JSchlackman

Ruckus. Cisco Aironet wireless just doesn't cut it IMO. Now, Cisco Meraki is a different matter... there's a reason Cisco bought them out, and it's not just because of how good the cloud console is. I would say the radio performance of Ruckus is still better, but Meraki is a much closer comparison than Aironet.

Are all the affected machines the same model? I had a similar issue to this that I never got to the bottom of, and suspected it was to do with the graphics driver, as Flash worked if you logged in to the machine via RDP, but not if you logged on locally with the same user.

Yep, SHUK is/was one of the older short haul data circuit systems for BT broadband, used by a lot of LAs back in the data for connection out to schools. They have been long since superseded in most places. If the CAT5 is not even plugged into anything then you are probably safe to power off. In the very unlikely event that you lose Internet connectivity... well, then you'll know what you were using it for.

We've been testing this and have made the decision to start a wholesale upgrade right away. The main advantage for us is that it finally fixes the SMB problems when accessing a DFS share. Prior to 10.10, accessing our DFS shares was extremely slow for us and often didn't work at all. It's still not as quick as Windows, but it does at least work reliably now.

And that exact feature is deprecated already in Windows 8/Server 2012. However, you can have Task Scheduler run a PowerShell task instead which can send email using the Send-MailMessage command. As well as a task for local admin logons (similar to zag's above, but using PowerShell to send the message), I have a few events scheduled on all my workstations to watch for events indicating when someone logs on with a corrupt user profile. It's a rare occurrence in Windows 8 but is more common in 7, and it's very handy being able to show up to fix the problem before the user ends up saving to the local HD instead of their (missing) redirected Documents folder.

Went live for us yesterday too. Interestingly, the Google Drive Sync client reports an upper limit of 10TB rather than simply unlimited, but I'll worry about that when one of our teachers can explain to me how they plan to sync more than 10TB to their laptop.

Google upblished a blog post today: An update to SafeSearch options for network administrators. The wording is pretty vague, but it sounds to me like they are retiring the nosslsearch.google.com option: The documents that mentioned the nosslsearch CNAME have already been changed and now talk about using forcesafesearch.google.com instead, which, as the name suggests, will force SafeSearch to be always on. Of course, this means anyone using it will now be totally reliant on SafeSearch, and cannot use on-premises filtering unless they have SSL interception set up.

Just leave them on and query by last logon time come September. This PowerShell script should find all the accounts that haven't logged in in 30 days and disable them: $daysInactive = 30 $time = (Get-Date).Adddays(-($daysInactive)) Get-ADUser -Filter {LastLogonTimeStamp -lt $time} -SearchBase "OU=Students,DC=yourdomain,OU=internal" | Disable-ADAccount Note that this uses the lastLogonTimeStamp attribute, which has 2 caveats: it only gets populated on 2003 level domains and higher, and it is only guaranteed to be accurate if the user's last logon was 14 days or more in the past.

I was under the impression that the non-premium Azure AD was now free even if you don't have a paid subscription to something like O365. The Pricing Details page doesn't mention any prerequisite for the free tier. Is that page inaccurate or am I missing something that you get extra if you have paid for O365? On a related note, this page that was linked from your blog says that self-service password reset is in the free tier. This page says it is not. Do you know which is correct? Thanks!

100% attendance rewards are terrible idea for exactly this sort of reason. Many kids have legitimate reasons for not being in school one day, so it continually baffles me when school leaders think they are in any way fair, and I'm not even sure what they aim to achieve with them in the first place. When I was in secondary school myself, one year I missed the 100% award due to 2x half-day absences for medical appointments. Hilariously, on the day they gave out the awards, half the recipients who were called during assembly were absent that day as there was a flu bug going round and they were off sick!

I have a feeling that Chrome policy only affects sign-in to Chrome itself - I think you could still sign into the the actual web services with any account (though I'm not certain). For other browsers you'll need to look at doing this on your proxy filtering. I seem to recall there's a way to do it in Smoothwall that has been detailed before on Edugeek, so have a search if you have a Smoothwall filter, or get in touch with support directly.

Thanks all - had PMs from two different members who were able to help out and have successfully got hold of the VL files. Absolutely - one of the people who PM'd me pointed out that they had the download on their LWS login, so Adobe still have the download available for customers who had electronic delivery originally, but they basically refuse to help out anyone who bought physical media the first time around.

tl;dr: Anyone have VL install media for Adobe CS3 Design Premium for Mac? I've recently taken over at a school that has a site licence for CS3 Design Premium, but having previously been a Windows-only school we are now partially going over to Mac. We have serial numbers for both Windows and Mac, but if we ever had a Mac install disk, it has long since vanished. The consumer download doesn't work for VL serials, as I have discovered today. This isn't available on LWS for us (even though the serial number is), and Adobe's official position on this is that they do not supply VL media at all for CS3, either physical or download, even as a paid product. I was told by their support that "You can try your luck to find for the download link for your software, if not I suggest you to purchase the latest version of CS6 volume license." I pointed out that their unhelpfulness would negatively influence any future purchase decision, but as I see it they have given their blessing to seeking out a 3rd party download. So, long shot, but does anyone have it? If you're unable to upload ISOs (they are several GB) I am willing to pay for shipping a physical copy. Also worth mentioning that I do have the Windows disks for this product if anyone is in the opposite scenario.

1. Yes. Works nicely. 2. I've not actually tested it, but I believe that any user object that is targeted by a FGPP will ignore the password requirements in the Default Domain Policy.

I haven't seen it explicitly mentioned anywhere, but I'm pretty sure that silent app push only works using the newer Managed Distribution method of VPP, not the code claim method. It is definitely true that the device has to be supervised, but the OP seems to have that covered already.