pete

I'm in the market for a replacement ID badge printing company due to dissatisfaction with the current supplier (changed hands, service nosedived). This is for staff IDs. Who're you using and would you recommend them? I'm interested in: Fast turnaround (3-5 days) Double-sided printing Range of supported badge types / technologies Lanyard printing Storing templates (so HR can order a "badge for Sarah Bloggs at School X" and they'll use the appropriate school badge/colours/card type) Reasonable cost I've considered doing it inhouse, but I have no interest in my team getting stuck doing bus passes for students, so we're staying with a third party.

^ Considering yearly certification is a nominal fee (£120/yr for our site that has one), I'd say that's an interesting choice when weighed against "School X burned down because they decided not to maintain the lightning rod" and the resultant PR fallout and press FOI requests for governor meeting notes. If your school building has a lightning conductor, it's (usually) because at some point there was a fire risk assessment that said "you need to install a lightning conductor" due to (typically) having lots of people on-premises, being a public building and being the tallest thing around in that area.

Insurance should pay out provided the company hasn't done anything silly / negligent*. *erected a massive clock tower on the building, but didn't install a lightning conductor, for example.

As others have hinted in-thread, dafter ex-employees may abuse the SAR process in an attempt to get copies of documents they forgot to take a copy of before leaving. Instead of, y'know - just asking for a copy of their lesson plans like a normal person. That may not be the case here (it could just be a poorly scoped SAR or I've made assumptions from the OP), but a request for OneDrive without email as well (for example) makes me think the request is odd: "Hi, this is a request for data about me created or modified between date X and date Y" is what I'd expect - it covers all potential locations. vs "Hi, this is a request for all data in my old OneDrive folder" - potentially misses out other areas pertinent data may exist.

SAR would cover anything about them (copy of a CV, PDF payslips, etc, PDF copy of a letter/email about them, for example), but that's it. Things created in the course of employment in exchange for payment are owned by the employer. If those things contain information about the ex-employee, they can request a copy of that information. Check with your DPO for guidance (and your SLT about any potential landmines in the school <> ex-employee relationship).

You can build 2 DCs in the time it takes to swear at one VMware > HyperV migration. AD is (surprisingly for Microsoft) one of the easiest and fastest service to migrate.

Nope. I've re-checked the policies this afternoon. We set a default 180 days retention, but thereafter the usual retention kicks in and things should disappear on day 181 if either the user deletes the file or we delete the user. Mailboxes look fine (current staff and students and some recently-deleted people within the 180 days limit), it's just OneDrive that's way off.

Yeah, we're talking students who were deleted in 2018. Their accounts are gone and our retention is 180days after deletion. There is an Advisory open in the message centre: MO649834: Users’ files in the Preservation Hold Library aren't being deleted by retention policies or retention labels. but the description refers to a recent change causing the issue, not a 5-year backlog.

I'm seeing quite odd data when I click on the storage-per-product breakdown. OneDrive's reporting space consumption by long-deleted (2018) accounts from years ago. It's not clear whether that's a problem with their data or if the "no really, we definitely delete stuff when you tell us" is a lie. Anyone else seeing this? (365 Admin Centre > Reports > Storage > Storage use by product > OneDrive). I've opened a support request, 'cos this is either a) mistakenly including historical consumption or b) deletion of user accounts not deleting OneDrive contents (despite Microsoft saying they did).

Is anyone using the same Synology NAS to backup two or more Microsoft 365 tenancies? Testing it here, I'm finding that the Active Backup restore portal doesn't keep the correct tenancy selected during backup browsing / restoring if you have N+1 tenancies. I haven't yet restarted services or rebooted the Synology since adding the second tenancy. More detail: BigTenancy01 - Scheduled backup of some test sharepoint sites (50GB). Backup and restore works without issue. SmallerTenancy02 - Full backup (250GB or so). Backup completes without issue. When browsing to restore (after adding SmallerTenancy02), the restore portal struggles to keep the correct tenancy selected.

It's also not clear how that affects N+1 schools using the same tenancy. If we have a MAT with 10 schools in the same tenancy, is that a petabye of storage or just 100TB as it's only one edu 365 tenancy? Interesting time of year to bury the announcement too.

We are actively reconsidering Twitter, purely because of Elon. It's less useful to us as a news / info delivery channel due to the sign-in requirements (which appear to be half-on, half-off at the moment). As of just now (checking for this thread) signed out people see content from 2020 if they view our school feeds, while signed-in people see current content. Testing of Threads is in-progress, with the caveat of "don't put pictures of people on there yet".

I'd be more inclined to rebuild on a new forest, especially if the AD domains you acquire are a bit rubbish/neglected/WTF. That's one of my many summer jobs. It'll be annoying, but it'll remove needless complexity and make maintenance and troubleshooting much easier.

Does it work on a Windows laptop? If it does (because you've included school01's inhouse sub-CA as trusted at school02 via a GPO and vice versa), have you pushed out the same certs as trusted via MDM at each school? Can androiddevice01.school01.whatever resolve the hostname presented in the certificate? (radius02.school02.whatever, for example)

Go to Admin Console > Account > Account Settings You can set Age by OU or by group.

Jamf School for 10 devices would be ~£50/year. It definitely is worth it, since this will be a proof of concept and you want to set requirements and boundaries from IT's point of view from the beginning. You don't want to be individually managing iPads any more than you want to be manually installing software on PCs.

IEC leads we recycle half every year. I've never had to buy any unless I want custom lengths for racks. Storage, I strongly recommend Gratnells racks and trays.

Our rule is: Must have signed and understood AUP Appropriate headteacher signs off on it Access should only be to necessary things: Dept lesson resources to plan over summer? Sure. Email account to contact colleagues? Yes. Access to data on people? Not until your start date.

Give Krystal a punt. We've used them for years and I've (personally) been a customer long before that. No complaints.

We're just moving our second school onto Live Register (liveregister.uk). Their website is fairly awful, but the product is decent*, speedy** and the support's good. * 4 years at the other school without a single complaint from catering, IT or SLT. ** We're enrolling at the moment and we're averaging 90-odd (3 forms) students every 12 minutes.

A budget lever to push out 1:1, funded by the DfE with guaranteed refresh money every year? Sure. It would also let me set MFA on for all students relatively easily (device + creds). Do I think the exam boards would properly provision their backend infrastructure? Not until the first round of firings after it goes horribly wrong in year 01. -- Properly done (MidYIS, ALIS, LiBF) online testing and exams work fine. I just don't trust AQA, Edexcel or OCR to be able to deliver them. WJEC are a bit better overall (compared to the other 3) but their "upload your film studies moderation examples" portal is awful.

Also, use the enablement package (KB5015684) if you're running 2004 or better. Assuming you're fully patched, 2004 > 22H2 will take ~5 minutes as there's very little to change. https://support.microsoft.com/en-gb/topic/kb5015684-featured-update-to-windows-10-version-22h2-by-using-an-enablement-package-09d43632-f438-47b5-985e-d6fd704eee61

Currently: The Consuming Fire (Interdependency Book 02) by John Scalzi Grave Expectations by Alice Bell

I'd say: "How do we easily change the pre-recorded greeting message (.wav file) that plays when people call us?. Can we do that at 3am if the school burns down, or do you have to do it?" Ideally you'll have a few pre-recorded (Normal, Holidays, Delayed response, Lockdown) greetings to pick from via a drop-down web UI, plus the ability to record a new one.

@Koldov My guess is they've brought your site up on a server presenting a cert that's missing your domain as a SAN. Or they haven't got round to renewing the certs with Let's Encrypt (possibly because LE rate-limited them, depending on site density on the server) and because they're using HSTS (your browser knows there should be a cert because the server told it so previously) the browser's aborting the connection. If I recall correctly they mash a lot of sites into each cert. -- As a Greenhouse customer (who's not affected) these do seem like avoidable schoolboy errors. Loading site data from backup/shared storage onto another server with spare capacity should have resolved this within a couple of hours.