pete

We're also looking into this (new teacher who prefers Autodesk to Solidworks) and you lot have saved me some work, cheers.

^ That's our problem. Everyone here with the aptitude/knowledge to be DPO has too much influence over school data functions according to the legislation. The ideal person would be an ex-SLT part-timer who has experience but doesn't have any day-to-day authority to influence data.

Short version: Has anyone noticed offline files behaving less reliably with Windows 10 (compared to Windows 7) when using netbios names for the shares? If you have and you've enabled the longer than 256 character option in Windows and then used fully-qualified paths instead, has this bitten you in unexpected ways? Long version: We've been using offline files since Windows 7 made it actually reliable. Various bits and bobs are automatically redirected for staff and students so a device that leaves the premises has certain files on it. We've noticed that for home directories the re-connection isn't always reliable if it's using the netbios name (\\server\share\username) as opposed to the fully-qualified name (\\server.domain.whatever\share\username) or the DFS name (\\domain.whatever\dfsname\sharename\username). We've been leery of using fully-qualifed paths for homedirs in the past because staff can reliably hit the 256 character limit even using netbios names, but since Windows 10 can support greater than 256 characters in a domain name, this may not be a problem.

Maybe - who're you working for these days? I didn't spot anything likely on the LP site (assuming I've got the right one). My needs are twofold: An easy-to-maintain accurate record with tiered access, sufficient details for those who need it but a simple "I just need to know if I can Information X to 3rd Party Y" interface to front-line admin and teaching staff" Reminders near contract end/renewals that require a human to acknowledge "yes, this contract is still in place, it's OK to keep sharing this data". Plus the usual audit trail requirements and built to a decent (i.e not "for education") standard. Increasingly this sounds like I need to wrestle a CRM system into reverse (one customer, many vendors).

We've been doing the "who do we do business with and what data gets transferred" audit for a while now. Every time we think we're nearly there, someone says "what about Bob" and we go again. So, assuming you're all doing the same thing....how do you plan to empower staff to be able to quickly assess the validity of requests for data from third parties? At a basic level, I'm thinking of something searchable that has fields such as: Company / Org / Individual - Data sharing agreement in place Y/N - Valid until - Last reviewed - School Point of Contact - Data that can be shared. And drilling down links to the actual data sharing agreements, contacts at the company etc. Has anyone got as far as finding / building something that isn't a spreadsheet? I don't want outdated copies lying around.

We have this. It's very easy to skim through and get 100% in ~5 minutes. I think the only two courses where that's not possible are the Data Protection and the Health & Safety courses, possibly because the latter is signed off by the HSE. So for a diligent person who takes the time to absorb the material it's useful. For someone who's only doing it to get their manager off their back it's not a credible indicator of competence.

Ours (SW) blocks "beheading" because it triggers the "Gore" regex. I suspect if you added context (Henry VIII, for example as above) it would let it through and just give you history results.

^ It needs to see/receive a certain amount (5 servers or 25 workstations IIRC) of activations directed to itself before it can start answering queries. Is your previous KMS server still operational? If it is (and answering queries), you may want to modify the _VLMCS records in DNS so the new one gets priority (and sees more requests than the older one).

Our installer balked at it, saying he'd had nothing but grief doing that. He may have just been over-cautious or because we had readers either side of the same gatepost with an offset of ~12 inches to prevent interference.

Be aware that you can't use the above linked reader if mounting to a metal post/structure. You'd need to use the KP75 linked earlier in the thread.

I had a look at this and was initially hopeful, then discovered they send the form data in the clear (no HTTPS) as far as I can tell.

For CPOMS and MyConcern, can a parent, student or member of the public report a concern? That's our use case for this. Say Pupil A knows Pupil B is self-harming, can they use the systems to let the school know without Pupil B finding out they reported it? If a parent is concerned about a child that isn't theirs, does it work for them? Can Bob at RandomCompany who notices some of our kids being twerps on the way to/from school use it to report a concern? edit: and yes, I could contact the companies directly, but showmyhomework is still stalking me after two years of me encouraging reception to tell them I've emigrated, so I prefer not to encourage salespeople without some due diligence.

HTTPS-enabled form on your website? Service of some description? Something else? The powers that be would like pupils/parents/public to have the option of reporting safeguarding concerns online to the designated DSL. Currently, students reporting concerns in person to the DSL are very visible. They also may to report the concern but not attach their name to it. My 2p is that information must be transported securely, delivered directly to the DSL and the S/N ratio must be such that it's usable.

I amused myself yesterday with a simple Get-ChildItem -Path “\\server\staffhomedirshare\” -Recurse -Force -Include *.doc, *.docx, *.xls, *.xlsx, *.txt, *.pdf, *.ppt, *.pptx | Select-String “[P|p]assport” | Select-Object Path, Line, LineNumber | Export-Csv “c:\users\pete\quickppsearch.csv to see if people were cleaning up after themselves once trips have finished. It does give an indication of where that sort of data is, but (for ~450GB of data) it takes a fair while to run and that's just one search term. My aim is to give people targetted "you need to look in this folder structure" guidance when we start the clearout.

For some things (Office365 and credit card/passport/NIN/driving license etc) this is reasonably doable. For others (how do we pick out a document containing d.o.b vs general datestamps, what's our threshhold?) it's rather more complex. Has anyone got as far as a reasonably usable strategy/tool/series of powershell scripts for discovery purposes?

^ It can also take a good while to propagate across their infrastructure. I swapped a couple of test accounts to see how well it worked and Leeloo Dallas Multipass was still Tony Stark in quite a few places for days afterwards and I don't think URLs have ever been updated for OneDrive etc.

We've used ABTutor and Netsupport School, both are good. ABTutor is a bit cheaper to license if it's a limited number of people using it. If it's all staff (laptop installs), Netsupport becomes cheaper.

^ Nope, got sidetracked by random software providers being muppets. Looking now it's this one, http://www.edugeek.net/forums/scripts/174480-powershell-kerboodle-reconcilliation.html but I was looking for something involving @sonofsanta because I'm sure he linked to that tool in another thread after I'd complained about Kerboodle in BTRD.

To replicate: Search all forums for "Kerboodle", using basic search box. See ~100-odd results returned across 5 pages. Click page 3 of the results. Forum tells you that page doesn't exist/no results. (I was looking for a Kerboodle thread in which someone had posted a handy tool for un-munging Kerboodle's terrible backend and I'd posted a reply, so I know the thread exists).

Dump them to a file using iptables-save (sudo iptables-save ~/iptables-Sep2017 Then inspect the filename and grep for themes? say: Source IPs grep " -s " ~/iptables-Sep2017 Destination IPs grep " -d " ~/iptables-Sep2017 etc... You should be able to dump those results to CSV (probably by search/replacing spaces for commas). Just keep an eye on rule order. Of course, I'm assuming you mostly care about rules for specific IPs and connection tracking rules will be done using the Fortigate config.

For 2.5" drives we put a stumpy bolt on a concrete floor, place drive on top and then stamp on the drive - the bolt deforms the casing and smashes the glass/ceramic platter. 3.5" drives get the pillar drill or smacked with a lump hammer on the anvil in the workshop, depending if we want efficiency or exercise. At home, I remove the platters and then fold them into quarters, placing recovery beyond the means of 99% of people. The remaining 1% are perfectly capable of taking a black-and-decker to my kneecaps to retrieve the information.

Yes. Just ensure it's only used for that and no-one exports from SIMS for other purposes. Your use case is "the school needs to know what Fred in 7J looks like for identification purposes".

^ I'm just hoping it can pull in the HoD/Subject from Course Manager. Even though I bet it can't.

Sorry, I posted and ran. I think I'm going to end up going down the scheduled reports route. I need to check that it's flexible enough to say look at the timetable and properly identify a Maths lesson (for example) as a Maths lesson. And yes, every HOD, every subject.

I'm reasonably certain you can nominate people in other Office365 tenancies / other Office365 tenancies (in their entirety) who can access stuff in yours without letting the world and their dog in.