Michael

Just to follow this up, iLO 3.09 resolves this issue.

Thanks, much appreciated. They're still on version 2.

Morning all, I've been asked a perfectly legitimate question from a Teacher, but I can't work out how to crop a picture in ActivInspire. Upon selecting a picture I can - move, rotate, change brightness, group, bring forward, send backward, duplicate, increase size and decrease size. No crop option, so how do you do it (with pictures please)! Thank you!

Out of curiosity, has anyone had any confirmed/concrete information as to how long SIMS.net on a local server in school will continue to be supported?

iLO 3.06 has the same issue. All my dedicated iLO servers are on 3.06 without issue and all shared iLO servers I've downgraded to 3.04 = problem resolved. I have reported it to HP, but heard nothing back.

You could perform a mail merge with Outlook 2016/2019/2021, but it's probably going to take you just as long to populate the CSV with their name and email address.

There lies the problem, you end up supporting multiple Apps. I've blocked the Mail App for years on iOS in favour of the Outlook App and Google Chrome on the desktop. The other reason of course is the Outlook App's supported on iOS and Android and is pretty much identical as far as I'm aware.

Any reason why you're not using the Outlook App rather than iOS Mail?

You might be able to populate anything manually in here. Never tried, as generally I use plists. The CC App is pretty good to be fair, no real complaints about it.

@bknaggs - you're right, this makes sense as I was rushing yesterday! What still doesn't make sense is why the certificates, including csr, pem, p7m and vpptoken are all renewed at the same time when they expired Q4 2024. Not sure why Apple was flagging these?

Evening all, I'm not sure what's happening with Apple, but when I navigate to: https://identity.apple.com/pushcert/ for multiple schools, there's no existing certificate, despite the fact in Mosyle the certificate's valid until Q4 2024. Any ideas as to why this would be? Creating a new certificate it's valid for 12 months, so at least the policy is still 12 months as before. Second observation, the enrollment URL in Mosyle MDM now all start: https://enroll.school.mosyle.io when previously they all started https://enroll.school.mosyle.com in Apple Configurator 2 which I've used many, many times to enroll iPads at schools. Has anyone else experienced this? TIA.

You can download the App for free off the App Store, then enter anything into the logon field.

I've used LeftBrain in the UK for licenses.

As the Network Admin you can't really. You can provide guidance/recommendations (as I do), but unfortunately you just have to leave them to it.

You'll need to create a DNS Stub zone on each domain.

I guess it's like anything - a change of policy and a change of procedure going forward. It doesn't necessarily need to include the whole of A3 or A5, but certainly some more crucial aspects to boost security. This would be far more beneficial rather than it being advisory or hypothetical for smaller establishments (which there are still many)!

Surely this should be bounced back to the competition commission and/or the DfE as the bottom line is it's school data and anything within the DB should be readable/extractable.

Separately, but this is probably more a DfE thing - Government should broker a deal with both Microsoft and Google to unlock some of the paid for features, which would benefit all UK schools and enforce better security standards by default. By this I primarily mean Conditional Access.

A few things come to mind really - Cyber Security Training doesn't require authentication, so anyone can download and populate the certificate and state they've viewed it: https://www.ncsc.gov.uk/information/cyber-security-training-schools + last reviewed in April 2021. Schools generally review all policies every 12 months. The MyNCSC portal seems to be forever in Beta (literally years now). Despite the advisories, some hosting providers are just stubborn and will still block the Web Check service. There's no framework as such (as far as I can tell) for third party hosting providers to adhere to, other than linking them to the main NCSC website. It needs to get to a point where it's compulsory, just as Safeguarding is. Related to the above, maybe a referral program to accelerate the compliance for all schools? Overall a positive experience and it's useful to gauge Mail Security procedures which are up-to-date.

I presume you've tried this in Edge and Chrome? And made sure both are up-to-date.

You've answered your own question You do need iOS 12.5.7 or later to enroll iOS devices. Anything older needs to be binned. You'll also find Safeguarding Apps will not work on iOS 9 either.

The problem with DMARC is that it only goes so far. It stops spoofing, but it doesn't stop the legitimate O365 tenancy being compromised (through whatever means). All emails sent out to schools would of course pass DMARC checks. It's going to be either schools reporting the unusual emails, or O365 security which detects the irregularity of emails being generated and sent. If said LA has been compromised quite frequently, then that would be the obvious place to start to re-gain the trust of schools.

Sway now appears fixed.

I leave it 'as is' virtual or physical, a paging file is always going to be required regardless of server roles. To minimise the requirement, just be more generous with your disk and memory allocations.

I wouldn't whitelist the email domain either, but I would recommend trusting the one email address correspondence was arriving from (only if there was an issue).