pete

I'm tempted (used to be in a corp in old Hydra Alliance, then TEST), I suspect all my stuff's in a null-sec station that's changed hands a couple of hundred times since I last played.

On the 2848, does it work if you set the phone port as untagged in vlan 54? (removes default vlan from port, just works on vlan 54).

Yup, we use it in line with our retention policies to have a clearout. It's not feature-complete and some things you'd expect to be cleared out (student photos, for example), aren't. As Capita add new things it can handle/delete you have to go back in to look at 25yrs+ people who now have data showing (in Bulk Delete Student Data) that wasn't visible previously. I think staff/contact deletion has been pushed back to the Spring release (last time I checked).

I don't know which RBC you're using, but it is possible on emPSN. Assuming it's a common MIS, your provider should have a pre-canned firewall rule for it that you can select on the change request form.

Observium ( Observium ) or LibreNMS ( https://www.librenms.org/ ) can also do this trivially.

@Arthur's probably right - I'm thinking of driver signing.

Using PSTools (remote powershell would work too) from SysInternals (https://docs.microsoft.com/en-us/sysinternals/downloads/psexec), try something like: psexec \\computername -s -i "\\path\to\installer.exe /S" replacing the path and install switches with the location of the installer/package in the CCMCache (or a file share). If that succeeds, look at the switches (documented in the above URL) for detaching the process and feeding a list of computers to psexec. You're testing "is this package generally unreliable for unattended / remote deployment or is it just unreliable if pushed via SCCM?"

I assume you've checked antivirus isn't interfering? If you trigger the install remotely from the CCMCache folder using PSTools / Powershell, does it work?

(Assuming you've got an inhouse CA and have already setup code signing certs for things like SCCM / powershell scripts) You could try signing the executable with a certificate linked to the inhouse CA that the computer already trusts. We had to do that for a couple of things that were allegedly mission critical but the companies responsible had gone under. First result on quick-and-dirty Google search that'll get you started: https://support.spirion.com/hc/en-us/articles/115000019391-Signing-an-Edited-Windows-Installer-package-msi-file- Ignore that it mentions an MSI file - it'll work for all executables.

It's not quite what you asked for, but I spotted this the other day: https://gcits.com/knowledge-base/warn-users-external-email-arrives-display-name-someone-organisation/

"Not Configured" means "don't make any changes to what's already there". So if you pushed down a WSUS URL (for example) via a GPO and then flipped that GPO setting to "not configured", that WSUS URL would stay on any client that had already applied that policy.

You've configured SPF and DMARC on your domain(s)?

Yeah, I need to poke around and see what I can do, but after Xmas.

Yeah, I've just gone and double-checked. In darkest Lincolnshire, you're lucky to get an electronic transfer after the kid has started. Looking at the import logs in SIMS, I can't see any sign of ATF imports ever and quizzing the admissions people here they've never had one. At best we get a CTF up to a month after the student has started. There is some form of online spreadsheet offered by the LA in March, but that's apparently it.

Not that I'm aware of. I can build a workflow in Office 365 that dumps from a web form into a validation workflow and then ultimately into something our admission staff can eyeball and import. I'm just seeing what's out there before I reinvent the wheel. My needs are: Must avoid handwriting Data sourced directly from parents Should result in something staff can import quickly into SIMS Some token-based auth (or something) to avoid form spamming

Sorry, I should have mentioned. We get CTFs but often after the student has started and the general quality of contact / medical data in the CTF isn't great. We just pull in behavior/achievement from the CTF and ask parents for the medical / contact / consent information so it's fresh.

We currently use a "Fill in this bit of paper if you want your kid to study at $school". This is problematic, not to mention causes handwriting-related problems. Bearing in mind we often have nothing more than an email address and confirmation the kid has a place (if they want it), how to you securely get basic information for new admissions to school? I know some of you are using online (Google/365) forms - how well does that work in terms of S/N ratio (form spam), parents finding it easy etc?

Yup, always nice to have some ammunition to shoot down the "but they won't prosecute schools" naivety. Have also just stuck it on the day board.

Supply / student teachers sign the same AUP as staff directly employed by us. The only real difference is they have a defined "end date" when their accounts automatically disable.

Concurr with @dhicks, I doubt it's a network speed issue unless you've misconfigured the teaming. I'd look at SQL first, particularly SIMS and see what the most expensive/grinding queries were.

So, the Hikvision rep was visiting our supplier who offered to quiz him on my behalf. Does it work on non-Hikvision cameras (is some of the processing done at the camera or is it all on the NVR)? No the cameras have to be Hikvision smart type similar to - https://www.hikvision.com/mtsc/uploads/product/accessory/DS-2CD4A45G0-IZS_20180628.pdf Whether it can track/find a particular face/body across a range of footage (a frequent request, currently done manually)? Yes How reliable that would be across ~600 pupils all wearing roughly the same clothes and 200 sixth formers that also look pretty similar. Used in high traffic areas and pretty reliable Has the hardware been upgraded to cope with the increased processing load without affecting responsiveness of the UI/other people accessing it to view footage at the same time. Yes the hardware is specific for this application – Deep in mind NVR + specific smart cameras https://www.hikvision.com/mtsc/uploads/Ckeditor/Files/2018-04-30/Hikvision_Facial_Recognition_(Oceania)(1)(1).pdf https://www.hikvision.com/mtsc/uploads/product/accessory/Configuration_Guidance_of_Face_DeepinMind_NVR.pdf

Business throws away main source of revenue*, news at 11. *ok, cat pictures as well.

So we're reluctantly in the market for a new CCTV box and one of the things we've come across is the Hikvision iDS-9632nxi-16s. The blurb (linked below) hints that it can apparently take video/a still of a person / persons face and find that person/face in other footage. This intrigues me, and would be useful, but I'm terribly cynical and wonder if anyone's got one and can give an idea how reliable it is? ids-9632nxi-i8-16s_spec.pdf

Run new cabling. Your major cost is time, not materials. It's faster for the contractor to run new known-good cabling than take out old cabling and re-route it.

It depends how much of an audit trail I need. Hardware the school owns is usually ~8days and/or reserved IP if I need "do X if the IP is in range Y" for something or other. Kit on the Student BYOD network is ~30 days for sorting out idiocy reasons (there's ~1,000 potential IPs available to ~200-300 Y12/Y13, so it's unlikely to run out).