pete

Why are you taking card details over the phone? One of the major selling points of ParentPay is that the PCI compliance burden is outsourced to them (parents do everything online using ParentPay services).

Patch 25040 is now available (as of ~16:30 today). https://myaccount.capita-cs.co.uk/Notifications/Important_2019_Spring_Release_awareness_regarding_CTF_Imports/

We received an email around lunchtime to the generic enquiries@ mailbox for the school. The link to My Account in the email is broken.

I usually start with the benchy (#3DBenchy – The jolly 3D printing torture-test) at a range of resolutions once I'm reasonably happy with calibration. That way I can scribble resolution and print time on the bow in permanent marker so I have a physical reference for print time vs finish quality.

@GrumbleDook Say a school had said "We need to take your photo to use on ID badges, but we won't use them for anything else" to staff. Where would they stand regarding re-use in this manner? The basis for taking the photos (originally, years ago) was consent. We're not planning to do anything beyond the "here's the safeguarding team photo board" (and we sought permission again), but since you're here.... My position is the same as @elsiegee40 - the harder it is for a salesperson to discover who I am, the more work I can get done.

Harvesting a list of valid contact emails for a more targetted phishing/FOIA/marketing campaign?

Apparently at the beginning of the year: https://biostore.co.uk/company/press-releases/iris-software-group-acquires-biostore-ltd/ We didn't - I found out by making a licensing query and being redirected. Nor did our cashless catering provider (they found out during a discussion with ParentPay about an unrelated matter).

Cloudflare post-incident write-up. TLDR: Verizon are incompetent muppets. https://blog.cloudflare.com/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today/

Gah, I posted in that thread about the Science email in January. I knew I'd seen something similar before.

I'm undecided if this is a prelude to a phishing scam or just a poorly-worded FOIA campaign. It's apparently been sent around to lots of RS depts? Surname redacted to protect the sender if legitimate.

I can create a new form currently (20-06-19, 17:12) and go to edit an existing one (owned by me or a group form), but when I attempt to add a new question using Firefox 67.0.4 nothing happens. Previously (within the last month) this worked. Other 365 components seem unaffected. If I use Chrome (75.0.3770) I can add questions without any problems.

Nope. (Well, assuming you flip the appropriate GPOs to disable daftness).

(Assuming EES / OVS agreement) If you're licensed for Win10 Education, you're licensed for Win10 Enterprise.

$other_school has Cunninghams as the incumbent and when we jointly sought bids for a catering refresh across two schools, they were only invited in order to be polite. From what I recall, the issues with Cunninghams (both the demo and the concerns re the existing installation) were: The system being demonstrated couldn't go offline (connectivity lost to a till, for whatever reason) without contacting Cunninghams support for a code which (given how short break times are and how long phone hold queues can be) was a deal-breaker for us. Attention to detail on the proposal documents was lacking - grammar, spelling and some technical details were incorrect. One document had an unrelated school on it Sales person giving the demo was unprepared (hadn't checked the hardware worked - it didn't) and dismissive of concerns from incumbent school. Thoroughly failed to impress and lost the sale about ~10 minutes in. He then made excuses when called on this. End-of-day procedures were manual, not automatic and were frequently unreliable (crashes). Fingerprint readers demonstrated were UareU 4500 series rather than something better (Secugen Hamster Plus). Slow phone response times. Price gouging when updating coin readers

Yeah, unless you dropped a 1 (12GB), you don't have enough RAM. What does performance monitor on the server show when the admin assistant clicks "save"?

Move "Medical Events" over to the right-hand section, then select it in the right-hand section and the left-hand column options will change. Screenshot 01 has "Student" selected in the right-hand section, screenshot 02 has "Medical Events" selected. Note the corresponding change in the left-hand column.

It would appear as a pre-run report on their SIMS homepage that they can open and view. We have no plans to stick medical details in mailboxes. This is about making it easy to display changed information so they don't have an excuse.

As part of a data protection overhaul we gave parents the ability to check and update records we hold about them / their kids. This has generally been a positive thing. However, the data flow has gone from: Parents > Form Tutor > School Office (and/or) HOY > SIMS to Parents > WebApp > School Office sanity check > SIMS (with Office staff alerting pastoral staff to serious conditions) but for less serious conditions, pastoral staff may not be as informed as they were previously. My first plan is a "scheduled SIMS report filtered by year group for new conditions since $last_report" that's sent to HOYs within SIMS (box on SIMS homepage with most recent report. How are you doing it?

Are you consistently experiencing 3% loss (say across weeks/months) or is this a new thing?

Have NRS gone significantly downhill since the Civica takeover, or have they always been terrible as a company? We had them in a while ago bidding for catering across a MAT and they made a big thing about upgrade paths for tills (we've been burnt before).

Currently updating Server 2016, 2019 and Win 10 1809 monthly to make deployments go a bit faster. Whoops - I had a quick search for the new name and didn't spot your thread.

https://www.osdeploy.com/osbuilder/overview (note the module name has changed to "OSDBuilder", but the docs haven't been completely updated to reflect this yet). I'm using this to update and configure the (vanilla Microsoft) WIMs I feed in to MDT and WDS.

We use them and they're generally fine. It would be nice if they stuck an HTTPS cert on their customer portal, which I have nagged them about.

If you have CDP and/or LLDP enabled on your network hardware, LibreNMS (https://www.librenms.org/) can autodiscover device-to-device connections and generate maps.

Has the school documented the steps taken to secure financial transactions being carried out on equipment that no longer receives security patches from the manufacturer (Microsoft)? Is that included on the school's risk register? If the tills are segregated so they can only talk to the cashless catering server (and only the cashless catering server can talk to them), that's one thing. If they're sat on the network along with everything else, the school has a problem waiting to happen, especially given the lax security posture from most cashless catering providers.