Boredguy

We bought 2 refub units recently from ICT Direct. No problem at all with it as it comes with 3 year warranty and with a shoe string budget paying less than £1k for a quite powerful server that was a few years old compared to over £3k for a brand new kit makes sense.

For laptops that were provided from the LA to named students, they will keep them until they leave. For laptops that were provided directly to us as a MAT, students were told they would have them until at least March 2021 (when the DfE web filtering expired) unless we requested them in sooner to reinstall them. We have no plans to take them from the students that currently have them to give to others if we have another lockdown.

So are you wanting to delete the recording before the 21 days is up? There doesn't appear to be anyway to do that, same as there isn't anything visible to remove a previous meeting from the channel. Certainly the fact that a recording won't go for 21 days is fine by us as all staff have to record any meeting with a student present, and it means they can wait to move it to MS Stream til they have free time.

Information taken from Office 365 message ID MC218985 Updated August 27, 2020: We are pleased to announce that this feature has completed rolling out and is available in your organization as applicable. For customers with Office 365 A1 and A1 Plus licenses, Teams meeting recordings will no longer automatically upload to Microsoft Stream effective August 20, 2020. Key points Timing: August 20, 2020 Roll-out: tenant level Control type: user control Action: review and assess How this will affect your organization This change is expected to last through the end of 2020, and Microsoft will provide updates for further changes. Meetings recorded before August 20 are not affected by this change. Following this change, your end users will continue to be able to record Teams meetings. To playback the meeting recording, participants will need to download the file from the chat window. To share or archive a recording, meeting participants will need to download the file and then upload it to Teams, Stream, SharePoint, or OneDrive. Meeting recordings will be available in the meeting chat for a period of 21 days after the meeting. After 21 days, the meeting recordings will no longer be available for download from the chat.

This was in the MS information back in August that on the 20th Aug it would not automatically be saving to Stream but it will stay in the users history for 20 days so they can download the file and then upload it. Can understand why as lots of resources were being used by people recording a meeting that might not have been needed.

It is most likely a web filter that is causing the issue rather than a port issue on the firewall. As Chazzy2501 said, if you have a option on with your filtering provider to use a NonSSL proxy, that might be best, otherwise you will need to work out how to get your MitM certificate installed onto the Pi.

@Linfit it actually turned out to be quite simple using the resources from the site I referenced earlier as it turns out there is Powershell scripts included for adding the certificate to RDS. Create a batch file in the same folder as the wacs.exe file, and if you have a all in 1 instance with IIS, RD Gateway, Broker etc, you can call the following, or just change it to be the PS file that you want wacs.exe --target iis --siteid 1 --certificatestore My --installation iis,script --script "Scripts\ImportRDSFull.ps1" --scriptparameters "{CertThumbprint}"

I used the tool from https://www.win-acme.com/ to generate our LetsEncrypt certificates on both our web host and tried it for our RDP gateway which has FQDN (which is set in IIS, local server name/domain does not matter)

Maybe @mikeprice was giving them punctuation tips Watched a youTube video from the LockPickingLawer yesterday, and he had a lock package that had misprinted to say that the state of California causes cancer

Your "remote" subdomain is setup in the public accessible DNS? I found when trying to set it up on a backup server the other week, that unless the server IP and domain name were the same as the public record it gave a similar error. When I tried to setup a certificate on our RDS Gateway, the LetsEncrypt one was not able to be selected within RDS, but was fine for the website.

It came from the old Becta guidance that e-mail accounts should not be identifiable with students names, but that quango was shut down a decade ago, back when e-mail accounts were not used for anything really other than sending messages

There is meant to be an app available via the RM unify portal where you could "sign in" to get different filtering other than the default, but as it required devices to not be behind a NAT it's not something I looked any further into

Other than Security Settings for applying changes to the Audit Policy, User Rights Assignment for some of the accounts, we don't have anything else set in our default Domain Controllers Policy. And most of those settings are donkeys years old as it started off as a Windows 2000 domain controller policy.

For that load, your fine with the SQL on the same box. If you put the SQL on a different box you would need to ensure you have the additional licence for it, as the SCEM/SCCM server licence only provides for the SQL server to be on the same box as the SCEM/SCCM server. We have the SCCM and WDS running from the same DB for over 400 workstations with no issues

E-mailing via our SMTP Office relay on SWGfL seems fine. We do have a local SMTP relay that then connects to the Office365 one via 587 instead of each device connecting directly to Office

Yes I had similar fun looking for a reader for our release stations, in the end got a Paxton 214-326 Desktop Reader and Keyboard. Hope you find a way to get the 5422 to work for you, otherwise you might need another reader =/

Won't you run into a problem then @jhothersall as the information we have is that you need to have Summer 2020 installed before exam results day?

Our staff are expected to clean the keyboard, mouse etc before use with the provided wipes which meet the correct alcohol level. Students are in hubs so not much of a worry with their devices as they are in a "bubble" and the devices in rooms where bubbles will mix should be getting cleaned by the site team. As the virus can live on some surfaces more than long enough for you to pick it up on your hands, and then rub your face, that is a transmission source hence all the "wash your hands" and other such guidance for the last 4 months.

You can log off of the LocalUser account just as normal, however the full information on steps is available via https://get-help-with-tech.education.gov.uk/devices/preparing-microsoft-windows-laptops-and-tablets as you will likely need to wipe them as they are part of the DfE InTune network and include web filtering through to March 2021

please see my reply to your post on the same query Laptops for Students with a Social Worker

@Shan_uk it depends. If you are the named contact for your Academy you can contact XMA with the serial number and they can provide the passwords if they came via that part of the scheme. If they are provided direct from the LA for students who fall under their umbrella of reasons (Looked after, has social worker etc) then it entirely depends on the LA. Our local one happily provided us details even though technically they are not school property. Other LA's refuse to provide it and instead will be dealing with issues.

All our server licences have downgrade rights iirc, and sure thats the same for 2019 but it's the first one we're getting via OVS as we've typically gone via Select (just didn't give me SA like OVS does now)

Well my estimate is based off our current quotes we had which was for a 16 Core licence for the £50ish mark on OVS for 2019

Well the Hyper-V is the easy question, as the hypervisor itself is free, you just need the licence for the VM's as normal. For everything else, based off the information previously we've previously had in our Select agreement (which most of our server licences were through), 1 standard windows licence allows 2 VM's if on the same host, and at a certain point it makes sense to go to the Datacentre. So Host01 which has 4 VM's needs at least 2 Standard Windows Licence suitable for the version running (2019 should still give downgrade rights, and on OVS-EES they were under £50 each as a ball park) So for the VM's you need at least 7 standard licences, plus the 5 for the physical servers. Now if your Hyper-V's had more VM's each, then datacentre would make sense

Assigning licences can done via the Azure portion of Office 365 (https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Licenses) and lets you use synchronised AD groups.