Scrambles

Thank that was exactly it. So simple as well. You know when you've spent hours on something as you're over thinking it and go down into a google rabbit hole of tangential information. Thank you so much for the sanity check!

Hey all, In the past we have used microsoft Take a Test to do Microsoft Forms assessments with students. This has worked out reasonably well for us for small number of students However, we need to do an assessment of all of Year 8 and we don't have enough ICT suites to accomadate. We have enough Chromebooks to go around but I am struggling to get them into a 'walled garden' where the only page that will load is the Microsoft Form with the test. I've tried using a managed guest session and blocking all URLS excluding forms and whats needed to login to Microsoft but I keep hitting block pages. Does anybody do anything similar with Chromebooks and MS Forms / Google Forms? Thanks in advance!

A remote desktop gateway server with MFA / Conditional Access rules set through Entra Application Proxy Server? Users then need to authenticate through entra and it will tunnel it's way back into your systems.

We've got a couple of plugs from LocalBytes for a few of our chargeable devices. When the power draw dips below a certain power level (at the end of charging cycle) it will cut the power off. Controlling these through Home Assistant. These are on a completly seperate network in our office so not doing anything major. We've also got a Shelly Relay doing our school bell. Being able to configure that through a web interface and have it accurately keep time has been useful for us. This one is one the main network but it's sitting in a vlan by itself.

Hey all, I opened up a side panel on one of our old CleverTouch T Series screens. Was hoping it was an OPS slot but alas no joy. I'm guessing this is some sort of expansion slot for specific clevertouch hardware? Was hoping to throw another PC inside of it to give it some extended life as digital signare or portable meeting room screen. Thanks in advance!

I remember using the guides here in previous years -: https://angrytechnician.wordpress.com/category/technical-articles/iptv/ This year i'm looking at setting up TVHeadEnd or MuMuDVB to set up the stream We use a cheap DVB-T USB we grabbed off e-bay. We have the August T210v2. Last time we set it up I seem to remember having an issue in linux that was fixed by copying a firmware over ... but it was a while ago now things have likely changed.

This is available from VLSC now MSI download for HEVC Video Extensions We deployed via SCCM and can open them now. Having some issues with Photoshop (cs6) however.

We had the exams downloaded and ready to go. However when we went to agree to the terms and conditions we couldn't get any further and kept getting 801 and 803 error messages. We then tried to exit the software and reload it ... however that completely locked us out ! We were getting invalid key after that point I uninstallde the secureclient and reinstalled it. Redownloaeded the paper offline (That took about 20 minutes) and then we got the exam started. When you download the test - is that completly offline or is there an element for it to check online that the exam has started? I wonder if thats the part that failed for us. We managed to get the exam started today around 1030 when we were originally ready to go for 0900

Hey folks! Just want to pick some peoples brains. Using the OneDrive Known Folder redirection is it possible to do it so that only this years intake will have their folder redirected? I was hoping I could see this as a user policy but it seems this is just a computer policy. Should I just bite the bullet and migrate everyone during the next half term ? Thanks!

Hey Folks, We have a suite of iMac's in music that are up for replacement over the summer. At present the only reason we are holding onto them is for Garage Band. What are the viable Windows options to Garage Band with favorable education pricing these days ? My thinking is that I can get some new computers with some preamps OR I can buy some new Mac's for students to use.

Have you had a look at https://config.office.com/ to help you set up your XML ? Thats what we used - pretty easy to use. The extra options pretty much line up with GPO so if there was a GPO for it, you should be able to find the same option in the XML (Though we did notice one or two that weren't there, but that was picked up by GPO instead)

I'm using PFSense at home on a qotom mini PC I got from China. 4 Intel gigabit ports and an I3. Combined with a HP 1810-24 (Picked up for ~£15 on ebay) and a UniFi AC-Pro I have my entire house wired up. You can setup VLAN's on the PfSense box so you may be able to plug your WAP directly into the pfsense and forego the switch ? My internal LAN is running PfBlocker and port forwards all external DNS requests to itself. So it is stripping out ad's on all my devices which is super nice. When I get to work I forgot how much of a pain it is to use on some of the apps I have due to all the ad's ! I have another VLAN for the guest network which is on a seperate VLAN and SSID which can't talk to anything else. All traffic from this network is pushed through a VPN Then a third VLAN for IoT that has extermely restrictive firewall rules

Hey, I don't know if this is a crazy way of doing things but we redirect our start menu's to the local machine. Our accounts are using Local Profiles. We have a group policy that sets the permissions on the folder and then during the task sequence any software that is installed it creates a shortcut in the appropiate start menu (Majority of our software is installed using PSADT). We then have the Start and Taskbar layout saved on the server We are running 1803 at the moment and have been doing it this way for a few years.

Are you using in unattend file ?

We have Office 365 and Google tenant's and have around 70 chromebooks in our high school. The way we don't it is that we have Azure Active Directory sync with our Google Directory so each user's email address is the same on both. The Chromebooks are enrolled onto our google tenant We also have on site ADFS so our google login page is redirected to adfs. Students logon with their school email address and password. The Chromebook is set so it will only allow login's from our domain (Stops logging in with personal email) and the upside of this is that it will automatically log them into Office Online as well. At the moment if students want to continue work from the windows domain on a Chromebook they will first save their work into their OneDrive. We are also looking at enabling the HTML5 client for our RDS Gateway so they will be able to run a windows desktop from their Chromebook via remote session. However, the majority of work our students do on Chromebooks is online research and using webapps

Hey Folks, Just looking for some quick advice. Last holiday we installed a 2 node S2D system into the school. I used Veeam the majority of our servers over from the old cluster to S2D. The only remaining servers on the old cluster are our Domain Controllers. I've always a bit wary of doing anything with domain controllers so just wanna run this by you fine folk before I commit to anything. Does this process sound alright for moving my domain controllers ? Everything is running on Hyper-V Turn off Primary Domain Controller Do a planned fail over to the new S2D Set permanent fail over Upgrade to VM Version 8 Turn primary domain controller back on Wait 30 minutes Turn off Secondary Domain Controller Planned fail over Permanent fail over Upgrade to VM Version 8 Turn on secondary domain controller Assume everything went well ? Thanks in advance

Hey Folks, I have received the following from the Open University. It may be of some interest to some of you here. Enrol - Linux Essentials: Winter Wonderland

I did the restore with Veeam and it took about 4 hours for 1.4TB. Pretty happy with that. Server seems to be ticking along quite nicely. S2D has only been running for about a week now. However, so far I am impressed. Though, that may be due to we have some SSD storage now. We only have a two node setup. One in each server room with a 25Gb direct link between the two for storage and a 2Gb storage / network access (This will one day be upgraded to 10Gb). Done a few failovers to test and it has worked flawlessly. When one host is down the servers migrate to the next host. Rebooting a VM takes a few seconds now. We are using our old server set up (Two servers + SAN) as a replica server just in case. Still a little nervous using it in production but so far I am happy with it.

Hey Folks, Just seeking a bit of advice. We recently got two new servers running S2D on Server 2016. Currently, we have our file server (Server 2012r2) on it's own host running as a VM. That VM then has an ISCSI connection to our SAN where it hosts the files. What I am looking to do is take this server off and move it onto our new virtual hosts and have it completly virtual. The file server currently isn't set up with DFS and I don't know exactly how many scripts / services point to the UNC of the file server so during the move I would like to keep the name if possible. We backup the file server each night using Veeam Window's Agent that is controlled by our VeeamBR server. What I am currently thinking is -: Restore the file server from Veeam to a VHDX file on the new host. Build a new file server (Server 2016?) and attach the VHDX Export shares from old server to the new Run Robocopy from the old server to the new to sync over any data that may have been missed after the restore Rename the old file server Create a CNAME record with the old server name pointing to the new server Create a DFS NameSpace on the new server so that in future if the server ever needs to be moved it will be more straightforward. Does this sound about right or am I over complicating things ? Thanks in advance !

Hey Folks, Just want to pick your collective brains for a moment. I am going down the route of setting up a new PKI for the school with a look at enabling 802.1x for our PC's to stop students plugging on their own devices and getting onto the internal network. I plan to install an Offline RootCA and a subordinate CA. My question would be - where do you install the subordinate CA ? Does it go onto the domain controller or do you put it on it's own server ? Thanks in advance.

We've recently deployed Windows 10 and OneDrive Files On Demand to one of our ICT suites and it appears to be working quite nicely for us at the moment. As part of our OSD we deploy a later version of OneDrive than what is included on the OS. In that room we have set students to use Local Profiles. When the user logs on - OneDrive automatically logs on ... It does take about 1 minute before they are on and it also causes the screen to flash once its logged in. However the files on demand seems to be working well. Sure does save on HDD space on some of our staff machines where they have several GB of files. Still need to do some testing but so far we are quite happy with it.

Cheers Steve. So from the looks of it i'll need to create two volumes rather than one larger volume. May have to revise my backup plan slightly Thanks.

Hey folks, We recently purchased a new Synology NAS just to store some VEEAM backups. I've put 4x WD Red 8TB into the unit giving us 32TB raw storage. Planning on just using RAID 5 to give us ~24TB usable storage. However, trying to set up the volume there is a 16TB limit. From what I gather it is a limitation of the CPU (Being 32bit) From the way it is worded - it suggests that there is a work around by creating two 16TB volumes however I can't find any clear instructions on how to maximize our storage on this synology unit. Anyone encountered this before ? Thanks.

Thanks for the response. I've got the licenses assigned to the users for the trial and I am fairly certain my account has full permission to the InTune tenant. I have a sneaky feeling it may be a back end issue. Just waiting penitently for some one from Microsoft Support to get back to me now.

Hey folks! I have a support ticket open with Microsoft and after a 2 hour call still no answer. Expecting another call back today however I would like to try and avoid another long drawn out conversation. We started the trial for InTune for Education last week however, it doesn't appear as if the portal works for us. The InTune portal appears to work (Although, never used InTune so not sure where to start with it) Whenever I go to the portal - Or any page of the portal I get permission denied errors. I am a global admin on O365 and I checked i'm also a global admin for InTune. Is there another super secret layer of permissions I am missing Thanks!