Oaktech

I think you can access discounted Sophos via the various Grid For Learning organisations... However... Is adding the primaries to your SCCM an option? VPN them in, add trusts between domains, add boundaries in SCCM, publish SCCM sites to remote ADs, profit!

Fix the permissions, turn ABE on. Not being able to navigate UNC paths is a PITA, particularly for staff. If you Really must turn it off, then: User Configuration - Administrative Templates - Start Menu and Taskbar - Remove Run menu from Start Menu Option 3. But I really don't recommend it as it can have unforeseen consequences such as programs run from network locations failing to work correctly.

Just clear the profile field in the users AD entry and let windows get on with it. Oh, and stop redirecting appdata. That way madness lies.

I've gone local everywhere. Roaming breaks modern apps and mandatory is just a pita to set up. Gpo set to remove every 5 days on student devices and 30 on staff.

I've only just taken over this school, and it's a bit of a seat of the pants time as we've gone windows 10 and not installed anything back onto them. I've found Just2Easy which covers all the bases, but is slightly pricey. Waiting to see what the purse strings reckon. https://just2easy.com

One of my schools has gone to Win10 this summer and apparently they've written all their KS2 computing plans based on the use of TextEase. They have TextEase 2000 which is 32bit only and doesn't run. Has anyone got a KS2 friendly alternative for TextEase, particularly databases?

https://news.softpedia.com/news/windows-10-high-cpu-usage-fix-490908.shtml See if anything in there has an effect...

Also AdamJ CleanWsus script on autorun... I think he's started charging for it, but I've got a version. Personally I'd scrap everything and start again, last time I did one it took about 20 minutes to stand it up and about 2 hours to sync it.

Used the 24 port in an install in a religious college with 12APs, set it up and forgot about it. It's the only IT hardware on site apart from a managed router which also supplies a managed-hosted telephone system. The controller runs on one of their Azure VMs.

Serif directly. 👍🏻

i've just had a quote to replace the serif suite and they are suggesting a very reasonable £600 for a 3 site licence covering almost 1000 PCs at 3 schools. We will retire PagePlus and DrawPlus, but continue to use MoviePlus.

Not difficult... There is a blogger local to me who posts a lot of things on social media: including her house renovations, a picture in the corridor of her office, a view from her kids sailing club, a selfie in her favourite coffee shop, because I'm local I can casually recognise from those photos *exactly* where she lives, works and places she frequents. I'm not a weirdo and I'm not going to do anything with that information, but someone else might, and google streetview would let someone who wasn't local do it.

We block scratch online as we feel the unmoderated nature of the platform and the presence of gory games is an unacceptable safeguarding risk. Download the desktop version, extract it, plonk the whole lot in a network drive, give the students read to the location, make a shortcut, give them the shortcut run it locally.

I think so, I'll check. I've done so many reg hacks I've lost track. Bad IT manager not documenting stuff!

We gave up with the UNC thing and just turned on ABE so if it's not yours, you can't see it.

I think you need to get the Solidworks file exported in something else... Depending on the content of the file that may not even be possible as there may be geometry that Techsoft isn't capable of rendering!

Do you know what the locked features are? We have 11.4 everywhere for ease of deployment, but we have a subscription licence for Smart 16 that only covers approximately 1/3 of our displays (No, I don't know why my predecessor thought that was a good idea either) We are a completely smart school so if we can use 19 for free that would solve a massive headache.

Mainly cons, pros only for devices that are likely to be hotdesked... I disable it for student devices and classroom PCs. Leave it for offices https://www.technipages.com/windows-10-enable-or-disable-fast-user-switching

Can you click through to the 'owner' tab and see what that says?

I meant that the redirection is not in place at the client device, because it's failed, if you clear the error, right click on documents and then go to location for a non working user, I'll bet the location says C:\users Is the working user being redirected from the same GPO? I'm just thinking about a random scope issue? Adding domain computers read to the permissions of the GPO sometimes helps with random issues like this. Let me have a think about it.

your restriction error is because the redirection is not in place and you've rightly restricted access to the C drive which is the fall back location (C:\users). Have you set the homedrive location in AD? That usually creates the folders with the right permissions but you need to do that before you start seriously using the redirection as it overwrites permissions that are there. What do the permissions actually look like? can you screen shot and blank out the advanced permission panel?

We've been using these - https://www.amazon.com/Lenovo-Touchscreen-Quad-core-Processor-Bluetooth/dp/B01MAU8TS2 We bought 50 of them from Argos of all places when they had them on offer for £85! They've been bullet proof and there is an official update to 8.0 and a semi official rom available to bring them up to android 9. We use an app that requires a Qualcomm processor.

Desktops are in every classroom, they aren't issued, they're basically furniture. We issue a camera. We issue a basic android device to those that want them, not everyone does. We have RDP so people are encouraged to access that at home on their own devices and we remove the ability to redirect local anything into the session. We issue laptops to staff only under protest and those laptops function under DirectAccess.

I'd love them to rewrite the UI. It puts me off way more than the name.

Sometimes - it was the case with a Xerox machine I played with the other day - you need to go through the advanced page of the driver on the server and ask it to detect/specify the capabilities of the device and then for all users connecting to the device it knows what is available.