limawhiskey

A lot of web filters will have rule sets for foreign TLDs. We use Lightspeed and have then blocked for staff and students. I have also seen similar on Symantec's web filter. Can cause minor problems with some of the trendy domain choices, but other than that I would say it's a safe bet to block them.

Thanks. I don't have an account so I'll contact our SIMS support for access.

When I download updates using SOLUS3 it is possible for a short time to 'pull' an update down to the client, using the agent notifier and "Check for updates" button. After some time (somewhere between minutes and hours), the clients are no longer able to pull the updates and I get an error, "the update is missing from the repository". At the server end, if I go to deploy the update, I get "The following updates have missing files ... The system can download these for you but the update will need to be deployed again manually. Would you like to continue?" [ATTACH=CONFIG]39958[/ATTACH] It seems like the files have expired or possibly failed some sort of checksum, but I can't see why; there's no other activity on the server. I have even removed AV from the equation, yet I still get the error. Anyone else seeing this behaviour?

You didn't let me finish, I was about to say: unless you have a policy that disallows personal devices, no devices provided for staff and no mobile coverage, in which case the U2F key would be perfect for you I don't see why - an insecure device would be about as secure as a U2F key; you're only using it to access/generate the OTP.

For staff or student accounts? Personally I can't see the need to have them, with options for OTPs by SMS, via the authenticator app, or the new option to have a notification pop up on your android device (Google prompt). As for damaged keys, the individual would use another 2-Step Verification method to log in, remove the damaged/lost key and register the new one. You shouldn't have to do any administration other than create a help guide and keep a stock of keys. Worst case is you'd need to recover a backup key for the individual: Troubleshoot 2-Step Verification - G Suite Administrator Help

Do Innovative Technology do the coin mech's as well? Could be handy for the new £1 coin.

Good luck. Unfortunately we've already paid for the reader to be swapped out by their engineer, so not really helped the cause!

This is pretty infuriating, as I specifically asked our client manager and a support engineer if the firmware upgrade was something we could do in house, as there was quite a wait for the engineer visits. "No", they said, "that'll be £395 + VAT please." That's a new projector / pc / laptop for someone down the swanny

For anyone else looking, I ended up adjusting the User Policy for the CA accounts to force association of RTF files with WordPad by adding a registry fragment (pastebin.com/8ndGWUDJ) in Custom Settings. I also applied "Disable right click on the desktop and in Windows Explorer" in the General category, to prevent users changing the file association. - - - Updated - - - Also, Surely not a response to my post? Thanks RM

Holy thread resurrection, Batman! We have created dedicated accounts for controlled assessment sessions, with only WordPad available in the program sets. The problem I'm coming up against is that when they return to their work, on double clicking their saved .RTF files, Word grabs this by default. At that point, they get a spell checker and everyone LOSES THEIR MIND. Does anyone know the registry entry to push RTF files back to WordPad? Any other tips (preferably related to CC4 and controlled assessments)? Thanks

Seb, I'm looking to move our .sch.uk domain into our control. Do you still offer this for no charge? Would we have access to alter DNS records? I'm thinking for things like MX records, SPF, DKIM, that sort of thing. If so, what's the procedure for changing the IPSTAG and getting it transferred to you?

Ah, not used MDT so didn't realise that a command prompt was available from there.

Seems like Windows can't find the partition on the disc. I would fire up Windows installer from a USB or disc, go for recovery options and command prompt: diskpart list disk select disk X* clean create partition primary format quick exit *Where X is the SSD disk number, likely zero but double check. Then shutdown and try running it again.

How do you do this? Is it a separate electrical circuit with a backup? I ask as it's something I have been thinking about lately and we have a large site that would need many UPS's across all of our network cabs.

Thanks. I have spec'ed a few services that we have, plus some I expect to have running on the new connection.

I take it you mean software upgrades / troubleshooting, that sort of thing? I have tried to make that a bit clearer in the updated spec. Thanks Dave, will do.

I would agree but I have been asked to ensure we have a backup. - - - Updated - - - Thanks, that was what I intended but I have made that more clear.

Thanks all for your input. The spec has become a bit longer but I am happier with it now: Timeline Install complete and tested by 31 August 2017 and switch over during the October 2017 half term closure period (expected 23rd to 27th October). It is vital that the service is in place by the 27th October as no extension to existing provision is possible once notice has been given. Contract length 3 year and 5 year terms considered. Features Internet service: 200 Mbps uncontended bandwidth on 1 Gbps bearer connection. Please include price to upgrade to 300 Mbps during the contract term (without extension) expressed as an incremental monthly cost. [*]Public IP address block with sufficient usable addresses for: Web servers Remote desktop services VPN services Mail server Remote hardware management CCTV monitoring [*]SMTP relay [*]Back-up connection using ADSL: Automatic failover with prioritisation e.g. allow only staff traffic Active / passive, monitored connection including alerts for link failure (using firewall features or link balancer) [*]IPv6 support [*]Firewall features: Essential: Configurable by in house IT team with support from provider. Software updates included during contract. [*]Desirable: Intrusion prevention Antivirus / antimalware Antispam Support for IPv6 [*]Web filtering features Essential provision by user/group reporting by user HTTPS inspection [*]Desirable real time inspection [*]General support Engineer assistance with changeover. Configuration changes included during contract term e.g. reverse DNS entries. Troubleshooting support. Software updates to firewall and web filter. Clearly defined SLA. [*]Extensive experience within the school sector Supply two reference sites

I'm inviting you guys to critique the draft specification for the tender of our internet service. Currently we're with the LA but I think we can get better value for money going to the market. This is the first major tender I have been involved in so I want to get it right! Any tips welcome. Current spec: Install complete and tested by 31 August 2017 and switch over during the October 2017 half term closure period (expected 23rd to 27th October) It is vital that the service is in place by the 27th October as no extension to existing provision is possible once notice has been given [*]3 year and 5 year terms considered [*]200 Mbps uncontended bandwidth on 1 Gbps bearer connection Please include price to upgrade to 300 Mbps during the contract term expressed as an incremental monthly cost [*]Web filtering provision by user group [*]Firewall must be configurable by in house IT team. intrusion prevention, antivirus, antispam and antimalware are desirable features. [*]Back-up line via ADSL – failover should allow only staff traffic [*]Extensive experience within the school sector - supply two reference sites. So... what have I missed out? Have I been too specific on anything? Could it be clearer? Other points I have been considering: Number of public IP addresses assigned for our use. /30 – one useable addresses /29 – block of five usable addresses /28 – block of 13 usable Should we specify this? I haven't managed a public facing IP address space before but I'm wondering whether we should specify a block of addresses to allow for simpler management of services published to the internet in future. At the moment we only need remote desktop and web server. Service reliability – should we specify e.g. 99.95% uptime? Alternatively this could be a scoring criteria. Thanks

I have been looking as well. In case anyone else stumbles across this thread: Notepad++ MSI package for Enterprise deployment is available | Hass - IT Consulting

Why self hosted if files are encrypted? I have used a similar method to Steve's before; a file with a long, randomly generated filename. I like the idea of scheduled task to delete though, good idea, you could have a daily schedule to purge files older than x days. I have also used (I realise these are not self hosted but if the file has strong encryption - meh) WeTransfer (Free up to 2GB) https://www.wetransfer.com/we DropSend (free up to 4GB with a limit of 5 sends per month) DropSend | Send Large Files and Email Large Files

Yep, we had the same, with the same model of UPS battery. I also thought AC then thought it was a drain or something. A google search brought me here. I had to get some gloves to handle the battery packs, they were so hot. Our batteries were around 6 years old - how old were yours? Only one pair was affected but £1k later and they are all now new! Insight were the cheapest for new APC battery packs for us.

@Moxxa - did you ever find a solution?

Do you mean a second pass with the import or did you manually set the work emails as primary? I'm having the same problem trying to get 200 staff email addresses imported

We're using Contacts and the domain directory as an address book, with the domain settings controlling what is listed in the directory. Maybe it's lacking a feature that O365 offers? As the Gmail 'experience' is designed for the browser and Google's own apps, the Outlook plugin being rubbish is neither here nor there for us, but I can understand if you're used to using Outlook that would make it a PitA. Frog mail was a pretty poor browser based email client by today's standards so Gmail is way ahead of what our staff are used to. Not looked at email encryption yet, that's interesting. I agree with you on public folders though, if they are what I think they are. I just about have wrapped my head around Groups (Google's way of dealing with shared mailboxes) and once our staff got it, they were happy enough but I do think that aspect could be better. Thanks for the update, just wanted to check I hadn't missed anything blindingly obvious