jthompson

For that particular option (spoofing of employee names) I've chosen "Keep email in the inbox and show warning". We sometimes have legitimate exchanges with people's personal email addresses, so having them delivered but with the warning being shown seems to be a decent compromise. Also, there could be legitimate dealings with someone who does actually share a name with an employee. WRT your 'finance' example, might including your school name in the display name would help to avoid the clash (i.e. "St. Smithen's Finance Department" <[email protected]>)?

That's an interesting read, particularly the section about feeling burned out by the constant flow of new features and capability. I find it so hard to gauge the potential of AI when it's moving so much faster than previous hot-newnessess. Some days I'm positive about what it can bring me/us, but other days I think my brain just can't compute it and falls back to my default old-man-yells-at-cloud mode.

The harder question would be to ask which is L and which is R.

Subject Access Requests and the redaction thereof? That would save a lot of donkey work.

Try this: @echo off setlocal enabledelayedexpansion for /D %%a in ("C:\Users\user\Desktop\test\*") do ( set folderPath=%%a for %%b in (!folderPath!) do ( set username=%%~nxb ) echo !username! REM use icacls here ) endlocal As an aside, I can say from my own experience that user account provisioning/deprovisioning is a great 'in' for learning PowerShell

This speaks to exactly what I'll be interested to see as out own ban progresses. The amount of pastoral work that's generated off the back of phone and/or social media use is pretty immense, so it'll be interesting to see how far and how fast that dials down. On the matter of whether schools should be actively working to help children develop a healthy relationship with their phones rather than prohbiting their use, it could be argued that prohbiting their use, in fact, helps to demonstrate what a healthy relationship with a phone looks like. Given that schools are up against a swathe of global tech firms battling one another and aggressively mining for attention, keeping that to outside of school hours seems not all that heavy-handed to me.

This thread makes for interesting reading. I, too, had assumed that the Yondr pouches were Faraday bags, but it seems that they're not, they're just a physical barrier to hands and eyeballs (and therefore the almost involuntary, habitual checking of a phone). Our school has recently deployed them. The big advantage is that it allows the school to effectively ban phone use duing the social times and not just in lessons. Some instances of dummy/burner phone use to try to circumvent it, but sanctions are in place to respond to that. It'll be interesting to see what the effect of it will be on the workload of pastoral staff in the coming months. Without the physicality of the pouch, I can't see how enforcing a phone use ban throughtout the entirety of the school day would be feasible (YMMV). A "leave it at home" policy seems unrealistic, in my view, given the number of legitimate uses for them out in the real world. I do wonder whether in the long term (years) we'll see smartphone ownership drop off amongst younger cohorts coming up through a school system that has had bans in place since before they might otherwise have been being given a phone: an attenuation of the network effects at play.

Whilst I've never played it, I quite like the look of Grimdark Future, an alternative, minimalist ruleset that has clearly been written with 40k miniatures in mind. The factions and units are obvious analogues of 40k (Alien Hives, High Elf Fleets, Machine Cult, etc.).

Interesting that you've had success using the helpdesk part of GLPI. I've been using it for nearly as long as you, but really just the asset inventory features. I really love it for that (it doesn't get enough love on here imho), but have never really got on with the tickets/problems/changes side of things. All a bit fiddly with not very readable email templates. Every so often I try again with it but your recommendation gives me hope that it's worth trying again. Maybe it's just that I don't have a firm enough grasp of the ITSM principles around which it's built. If we finally get kicked out of using FreshDesk for free, I'd prefer to try and use GLPI rather than self hosting osTicket again.

In a similar vein, Ars has a good write-up of Veo3's capability and its significance. https://arstechnica.com/ai/2025/05/ai-video-just-took-a-startling-leap-in-realism-are-we-doomed/ The conclusions they draw are quite interesting.

I've just noticed that in the background of the Tygon pics is an unopened, still sealed pot of Citadel Goblin Green paint from the 1990's 😄 Clearly I had visions of painting lots more bases in the 1990's than I actually got around to.

My Start Collecting! Tyranids box is now done! I'm not sure yet whether I've now started or have actually Finished Collecting! Tyranids. We'll see. This is the Trygon now finished, to join the Broodlord and Genestealers from earlier posts. Not a great photograph, since a dark, glossy space monster is a bit too challenging for my phone camera. It looks better IRL (particularly the colour-shift carapace), but @Garacesh's Norn would put it to shame, I'm sure.

Not seeing any notifications or banners in our account about the Free Plan coming to an end. Are there any public announcements from them about this?

You can grey out the Flight mode button per computer by disabling the "Radio Management Service" Windows service. In Group Policy Computer Configuration -> Policies -> Windows Settings -> Security Settings -> System Services -> Radio Management Service (set to Disabled). The button remains in the quick actions panel, but it is greyed out and non-functional. Similarly, the Mobile hotspot button can be greyed out per computer using Group Policy. Computer Configuration -> Policies -> Administrative Templates -> Network -> Network Connections -> Prohibit use of Internet Connection Sharing on your DNS domain network (set to Enabled). I don't know of a way to keep users our of the WiFi toggle, but to mitigate against misuse, we have the network icon showing on the login/lock screen so that it can be enabled if it's been turned off by someone. IIRC that's done via registry in HKLM SOFTWARE\Policies\Microsoft\Windows\System A REG_DWORD named DontDisplayNetworkSelectionUI and set to 0.

I would imagine it's more the energy cost associate with moving that water about. It's also adding generally to the water demand, which might have a knock-on effect of pushing up the cost of supplying water for everyone else. However, my underatanding of water infrastructure is largely informed by my experience of it in SimCities 2000 and 3000.

YMMV but after various rounds of trying to rationalise the printing situation, some subject areas just do want to print more. We charge printing to subject areas, so they're aware of the cost and all that, and have made the determination that they're happy to spend their money on whatever volume of printing/copying they're doing. I'm not going to get into shaming people with environmental impact stats, since they could be diligently cycling to work for all I know.

At least it's being quarantined rather than rejected, such that you're able to release them and get them delivered.

That's what a Toyota pick-up would've looked like in an early 90's racing game, before the days of Gouraud shading.

Having that email address in an address list that's used in a rule in Admin > Apps > Google Workspace > Settings for Gmail > Spam, phishing and malware > Spam is probably all you should need to do to get messages from that sender to bypass the spam filters. However, if there's a misconfiguration on the sender side, it might end up rejected or quarantied regardless, before it even reaches that rule.

IIRC an email can pass DKIM, in that it is signed, but not pass the DKIM alignment portion of DMARC (if the domain in the DKIM signature doesn't match the envelope's 'from' domain). That would be a misconfiguration on the part of the sender: at that point your Gmail service is just honouring the sender's DMARC policy, which might be instructing Gmail to quarantine it regardless of whatever rules you've got set up.

either a full email address or just the domain part. e.g. [email protected] adomain.org

I've been tasked with setting this up today, for some exams in just a few days' time. I'd never even heard of this one before now: what a long thread! I have been getting the "Unexpected error occured" message when attempting to sign into the Adminstrator Dashboard. Deliberately incorrect credentials would result in "Invalid credentials or account blocked". I believe the issue was that the server I was running the Exam Centre Service on also needed to have "Microsoft® System CLR Types for Microsoft® SQL Server® 2012 SP4" installed. From https://www.microsoft.com/en-us/download/details.aspx?id=56041, download and install both the x86 and x64 varieties of SQLSysClrTypes.msi. In Windows Event Viewer -> Windows Logs -> Application, events from the "ECService" source indicated that SqlServerSpatial110.dll was missing, and installing the CLR Types appears to be the fix. In doing all of that, I think I got the user account blocked, but getting a password reset email from them has proved non-trivial owing to the reset emails getting rejected by ediplc.com's DMARC policy. I'm having a fun Friday afternoon!

And then, circa 1983 AD, Douglas Adams added yet another layer of meaning to English place names with The Meaning of Liff.

It isn't included in LTSC 2024. https://learn.microsoft.com/en-us/office/ltsc/2024/overview#microsoft-publisher

I've been meaning to spin up a Netbox instance and try it out. I've used Racktables for quite a few years now. I've not made use of all of its features, but my only issue with it has been that patch panels are hard to document: you can link their front-facing ports to other items, but there doesn't appear to be a way to link the rears of the ports. That's possible in Netbox, which is my main reason for wanting to try it out as a potential replacement. You can also do it using GLPI, which we also use here, but I find that documenting network cabs, links, etc using GLPI is a bit of a grind. very granular with lots of clicking to drill down, whereas Racktables gives a better overall view of a cab layout, it's devices and the important links.