ITGURU

I have a surface pro 7 with keyboard attached and struggling with it's battery life. I use the device for about an hour using only word 90% of the time, and about 10 minutes internet usage, set to 'best battery life' and screen brightness on setting second from bottom so just readable. After an hour of usage the battery goes from 100% to 80% nothing seems to be running high in the background . I get better battery life from my HP ProBook - 8-9 of usage doing the same activity. Thought these were classed as an all day device? 10 hours from 'typical' use according to the internet. All updates and firmware etc are up to date. Anyone else had this or any ways to further improve the battery life?

I have been asked to write a BCP for IT within the trust. this needs to cover what if scenarios: - What if SIMS went down - What if the network was infected with ransomware - loss of critical servers/systems/phones etc. - any other scenarios i.e Loss of internet et Does anyone have a plan template they wouldn't mind sharing? I've found a few online but seem to be very basic and incorporated into the schools BCP, whereas I need to have one separate just for IT. If anyone doesn't mind posting template or PM one across, it would be much appreciated to assist with this task. TIA.

profile photos of users

I've come across an even bigger problem - 365 users can sign into Bing, search the directory from there and see users photos

We have SIMS as a physical server at one site (2 x 6 core CPUs, 24GB, Raid 50 storage) and Virtual at another (12virtual cores, 24gb, VHDK on RAID 10 local storage). When running updates, and intensive tasks, physical server performance still wins hands down and completes first.. clicking the arrow through student records is still quicker on the physical. Whenever companies remote onto our server to complete sims integrations or capita remote on, they always say they are surprised at how quick the physical server performs.

A user has a USB stick that on any computer connected to the domain, it would automatically unlock whether the PC was logged on as the user, or any other user. It doesn't matter who is logged onto the PC on any PC in the school, the USB would auto unlock. However at home and on a standalone computer it would ask for the password. having looked in the settings of manage bitlocker. Auto Unlock was turned off. I can therefore only assume that as the computers are all domain joined, there's something stored in AD? How do i remove this so that that the auto unlock no longer occurs as when i view the status in GUI or command line it says auto-unlock is disabled. - where am i looking for the setting to delete the entry/usb drive from always auto opening without a password? As i ran out of time, i removed bitlocker and re-encrypted and then it asked for the password on every computer again. Thanks.

we used to use biometrics for cashless catering.once the fingerprint was taken it could never be read again as an image.it was encrypted. all the data was stored onsite only so no risk of data leak to 3rd parties.

You can also have multiple gateways at no additional cost. I have it setup as load bakancing/failover and as it's not inline between network and router. I prefer this setup as it means will always have inbound communication if the proxy or filter goes down If you have an inline device and that fails you lose both external access to the network and communication between multiple sites.

Take a look at censornet USS. we've been using their filtering for several years and never had any downtime. you have gateways on site for authentication but all the filtering policies etc are in the cloud. you can have gateways at multiple sites all using the same or different configs and or policy rules. also supports BYOD. Changes to policies in the platform take effect within minutes. full reporting with cloud application control with full reports of actions taken on Google I.e search queries , when users send delete etc on 365. YouTube videos watched etc. whenever users have posted sites on here to block I've always found them to be blocked already by censornet. they constantly improve the platform with new features and additions. we also use their email filter.

I've got a VPN setup to a remote network. When i connect I lose connection to network drives and shares that are specified by DFS Sharea \\domain\share However, if i browse to the same share using the direct server \\servername\share i can still access them. I've unticked use remote gateway within the options, but not sure why local DFS shares stop working when connected. When the vpn is connected if i ping the dfs domain.local it responds with an AD server IP so is reachable. Any ideas how to ensure DFS shares locally still work when the VPN is connected?

We're on 10gb uplinks to core aswell. Granted most of the time utilisation is low, i can definitely see the performance benefit when pushing out software or updates, i've seem utilization at 3-4gb on traffic monitoring as servers have 4gb connections.

I've replaced 2 networks of HP 10/100 with D-Link gigabit switches. all run solid, never skipped a beat. You'd be surprised how many schools may still be running 10/100. i upgraded one school 2 years ago, and know of another school that replaced theirs last year to gigabit!

has anyone actually tested this in a lockdown situation? do you have readers on either side of the doors? We only have readers to enter the buildings and exit push buttons to exit. Lockdown in net2 wouldnt work for us because paxton told me that in lockdown down, push to exit buttons are disabled.

resolved by this guide.. https://byronwright.blogspot.com/2018/05/expired-microsoft-exchange-server-auth.html as it had expired.

it's not the Standard SSL certificate as the expires nest year so this one doesn't need to be assigned to IIS...?

Come in today to be advised that that OWA on exchange 2016 isn't working with the following: X-OWA-Error Microsoft.Exchange.Diagnostics.ExAssertException X-OWA-Version 15.1.1415.7 I discovered the 'Microsoft Exchange Server Auth Certificate' expired yesterday. From ECP i've renewed the certificate so shows for another 5 years , rebooted both servers but still getting the same issue when users login. As the certificate had expired, am i missing a step to get OWA working again? Outlook clients are continuing to work as normal. Thanks.

I'm not sure how a clash would be an issue though, because if the drive was already used for something else, when i browse to the path:\ in word it was showing the correct files, so was going to the correct drive, and then as soon as selected 'show this drive' it appeared without changing anything else.

How do you know they dial home.. doesn't every system dial home these days . just look at Google and any other website that captures your usage it's how all these companies produce statistics.

No not set to hide as it shows for all other users. It was set to 'No Change' but i've changed it to 'show this drive' and seems to now be there for the test user login i have so will confirm with all the others if they can now see it. If they can thats strange as 'no change' worked for all other users and shows the drive apart from a few.

I've setup a mapped drive, which is in GPO and filtered to only map to users within a specific OU in AD. For the majority of users, the drive maps and they can see it in 'This PC' However for a few years, I cannot get the drive to show in 'This Pc' They can see all other drives and if i amend the other drives, they users gets the update when they login. All users are in the same AD OU and all created from the same template so differences. If i reset their profile and log them on the drive still doesnt show. However, if i go into Word, excel etc and go to open and type in the drive letter i.e Z:\ into the file path the drive opens and shows the contents. Therefore the drive is mapping but just not showing in 'this pc' can anyone assist? thanks.

Year 11 accounts gets disabled end of August. October half term AD accounts deleted, and data moved to archive for retention period.

People think the cloud is the best place because it's all free! It may well be but the like of Microsoft offier resillience not backup, just because your data is replicated doesn't make it safe. So what if a mailbox gets hacked (we had this with a student who found all the sent emails in their sent items, and undeliverables in their inbox) and what if they infected your office 365 tenant..how do you explain that one to management if data was lost.

I have all desktop PCs under an OU in AD which has a WSUS GPO assigned to it. All desktops check into WSUS as normal. When i view all the clients within the WSUS console i have 24 machines which are always on a higher windows build CU than all the others. These 24 machines are Apple Macs setup with bootcamp with windows on. I'm unsure why , even though they are runnings windows, they are not complying with approved updates in WSUS and are always downloading the latest update.? Anyone else come across this?

I'm logged in as one organisation and created and 'Team' and added another 365 users email address to the team as a Guest. The user opens the email to go to the Team, accepts the permissions and launches the team app. In the APP this logs them as the second organisation to view the team. Is it not possible to be logged in as the primary account and view the guest access 'team' from my teams view at the same time as those within my organisation? Otherwise i have to switch accounts on the top right to access which team in whichever organisation i need, but then i miss notifications on my primary account What is the solution to this?

Some switches still need java too