Oaktech

We've just replaced a suite of 30 ancient iPad Minis with these: https://www.lenovo.com/gb/en/tablets/android-tablets/lenovo-tab-series/Lenovo-TB-8505/p/ZZITZTATB58 we have them on the basic Google MDM.

I think you don't have a central store set up. You are seeing policies suitable for your machine on your machine and policies suitable for the server, on the server. https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store You also don't need to manually edit the XML, you an create it on a test computer and export it directly. https://docs.microsoft.com/en-us/windows/configuration/customize-and-export-start-layout

Are you guys not aware of these? https://cpc.farnell.com/unbranded/avmulti-metalbox-7p/7-port-av-box-no-leads/dp/AV27386 Metal, downwards facing, flexible connectors, customisable connectivity, choose whatever length leads you want and cheap like the budgie.

@GrumbleDook... Your area of expertise I believe!

Lovely cup of Tea!

If it becomes ridiculous, go along with it but get it in writing that his dept will indemnify your dept against all failures, will arrange replacements out of his dept budget and will deal with the end users beating his door down when critical infrastructure inevitably begins to fail.

Absolutely not. I already turn endpoints off at the weekends and over holidays via Impero or script.

We don't ever mirror door panel windows, only windows and only after SLT have said yes...

Monty Python

All the time... I use this stuff: https://www.mdpsupplies.co.uk/glass-lightbox-films/onewaymirror But you'll also need app fluid: https://www.mdpsupplies.co.uk/sign-tools-accessories/signfluids the MFL0040 is what I use. I've done the Minibus, and loads of office windows as well as the IT suite windows both for security and to stop kids being idiots during the staggered playtimes. I also just do external window tints for DSE complaince so that blinds can be open for natural light but the users don't get dazzled!

Circle (The Biscuits)

We have an HR Restricted drive which contains all personnel records and we have a project scanning paper records into it. HoS, Business Manager and HR assistant are the only ones with access, HR Assistant also doesn't have access to the SLT folder within that. We're waiting for our MIS to implement a promised feature request of a bulk upload/download facility and then we'll start using that.

Worth checking that your 5406 is on the latest firmware. A couple of revisions ago there was an issue where a switch would reboot unexpectedly under a lower than normal CPU load.

We've been buying 2nd hand Legamaster screens of varying sizes from Evoke Tech. Perfectly happy with them for usability and performance. We don't need any of the frills of most manufacturers. We've had a few minor issues with the supply of remotes and of devices being different to expected, however, they've been *so cheap* I'm happy to keep buying them.

Whist drive

My 6yo has been nagging the hell out of me for a console. Unbeknownst to me, my wife is a reformed 90s console gamer, so we've bought second hand Nintendo Wii for Wii sports and Mario games, and a second hand Megadrive Mini with the 40 games included. We're playing the 'under 13' card hard for him wanting to to play fortnite/roblox/minecraft because a lot of his friends play those games with older siblings.

I can't see it happening, because, money.

Standardised wallpaper... Solid background, school colour with school logo in the right hand side lower 1/3rd. Get's changed for christmas to a redrawn version of the logo with a festive element. For example, one school's logo is 2 trees, one of those trees becomes a christmas tree. Lock/Login screens are also standardised with a school relevant image. One school gets changed every few months, the others stay the same until we get new promo images done and then it changes - realistically that's about every 2 years!

We had this... Updating to the latest version of Unifi helped, but didn't totally fix it - we had to set the following: DTIM is set to 3 in line with recommendations from Ubiquiti for modern devices. LAN details have been entered. Allow BSS transition with WNM switched on & PMF disabled. Enabled GTK rekeying every 3600 seconds. Been rock solid since. Have you got a backup of the Unifi config that you can spin up on a workstation just to make those changes?

needs the server deployment share FQDN I think not a drive designation. My MDT is building them just fine.

App seems to be working fine. Website not so much.

What you need is SCCM Software centre. Not free and the most closed-est of sources, but probably the competent solution.

Errors?

Oh Pandora, what a box you have opened... You can, but you are in the realms of needing your DHCP server network card to be untagged in one vlan and tagged in eleventy billion other vlans, or doing your DHCP on a router/utm/firewall. You need all your devices to all be able to tag their traffic, or you need to do a metric cr*p-tonne of switch config and massively limiting the flexibility of your switch estate. Way easier to do it on different scopes with different DHCP servers in each VLAN (again, something you can do on a good router or UTM) and just route between them at L3 either on a core switch or a router. You need to also consider what needs to see what. You can ACL your VLANS such that ingress/egress to a file server IP is allowed from multiple VLANS but not for other devices

There is no PXE. You have to create a task sequence media for either SCCM or MDT and boot off a stick and use a USB ethernet adapter. FN+F2 to enter bios Reset to setup mode or it won't boot off anything but the preinstalled OS, reset, FN+F12 to enter boot menu, boot off USB stick. Worth noting that the touchpad doesn't work in either the stock SCCM windows PE or in MDT LiteTouch. You can either DISM the drivers into the image or navigate with keyboard. You could also use a USB hub and an external mouse but I'm suspicious about the USB throughput with a hub.