Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Boredguy

Members
 View Profile  See their activity

  • Posts

    4,103

  • Joined

  • Last visited

 Content Type 

Everything posted by Boredguy

  1. Boredguy

    Vlans

    Boredguy replied to kevin_lane's topic in Wired Networks

    Don't forget that if you do separate out pupil and staff devices, that if you have classroom management software to make sure that it works over the vlans as otherwise it's a bit useless. Whether you need to ensure the server or the specific teacher workstation is configured for each vlan could depend on the system you are using
  2. Boredguy
    That now makes perfect sense for you
  3. Boredguy
    Yep you need the https://github.com/DeploymentResearch/DRFiles/blob/master/Scripts/FixUEFIDetection.wsf script added to your task sequence to fix it
  4. Boredguy
    Well other than the person in the same office as him in a few hours maybe
  5. Boredguy
    We moved away from BGInfo a while ago and instead do it all via Powershell scripts https://github.com/DJ-1701/GenerateWallpaper is what we have been using in it's place
  6. Boredguy
    Can't remember it being too bad, I followed the steps to set it up in Azure, then give the Data manger the nod to enable it in Satchel and that was it as long as the SIMS record had the students e-mail as their Work one (which we'd been doing anyway)
  7. Boredguy
    But we only need 5a fuses or in a pinch a someone's wedding ring.
  8. Boredguy

    Vlans

    Boredguy replied to kevin_lane's topic in Wired Networks

    Thought that was a requirement if it was student personal devices and not school own devices, or certainly that was how I read the in and out of scope details. I took the easy route years ago and all personal devices are on a dedicated vLan with a completely different IP range and behind a NAT box that via a 2nd vlan then lets them out to our secondary ip range on the router (oh and the Wifi also isolates clients from each other just for more safety)
  9. Boredguy

    Vlans

    Boredguy replied to kevin_lane's topic in Wired Networks

    First major question, and one I'm sure you've already got covered is do you have a Layer 3 on your core switch to allow routing between the vLans, or were you just wanting to stick with layer 2 with no communication between them. If you have Layer 3, then as some have suggested (and depending on the layout of your site) you might want to look at also creating vLans for different buildings/cabinet locations to reduce the domain collisions. We have dedicated vLans for CCTV, VOIP (when we get round to upgrading the phones), ByOD WiFi, VPN as well as the main network.
  10. Boredguy

    Vlans

    Boredguy replied to kevin_lane's topic in Wired Networks

    It depends what they are classing as staff/pupil devices. If it's workstations then there is no reason why you would want to have them in different vLans as it should be a case that a member of staff can logon to any workstation to get work done, and the same with a student. If it's 1:1 laptops, or ByOD then not being able to communicate is a valid reason. Don't forget of course that some of the classroom management solutions in use might require access between staff/student station if it does not all go via a server so it does depend on each sites requirement
  11. Boredguy
    There was nothing requiring us to filter the laptops offsite, however it is good practice where possible for peace of mind of your equipment over anything else. If the DfE laptops not had the Cisco umbrella filtering configured, then it's likely we would have continued to ensure the onus on the device not accessing unsuitable content was still with the parents as it had been in the past since we are not responsible for providing an internet connection.
  12. Boredguy
    Can I suggest checking out this handy blog post by @Katy which might help you? https://katystech.blog/2018/07/office-365-mailto-link-handler/
  13. Boredguy
    Most of our DfE managed laptops are back in, just not gotten round to reinstalling them yet since they will not be needed until after Summer at this rate.
  14. Boredguy
    Would would think MS could create a set of permissions just for managing licences for the CSP scheme instead of global admin if that was the requirement
  15. Boredguy
    The ones in your OP are needed to allow Solus to communicate with the clients (and vice versa), the SQL/Docstorage ones are needed for SIMS.net to function
  16. Boredguy
    Don't forget you need to make sure that the SQL server is allowed to have traffic in and out of the firewall, as the exceptions above are purely for Solus3 We have 8080 allowed for the DocumentStore and 49295 for the SQL (both TCP)
  17. Boredguy
    Can't say we've had any driver issues like that over the years, but most can also be adjusted via Powershell if required. Having a single WIM is easier to maintain when it comes to new releases of the OS coming out compared to multiple golden images per different collection of hardware, and with lots of machines a standard deployment method can be simpler.
  18. Boredguy
    Going down the WDS/MDT with lite touch is better than using something like Acronis as it's already part of your Server installation and will let you just use a standard Windows 10 WIM image with a driver repository, and saves on re-arm commands and such forth. You can make it as simple or as complex as you like (we use a DB with out setup so once we've added the MAC address into the system and a few other details like Task sequence, it's F12 and forget) If you have MECM/SCCM available, then that is also a valid option as it will also allow you to deploy the windows updates and applications.
  19. Boredguy
    Your always free to shout for help here, heck if you want to chip into the puns thread at any time I'm sure you'll be more than welcome as well.
  20. Boredguy
    Guess it depends if you request the test via the app (which then knows to assign the details to your random code), or if you ordered it via another method in which case it has no idea who you are as the app is anonymous remember.
  21. Boredguy
    no additional firewall rules on your router or is it all controlled by your lightspeed filter?
  22. Boredguy
    Each of those different applications uses different ports, and honestly it's not something you would normally want to look at opening up unless you were in a boarding school situation. If it was purely for personal devices and nothing school owned (which has it's own licencing implications for the platforms mentioned) then you'd be best off setting up a dedicated vLan purely for that purpose.
  23. Boredguy
    In AD Users and Computers, if you highlight all the users within the OU and go to properties. Click on the Account tab. Tick the "UPN Suffix" box and select the new suffix you want to use. Click OK New user accounts that you set this to as you create them, will automatically have that e-mail domain if it matches the value in the e-mail field. Likewise if your e-mail address is in the format of Username@domain, you can use the same method to update the e-mail field using the value %username%@domainname You might find that existing accounts might need the following powershell command run to update the login details, so check with a couple of accounts first (certainly I need to do this step when renaming accounts) Set-MsolUserPrincipalName -UserPrincipalName [email protected] -NewUserPrincipalName [email protected]
  24. Boredguy
    Considering his workplace is only about 6 miles from me (according to the location map we have on the Edugeek Discord) it's easy to forget as he's often so quiet
  25. Boredguy
    In AD Domains and Trusts, click on the "Active Directory Domains and Trust" node and go to Properties and add a new UPN suffix for your domain Our network domain is currently .internal (legacy of the old RM CC3 days), so we added our .sch.uk domain there For users when we create them, we select the .sch.uk suffix when creating them, and you can easily select a batch of users and update them in bulk via the GUI. It does not affect the workstation logon
×
×
  • Create New...