Oaktech

16TB IoSafe DuoPro external HDD - plus an offsite online backup.

Tried removing the SSO and adding it again from within Bromcom System Users area?

I made a right nuisance of myself - got a few complaints to my manager about getting myself involved in things which the builders and consultants thought were outside of my remit, but ultimately got what I needed. I called people directly, demanded site plans, cable schedules and routes, things like that, jumped up and down when I realised they'd omitted wifi completely, put the data rack in the back of the outdoor bin-store & specced a non-voip telephone system at the time we could all see which way things were going, tried to hang a whole school of a single copper line when there was gig fibre in the road... The list goes on!

We've got one user who is a nightmare for this... She forgets her password every couple of days and leaves multiple machines logged in resulting in repeated lockouts, I'm using https://www.netwrix.com/account_lockout_examiner.html to track down the devices in question.

Push for everything new, negotiate back from there.

It's not nearly as slick, but you can look into building a referral URL with the Azure parameter &[email protected]

Just tried it on 4 different machines round the office - I'm not seeing that behaviour, one UAC prompt then a progress bar?

We have an intranet homepage and our gsuite dashboard link appends "&hd=yourdomain.com " to the end to prepopulate the login box with the school domain like you'd get on a chromebook. https://accounts.google.com/v3/signin/identifier?dsh=S-1408241232%3A1665044640819900&continue=https%3A%2F%2Fgsuite.google.com%2Fdashboard&flowEntry=ServiceLogin&flowName=GlifWebSignIn&followup=https%3A%2F%2Fgsuite.google.com%2Fdashboard&hd=yourdomain.com

I'm pretty sure that's not really a thing, further than the Google 'I regret this immediately' 20 second undo, and the Exchange, 'please can I have the message back, pretty please' options. Even if recalling every sent message was possible from every provider, what happens when a message is read faster than an error is realised? Are they expecting, the service to be able to erase people's memory of having read a message Men In Black style?

For minimum 20 Lenovo tablets - I know the model I want, I just need to know if anyone can get me a better price than the Lenovo direct store. Ta. Just the FYI - Either this sku: ZA6W0098GB or this sku: ZA6W0137GB Those specifically as we already have examples bundled with an app contract. The supplier is fussy about the devices the app runs on and we want to both expand the use of that particular app and also adopt another app school wide.

To avoid absolute chaos the public facing certificate needs to be externally verifiable, so just buy a cert... I sort of followed this guy's instructions, but only as a bit of a crutch. https://directaccess.richardhicks.com/2019/05/02/renew-directaccess-self-signed-certificates/ I bought a standard SSL Cert, applied this in the IP-HTTPS bit of the DA config - as he says in the article, if you use a self signed cert every remote device has to come in to have the config applied on site. Then I read the Powershell script in article to work out what PS command was being issued to renew the self signed cert for NLS $NlsCert = (Get-ChildItem -Path Cert:\LocalMachine\My\ | Where-Object Thumbprint -eq ((Get-RemoteAccess).NlsCertificate | Select-Object -ExpandProperty Thumbprint)) and then $NewCert = New-SelfSignedCertificate -CloneCert $NlsCert -CertStoreLocation 'Cert:\LocalMachine\My' and then applied it via the config wizard, because I like a GUI.

Seemed to resolve over night - only to be replaced with whatever is going on this morning!!

Anyone else having an issue connecting to Bromcom using Chrome today? I've been having reports of people sporadically unable to access Bromcom via Chrome all morning. We're just getting an 'err_empty_response' after about a minute of trying. Seems to be fine on Edge on the same machine! Machine and App restarts don't seem to make a difference

Speak to Evoke Tech in Hull... https://evoketech.co.uk/

That seems unlikely if others are working on the same machine. best do a resultant set of policy and see what's different.

Screams like a group membership missing to me...

TT itself should install to program files if you install off the MSI? We run two schools with a shared staff so they're constantly changing keys between the two anyway. Both keys are on a network share for admin/slt and on the enforced desktop for teaching staff.

Can you DM me with the model - one of my colleagues is looking for a little Kawasaki around that price!

I've got a 2 node 2012r2 HA cluster with SAN. I'm going to be changing the physical location of the switches that the cluster connects to in the next couple of weeks. Is there a way to just pause/stop the cluster from trying to fail over while we perform the maintenance? I don't want/need to actually shut the VM/Roles/Servers down.

add it in wsus?

But this is what I'm asking - are you saying I should still be deploying a client VPN to shield my general purpose internet traffic? I'm not connecting to anything other than a bunch of webservers? Like I said, I'm really not a cloud guy, I can't stand it, but I'm being forced down the route by my MAT and I'm trying to understand why my thinking that with entirely cloud native a VPN is redundant unless we are trying to shield general traffic?

But if you don't?

I'm not really a cloud guy, so I might be missing something... The solution we are pursuing is serverless, in as much as there are no dedicated servers for our cloud tenancy - Devices provisioned in intune, storage in onedrive & sharepoint, Uniflow Online cloud printing, authentication by AAD. Nothing to VPN into unless you are talking about a VPN simply to shield your traffic from the Internet?

I would say yes, based on the fact that so many schools are working towards being fully cloud based with 0 onsite servers to VPN into.

Sweet. I think it's tripped most of us up at some point!