members (in finance and admissions) that still needed access to sub folders on the share, though for the majority of users it was fine.

Are you using GPP in your user GPO for the drive mapping (as iirc 'update' and 'replace' are two different settings and do slightly different things)? I remember having some difficulty doing something similar with printer mappings when I changed our print server. From what I read I should just have been able to choose update or replace (can't remember which now), but for some reason it never seemed to work, or I got 2 (the old AND the new). In the end I put a delete (apply once) to apply first (higher order) and then a create. YMMV but this way you could see on a test machine in a separate policy test OU, if once the old S: drive has been deleted the new one applies. I've also had it where a setting was being overridden by a setting in another policy, so best if your test OU is completely clean. Strange that it seems to work if you force the gpupdate, so maybe for some reason the drive maps are taking a little longer than the log on (network issues/slow NIC on startup, other GPOs applying - do you have a wait for network GPO applied)? What about multiple log on/off attempts on an already booted machine, does it kick in then?

Thing is, I do know and that sort of figure is quoted a lot... but it's irrelevant to our eco-system, maybe a lot of techs dabble in Linux (but I wonder how many going for an average job would be as confident if the job description said 'we run Linux' compared to 'we run Windows'...? Has anyone done a vote on the most popular school server OS...?) and so we're not comparing like for like in the reality of our job role though. I mean if you're going to compare the figures, they probably include the hundreds of thousands of servers chugging away in hundreds of thousands of data centres, it's obvious they're going to be prevalent and yes, it's probably because they are good at that (see '1' below)... I don't know enough about it though for sure, because that's never been my job or something I'm remotely interested in, but I'd always presumed that a vast majority of those 'servers' are not a tower server sitting in a school cupboard, but are in fact: 1) Sitting in a data centre somewhere (running webservers, cloud infrastructure, apps, portals, etc.) 2) Looked after by Linux sysadmin teams. 3) Not running a local print server, SIMS SQL, a DC (AD/DHCP/DNS), a local file server (not to mention a vast assortment of other school software and systems that won't be able to run natively in Linux). Anyway you'd have to run Windows on top for all those services anyway wouldn't you (so in our job what are you gaining), that's the point. Although I know the 'cloud' this, 'direct print' that, 'Azure' blah, blah options, so you're not talking about a couple of hours work spinning up a Linux server and everything's rosy... it's a complete and total infrastructure change. What are the reasons to want to do that? EDIT: There are rarely 12 options of a piece of software a school uses, but if the school is using a popular closed source from one of the top 2 or 3 then I may have used it, or at least there will be a vast amount of easily accessible (and understandable) support on the web (especially on EDUGEEK). Also, at least if everything else in the estate/infrastructure is familiar then at least I don't have to worry about that. Backups are done with VEEAM (reverse incremental), so just spin that up and restore the files or the whole VM in DR cases I guess...?