pete

While I understand the helldesk's position (rock and a hard place) and that they're at the mercy of their backroom colleagues providing meaningful updates, nearly 3 days of outage and 2 days of "er...we're still working on it"-esque updates is stretching my patience, not to mention SLT who had quite a lot of mailings they'd really liked to have gone out this week. I know this is affecting the school down the road, but who else is on farm3?

In SIMS linked documents, however.... the default* permissions as they stand are terrible - either too lax or not tight enough. You've got a choice of: Public - can read if you can log into SIMS. (too open) Private - only the creator/uploader can read (fails the "hit by a bus" test) Confidential - SLT, School Administrator & SEN Coordinator can read. (too open) *Now you can (and we do) change the defaults by using custom groups in SIMS - for example, duplicate school admin, SLT and SEN Coordinator groups, explicitly remove permission from each group, create "confidential docs/logs access" group and add your child protection officers to this new group. But you have to update/check those groups against the permissions spreadsheet (and possibly recreate them) every upgrade.

And the survey says....... Europe’s highest court strikes down Safe Harbor data sharing between EU, US | Ars Technica ICO press blargh about it: https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2015/10/ico-response-to-ecj-ruling-on-personal-data-to-us-safe-harbor/ Hopefully interesting times, especially the employee data implications* if you're a US firm with european offices. *consent is needed to transfer data outside EU. Since continued employment depends on employee giving that consent, consent can't be considered to be freely given.

It gets it out of your inbox and into a structured journal-per-job to which you can attach notes, links to KB articles, screenshots etc. Assuming you picked something with half-decent search you can then search for the thing you fixed six months ago for Bob but can't remember now Sue's having the same problem. Think less "allocating and prioritising jobs" and more "writing stuff down properly". If you're creating jobs from email it's even easier (though you'll have to rewrite the subject lines of tickets to make them sane).

Has anyone got this working via SCCM yet? Looking at it, it should work as a standard NSIS package (installername.exe /S) but it's hanging on what looks like an elevation dialogue (doesn't error out, just sits there until the process is killed). Pushed out via psexec, ( psexec \\computername -s "\\server\share\folder\installername.exe" /S) I see the same behaviour. If the silent install is launched manually from an already-elevated command prompt it works. Looking on the Jetbrains KB I've seen a couple of threads with the same issue, but no response. I'm leaning towards "terrible installer that I'll need to edit", but just wondered if anyone else has had and fixed this?

GSM series Netgear have serial consoles, the lower-end stuff tends (tended? haven't bought any for a long time) to only have a web console.

^ You could try poking @EduTech - he's blogged about it a bit: Windows Azure Active Directory & Application Integration Single Sign-On | James Evans - EduTech's Blog

I'd break out nmap when it's quiet and poke around in your IP ranges, doing 100 at a time with nmap configured to be polite (-T polite) so it doesn't make anything delicate fall over. Those GS 724's may have self-bricked BTW - they'll shift packets but won't respond to management requests./output

(Which we've known for a while). Deal allowing tech companies to transfer data between US and EU is invalid | Ars Technica Ars simply because it's less likely to get blocked than El Reg. CURIA - Documents

^ I'd use trial versions. Maybe even trial VMs downloadable from MS (180 days IIRC). Handing out VLK or MAK keys to students is just asking to have them end up on the Internet and Microsoft auditing you. However, Assuming your agreement with MS already covers the hardware they're using, you could simply hand them the readily available keys that makes the OS talk to the KMS server(s) you're using for managing licensing.

We're using eSafe after doing a head-to-head trial against Securus and talking to the school down the road. Securus: I was expecting Securus to be like tweaking Smoothwall - generally decent defaults, contextual analysis to avoid false positives, and maybe a few days tuning it to suit our needs. Instead, I found a system that squawked every time someone typed in cockburn, bumbling and other words which led to inadequate reporting. On top of that, it still required Java 6.something or other despite it having gaping security holes. Being sufficiently unimpressed with the product did get an admission that they really needed to sort our contextual analysis but it was at least 6 months down the line. ---- eSafe: It's more expensive, about 50-75% again of the Securus cost. But the reports that get sent to you are actually a) relevant and b) actionable as they've been reviewed by a human before being sent on to whoever's herding eSafety. Based on our experiences with Securus (and taking into account when we'd have eventually beaten it into shape), it was cheaper (salary/yearly hours * estimated time herding Securus) to buy the more expensive product.

Patch to activate Windows 10 clients on a Server 2008R2 KMS host: https://support.microsoft.com/en-us/kb/3079821

A Surface Pro that someone has updated to Windows 10 doesn't request a new IP when moving to another WiFi network - it'll happily join the new network but not request an IP, attempting to use the address and gateway from whereever it was connected previously. Looking in DHCP, the device didn't attempt to grab a lease. ipconfig /release and renew fixes the issue. The device is a student-owned device, so it falls firmly into "best effort support", but I'm just wondering if this is a problem with their install or a known issue.

Bear in mind we're also the school that was home to a robot table (sixth form project), leafblower-powered ride-on hovercraft that could be found roaming the corridors and various other shenanigans. Our DT staff are very easy to lead astray.

Is anyone using those ~roughly £12 adaptors to get UniFi APs to ingest non-passive PoE?

Microsoft usually take a dim view of reseller shenanigans, so I'd make a formal complaint and CC in your contact at Microsoft.

I assume the "why don't we just ditch the revaluation machines?" conversation has been had? When we were tendering for cashless catering, nearly every vendor said "please don't buy revaluation machines from us because as a concept and from a reliability standpoint they're all terrible" (I paraphrase, but that was the gist from the sales people). So we didn't bother and everyone tops up their balance online. We're using Biostore for auth, Vericool for the catering/vending and ParentPay to top up balances. Initial setup and bedding in is a bit of a faff but it maybe takes 10mins/week of my time nowadays.

Web print only needs a Win7 VM with Office/Reader/(something I'm forgetting) and the web print components installed. All it's doing is ingesting uploaded files from a share on the Papercut server, rendering them and then shunting them off to print. It's more of a "don't install end-user applications on servers FFS" guideline. We've been running it for about a year(?) without issue.

Regarding the proxy, my current workaround is to flip the laptops to a no-proxy duplicate of the settings just before the holidays and then flip them back just before they come back. It's not very elegant, but it mostly works. We did ask Avast about proxy options back in February: http://www.edugeek.net/forums/downloads/148760-avast-free-business-cloud-antivirus-2.html#post1276990, so it might be worth nudging them to see how they're getting on.

But it's getting blocked for another person today. I still think it's a site element doing it (based on randomness). It would be nice if Avast listed whether it was "this site is on a list of dodgy sites" or "I'm blocking this site because of element X". I have a ticket open, so we'll see how it goes.

Assuming it's a rebranded Avaya, you edit it using the Voicemail Pro Client which should be installed on whichever PC has IP Office Manager installed. IP Office Manager > File > Advanced > Launch Voicemail Pro Client. Night mode normally depends on a "is it between time & time?" decision and then diverting to the main call menu or night message depending on the clock. See partly-redacted screenshot as an example:

AppleTV and a copy of AirParrot (~£7-ish) per Windows laptop that needs to use it? Apple kit will just use AirPlay. Android devices are a bit hit-and-miss apps-wise.

And in school today http://www.tes.com works fine for that user (sans adverts blocked at the gateway).

Either: 1) The copywriter was seeing if his editor/proofreader was awake. 2) All overly-specific rules exist because someone did something silly/sued someone* *"Your toaster caused my house to burn down because a starving sparrow smelled the bread, dived through the kitchen windows and into the toaster, and then flew around the kitchen like a very small phoenix setting the curtains alight".

Treat the county router as a network cable and configure routing on your switches instead. A quick glance at Google suggests those switches are capable of it.