Synkrox

IMHO BYOD =/= Guest wifi BYOD for school staff/students to use their own device if they choose to bring them in. I've had success just using explicit proxy pushed via PAC/WPAD files, but I only supported laptops and not iOS/android as half the apps wouldn't work via proxy and MITM is too involved. Phones and whether they have signal for whatsapp and tiktok is their problem TBH. Guest WiFi can be a "light touch" filtering. I use a captive portal and guest login slips that expire 12 hours after first login on our firewall. External guests have no trouble connecting to their VPNs etc.

If you have time can you tell me what makes it good in your opinion? and what features you use/ how you have it deployed to your clients? Thanks Chris

Hi folks, I'm looking at various options to see if the time is right to shift our on-prem papercut MF to the cloud, I'm looking into papercut hive and Printix. Any experience of those or other platforms would be gratefully appreciated. We are fully Intune managed and currently deploy a MS universal print queue which the on-prem papercut connects, to pull jobs down. Mobile devices use mobility print and connect directly to papercut on-prem. Thanks Chris

iiyama here. Have taken an absolute kicking in my SEND school, not missed a beat. EDU gets free MDM for them too.

Sorry my fault - I thought I had replied to RLRs post - as they use Fortigate and Fastvue as I do. Out of context my post makes no sense.

Sorry to interrupt - your setup is similar to mine, but I haven;t got that far yet as only our staff machines go offsite. Is this something you push out to your ipads, or are you referring to the proxy settings in windows? I thought a PAC file was generally handed out via DHCP, so would not be applicable when offsite? Are you making your proxy publicly available (with auth) rather than using a background VPN then? Can chat over PM if easier Thanks! Chris

Oh we have that too - but I'm at a SEND school, if we didn't have a gate the students would escape, probably without signing out! 😂

We use signinapp - student comes into reception and signs in on the same kiosk ipads we use for visitors etc. It's written back to Bromcom, with minutes late, a comment and reason selected (medcal/traffic/etc). After a certain time it signs them in but switches to a U code. No human intervention required. Same in reverse if they leave early.

Possibly not the answer you want to hear but perhaps something to consider. We block internet access/safari on our shared ipads and limit it to a whitelist only. This won't affect your remote management of them, but will prevent students getting on the wider internet. We subscribe to britannica school and this is unblocked to answer the question of "how will they do research". This way we mitigate the safeguarding concerns as they are limited only to apps we have deployed. Our thinking is that ultimately if they aren't able to log in, then the aren't ready to be trusted on the whole internet. For other devices we use SAML on our Fortigate to identify users.

Weird things happen with Company portal. There's one that is automatically deployed when intune enrolled, that will conflict if you try and deploy it via appstore. But it also needs the store version to be available to able to update otherwise it goes out of date and won't update any apps. (ask me how I know!) I spent so long playing whack a mole with it I can't categorically tell you what settings I used in the end - but if company portal doesn't show up, or you get nagged for apple ID after logging in then take a look at how CP is deployed and tinker with it.

We use Teams for governors then add them as a guest user with their home Microsoft account. That way data stays in your Team rather than being pinged around and you don't have to license them. IMHO they shouldn't have a school email address anyway as they are (mostly) not staff and should not be able to appear as such.

I have a 3 Lenovo AIO (non touch) devices Also some iMacs - I think 2015 model - 8gb i3 - bit more robust for SEN with glass + aluminium. Could bootcamp? North Worcestershire. They are just taking up room so I'm sure we can let them go for a small donation. Send me a PM if interested.

I used to. Because Windows 10 and its forced feature updates were havoc. And frankly coming from Windows 7 it was scary, unnecessary and even Microsoft hadn't really made it's mind up on what it should look like (other than "not windows 8.1") We had start menu layouts changing, a new app store no one used or wanted, bloatware (even on edu/ent editions!) and noone knew what they were going to change and break with the next build. Remember roaming and mandatory profiles? All the workarounds and group policy changes from 7/8? I found it robust and solid while MS went through their weird phase. Now things are settling down, I'm Intune managed Win 11 and Semi Annual Channel, and find it OK.

https://www.wmjobs.co.uk/job/147664/it-technician/

If it's any help I use very old laptops running Windows 7 and jarte word processor - https://www.jarte.com/ - with which you can turn off all the spellcheck and it will take regular backups of documents as it goes.

Create a folder on your server with appropriate permissions then mirror it with machine startup script. (I use netlogon folder) - Then in GP redirect the folders to the local paths. Relevant bit of script: REM COPY START MENU robocopy \\air\netlogon\network\start10 c:\network\start10\ /SEC /MIR REM COPY DESKTOP robocopy \\air\netlogon\network\desktop10 c:\network\desktop10\ /SEC /MIR REM COPY RESOURCES robocopy "\\air\netlogon\network\resources" "c:\network\resources" /SEC /MIR REM COPY START MENU ICONS robocopy "\\air\netlogon\network\start10\icons" "c:\programdata\microsoft\windows\start menu" /MIR REM UNBLOCK FILES JUST COPIED powershell -Command "& {dir c:\network -Recurse | Unblock-File}" powershell -Command "& {dir 'c:\programdata\microsoft\windows\start menu' -Recurse | Unblock-File}"

If it helps with a solution, I cache my start menu locally and redirect to there rather than across the network.

IT Network Manager Point 39-43: £42,821 to £46,845 Full-time Have you proven experience in network management and development of IT systems and infrastructure? Can you provide strategic advice and foster positive attitudes towards IT among non specialists and show exceptional leadership skills? Have you a proven track record of successful strategic innovation? Are you keen to work in a school where you make a difference? Find out more via our vacancies Stratford Girls' Grammar School - Vacancies This should be emailed to [email protected] by noon on Weds 16th February, 2022 Interviews w/c 28th February 2022 Enquiries to Jo Betts, Head’s PA ([email protected]/01789 293759

***PLEASE NOTE WE CANNOT ACCEPT CV's - PLEASE USE THE APPLICATION FORM AT http://www.sggs.org.uk/jobs *** Stratford Girls' Grammar School are currently recruiting for an IT Technician to work within our Technical Support department. Based in one of the best state schools in the country, this is a rare opportunity to help enable outstanding Teaching and Learning. You should have knowledge of Microsoft client/server networks and desktop IT hardware and software, be open to learning new systems and be able to think on your feet to deliver solutions to provide the best possible Technical Support service to staff and students. You will responsible for day to day maintenance of the school IT estate and associated systems. Including, but not limited to: Windows desktop and laptop hardware, Classroom A/V Equipment Active Directory including Azure AD Microsoft 365 and Teams support Your input will help to shape systems and training resources to continually improve the IT network and systems. Salary: £25,991-£27,041 Job Description and Application form is here: https://www.sggs.org.uk/jobs Closing Date 9-30am Monday 23rd November. Stratford Girls’ Grammar School, based in Shottery on the outskirts of Stratford-upon-Avon, is a fully selective girls’ academy state school. Founded in 1958, it’s consistently ranked as one of the top 30 state schools in the country and blends contemporary educational facilities with an historic 15th century manor house and gardens at the heart of the campus. The 2019 Progress 8 scores show that students at Stratford Girls' Grammar School achieve, on average, over two thirds of a grade higher per subject in their GCSE examinations than other pupils with the same prior attainment. This places Stratford Girls’ Grammar School as the current top performing all-girls school in Warwickshire. In the most recent GCSE results, 88% of Stratford Girls’ Grammar School students achieved grades 9-7 A*- A in five of their examinations, 31.2% achieved Grade 9. 100% of students accomplished A* - B in Further Maths and 73.8% attained A*-B in A-levels. Application Deadline: 22/11/2020 Job Types: Full-time, Permanent Salary: £25,992.00 per year https://www.sggs.org.uk/jobs

A Senior IT Technician is required to work in our Technical Support department. We require an experienced IT Technician to help facilitate outstanding teaching and learning alongside our Network Manager. You should have knowledge of Microsoft client/server networks, be open to learning new systems and be able to think on your feet to deliver solutions to provide the best possible Technical Support service to staff and students. JD and Application form is here: https://www.sggs.org.uk/jobs Closing Date 9am Monday 2nd November. Stratford Girls’ Grammar School, based in Shottery on the outskirts of Stratford-upon-Avon, is a fully selective girls’ academy state school. Founded in 1958, it’s consistently ranked as one of the top 30 state schools in the country and blends contemporary educational facilities with an historic 15th century manor house and gardens at the heart of the campus. The 2019 Progress 8 scores show that students at Stratford Girls' Grammar School achieve, on average, over two thirds of a grade higher per subject in their GCSE examinations than other pupils with the same prior attainment. This places Stratford Girls’ Grammar School as the current top performing all-girls school in Warwickshire.  In the most recent GCSE results, 88% of Stratford Girls’ Grammar School students achieved grades 9-7 and A*- A in five of their examinations, 31.2% achieved Grade 9. 100% of students accomplished A* - B in Further Maths and 73.8% attained A*-B in A-levels.

Snap-On are the best tools you can get with a price to match. Awesome kit. Everyone wants them, whether you actually need them is another matter!

Working fine for us on Fortigate: I use transparent proxy on school machines with certificate deployed, explicit proxy on BYOD via WPAD/PAC file and then have a "Guest" SSID with captive portal and DNS filtering using guest logins that expire after 24 hours and are given out by reception.

We were with WCC until recently with their smoothwall/BYOD setup. I made them aware of this nearly 2 years ago when I started working in Warwickshire. I don't go in for publicly naming, but a chap at WCC with initials S.H. along with his superiors are totally aware that this hole existed and I have paperwork to prove it. We dropped them, ripped out all their gear and now use our own, Ultimately we use explicit proxy with basic authentication as it's the easiest way of doing the SSL filtering without installing certificates to clients. Students manage to follow the instructions pretty well. PM me if you want to discuss further, happy to share my experience with them!

Stratford Girls' Grammar School requires a Senior IT Technican, please link for JD and Application, PM or reply to this if you have any questions. Thanks! https://www.sggs.org.uk/page/?title=Vacancies&pid=115

This is actually my job at the moment, it's a great place to work and I wasn't looking to leave but I've been given an offer I can't refuse elsewhere! Any questions feel free to PM me. https://www.kngs.co.uk/contact-us/vacancies/network-manager/