Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Norphy

Members
  • Posts

    8,349
  • Joined

  • Last visited

Everything posted by Norphy

  1. Petrol
  2. Ecumenical
  3. Blood.
  4. Polly (sea)
  5. It should just be a matter of making sure that the OU that your groups live in is selected to be synced. I think you have to enable the syncing of group objects in AAD Connect as well
  6. Bloody
  7. Oh look, it’s been ruined. Way to go NYT
  8. Pyramid
  9. Crimson
  10. Yeah, dead easy. Plug them into the network, access their web interface (if I remember right, I think they have a static IP assigned to them out of the factory so you may need work around that somehow), create a SSID and assign it a VLAN number and that's pretty much it. There isn't much to it. If you'd said "Aruba" instead of "Meru" there, I'd have suggested that you'd gone out and bought an IAP. At least then, you'd be able to convert it to a standard campus AP when you're finished with it and connect it to your controller but I don't know if there's a similar option for Meru networks.
  11. I think you're conflating two types of wireless devices: 1) Wireless routers/gateways, the things most people have in their homes which act as a wireless access point, a switch, a device which connects to the internet and routes traffic between its local network and the internet 2) A wireless access point which connects to an existing wired network and provides wireless coverage. The first type of device acts like you say, has NAT, a DHCP server etc. The second type generally acts as a dumb network device. There are a few cheap wireless access points out there which don't act as routers and don't need controllers to manage them, but they're not too common these days as most home networks use all in one devices and most enterprise networks use more powerful, expensive access points. However, there are a few like this, which will do what you want. I put an older version of that in my in-law's house and it works fine, it can work with or without a controller and doesn't do NATing or DHCP. Whether it's worth spending the money then just dumping after your controller is replaced is another question. What wireless system do you have at the moment?
  12. I've now helped move a sixth form college and a large-ish MAT away from from CC3/CC4. djm968 is right in that it's not an especially hard process but it does need careful planning. Both of the projects that I was involved in had about 18 months to two years of planning behind them. To have your school spring this on you three months before the contract expires is a scummy move and I'd try and push back on it a bit if I were you. First things first, there is no way you'll be able to remove CC4 from your network before May and still have a workable network at the end of it. Even pushing it back to the summer would be inadvisable but better than trying to do it during the Whitsun half term. Ordinarily, I'd say this is a perfect time to decide whether you want to continue with a more "traditional" on-prem managed network, or if you want to go the Intune/Autopilot or similar MDM route. However, since time is so short, I'd put that on the back burner for now and stick with the more traditional method of going about things for the time being. First part of the project is to decide if you and your team have the experience and expertise and hell, the time to carry out this internally. The next part is to determine which parts of CC4 you are using and to find suitable replacement products for them. Off the top of my head, you'll have to find something to: Manage your computers: Deploy software, operating systems, updates. I would suggest SCCM as that's probably part of your OVS-ES license, if you've got one but there are other products out there that can do it like KACE, ZCM, Altiris etc. Find something to replace RM Tutor: Monitor students, remote control PCs etc. I'd suggest NetSupport School as that is what RM Tutor is based on and would be almost a drop-in replacement but there are plenty of other products out there that can do it, e.g. AB Tutor, LANSchool, Impero, Senso. Something to deploy/manage your printers. Papercut or something similar if you haven't already got it, deployment can be done with a GPO or GPP User management, creating users, resetting passwords etc. Salamander can automatically create and remove them. If you don't want that, you'll have to find something else to bulk create users, to reset passwords. You could use scripts to create users and Active Directory Users and Computers MMC to manage them, or you could use a third party product like ManageEngine AD Manager Plus to do that for you. File server management. I'd just use what's built into Windows. Windows Updates: SCCM, WSUS, Windows Update for Business. It's all good. Antivirus: These days, I'd stick with Microsoft Defender, it's good and if you the bits for it in Azure, it's bloody good. However, look at the alternatives too: Sophos, McAfee, Symantec, Trend, Kaspersky etc. I'm sure there's more, that's all I can think of right now. Once you've chosen your products, you'll then need to decide how you're going to do the work: Nuke it from orbit and start with a new AD domain or use your existing one and remove the RM bits from it. There's no right or wrong answer to this, it depends on your network, its health and so on. There's advantages to either method and for the record, I've done both. You're going to have to look at your RM software library and determine whether the packages that you've got work away from an RM CC4 network or whether they need repackaging or replacing. I'm assuming you're using Windows 10 at the moment? You're going to have to rebuild every computer on your network that has RM software on it. There's no way around this. Rebuilding every computer on the network is a summer project by itself, on top of having to remove CC4. This may also sound counter productive, but it's probably worth contacting RM and seeing how much consultation about removing CC4 would cost from them. It's a service they offer, I'm pretty sure that CC4 development has all but stopped now as they know schools don't want it any more. Even if you don't want support from them afterwards, I'm sure that they'd do the work if you wanted. There are other school-focused companies like Stone who offer the service as well.
  13. Magic.
  14. Gown..
  15. Mouse (Our first computer when I was growing up, an Amstrad PC1512, had one of those attached to it)
  16. Madness
  17. Zeppelin
  18. It'll most likely be on Disney+ here. They've got S1 and S2 on Star already.
  19. In the books, Reacher is 6’6” and is 250lb of pure muscle. In an early book, Reacher worked as a builder and bouncer and put on further bulk. In that book, he got shot in the chest and his mighty pecks saved him, albeit he got sent in a coma. Tom Cruise just doesn’t meet that description, he’s neither tall nor is he muscular. In the new series, the actor is at least muscular even if he isn’t 6’6”.
  20. Is that a suggestion or an enquiry as to what Applocker is?
  21. Norphy

    Snow 2022

    Got a bit here as well! Don’t know how well it shows in the picture but it’s quite heavy.
  22. Does Applocker not work? Denying access to the Microsoft.WindowsCalculator package ought to do it - create a rule under "Packaged App Rules" rather than "Executable Rules"
  23. I can't comment much about the 25 year commitment (other than to agree that it does seem like an absurdly long commitment to me), but I can say that the MAT I worked for before I left education had both internet circuits and L2 Point to Point connections from both Virgin and OpenReach, managed by a third party (Charterhouse Voice and Data). They handled the support for the circuits, rather than us. When the lines were put in, the respective companies ran new fibre from their cabinets to the premises, they didn't use existing fibre. We managed the filtering and firewall ourselves, as you say, but the circuits themselves were perfectly adequate for our use and fairly reasonably priced. I suppose you have to do a cost analysis and see what works out the more reasonable option, either the bundled service from your local council or the separate bits and bobs and see what you think. Obviously there's no way you can do a 25 year analysis but five years is doable.
  24. Card ..
×
×
  • Create New...