jmak

We're quite embedded in Jira, but it's definitely "glitchy". We lost all the queues in the main interface for half an hour this afternoon. It didn't stop is working, but it was inconvenient. We still haven't found anything else as feature rich for comparable prices.

One reason for implementing Bitlocker I haven't seen covered is MS habit of encrypting a drive even when it isn't configured. We've had this several times at work - I was very sceptical until I saw the mea culpa from MS and I then suffered it at home. Don't know what I was supposed to do about that - my personal machine has Windows Home which theoretically doesn't even support Bitlocker, but after an update it wanted a Bitlocker key before booting. Definitely set up an automated way to store the keys.

I asked Gemini to explain sunk costs to someone economically illiterate:

I came across this in the past: https://learn.microsoft.com/en-gb/archive/blogs/mniehaus/encoding-sensitive-information-in-customsettings-ini-and-bootstrap-ini It's more of a starting point than a complete solution

I learned that policy at our place is target temp 24°C +/- 2°C - so essentially 26 in summer and 22 in winter and was decided to align with our energy optimisation policy. One minor issue with this is that our fancy new building has central HVAC management which could conceivably have some optimisation from the supplier, but essentially isn't adjustable. And no one can explain why one of the offices is at 10°C...

I don't know about speaking to someone, but did you have any paid services from them? From history of trying to help in similar situations, proving ownership is the first hurdle.

We are going to host under-eighteens as part of their T-Level course and have been asked to provide computer/network access to them. I'm assuming that as it's part of their course and more than a supervised work-experience placement, then we are subject to the same rules as secondary schools/sixth-form institutions. I'd be grateful if anyone could share any experience they have of this scenario. Assuming I need a filtering solution: I can't imagine that any network level controls will be considered - this will be a handful of users out of >100k users and a complex network, some of which is controlled at a corporate level and some of which is managed by divisional network teams. I'm therefore looking at client level controls. Our Windows clients are Windows Active Directory domain managed and our Apple devices are Jamf managed. We could limit logins to specific clients and prevent access to our 365 tenancy. We also have access to Entra AD Intune only managed devices, but they have corporate policies which I can't customise. Any suggestions welcome (other than don't do it - that ship has already sailed).

RustDesk could be another free option if you can self-host

This started for us in the middle of last night. We were made aware that it was a Microsoft issue and they were working in it Ours was resolved by 11am

Advice is to never require a password change - obviously if you upgrade the requirements you'll need to, but you shouldn't set a standard expiry period. NCSC recommendations are: Never expire No complexity As long as possible - recommend multiple unrelated words as a passphrase

I feel reborn

You saved me thinking about how to word what I wanted to say 😊

I appreciate this is easier to say than implement: important data shouldn't be in email mailboxes. This went irrecoverably wrong when the facilities manager wasn't issued with a role based mailbox when they started. The best you can do now is ask the person leaving to save important contacts, attachments and if necessary email messages in a file share. You could set up the role based email account now and ask the person leaving to forward any messages they think might be useful to the new address. It's a really bad idea to give access to the email account of someone else - even if they've left.

Our corporate organisation had a trial before Christmas and I pushed for the trial to be in our area. I worked with their tech team to set the trial up and saw all the results. I was really impressed with the experience and the results - I didn't see the commercials, but the people who did have chosen to go ahead for the whole organisation. PM if you'd like more details.

Double bubble: use your 3D printer to make rack mount Raspberry Pi mounts https://www.thingiverse.com/thing:4078710

Just realised there was a small typo from auto correct that significantly changed the meaning of my original post 🤦🏻 It's nothing to do with a slow network - the network connection isn't allowed. Sorry to waste everyone's time. I appreciate the technical issues are the same whether it's a school or not - that's why I stuck around - it's the most helpful forum around! The reason I mentioned it is because from my school days we were imaging significant numbers of clients at the same time which I don't need to do. Still playing with firewall rules - I have rules to allow all the ports listed on the page I linked inbound at both ends. It does say it's not kept up to date and I think I need 445 open as well. If I find the answer, I'll report back.

It's not a school - it's a relatively small number of clients at any particular site. I don't have anywhere to host a DP, but I do have 10Gbps to the desktop.

New to me, but I know others do it: I've had MDT/ WDS working for years now, but only on one site. I now want to deploy to clients located at a site remote to the deployment server. Now I'm asking for help with firewall settings - which I don't manage, so ideally I want to ask for the correct chances first time round. I found this for inbound roles on the server and they're in place: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/mt670791(v=ws.11) But I'm still getting network issues, so I'm guessing I need to slow inbound connections at the client end too. Can anyone point me in the direction of the correct documentation? As a test, I tried to map the deployment share from a client and I get a network problem with that too - I would expect the rules I set inbound in the server would cover everything I need at that end, so I have proved a network issue.

No one biting? Pedant See above Accountant

Glad you got it sorted. I haven't used that approach before. According to https://learn.microsoft.com/en-us/microsoft-365-apps/licensing-activation/overview-shared-computer-activation users still sign in with a Microsoft account - it just doesn't count towards their limit of five activations. Our scenario requires access without signing in at all.

Dear Andy I've never met an ant that hangs around your neck. I do know some that hang from chains that could go round someone's neck. Best wishes Ped

Sounds as though it's only suitable for a private setting. You'd be better off with this "Approved educational institutions, such as schools and colleges, can ask to invigilate exams themselves without proctoring - see ‘room and technical requirements’ below." Then you won't have issues with the camera - the exam itself shouldn't be nearly as fussy. But that's a ridiculous set of requirements and they should be ashamed.

Search on here/the interwebs for device based activation. I'll pick out some links when I get a chance later Update: try this thread /showthread.php?t=237979

You can, but it depends on both devices being on the same WiFi network. Most Sony TVs have some kind of screen mirroring facility, so if you put them both on the same wired network that could be an option. Otherwise your cheapest option is likely to be a USB WiFi dongle and use chrome as suggested above.

Make friends with the caretaker, the secretary/office administrator and the cook. Check that the backups actually happen and can be restored.