jmak

Bump: Still hoping that one of the right people might PM me.... [emoji85][emoji86][emoji87]

It's the DPO approval that's the issue for us. Ours has said consent required. I disagree, but still not sure what to do about notification to the data subject.

I've just had advice from our DPO saying that we need to get consent from third contacts to hold their data. My view is that under the fourth basis for processing data we don't.

The information about export from SIMS matches what we were told and do. It has ended up being my responsibility, although there's no reason a member of the office admin staff couldn't do it. SIMS is hosted by our LA, so I can't set up scheduled reports. Target tracker isn't installed in the SIMS server, so the xml report has to be saved, then copied to a machine with Target Tracker and then manually imported (you have to navigate to the correct file). How much of an issue it will be for you friends on how often you need to update it. I do it when we have a child join or leave and half termly to import attendance data. From my point of view it would be better for the person who adds the new pupils to some to do it. We've had issues where I haven't been told, so end up with missing children. I'd definitely describe it as clunky from an IT admin point of view. You'll also find several software version updates need to be deployed to client machines every year. Can't help with Firefly, sorry.

You might want to think about cause and effect there.... Are you buying ice-cream because it's coming to you or is the ice-cream coming to you because you always buy it?

There's a school near us that's gone serverless using Airhead 360. http://blog.airhead.io/meet-airhead-360/ When I spoke to them a year ago they seemed pretty happy.

It was never free. It was included in the price of the board. If you haven't paid for the board, they'd go out of business pretty quickly if they didn't charge for the software. I'll definitely agree with you that it's very expensive - I'd say priced to try and persuade you to stick with their hardware.

I think that's only for User Defined Fields... Any chance one of the right people could pm me? [emoji6]

That's what we're implementing - limiting access to domain machines - but for that option you need Azure AD Premium P1. There are more advanced options - but they're also more expensive.....

If it was your only means of transport and you had to use it every day to get drinking water you'd have some kind of backup plan. The issue was that it's the only server in the organisation and there was no warranty and no spares on site. Also the original spec didn't include hot swap drives, so the server had to be taken down to swap the disks. I had advised the relevant people about the risks, but couldn't get any money spent until crisis point was reached. Anyway, all good now. And as I have a new server being installed at the end of July, I'll happily keep running this as a spare without a warranty. I also meant to thank everyone who'd offered advice on my last post - especially @mukz

It sounds like you've got a plan, but I would say don't rule out setting up G Suite. It's really straightforward and would potentially give you more control over the Chromebooks. You don't have to excuse any of the other services to users.

It's all working [emoji41] It all went according to the text book. The disk showed as Ready when the server rebooted and in OMSA I used the task to set it as a global hot spare. It then immediately started rebuilding. I then just crossed my fingers and waited.

Another vote for Purple Mash here. Massively better than 2Simple - all the old tools are there plus loads more and in my view, the most valuable addition is all of the topic based resources and curriculum aligned tasks. You can also allocate them to students and classes "Google Classroom" style and keep copies for a portfolio of work. Organise a free demo. PS: I don't work for them!

Interesting... I've just read the guidance and there's a subtle difference. For the Nationality and Country of Birth, it says: "Schools must no longer request this information from parents, or retain the data within their system, for purpose of transmitting to the department via the school census." For proficiency in English it says: "Schools are therefore no longer required to assess a child’s proficiency in English for purpose of transmitting to the department via the school census." We definitely won't collect Nationality and Place of Birth, but intend to continue collecting proficiency in English as we believe it is essential to effectively educate the pupils. Therefore we also won't be asking for consent for that item.

Chip and PIN is old. NFC and fingerprint is already here. Face recognition working properly on a domain is what I'm after.

If I received an email from "0004631" I'm pretty sure I wouldn't open it. You might say "but it's from a school domain". I'd say "not worth the risk of finding out". I don't believe that potentially giving away the yeargroup and therefore age of a child in an email address is a significant risk when it's only going to people they're choosing to communicate with. And by the end of the email, unless the child has missed the point, the recipient will know their name too. By the time kids are sending externally emails from school accounts, they've been giving away loads of personal information through social media and email anyway. Just my thoughts...

Well... Birmingham and West Midlands too, but that's still pretty limited. You can register it on the same database for free using the frame number from the website and they sell the same sticker kits for £12.99 to get the deterrence element.

Bike Register - The National Cycle Database

Sounds like it's linked to the information in this thread: /showthread.php?t=187527 from last year. From that I gleaned that it only affects organisations with more than 1000 FTE - more than most schools I would have thought.

So, on the positive side, I've learned how to do something new and have OMSA installed and working on the host. The downside is that it isn't seeing the "failing" disk at all! Which now that I think about it makes sense with the message on boot:

That's the way I read it too - quite clever on the supplier's part and fine by me. It's the approach I've taken with Google's T&C's. The Rockstar ones above say "all consents" which to me is slightly less clear. I think the bottom line is that it is the school that would be held accountable rather than the supplier, so it is up to us.

I have already made an email trail of both my recommendations from before the time I thought we should have acted (years ago) and of how unhappy I was about not replacing the server before the warranty ran out and how strongly I felt that it was stupid to run without a warranty. I'm now trying to put together in writing what I think should happen given where we already are. My doubt about getting a new drive is the point @3s-gtech made about the risk of the whole array failing during rebuild due to the additional load on drives which are the same age as the one that's failing. I won't have raid 5 again, but at the minute I could afford to lose the failing drive. If another one fails during rebuild, I'm properly stuck.

It's not installed on the host - at the time it didn't seem worth the hassle of working out how to do it on the GUI-less hypervisor. Also the idea was to leave the hypervisor as minimal as possible - maybe this should have been an exception.... Installed on the guest only shows the virtual hardware devices...

It's a Dell T410 - I know they're 500GB Cabled (not hot-swap) SAS drives, but I can't find the original build sheet and I can't see the model details without taking the drives out. Planning to do that tomorrow after school.

Do you think I could make this a poll and then use it as my business case to put in front of the head [emoji6]