Oaktech

Safety Culture iAuditor here for compliance with Parago for asset management, contracts and document signing but we're working towards a more integrated CAFM system. Parago has been pretty good for us and I've used it through 3 jobs since it was released but the sale to Civica has seen it become more expensive and development certainly has slowed down. I had very few dealings with support since it became Civica.

Yup... I've had stacking issues with Extreme, Black Ice and Netgear that have required vendor intervention, but I've never an LACP issue that I couldn't attribute to an easily correctible misconfiguration! Hard Agree!

I agree it does seem excessive, but the main advantage of a dedicated loneworking app is things like realtime location, enforced check-in intervals & motion detection where it works out if you've fallen, haven't moved for a while or have suddenly started running and can alert those things without interaction. Life360 doesn't really have those things. The crash detection works for big impacts and might trigger if you say, fell off a ladder, but wouldn't for a fall from standing and doesn't do sudden running or excessive stillness. The SOS on Life360 is also a manual interaction.

^^ This. Stacking has caused me far more problems than Link Agg and STP.

At it's most basic, have an an admin account and personal account for each person and tie the admin account down to lowest practical priviliges. Restrict the devices that can connect adminsitratively to a server and try to run as many tools as possible remotely.

Two sites have a protocol: On site with few others, such as in the holidays: We all use PMR radios and we have designated check in times and we let each other know when we move - if you miss check in, somebody comes to find you. The radios have SOS buttons as well which notify all other radios On site fully lone working: You inform the BM or the Site Manager when you arrive and leave, where you're working, if you move and by text every hour. One site uses Hytera radios which have a man-down function and lone working functions - the radios have fall detection built in and the site manager and BM are notified either on their own radio or to their mobile if they're off site. The lone working function sends a tone to the radio at a set time (ours is 30 minutes but can be anywhere between 5 minutes and 4 hours) which you have to confirm by pressing the PTT button within a set time (ours is a minute but it can be anything between 5 seconds and 2 minutes) otherwise all radios are alerted to a man down as are anyone using the Unified Comms app. The Hytera system is frankly outstanding, but is eyewateringly expensive and we only have it because we are being used as an all-singing-all-dancing case study for a supplier.

I've used this article to achieve what I needed to which was pinning edge, unpinning store and pinning the m365 app. https://learn.microsoft.com/en-us/windows/configuration/taskbar/pinned-apps?tabs=intune&pivots=windows-11

One of my schools has a paid site-licence for the Affinity V1 suite (they didn't want to have the faff of signing in to the software). Because we have that existing relationship I went in via [email protected] for my other school that wanted the V2 softwareand they liased with their parent company on our behalf to get the free Canva/Affinity SSO sorted out.

USB 3 or C? I'm using HP USB C dock G4 or Dell D3100 USB 3 all on refurb deals.

We whitelist specific URLS for Ruth Miskin and Whiterose. General access is not allowed.

I'm using headfoams from Amazon. We've got over 250 of them, some are 5 years old and we have had 1 or 2 breakages of cords which have been repaired.

My son's school has just done it and it seemed to go fairly smoothly. I talk to their IT on the regular because my 9yo Son likes to, err, push boundaries. They've reported that the biggest issue they had was bulk exporting/importing things like attendance comments. From a parent point of view they are a 4 school primary MAT where all 4 schools are geographically quite close and it required special configuration from Arbor to allow for the possibility to have a single point of contact to have one or more children in each school in the MAT.

I've seen this before but I can't 100% remember what it was - possibly a rogue driver version on windows update.

This ^^ We also display the safeguarding team, first aiders in public areas and in employee areas additional H&S information.

I use Google Keep for my own notes but MS ToDo for work stuff.

Seeems particularly bad trying to access registers.

Yup... I'm running A few different version of the HP Elitedesk with Intel versions from 8th to 11th, they've all updated fine fine but one of my other schools I've got a mix of 5060 SFF and 3080 Tiny, the 3080 Tiny have all refused to update because whilst they are fully compatible, the stock codebase does not appear to include the required Intel storage driver. I've had to slipstream the driver off the Dell website into an image using DISM and then in-place upgrade them manually.

Our ALP we used our cast off PCs and ebay monitors and treated them as disposable. We bought stainless vandal proof keyboards with built in trackballs and attached them to the desks. Laptops were only for staff and were not to be taken out of the offices. Tablets were £80 off aliexpress in otterbox style cases and again, were essentially disposable. Initially everything was attached to our main school domain but eventually we spun them off into their own intune domain where they could mess with each others work without affecting the main school. Heavy use of Impero in that unit.

Can you script the install of whatever app you want using winget?

Look carefully at InVentry's feature list and unless you are going to be using all of it, steer clear. We're moving to SigninApp for 2 of my 3 schools. One is retaining it because of it's Paxton integration.

No errors across my 3 schools that are using it.

Our staff don't recycle student work year to year enough for it to make it easier in the long run. It's always reflected on and changed to try to work better.

We are taking broadly the same approach, with broadly the same results as @taz Our Bromcom has the AI feature disabled by our MAT. The only thing the staff have trialled over and above what has been mentioned is the auto marking in Teams and the general feeling is that it takes longer to define the rubrik and mark scheme properly than to to just mark the work conventionally.

Consider whitelisting msftncsi.com and msftconnecttest.com and ensuring your network can ping these addresses - the PCs will be communicating with them via ICMP rather than HTTP and you may need to enable something ICMP related.

We used to have this with our old Aruba setup until we went round an tuned the RSSI settings better.