gh5000

Just had someone ask if I could help them get photos off their phone this afternoon after they take pictures of XYZ. That's going on the list...

It's probably a not yet for me too, but I would say this ^^ is the part that makes it closest to being a data breach now. I would say you've allowed access to the data to people that aren't required to have access. It's just waiting to be accessed by spouse/children in the my documents and then you've got a breach. Thanks for the ideas so far.

I get that there's a transparency argument here but surely the dad's details are covered under lawful processing - you are required by law to keep an admissions register with parent's details. It's not covered by consent. But arguing with myself I would say that you should be getting consent for mum and dads address if you're going to send them fundraising/marketing/buy a ticket for this concert letter as that isn't part of the official duty of providing an education.

It will just change their O365 logon. Would tell people before hand

I'm helping to put together some staff training on GDPR and instead of talking to staff for an hour we wanted to give some scenarios of "Is this a data breach?" and "Is this processing data?". To give an example I've got a slide saying - You lose your USB memory stick, It contains your lesson plans for the next term, It and the individual files on the USB are not password protected nor encrypted. I'm trying to trick them here (presuming lesson plans don't contain PII) to saying yes. All a bit of lighthearted fun before I tell them they won't be allowed to use USBs anymore because we've got Google Drive and USBs break and I spend far too much time trying to recover data from them as "it's my only copy" (and staff can't be trusted to not put PII on them and lose them). Anyway I thought you lot could come up with some fun scenarios that we can use in staff training. The silliest, most outlandish wins a prize.

Thanks @alfatec On the user registry settings you have the create key that removes the network icon from my computer. I think you may be missing the closing } HKey_Current_User\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C You've probably sorted already.

Have you tried paper cut support. They usually are quite good at working out why their product isn't working. When you say page limit do you mean if students print a document over 10 pages long cancel it, for example?

Just reading through our template privacy notices provided by the schools legal team. There is a section that reads: This is the place that I can see you would list other data processors eg Google, Parentpay, GCSEPod - correct? If you then decide to start using Office 365 (for example) do you have to reissue this document to everyone. Been reading through GDPR stuff all weekend and feel like I've got myself mixed up somewhere. There is a requirement to tell staff/students etc every 3rd party that the data goes to right? And what pieces of data each one receives (eg GCSEPod gets name and email address/Parentpay gets name, email, contact number)? And last one that I just wanted to check - is us deciding to use Google/GCSEPod (as examples) and saying it is necessary for us to provide an education legitimate therefore we aren't required to get consent. Or is the counterargument that the school could quite capably provide an education without needing to use Google/GCSEPod, therefore consent is required. Thanks

Cool. What's the answer to the "what row of the bt check should we be looking at" I get this

They just used the info to set up their new company. You'll need to pay them for the info now. /joke Sure @GrumbleDook is plenty busy but the info would be very helpful as we get to the sharp end

Also when you say customers is that potential customers or existing customers?

Has @jenhet just come up with the most god awful thing he/she can think of and just left us to gasp

Don't know about for definite but in the accepted domains part is there any hybrid domains listed, any of the typical hybrid send/receive connectors, did you do remote moved to do the migrations?

The primary key is the link between ad and Google that the sync on that server makes. Nothing to do with the users password. I recently changed sync servers and all my primary keys changed. Look out for other changes but that one is nothing to worry about.

As best illustrated by this

Looking back at the OP and then what I started, the OP doesn't mention having a L3 switch acting as the router. In the following answers/discussion has everyone (including me) assumed that that L3 switch is already setup as the L3 router or even exists? If so, we may have just skipped ahead with a couple points and we haven't seen @MM1 since.

More than happy to be wrong but can you explain why the LA router doesn't need to know about his VLAN setup on the core switch. For me I've always had to set a equivalent route on the router. ie ip route 10.100.100.0 255.255.254.0 10.10.10.5 (vlan 100) ip route 10.200.200.0 255.255.254.0 10.10.10.5 (vlan 200) where 10.10.10.5 is the IP of the core switch that is handling the routing.

Just reread your post. Is he possibly just talking about subnetting only and not assigning VLANs??? That shouldn't require the LA's knowledge and could be a solution if you don't need to restrict access. For me if you're doing vlans and you have a router that is supplied by LA on 10.10.10.1 (current gateway) and you'll be configuring a core switch as your router - VLAN 10 will have to have to have 10.10.10.2 as its gateway and VLAN 11 will have 10.10.11.1 as a gateway etc for your 4 /24 vlans. Presuming, for the ease of explanation, that you won't have access control between your vlans everything will be fine to communicate intra-vlan. You will also have a default route 0.0.0.0 0.0.0.0 10.10.10.1 so that everything that doesn't know where to go (ie can't find something by routing through the individual vlan gateways) for example trying to get to google.com will hit the LA router. It (LA router) will need to know all about your gateways. So IMO your LA will have to setup routes back. Another thing to consider if you're looking to save IP addresses is that you can create other VLANs that don't have to communicate outside of your lan. eg printers could be VLAN'd to vlan 100 in the IP range 172.16.1.1 /24. Those printers shouldn't have to talk to the outside world (internal email relay if you do scan to email may be needed) but that's a bit of broadcast traffic separated and a bunch of IP addresses saved from your stingey LA. You get the idea anyway I hope.

I would say it depends on who controls your router. With us the LA controls the Cisco router and have to setup the IP routes for us back to our core switch which we then do the vlans and vlan routing on.

Cheers @sparkeh - had just figured out what your instructions were getting at. Thanks all for the help. Bring on the coffee.

Thanks I had missed that. It is a .url file but going back to the OP's instructions and example XML I should have URLs as

Don't know why the post is putting the space in but it definitely isn't in there when I edit. The smiley I can understand.

Sorry, just a typo in my post These are the three that aren't showing up.

Can I ask why the following might not be showing as a tile. Just getting a blank space. The shortcut is in the folder and is showing on the start menu on the left. Just not as a tile

OP what is your config - 1 nic, 2 nics etc? I had one recently that I was pulling my hair out on for a while looking at all these complicated things before realising the server had its windows firewall turned off. Just in case it's a simple thing like that.