pete

We're up for renewal on our copiers. Currently mostly Konica with a solo Canon and a few Kyoceras. Looking at: Canon (but have concerns about reliability) Kyocera (have some, seem decent and robust. Probably not using the same supplier though as evidence of mis-selling and stupid print accounting software) Ricoh (maybe, Ricoh direct messed us about with a trial and likely ruined their chances) Sharp (no experience, but heard good things) Toshiba (as above) and what I care about is: Hardware reliability Parts availability. Functional, robust supply chain. Working back office functionality (billing, ordering, account manager competent and contactable) PaperCut compatibility. Decent Postscript drivers Ideally integrator has experience of PaperCut with N+1 sources of truth for authentication. I'm happy to go direct to PaperCut with queries if need be, but since I have to pay the copier company for PaperCut support it would be nice if they could provide it.

Classroom teachers = 50 minutes. Classroom teachers that I find logged in and unattended? 10 minutes until their line manager has had a word with them.

I'd probably want to see an independent security audit of the product, given the Meeting Owl debacle.

Using Fanvill phones with gigabit passthrough without any issues. Very occasionally it may play up if you're going ethernet > phone > ethernet > USB-C dock > laptop, but that's more often than not due to a power blip and the dock not handling it well.

Currently a Fjallraven Greenland shoulder bag. Fits a laptop, odds and ends and a small set of tools. Also big enough for an overnight/weekend trip. For "going to X to fix Y" I have a dedicated toolbag.

Unless something's drastically changed, trials (if buying direct from Smoothwall) are available. We had a 1 month trial at one school. We were already customers for another product, but it was proactively offered when we mentioned a demo. @tom_newton?

You need the MDM (or another method of installing a profile on the iPad) to disable access to other browsers because it's a simple browser swap. Otherwise students will just pick Chrome/Safari and browsing won't be picked up by SW. https://monitorhelp.smoothwall.com/hc/en-gb/articles/7949853296156-How-to-Install-Monitor-on-iOS-Devices#h_01H9MQ72HEM3QH0D12HPJCE8XB

You're a couple of months too late (recycled a bunch of 1608 handsets). Comms Warehouse are decent for refurbished phones: https://commswarehouse.co.uk

I would identify your vulnerable students and then use the Person Data Output routine (Routines > Data Out > Person Data Output) to export their data. That arrives as a word document (100 pages for the average Y13 student). You'll also need to export linked documents on the pupil record. Convert those to PDF (if not already) and store. The Bulk Delete Student Data Tool (Tools > Student > Bulk Delete Student Data) can show you Name, Age, SEN and EIC Status as a long list that you can filter. It won't export to anything but it'll give you an idea of affected students.

Your risk register is what could happen, what mitigations you have in place and (post-mitigation) what the residual risk is. In detail. That then feeds into the school/trust-wide risk register (in more general terms, with reference back to the full doc in a footnote). You likely already have this written down, just not in one place. A lot of mitigations will apply to more than one risk. Using your example (and ignoring encryption in and of itself, because it won't do much) So: Risk = potential for malware to spread via USB, interrupting teaching and learning (crypto, cleanup times) and potentially exfiltration of personal data by extortionists leading to data loss, reputational damage and (if it's safeguarding data) potential serious consequences to a subset of students. Mitigations = Anti-malware measures. Automated virus scans. Restricting USB use to only those who need it. Encouraging use of OneDrive/Google Drive instead. Potentially tattooing* Bitlocker usb drives to only school-owned/encrypted devices to be used. Restriction of what (file types such as macro-enabled documents and executable code) can be copied to network/cloud locations. Cybersecurity training to reinforce "don't plug in random stuff you found in the car park". Use of Canary tokens (https://docs.canarytokens.org/guide/) to spot-check that people are actually following guidance. Alerts for file servers and cloud storage locations when too many changes come from one user over a short period of time. etc Residual risk = Whatever Is residual risk acceptable? What would it cost (time, money, additional faff for end-users) to reduce the risk? Yes? No? Notes. *look in the Bitlocker GPOs.

Most of the basics have been covered but: Salespeople I value my working relationship with our receptionists more than I do with any supplier. If your employees are rude to them, lie to them or they get a bad vibe from you - I'm not going to use you. I am more likely to keep using a good individual saleperson (as they hop between employers) than I am a supplier. Spot-check what your salespeople are doing / sending out occasionally. If they're acting like objectionable idiots when contacting customers or just seem creepy* you need to fix that. *I've probably told this story on here before but: Sales pitch with three shortlisted reprographics suppliers. Pitch 1 & 3 were normal. Pitch 2 - cult. Strong "these people abduct hitchhikers" vibe. As soon as their salepeople left the meeting room, everyone gave a "WTF?" look and began variations on "so they're a cult, right and we're not using them ever, right?"

The limit is 100TB across the whole tenancy (unless you've set per-user/group quotas). Plus 50GB for every staff member with an A3 license (applying the increase to every student license wouldn't solve Microsoft's problem). So one student could have 90TB of penguin videos and everyone else could be squeezed into the remaining 10TB and Microsoft wouldn't care.

Yeah, the kit's mostly decent, it's just over time the rooms have got messy. Fixing it is a time sink because we tend to discover other strange things that we (or the estates team) need to fix before we can start the cleanup. Hence the desire to not have my lot spending the summer doing that at one school when there's more important stuff at the others.

Who're you using for audio-visual install and tidying/cleanup work? Anyone you'd recommend? Quality of work is what I'm aiming for rather than cheapest. I've got a fair amount of classrooms getting a facelift (paint/furniture/carpets/ceiling) and as part of that the AV cabling and kit needs tidying and making good. While we could do it inhouse (we have before and do a good job) I'd prefer my lot got on with IT projects.

I'd be looking to review the config of the stack and the WLC just to see if something's odd / off. What happened to Master 1? And (if it's gone) have any references to it in the stack config been removed?

It depends on the keyboard, but try detaching the actual keycap (flat bit of plastic with the symbol) from the scissor mechanism. Attach the scissor mechanism first (hook one side and the other should "clip" in with a bit of pressure. Then put the keycap over the top and push down gently until you hear a click.

For domain02? Burning them down and recreating manually. It's a tiny domain in terms of people, data and groups.

Our film studies dept heavily used the old stream and it worked well for them. They were a bit disgruntled that they had to migrate content to new stream, but otherwise it works for their needs. Provided it's internal sharing only.

Yeah, meant populated in old domain (need to manually enter it for the groups) and kept the same in the new domain. Both use password hash sync, but wouldn't the password remain the same? Password data is synced during a migration between forests and (since our setup treats AD as the source of truth) the AD password from domain02 would be moved with the user object to domain01 and become the "official" source of password data for Azure AD. So long as the user object is removed from sync in domain 02 to avoid having two services attempting to amend the same user object in Azure.

If I have: AD domain01 syncing user, device and group objects to M365 tenancy domain01.onmicrosoft.com using Azure AD Connect (now Entra Connect). AD domain02 syncing user and group objects to M365 tenancy domain01.onmicrosoft.com using Entra Cloud Sync and then I move a user object (standard domain/forest migration) from domain02 to domain01, ensuring: mS-DS-ConsistencyGuid is populated UPN and email address remain the same appropriate UPN suffixes are added to the receiving domain any automated licensing rules account for the new user objects then the user object should (beyond a brief blip during migration) remain functional in the M365 tenancy once migrated across and have access to the correct data, right?

I haven't been involved with it for a while but we were using this: https://apply.cloudforedu.org.uk/ ...anecdotally it improved uptake/registration by parents at one of our schools as it was more discreet than previous methods.

Same at SchoolA - tiny (sub 20mm) pipes with right-angles in a concrete floor filled with power and gas lines. Estates team has vetoed cutting into the floor. We're looking at pillars bolted into the floor and a ceiling joist (because staff and students will swing/lean on them) with internal cable runs for AV/data/power. Main issue is sight lines from the teachers desk so if Nigel in 7B is seconds away from getting their tie in the bunsen the teacher can intervene.

TES are sufficiently clown car that I have no expectations of competence. Everything they buy becomes awful.

Happened on 13th, noticed on 15th. Email to customers on the 19th (likely in the finance mailbox - I didn't get it directly) Potential for customer data to be compromised - keep an eye out for phishing pretending to be Millgate. https://millgate.co.uk/data-breach-incident/ Overall, fairly impressed with their response so far. A few Kent councils could learn a thing or two.

Have teachers / the school indicated preferred channels for everyday student <> teacher communications? Unless the students are purposefully being annoying (in which case, use sanctions the same way you would in class), it's not unreasonable of them to ask subject-related questions of their teacher.