Boredguy

We've ensured all our laptops that go offsite, be it by staff or students, have same level of filtering at home as they do in school. During covid we did this by making sure all the laptops had Forced User Tunnel configured for our AoVPN we setup so all web traffic came back to school before hitting the school ISP and filter. These days we just configure them for Device level AoVPN as our web filter now has a browser based extension instead of relying on proxy addresses. We also have Impero on all the devices so it's monitoring content that way and ether reporting back in real time (joys of the VPN) or uploading the data when the device comes back in school.

At most you should setup a static IP on your range, with the upstream DNS servers so you can plug your laptop straight into the router to do a speed test to ensure it's not your network side (which we know is unlikely to be the case). This was their advice on your OP, so not sure why you need to setup a ppoe connection

I like being called Someone

Yes this is a minor niggle with Wonde, as we've had it recently at a few sites in the Trust, but normally Wonde is quick to send out an e-mail to the Admin accounts listed for the sites to say there is no data being pulled through and to check the services.

We backup our entire 365 cloud data through the Barracuda C2C solution. Works nicely overall, the interface could be faster but they have made improvements. It also backs up your Entra info as well.

When I proved the issue for Support, I took a laptop that I gave static IP details to and connected directly in to the router port to do a speed test, as at one point hey were trying to suggest it could be caused by switch infrastructure (brand new Unifi kit), even though we had identical setup at multiple other sites with no speed cap. I did the speed test via the laptop at end of day so that disruption was only for a couple of minutes. You could try this on port 0/0/2 as per your OP, just not with the server as thats not really ideal.

We didn't bother with any L3 routing at the sites, as most of our vLans are just for CCTV or BYoD traffic (which we NAT using Opnsense before it goes to our router)

Our "Core" switch at several sites now consists of a Unifi 32 port Aggregation switch for the fibre links and at least a single Unifi 48 Port Pro Switch which has a lag back to the Agg switch to give between 10-40Gb depending on our requirements. As we have the Unifi OS Server setup, we've also got several of our school sites configured within it so management is easier. Certainly works out cheaper (and lighter) than the HP 5xxx units but maybe not as compact depending on how many ports you need

I've picked up some Startech Display port to dual HDMI splitters so that the 2nd monitor and board are cloned. The onboard GPU struggled when I tried to get it natively to have extended desktop and clone display 3 from display 2 which was part of the extended. This way PC just does extended and hardware does the rest... will find out if it works well after the half term.

Yep ask them in the support call to remove the QoS cap for the vLans on your circuit

Do you have 2 IP ranges available for your site @ICT_GUY? I found that when we had our new backup line installed in the summer, RM engineers decided to set a throttle on our router config so 50% of our bandwidth was only available on each of our 2 ranges to "save bottlenecking". Took a few weeks of them "checking" and trying to claim it might be the Telco til they noticed the limit and reset it so we get 100% capacity on both ranges but they can't exceed our line speed (which isn't an issue as we use the 2nd range purely for BYoD traffic and limit the network card on the internal NAT to be 100Mb :D)

Alas the C series remote doesn't have any colour buttons. soo tempted to see if there is away to get them to try and add an update to firmware so that a remote button could be reassigned to that feature, but doubt that is possible, but for £600 for a 65" board, our staff just have to press menu and scroll down, or we put in dual monitors so the board screen is cloned so they can have content on the other screen instead of freezing (which is what we had to do for a couple of rooms since Sept since the firmware only came out in March with Freeze)

As I mentioned earlier, we've got several of the C Series and they work nicely as interactive displays. Pen it comes with is fine to use if you don't want to write with your finger. Only negative aspect is lack of freeze button on remote so you have to go via the menu to access it. Touching the board unfreezes it.

I liked the ViewSonic IFP65G1 and others in it's range, but price for them has increased recently. They don't have any onboard computer so no OPS to worry about. We've been putting up Newline C series and other than the minor issue of the remote control not having a freeze button (and until a recent firmware update a freeze function at all) they aren't too bad. PWD had them on discount recently so we picked up quite a few for the trust to use over several of our sites.

We're using the HR Assist to get absence data from SAM into SIMS, and from the amount of blue language coming from our Cover Managers office it's not been smooth sailing. We had PPG involved to update the version of HR Assist to get it to work without constant crashing (now on version 2.2, and app still thinks the "latest" is 1.6 every time it runs so thats quality programming!) Hopefully when it does work for you, doesn't result in staff with multiple active contacts (such as a lunch duty) getting reported as double the absence when off for a day like we've had, which had impacted pension contrubutions

When you say us, do you mean the IT Team's own stationary, or the school stationary? If it's just for your department, then you have YPO, but your finance person should be able to let you know whom the school has existing accounts with (Would have said Consortium, but RM shut that down the other year) Now if it's for the entire school. then I echo the comments above and decline and sent it back to the finance/admin staff as it's not an IT job just because it involves looking up information on a website.

*mutters something about having all of the B5 music by Christopher Franke already on MP3*

For us it comes down to the autopilotConfiguration JSON file that we inject onto our devices as we install them to say if they are Hybrid join or Entra Join (full Azure) only when building with MDT, but should be the same for OSDCloud, as you need to provide the file so it knows the tenancy. Then as long as it's matching your Domain Join policy in Intune to say where to store the computer in OU it should be ok providing the device with the Intune agent can add stations to the domain happily still

We use Opnsense, but it's just for doing the DHCP, DNS and Firewall rules

So if you go to your Hotspot configuration page, do you have your server IP address listed in the Authorization Access -> Pre-Authorization Allowances section? I have a dedicated DHCP server for my BYoD devices on vLan 80 with a 172.x.x.x range. My Unifi controller is sat on vLan 1 with a 10.x.x.x range. In the Pre-Authorization allowance I've got my 10.1.2.3/32 address of the server entered there and page loads fine. I've also got the externally accessible IP address listed since I'm running Unifi Server OS and got a few of our primary schools setup as dedicated sites within the same server

Strange since I have my Unifi OS controller on a different vLan than my BYOD devices and they get the captive portal happily. I assume you remembered to put the IP address of the server in the pre-approved list on the Unifi Hotspot page?

MTO is mainly for users to access resources, so having power flow to go to a different tenancy should be possible as long as the account it's run under has access in the first place. All our finance staff either have a Trust e-mail account which is all on one tenancy, or they use their normal school one and pass the resources over Teams or straight into the finance system which is cloud based anyway for us

Pushed it out to devices here, so will see what happens. Will be nice to get some of the apps off the 25H2 devices, as not been doing a clean up during install since we switched over to Intune builds

Only users we've had a drive mapped in SIMS for the better part of a decade is exams and admissions officers. Rest of the staff don't need it as that was a legacy requirement before solus. Our Connect.ini file we also use IP address of the server

When you launch the very old looking client, it will try prompt to do a sync with SIMS so as to update the information, but appears to be the only way it synchronises. Would be easier if it was via Wonde as at least it the web version could then always be used.