Oaktech

It's in our MIS...

Yup PSShutdown here, again, on a schedule. 0 Touch. We do the whole site. Every single non critical machine. Off at either 1630 for student machines or 1900 for staff machines. On at 0730 for staff machines and 0845 for student ones. Obviously this depends on wired connections for WOL.

Check your DNS SRV records for KMS. I've had this happen on 1803 and discovered 2 rogue KMS servers in DNS!

Have you done an adprep? "To install the first DC that runs Windows Server 2016 in an existing domain and forest, the machine where you run the installation needs connectivity to the schema master in order to run adprep /forestprep and the infrastructure master in order to run adprep /domainprep."

Correcting constant to consent and adding sihost to exclusions seems to have brought the login time on a wired client down to a consistent 20-30 seconds from anywhere between a minute and 5 minutes. Thanks everyone...

I'm seeing the same thing - I haven't got that technical, I just blitzed my cache in chrome for another problem and incidentally noticed the ticker came back working as expected for a few days. Now stuck again!

Does the delete action in GPP printers not clear them out?

Have you disabled hybrid sleep/fast start? That screws up everything as it puts the machine into a state that very few NICs can restore from. https://www.windowscentral.com/how-disable-windows-10-fast-startup

Ok, last call for people who want a lift from the Poole/Bournemouth area... I have Witch and Oracle, any more for any more? If I only have 2 passengers I'll bring the car, if I get any more then I'll borrow the people carrier. My plan is to get to Salisbury around 11:45, most people seem to be arriving on the train a bit later, but hey, I'm sure we can all 'network' for a bit! Probably leaving from Poole about 10:30 and picking up en-route,

It's pretty standard Prodigy. Nothing to write home about. I'll need to try some more from the stream to make my mind up...

Literally a handful of websites that we need IE for - mainly for ActiveX. We deploy chrome and set as default for students with a associations XML. Staff are free to choose defaults.

The labels are removed from each child by staff as they leave site, and the only people who know what each colour of dot means are staff. Apparently there were other colours of dot for other things too, but I didn't need to know so I didn't get told and I still don't know what they stand for.

That was the *old* plan... Current plan is picnic in the cathedral close or in the Office if it heaves it down.

@Dos_Box ?

I'm not finding a setting that seems to control this... I wonder if it's because I don't redirect my appdata to the network, it's local here and is therefore caught by the 'restrict access to C drive' policy. I've found all manner of weirdness redirecting appdata so I stopped doing it. Are they all redirected to the same appdata folder?

I'm mainly 1703, but I've just tried it on 1709 and I still have the restricted behaviour. I'll have a look and see if I can see what setting is doing it!

What version of 10 is this? I don't get that behaviour - I get the good old "This operation has been cancelled due to restrictions in effect on this computer" message?

I've had to remove the group policy cache on some machines to make it update - delete the contents of c:\windows\system32\grouppolicy folder and then reboot.

It's an interesting point that I'm going to bring up with my webdeveloper as we're getting a new website right now. We have a contact page, so that may be an issue. We have both staff and parent links pages, but all the links off are to thirdparty sites with their own SSL.

Separate consent form in the transition pack. All kids have sticky name labels as they arrive they then have a red dot sticker on the name label if they are no photo and a yellow dot if there is medical information about them with first aid.

I'm going to lay money on 2+ DNS servers. One not replicating correctly to the other and then the other replicating back and the net effect being a reversion. Run: dcdiag /test:dns /v /s: DCNAME /DnsBasic and see if any weirdness is reported.

You can block shopping and travel as categories in Lightspeed which catches the vast majority of well known ones. We also block major airlines manually. It's not perfect, but it's enough.

FTFY

We block for students, we allow it for staff, coz, work-life balance. Safeguarding was not our primary concern in a Junior school, but stopping year 6 students wasting multiple lessons seeing who could put together the most expensive holiday was.

I do ballast's and PSUs myself as I have the equipment to test it and I don't have to interrupt the optical path to do it!