pete

We found 0.3 mm depth on the laser cutter was sufficiently deep to be obvious / readable, but not enough to compromise structural integrity. We tested on laptop lids from the scrap pile.

Lincolnshire - 4 schools down for 25 hrs now. Began 13:50 yesterday (20th Sep) - noticed high load on the filter (hung sessions waiting for a response) and then issues with external DNS resolution. Called the helldesk and the wait time (30 minutes) indicated it wasn't just us. Email (365 & Google Workspace) is occasionally delivered if onsite and externally available services (hosted on site) aren't available. Some websites may work if the browser has cached majority of page assets, but very hit-and-miss. Calling for an update this morning, I got the impression from the helldesk that CommsCare weren't onsite/engaged until this morning. Given emPSN Twitter and website didn't post a status update until this morning, that about tracks. https://www.empsn.org.uk/support/blog/2022/09/21/empsn-major-incident-inc01207579-p1-loss-of-connectivity/

It took ~5 minutes when I did it at one of our secondaries a week or so ago (middle of a lesson period). Server isn't anything amazing (4 cpus allocated, 24G RAM, 18G SIMS db, ~840-ish students) but it didn't take any time. 3hrs on a Saturday isn't right and something's off there.

Chromebook via a browser extension push out from Google Workspace. It doesn't work on iOS or Android - @tom_newton might be able to divulge whether it's worth putting a "yet" after that statement.

We use it across two secondaries. It's decent - minimal client impact, few false positives, dashboard with sufficient context before and after an event so the safeguarding team don't need to ask my staff "what else happened around that time?" You can also integrate it with the MyConcern API if you use MyConcern. There's an extendable 30-day trial available - scroll to the bottom here: https://www.smoothwall.com/education/monitor/ .

My suggestion would be to copy a group that *nearly* matches what you want, name it SchoolInitials-Chaplains and in the description put the purpose and the group you copied from. Now remove permissions from the custom group (and test after each permissions) until you get as close as you can. Download the SIMS permissions spreadsheet to use as a reference (available from the ESS support site) I'd probably start with Class teacher and whittle back from there. When testing permissions don't provide too much access, remember to test from the search box as well. -- But before you begin, I'd scope how many students are affected and whether there's another way. We (for example) publish student timetables to their Outlook calendars so it's fairly easy to see where they should be from Outlook.

We're using the Aruba 2930F's as edge switches at secondaries and as cores (two switches stacked for redundancy) at primaries. The 2540 series would also get you SFP+, but depending on how many and when you buy, there may not be much in it price-wise. Have a word with Caroline Freeman at Switchshop - she's competitive and will let you know that (through a quirk of HP's price lists) the 2930 series PoE switches are cheaper than the non-PoE. For a dashboard, LibreNMS is fairly fire-and-forget.

Note that if you're using InTune or have ever touched MDM in 365 (have ever configured anything in there), the option to prevent users registering devices with Azure AD is turned off: Users may register their devices with Azure AD: You need to configure this setting to allow users to register Windows 10 or newer personal, iOS, Android, and macOS devices with Azure AD. If you select None, devices aren't allowed to register with Azure AD. Enrollment with Microsoft Intune or mobile device management for Microsoft 365 requires registration. If you've configured either of these services, ALL is selected and NONE is unavailable. https://docs.microsoft.com/da-dk/azure/active-directory/devices/device-management-azure-portal#configure-device-settings There's a /r/sysadmin thread on the topic recently too:

My concern would be why Lanschool is capturing (and the Teacher App is making available) what are clearly email logins (slide/page 21) - anyone with access to the Teacher App can harvest credentials for students and (with the IT admin tool, presumably staff?), which is a classic data breach. Not to mention a solid "any teacher could have logged in as me" defense in court. It's not particularly tricky to identify login fields and ignore anything typed into them.

Ask "you're using Office 365, why is it a problem that the ticketing system is in the cloud too?" -- I know that doesn't solve what you've been asked to do, but you're creating unnecessary technical debt when there are better options.

Doing the same and weighing up Pluralsight vs CBT Nuggets vs ?? for my lot. @tangotech - what annoyed you about Pluralsight that CBT Nuggets did better? And has anyone successfully managed to verify non-profit status with either platform?

So the AVCO FAQ (https://a2c.avcosystems.com/Help/FAQ) has this: which is correct about the "keeps working" part. Not so much about the new key removing the expiry message.

One of our other schools is also seeing this. They'd launched A2C last week to check and all was fine (no expiry dates). This week (in response to an email from me) they've checked again and expiry dates have appeared. Both sites do use a central config store* for A2C, but that's a supported configuration. *to avoid having to manage certs and configs on multiple workstations. edit: the other school's on the newer version of A2C.

Would someone mind loading A2C and checking their certificate expiry dates? We're seeing this at one of our schools (AQA and OCR expired), but check connection comes back as ready and we can upload/download files.: if we generate a new certificate via OCR and import it, the expiry date is also 25/06/22 (after restarting A2C just to be sure). So I'm not sure if exam boards are no longer bothering with certs or if it'll stop working sometime between now and the results days.

There is an element of "rinse, lather, repeat" to the method. Depends who you get on TAC and whether their interest is to avoid future tickets or stick strictly to the policy.

Historically you could request a newer firmware (even if you were out of support) from Cisco TAC if you could identify a security vulnerability* in the version you're currently running and a newer version** that fixes the issue. I haven't had to do that in years though, so policy may have changed. *as in, provide the link to the Cisco bulletin. ** link to the newer version.

My list is usually. Check AD is coherent and sane Move role Make sure it moved Rinse, lather, repeat then (assuming N+1 DCs) swap it over during the working day.

Only when they're prompted to change the password through some other event (choice, expiry timer, admin ticking the "you need to change your password at next login" box in AD) If Bob's password is 10 characters currently, he'll need to use a new complex 12 character password only when he next chooses a new password.

Not so much for mobile phone repairs, but generally this https://www.thistothat.com is a decent website (if US-centric results) when looking to stick things together.

I still have one (Synology and a couple of ultra-small form factor desktops). It doesn't get powered up as much these days (sufficient spare capacity at work to run a dev environment when needed), but occasionally I'll spot something interesting that I wouldn't otherwise get the chance to play with and spin it up for a couple of hours.

I vote to rip it out and replace. It may require a Condition Improvement Fund bid if the electrics are also in poor condition, but your CFO should be on the case with pulling together a bid for that. Ethernet is low-voltage electrical wiring. So far we've: Redone electrics and fibre at one of the secondaries Redone electrics, ethernet and fibre at both primaries About to begin redoing as much of the electrics as we can fit into the budget at the other secondary Planning to rewire incoming primary for electrics, ethernet and fibre Mostly because "it'll last another year" has been relied on for far too long and now it's a problem.

Use the Crown Commercial Contracts (or CPC, though Crown was cheaper when we tendered last). Avoid Konica Minolta. The techs are great, the hardware is reliable but the backend services (finance, parts and consumable delivery, account management) necessary to keep things working smoothly are terrible and have been for too long.

(my emphasis). "Well done, now everything looks equally horrible" is definitely a potential outcome. My recommendation is to pay a freelancer with a backbone who'll stand up for themselves and tell clients the polite version of "Your idea is terrible and here's why" so you get something palatable. Yes, this will cost money but you (IT) will not be subject to the whims/meetings with every SLT member who feels they need to contribute and so it's money well spent.

No, not really an IT thing. More me being sympathetic to the plight of an exams officer who's increasingly cheesed off by various staff not remembering when doing assessments in class time. Currently, this is in place at the site: SENDCO sends around a regular "accomodations for $list_of_students" reminder Cheatsheet (Bob Smith 7B, Green Paper) in reprographics and other staff-only copier locations Exams officer reminds staff Does your place do anything particularly effective* to solve the "oh, I forgot" staff?

Reported very early this morning: https://techcommunity.microsoft.com/t5/discussions/edge-stable-103-0-1264-37-breaks-group-policy-management-of-the/m-p/3557245