jmak

A Chromebook would boot in its normal time (a few seconds), download the latest version of the OS with all updates in the background and completely install it to a different partition. Next time you restart it'd just boot into the new version of the OS. Transparent to the user.

You sir, are a gentleman and a scholar [emoji3] You know when you know you're doing something daft, but can't see what because it's become urgent.... I know that's the easier/better way, but I don't have one and had borrowed one that I've seen working. Now I know how, this is just as easy and much cheaper! Probably not worth the amount of time I've spent failing to work it out....

The link to download the ISO from UoI requires a password. I've tried to create a discover disk myself through WDS, but I'm not getting anywhere. In the WDS I go to Boot Images, then right click on the Light Touch Windows PE (x64) and choose "Create Discover Image". I then fill in the details of where to save it, but it fails with "There is not enough space on the disk." As it's a server share, I know that's not true. I also tried "Export Image", which creates a wim file. When I copy that into the USB, it doesn't create a bootable disk (which doesn't surprise me, but I thought I'd give it a go....)

I'm having a nightmare with deploying an image to our Surface Pros. PXE booting via USB adaptor seems flakey and I've given up for the minute. My plan is either boot from USB to the WDS server (first choice) or deploy a complete image by USB. I've followed various guides but can't get it boot, other than with a USB created with the windows media creation tool - which obviously only installs Win Pro 10 and doesn't have my customisations. Any suggestions for a tried and trusted guide? Thanks

How many images are there in 1803? Running the CandyCrusher script and it's now on the ninth! I thought when it unmounted the 6th I was done.

Just in case anyone else comes across this, I can confirm that the ImagePath variable in Line 120 has to match the file name. For the version I've just deployed it's: Invoke-RemoveBuiltinAppsOffline -ImagePath "$PSScriptRoot\SW_DVD9_Win_Pro_Ent_Edu_N_10_1803_64BIT_Eng_Intl_-4_MLF_X21-87131.ISO" For some reason in the version I have, the last line crediting CHiLL wasn't commented out - not sure if that's in the version I downloaded, or something I broke I must have been lucky before as I just used the script as it came.....

The original company that developed them was Ameeca and they ceased trading in 2013. There's a link on their historic website which is supposed to point you towards support, but points to a 404 page. Given that it's software developed by a company that hasn't been trading for over 5 years and it's no use other than to someone who owns a product which is no longer made or sold, is there a real issue with copyright?

This specific case is where a parent of one child is the aunt of another. Both children have older siblings who have been through both schools (so both contacts already exist in both schools' SIMS. In each case, in our records the mothers are also the alternative contact for their nieces/nephews. After the other school has imported our CTF, their instance of SIMS has changed the aunt/alternative contact to the mother with parental responsibility. I've been in to our SIMS and the records are definitely correct. Any thoughts on whether this is the same or a different issue? Obviously not my problem, but they don't have a technician/data manager so I'm trying to help out.

We sent a CTF to the school we feed in to. They've imported it and this morning ran the script that's been distributed. It didn't return any errors. However their admin staff picked up an error which sounds like the type this SIMS fault would introduce: an existing contact in their database has an exact name match with one in the imported CTF. This person is now showing as the mother of the wrong child. I've looked in our instance of SIMS and it's correct. Is this a case of the script failing to identify an error, or is it a different failing in SIMS CTF import? And if nothing has been sent out or disclosed to the wrong person, is there a breach to report? Pretty furious that if Capita knew about the issue months ago they didn't issue a warning before schools start sending CTFs for next September's admissions. I would have thought schools could sue for the extra work required, even if they don't have problems with the data protection.

Is it just me or does "Can schools give my exam results to the media for publication? Publishing examination results is a common and accepted practice." sound a lot like the teacher who says "but we've always done it, so it must be ok"?

Agreed. WRT OP's original question, yes I think Office 365 is sufficiently secure (as is G Suite). The areas of greatest risk is where the end user has access to it, so that's where you need to have effective controls (technical and procedural).

If we assume that security through obscurity is not a good approach - the counter argument to saying that MS is more likely to be hacked because it's a big target, then your choice for storing data is: 1) Personal phone 2) USB flash drive 3) Laptop (encrypted or not) 4) Server you manage 5) Server managed by Microsoft's best experts working 24x7 to protect your data I know where I'd choose to put mine....

Mostly [emoji16] , although I did notice this today: /showthread.php?t=198084 Although it describes an issue, it also gives a solution. Loads of threads on here about File Stream - I haven't deployed it, but I have been using it since it came out and it's worked really well for me as a "user".

Filestream is the product you need. You'll need G Suite for education to obtain and use it.

How embarrassing [emoji15] It's @free870 I need to apologise to: I assumed it was one of your posts I was looking for, because it almost always is!

This is the information I was thinking of: https://www.thewindowsclub.com/stop-windows-10-reinstalling-apps-feature-update. Just spent a quiet half hour seeking it out to make sure I get my 1803 build right and apparently it's not necessary anymore as MS have fixed it now.....

Thanks @Arthur; this looks very helpful. I'm still using your CandyCrusher script - which order would you recommend running the processes in? Or is there some funky way of combining them?

I'm considering putting a Win 10 VM on our backup server and setting the Files on Demand to keep a local copy of everything.

Unfortunately we can't afford all three. I was happy that using Conditional Access gave us the protection we need, but hadn't worked out that it would stop people from accessing email too. Staff also currently benefit from being able to download the Office client to personal machines and I guess that will go too.

Any idea how this works with Controlled Access (add-on to Azure AD which lets you limit O365 access to domain machines)?

My point was the request is to use initials and DOB instead of name in an email. There's no reason not to use the name - and as it's not actually necessary, it probably wouldn't be an appropriate use of the DOB. Any personal data should only be used for reasons that are appropriate (necessary). Sometimes it would be justifiable to include DOB in the content - there's nothing that is a blanket prohibition.

Might be wrong, but my interpretation of the OP's question is the identifier of the child in the email content, not the format of the email address. On that basis, I'd say the suggested approach is unnecessary - and unhelpful. As long as the confidentiality of the email system is as it should be for a school, there's no reason not to use it to communicate personal information.

The form I've just received from the local secondary has the standard permissions requested (photo but no name) and says that if they ever want to publish the name with the photo they'll contact parents on a case by case basis. Seems sensible to me. With reference to the op, I don't think I'd give blanket permission for my kid's name and photo to be used freely. I wouldn't give it for me either, which would be my starting point when considering what my kid's data could be used for.

The DPO has clearly stated that what she says is only advice - but realistically if we go against it, we need to have properly thought about the reasons. Having spoken to SLT, we are going to proceed on the basis that consent is not needed, but we are going to put a statement on the form that the person completing the form must inform the third contact that they have provided their details and that they will inform us if they need to change it. We appreciate that this is not informed opt in consent from the data subject and we are relying on the person giving the data to inform the data subject. We'll have to argue the case that the child's needs outweigh anything else if anyone objects.

It was make sense, but haven't done it.