dgsmith

We have a cluster of macs, mostly running MacOS 14 and a macbook. The macbook for some reason will not connect to an external display when a staff AD account is logged in (albeit via a docking station). When that account logs off back to the login screen, the external display (a projector) will then return being broadcast, and will remain showing if logging in to the mac with a local admin account (so may be user permissions based). They're managed by jamf school and I tried disabling profiles on the device to no avail. However, as this seems to be user specific, then hardware profiles probably isn't where the issue is. Unsure what else I can try..

Was just about to say the same, looks like someone has taken the initiative to actually communicate they are aware of the issue. I am sure many of those who use cpoms would not have any idea where to check for updates other than calling, and I am sure cpoms have been inundated today.

Our lighting bars are (were) all like a c-shape type (essentially a circular bar with a quarter of the diameter cut out) so that wires can just be pushed in, rather than needing to be pushed through. Consequence of this is that the structural integrity is compromised as the bar doesn't go all the way around. It's lasted ok for decades with heavy tungsten fittings but it isn't a "thing" these days and so could not pass. To be fair, we'd probably want to change them anyway if we have to change everything else. The rest of the electrics were written off in entirety. The only things not to fail were the fittings themselves, but we have no means of using them now.

We're going through the same consultation right now too, although finding the money when there are various other priorities is currently our issue. The whole system was condemned and removed, so we currently have nothing. I'm fairly sure you wouldn't use dimmer boards with LED though, as each fitting would have a direct power connection (or daisy chained, as most LED fittings have power in/out), as well as being on the DMX circuit to control the brightness, colour (where applicable) and movement (where supported). This is all then controlled via the desk. I don't know a great deal about LED fittings, beyond my own research and various preliminary meetings, but we'd have to have mains power directed up to each bar and the DMX circuit completely rewired too to loop through each fitting. We need a "from-scratch" solution though, including the bars themselves as everything on the old system is gone/has to go.

To be fair, we'd have much more to worry about if the cover manager's, or any staff accounts, were compromised, than someone getting access to a handful of locked-down supply accounts for a day. If there is unauthorised access to a staff account where the supply passwords are emailed, that is presenting a much more serious concern, and would afford access to any data that accounts can access.

That's quite frustrating really! I guess therefore it doesn't seem like a true wildcard parameter, but perhaps just detecting the presence of a wildcard symbol to then translate as "anything before the @" symbol, i.e. a placeholder character. It seemed like a fairly straightforward config change to be made but seemingly there is no support for this

We have purchased a batch of chromebooks for exclusive year 7 use, however students in other years are finding out they can also log in to these devices, when they have their own devices already, and unfortunately are frequently "forgetting" to bring them! We already use wildcard on the domain (*.schooldomain.com) within gsuite restrict signin to list of users, and I thought I could change this to 23*@domain.com to just allow students who have 23 at the start of their email (yr7). Unfortunately this not only blocked everyone else (good) but also restricted login to students who matched the wildcard (so also said 23* accounts were restricted). Do I need to use some clever regex here or is there a cleaner way of achieving this?

We originally went with 3cx/yealink combo at the start of 2015, so have had not far of a decade with it, and still remain more than happy. While any yealink phone can be "made to work" with 3cx, many of the older phones that can be picked up cheaply (used) can be difficult to provision, but if you're buying new phones this isn't an issue. Many of our older phones bought around this time (T23G, T42G) still work fine. Based on current models, classrooms would probably be the T31G/T33G (or if network points are plenty, the cheaper non-gig passthrough models), offices may be T42U and main office may be T43U/T46U (we use T46s for our core office/SLT). We used to use the wireless phones with base stations but the base station reliability was questionable, however this isn't necessarily going to be the same now, but we have steered clear since they all failed. Sometimes i'll use the 3cx soft phone on my mobile to roam but I find it cuts out between access points (probably not a 3cx specific issue though).

Many thanks for this, I hadn't appreciated with Sibelius that the pkg file is already present within the dmg and that it can just be directly extracted without the need for any 3rd party intervention. Suffice to say, it imported directly as-is into jamf without too much hassle, and certainly much easier than me thinking I needed something to pre-compile the package. This was an upgrade (app replace) rather than a fresh app creation. We're using jamf school, rather than pro, but I know my way around (ish) the app management, though easy to figure it out.

I have a cluster of students in one group who seem to have inherited a shared quota from the top-level of their folder tree and hence FSRM says that their available space is "limited by restrictive quota of xx on [drive path]". Even though every cohort folder seems to be configured the same way, only one of them shows this restrictive quota. I can't see anywhere to disable or change this config! Anyone got any ideas? Haven't had much luck google searching either. Ultimately this means all students within this container are sharing their container folder quota, even though they have individual quotas set also.

We have a rather old deployment of sibelius on our jamf, that was a custom built package several years ago (as it's not available in the app store). I am unsure quite how this was done and looking at the apple enterprise deployment info suggests certain minimum requirements and an associated cost to develop in-house app packages. How else could I look to create a deployable jamf package (I think pkg format?) from the default application download (which is dmg format), without any associated license/software costs?

Thanks for the advice. Being based more local is an ideal, rather than a deal-breaker, and if we have to consider longer distance carriage then it's something we'll have to take into consideration. We may end up getting a new desk further down the line too, but a repair is probably the quickest solution for now, just not easy finding repair options or companies that can assist, so appreciate the input.

Hi, we have a zero88 leap frog desk, the big green one, a bit aged now. Issues with the programs not storing (although apparently not the battery) and some faders are broken. Having difficulty finding many places that will either offer repair services or facilitate direct manufacturer repair. Does anyone have recommended companies local to the NW region (ideally) that offer such services I could enquire with?

Not for this kind of work specifically, as it's never really been inspected/tested (in my time anyway), though they have worked in other schools in the trust. I know one of the chaps is active on these forums, and may well be aware of this thread (and will certainly know who I am!) We have no reason to challenge the assessment and trust they would have advised if anything remained electrically safe. That said, it's still very disappointing, if perhaps not overly shocking. We're not an arts school, nor have frequent hall rentals requesting the lighting system, so the demand comes just from open evening (and sometimes not even that) and the occasional show/production, which in some cases recently even they have done without. The ideal was to salvage some degree of operation, even if reduced capacity, and try and cost in a gradual modular shift towards LED, whether that be wiring, structure or a desk in stages. Now, it seems to be everything at once or do without.

Thanks for the responses. It has been declared as electrically and structurally unsafe following a thorough full day inspection. Yes, the company offer the services of new systems installation too, however it has been made clear that funding for that is not available, and the preference was always to try and salvage or repair what we could. The reality is that, despite inheriting an array of slightly younger light fittings and PAR cans which we hoped could be swapped with our existing ones, the underlying system isn't fit for purpose. No aspect was considered as being safe for continued use. We have already had a full electrical rewire done 12-18 months ago with LED lighting installed throughout (by full, half the school, where the hall/stage is). This didn't factor in the stage lighting, as it's fairly niche and specific, so no preliminary or even future-consideration work was done here, besides a new electrical feed to the dimmers. In hindsight, we'd have had the inspection 2-3 years ago and then had some of the fundamental electrical work (mains wiring) added on for future stage lighting upgrade, but this wasn't thought about. School has no contingency funds for this, certainly not a whole-system replacement and it can't be argued that there will be any tangible benefit to exam results, as the department has their own smaller-scale rig for classroom/exam use. A modular approach seems most realistic, but still seems to necessitate a considerable initial outlay to lay the ground work. Just not really sure if we have any hope at all...

Although not too surprising, our hall and stage lighting has failed the safety and electrical checks and is no longer to be used. Broadly speaking, it dates from the 80s and possibly early 90s, but certainly 30+ years old. In an ideal world, we'd just replace the lot with a new LED-based system, but I know we simply cannot justify the cost when the impact to exam results is negligible, at best. The funding is just not there, but we're now left without any kind of lighting at all. What options do we have realistically? Is there any kind of grant or targetted funding we could explore to help towards the cost of looking at a replacement system? It would essentially be starting from scratch, including all fittings and lighting bars, wiring, desk etc. If we're realistic, it may be that any kind of approach would have to be modular with perhaps just a handful of lights in the first instance. What sort of cost ballpark should we be considering?

Found this now and it looks like it could sort most of our issues! I think we'd make a sub-OU with the unrestricted policy in place for anyone who lives on the doorstep of the school, but it does indeed seem to force a managed wireless network when in range and disable the ability to change it. Thanks for the heads up (and to rogerdnixon)!

Where about in gsuite is this specifically managed? I can't see a relevant policy setting within the networks config. We don't use sophos, though even if we found a way to push filtering through our site anywhere, it may cause issues at home when parents are responsible for their activity. It also wouldn't deal with the lack of internal visibility on classroom monitor.

It's become apparent to me recently that students are starting to increasingly use their chromebooks in school via hotspot in order to circumvent our filtering and prevent being visible when teachers monitor via netsupport tutor. Obviously we cannot restrict the wifi networks in general as some will legitimately need to use a hotspot network when at home, and I suspect some of these instances will be when they have already connected at home and it's remembered. Although our policy is set to auto connect to the school wifi when in range, it doesn't prevent students from simply switching to their store hotspot ssid afterwards. Is there any way we can avoid or handle this, even if there is a policy to prevent switching networks to anything other than school wifi if that is in range?

So I possibly see now why it doesn't work when I run it manually, as it tells me that system v scripts are no longer supported (for security reasons) and my searching for this doesn't pull a resolution. Some suggestions indicate using IPP but I can't see how this ties in to papercut authentication. I didn't think it would be straightforward but I thought I may have made a little progress. Maybe I just cut my losses!

@RLR: Thanks for this, jamf school does have scripting so I am able to upload a script to run at login (I assume that's when you have your one). Alas I can't quite get it to map our printer despite this being enabled in mobility and available in the list if trying manually on the mac. Quite sure I have set the variables right. Would you expect this to just map at each login? I assume the echo lines are writing to a log somewhere, so it'll be useful to know where that is as I can't figure that out from the script (which would also help me see if it's even trying to run it at all). It's picking it up in the profile at least.

I am not too bad finding my way around jamf school, but this is fairly specific to papercut integration, or at least the ability to do the kind of things necessary as per their guide, which I am not that familiar with. Well, this is the same link I posted in my opening post and as I say, we do not use jamf pro

Hi, our teacher that uses macs in their department has asked if the classroom printer can be used by the macs, which I have never actually looked into before as apple isn't exactly my forte. We use jamf school, which I appreciate is a lesser version to jamf pro, the latter which seems to be what most guides are based around. While I can see this link is a guide on papercut's own website for deploying printers, it specifically is a guide for jamf pro. Although they said it's just a guide and not necessarily exclusive, I am not seeing much in the way of cross-over config to jamf school. I don't want to invest wasted time in this, so was wondering if anyone has managed to deploy papercut and printers to macs for jamf school, or could even advise if this is not going to work?

Glad I saw this as I have wondered for the past few months why our recent users list shows students who left many months ago, on devices used frequently each day by multiple students. I have pretty much given up checking it but it was useful when it worked. We don't have the activity log either. @jthompson: What is the extension you are using, is it free and does it do a reasonable good job of tracking activity?

This. The build quality of hikvision cameras is mostly adequate and the image quality is actually, for the most part, fairly reasonable. Yet the fact we must use either IE or edge with IE compatibility mode enabled, to get a feed on them, in 2023 is quite staggering. I am not a huge fan of the browser GUIs but they are at least something you can navigate and comprehend reasonable ok (compared to some others I have seen). The GUI with our NVR on the other hand.. not so great..