slugshead

Blast from the past, this is how we used to do it in Windows XP days, then con2prt came around

AS above, it's built in via GPO. Add a line at the end that says "By Proceeding to log in, you are agreeing the schools Acceptable Usage Policy" done.

Yealkink handsets and BT's hosted voice, through a reseller. Been bombproof 3CX for on prem weird SIP stuff for integration purposes (alarms etc)

"look mister head master sir, all these laptops failed the electrical testing. Our students use laptops extensively for their studies, due to the failure can I have some money to replace them, thanks"

I bet you do with those license costs

We're currently a Ruckus house, Aruba/Ruckus are both on the cards for the site wide replacement next year. It's going to come down to cost. I'd stay away from Ubiquiti though, they don't give me a good vibe. Especially with their data breach back in January, which they downplayed big time.

I'd love to turn off restricted C drive to turn on onedrive for staff. But I don't trust NTFS,UAC or applocker enough to do that just yet. I still feel like I'm missing something

I had a real pain removing ProxyAddresses last week (Had like 6 for every user). Since we don't use exchange for our email anymore they were unneeded. It's a similar situation too you though, I had on prem AD synced to azure. Our email addresses in AD profiles are at a different domain, but I needed them to be @correct domain. Two stages, one was updating the mail field in AD users and resyncing and then removing all of the ProxyAddresses field. Update the mail field with UPN - This was across all user objects mind Get-ADUser -LDAPFilter '(userPrincipalName=*)' ` -Properties userPrincipalName,mail | Select-Object * | ` ForEach-Object { Set-ADObject -Identity ` $_.DistinguishedName -Replace ` @{mail=$($_.userPrincipalName)} } Clear proxyAddresses by OU Get-ADUser -Filter * -SearchScope Subtree -SearchBase “OU= DC=” -Properties proxyaddresses | Set-ADUser -Clear proxyaddresses

Sounds similar to our setup.. G suite sync didn't work for us when we signed up to G-Suite many moons ago (Different domain names/email format to user name) and the manual process isn't so bad, it's just a CSV upload. I share your frustration though, would be nice to have everything sync'd with azure and use that as SSO. Click bulk add, download the template, paste your user details in and upload it, job done. In fact I've done our 2021 intake this afternoon, G-Suite user provisioning was the quickest part, download template, paste, upload, auto license, done.

We have spares at the ready and a big box of all the odd components thrown in, we'll be able to make a few complete kits eventually

Got ours on a lease direct from Ricoh, nobody could match it let alone beat it!

In answer to your question, use your trusted data guys and run Cat6 from the desk to the stage. Also get some data points back to your network cab at the desk location and down on the stage (Future proof!) Little bit extra to do with your project Allen and Heath SQ5 or SQ7 as the desk hands down. you've then got two options for your stage - 1, Direct Cat5e/6 to the stage and connect something like an AR2412 (24 in 12 out). This is wired direct from mixer to stage, job done. 2, DANTE card in the desk, then a DANTE compatible stage box like the DT168 (16 in and 8 out). This offers flexibility, the DANTE connectors are plugged into your network and the audio will go through multiple switches, it offers a lot more flexibility and is a little more expensive. Doing it over DANTE is my recommendation, the networking remains familiar. You can install a DANTE soundcard driver on a PC and suddenly your performance room connects into a DAW like ableton and you can record. There's PC based utilities which you can install to distribute audio and replicate it in different places...

We get the art teacher to drum this into the students when they first open any adobe software, PS isn't that important, but Premiere really is important to set those disks when creating your project Bridge is also a nightmare if you don't set them, make some instructions and send them out

We have a much longer summer period than most schools, we're actually going into the back half already! So far we've been able to... Rebuild every computer with a fresh image of 20H2. Migrate Abode stuff to named user licensing Interactive display screens in a further 20 classrooms Upgrade SCCM to the latest version, and populate the software centre Re-think the staff/student GPOs Get most software syncing and using SSO with Azure Got three buildings fibred up to and cabled out TODO - Cyber essentials Create new accounts for next intake Replace some multimode fibre with single mode, replace switches with ones capable of bonding multiple 10GB links for hub areas of the network. Autodesk... It's been busy!

Wouldn't this be a great opportunity to isolate your network entirely from the LA ranges and switch to 172.x.x.x internally Have a range for servers, a range for cctv, a range for switches, 10 ranges to cover byod, 10 ranges for PCs.. you catch my drift. Makes it nice then seeing an IP in a log and knowing where it came from instantly... 172.1.1.43 is downloading stuff. Oh that's one of the servers As for the HV, you should be okay to just update the IPs into the new ranges

Meeting Table with conferencing kit that's permanently on test. Big TV on the wall at the foot of table - can be used for solarwinds dashboard between "meetings". Counter at the door that stops people wandering in too far. A/C Workshop/storage has to be in a separate room

All our PCs are min 8GB so we're good there! We restrict access to C, which led onto the editing computers having second SSD in them and guidance on how to change the scratch disk locations to that second SSD. Scratch SSDs are cleared out on a monthly basis We have a 72TB NAS dedicated for the art department students and each student has their own folder mapped

They've got them on that site I linked above. The mounts on the ends of the PDU unscrew and you can flip them and reattach, like the brackets on a switch

The IP range for our servers is allowed to bypass the smoothy as above

I've been trying to get us verified since last summer! Rebuilt our DT computers a few weeks back and I don't want to put 2018 back on them...

Had a few Iiyamas, wanted to mass replace projectors a few years back with more features, weighed up C-touch, Clevertouch and Prowise. Went with Prowise. At the time, the requirement was 4K, OPS, multi point touch, 65",75",86", everything integrated, value for money Prowise didn't come out on top for everything (Power consumption, contrast ratios, number of inputs), but in terms of cost they blew everything out of the water. Not that they were cheap, they just weren't as expensive as the others and ticked all the boxes. I'm happy with them, the new prowise 10 boards are even better again. The service has always been good and not had a problem with the guys at their tech support.

I only bought a PS3 as a cheap blue ray player, then Netflix took off. It's been turned off ever since

This is what I use. Export CSV for iSAMS, tweak it as required and let it run 1 #Enter a path to your import CSV file 2 $ADUsers = Import-csv C:\SPREADSHEET.csv 3 4 foreach ($User in $ADUsers) 5 { 6 7 $Username = $User.username 8 $Password = $User.password 9 $Firstname = $User.firstname 10 $Lastname = $User.lastname 11 $OU = $User.ou 12 $initials=$User.initials 13 14 #Check if the user account already exists in AD 15 if (Get-ADUser -F {SamAccountName -eq $Username}) 16 { 17 #If user does exist, output a warning message 18 Write-Warning "A user account $Username has already exist in Active Directory." 19 } 20 else 21 { 22 #If a user does not exist then create a new user account 23 24 #Account will be created in the OU listed in the $OU variable in the CSV file; 25 New-ADUser ` 26 -SamAccountName $Username ` 27 -UserPrincipalName "[email protected]" ` 28 -Name "$Firstname $Lastname" ` 29 -GivenName $Firstname ` 30 -Surname $Lastname ` 31 -Enabled $True ` 32 -ChangePasswordAtLogon $True ` 33 -DisplayName "$Lastname, $Firstname" ` 34 -Department "Students" ` 35 -Initials $initials ` 36 -Description "Student User" ` 37 -Path $OU ` 38 -HomeDrive "N:" ` 39 -HomeDirectory "\\Server\Share\$Username" ` 40 -AccountPassword (convertto-securestring $Password -AsPlainText -Force) 41 42 } 43 } CSV Like this username,Password,OU,firstname,Initials,lastname,Email Address username,randompassword,"OU= , OU= , DC= ", firstname, initials, surname, emailaddress

Licences finally arrived yesterday. But when I started looking at the user provisioning, 365 A1 doesn't allow the Federated ID stuff (Well it does to an extent..), managed to get a bargain price for Azure P1 yesterday (ordered this morning). But this is my plan. Self service package Deploy that via SCCM as available Following settings in the installer Management Options: • Self-service install: Enabled • Allow non-admins to update and install apps: Enabled • Auto-update for end users: Enabled • Self-service plugin install: Disabled • Files syncing: Enabled • Install of Beta Apps: Disabled • Browser Based Login : Disabled • Remote Update Manager: Enabled • Include extensions folder & Extension Manager command line tool: Disabled • Include Adobe Asset Link: Disabled • AUSST override XML included: Disabled • Install at default directory: Enabled As for the user provisioning. AD Sync to azure is already setup Once the P1 License comes through I'll sync between azure and adobe based on group membership of staff/students AD accounts. Then setup SSO. Should be good to go, just waiting on that azure license and we're all good!

Just came across this and thought it sounded familiar, came back to post this to you https://docs.microsoft.com/en-us/answers/questions/97643/windows-server-2019-solved.html sc sidtype IAS unrestricted