pete

There's at least a couple of suppliers who post on here offering no-obligation surveys provided you've got some clue how and where you're using hardware now and over the next 5* years. We've used Net-Ctrl a long time ago and we used Switchshop more recently for a DfE project - both were good. *yes, bit subject to headteacher whim there, but it's your job to train them to communicate properly so IT initiatives succeed.

My guess is that the student isn't a leaver at $old_school yet (probably educated elsewhere or similar status), so there's no end date in the MIS so no reason for IT/automated tool to disable the account.

Hand the old school your public IP range and ask them to put in a Conditional Access rule denying login from your site if the account matches? (this does assume you're not using the same ISP or LA-provided connection)

Yeah, but it falls under "things I shouldn't have to do given how much this hardware costs on a yearly basis" and we're up to 20 copiers already.

^ Not yet (dealing with another issue atm). I'm going to chase with PaperCut directly to see if it's them (would hope not - I expect better from them) or a PaperCut + certain copiers issue. We could have just missed a setting because it's in a daft place (or poorly labelled) in the copier config. Hopefully it's not a DenverCoder9 (https://xkcd.com/979/) problem.

1) If pupils need to overwrite files (work on logicfile01 on Monday, work on it again on Thursday), no. 2) Haven't tried, but check to see what add-ons ( Hybrid Backup Sync or similar, for example) are available in the QNAP Appcenter. Also, ask Redstor to see what the requirements are. As an interim measure turn on the QNAP's Network Recycle Bin and set a reasonable retention time (Control Panel > Network Services > Network Recycle Bin).

We run Kyocera copiers (Taskalfa 3000, 5000 & 7000 series, depending on volume at each school) and use a Let's Encrypt certificate (print.int.ourdomain.whatever). On the previous copier hardware (Konica) renewing the PaperCut certificate required no intervention on a per-copier basis. On the current copier hardware (Kyocera), any change in certificate on the server side requires manual confirmation via the papercut frontend running on each copier: "A new certificate has been detected when connecting to print.int.ourdomain.whatever:443 Fingerprint: (fingerprint goes here) Permanently accept this certificate?" We ran into this in October and assumed (wrongly, it turns out) it was due to the Kyocera techs using the server IP rather than the DNS name, so we amended the config to avoid a repeat. Today (Jan) we got the prompt again. Is there a hidden "only whine about certs that aren't valid" option that we're missing?

Your Bromcom contact should be able to give you course completion stats for signups using a school email account.

Make sure they've read this page all the way to the bottom - especially the last bit about Class Names which really needs to be at the top of the article, not the bottom. https://docs.bromcom.com/knowledge-base/how-to-import-a-timetable-from-nova-t/ Also concurr about getting a new or different timetabler. See if the person who currently has to deal with school buses is interested in exchange for not having to deal with school buses anymore.

We moved 5 schools (2 secondaries, 3 primaries) over a 2-week Autumn half-term, with the first test cutover (for exams officers, admin staff, attendance officers, timetablers, DSLs, cover managers, MIS herders, subject leads, hr staff etc to spot-check their data) in October. We did a lot of prep work (scheduling follow-on migrations of third-party services, preparing data, dealing with edge cases, having back-up plans, checking and confirming third-party integrations, exporting historical staff leaver data to PDF, testing Salamander document export) over the summer holidays. Make them check their data. Ensure SLT makes sure those people have got the time and capacity to check their respective data areas and fights their corner in the face of lower-priority competing requests. On the scale from "went terribly" to "everything was rainbows and unicorns", it was more toward the unicorn end (way better than we expected).

And if you do nslookup int.schoolname.region.sch.uk (or whatever the domain is called), do you get a complete list of DC IPs? Open a command prompt on one of the macs and try: kinit [email protected] and type the corresponding user password when prompted. Does it succeed? Do you see the details of a Kerberos ticket when you follow up with "klist"? (kdestroy will flush the credentials)

Second follow-up. We're reasonably certain the PDFs belong to terrible lesson resource packs that someone's helpfully shared with their colleagues. So the suspected culprits will be moved to a single area and scanned in chunks by FSRM. Anything that doesn't cause it to fall over gets to go back into circulation, anything that causes it to crash gets the file hash added to FSRM restrictions.

The Asus Zenscreens we have came with a USB-C to USB-A adaptor that (in conjunction with Displaylink drivers) work fine on a USB3 port (blue "tongue") on a ProBook 400 series. Haven't tried on a 250.

Update for future searchers: File Locator Pro (aka Agent Ransack) does a better job than native tools for the content search. It also uses Tesseract to process PDFs. Scope the search appropriately though (it will try to find your text string in .mp4 files if you don't). It looks like the exception log it produces may also be useful for tracking down bad PDFs too.

They're adults. From a content POV we filter them the same way we do the staff. If they're adults working remotely, they have their own Internet connection to get up to odd things. "I'll shell into the college-provided third-party VPS and then start looking at odd things" is a weak argument. I'll also echo the "KCSIE doesn't apply" comment. Someone (probably whoever raised this issue in December rather than considering it in the planning stages) needs to wind their neck in.

I'm going to have to. Looking around at a couple of Github projects and commercial tools as an alternate means of looking for the text we're interested in (SAR)). But we also have to find the "bad" PDFs because at the moment there's a terabyte or so of data that can't be effectively content-searched/classified.

In Server 2019 running a content classification search in a particular folder tree, the following happens: .Net reports an unhandled exception in fsdmhost.exe due to a System.Access.ViolationException fsdmhost.exe points the finger at Windows.Data.Pdf.dll Content Classifier then fails Report generation fails There are probably 108K PDFs in the folder tree and subfolders can contain up to 3000. The same search pointed at a different folder tree works without issue and parses PDFs within the tree. I'd hope it skips an unparseable PDF in the same way it does an overly large zip file, but..... Any ideas?

Our provider charged £250 for the cashless migration and I wouldn't expect them to do it for free. It's not in scope as part of the day-to-day support contract and it potentially ties a tech up for half a day, removing them from use by other customers. Plus I don't have to be on the phone listening to ParentPay and/or ParentMail finger-pointing at anyone but themselves - the cashless provider handles it.

In our neck of the woods, SIMS is behind Arbor and Bromcom, especially after adjusting for migrations since the Autumn census. Integris = 143 ScholarPack = 65 Arbor = 51 Bromcom = 46 SIMS = 40 IRIS = 13 Schoolpod = 2 iSAMS = 1 Tomorrow is also the deadline for stating in writing (by recorded delivery) that you won't be renewing SIMS contracts.

No-one does, including Microsoft licensing reps, when they're not crying quietly under their desks wondering what terrible thing they did in a previous life to deserve that fate.

https://learn.microsoft.com/en-us/entra/identity/domain-services/deploy-azure-app-proxy And as you have that P1, you may as well turn on Conditional Access, since it's a really good idea.

You need the ability to use Conditional Access (P1 or better) to turn it on as the admin and then every person using it needs a P1 (or greater, such as A3). Just make sure you've got a couple of AAP Connectors on different servers so scheduled after-hours reboots don't knock out the service.

Former students at one of our schools won various academic prizes for activities in the 2023-24 academic with a cash value ranging from £20 to £100. Those students are (mostly) at uni/apprenticeships and aren't in a position to collect in-person (at least at times when the school is open). Historically (as I discovered today) the people administering the prize money have used a Microsoft form (sent to the known-good email of the ex-students) requesting bank details from said students. Money is then transferred and the form (and any exported data) is deleted. To the admins (and me) this seems a bit ropey, but at the same time we don't want to tie the winners down to Amazon vouchers (or similar). How does your school handle it? cheers Pete

Q1 for our secondary schools is "predominantly no, but some time-limited exceptions for subsets of pupils where there's a defined T&L need that can be appropriately defined". The main "why do you block youtube?" reason isn't to do with safeguarding (it's still filtered for staff) but productivity and staying on-task in lessons and private study.

We looked at them in Spring 2023 and while it looked promising they were new to the UK market and missing features we needed if we were to move MIS. Probably worth a demo again in late 2024.