jthompson

We're not using Classroom for cover, but we are using a Google shared drive which is working nicely. Staff leaving cover place a copy of cover work into the relevant folder in the shared drive. There is a folder for each day for the next couple of weeks, inside which staff will create a suitably named folder (staff initials and period, typically) to hold their cover work. External cover staff are all provided with a Chromebook and a common 'coverteacher' Google account with which to access the shared folder. That account has prominent shortcuts in Chrome to direct people to the shared drive. The devices we provide are usually old laptops running ChromeOS Flex, so nice and cheap. The shared drive folders for the next couple of weeks are created automatically using some Apps Script, which also tidies away past dates' folders to keep things sensible.

Those commands will work, but for the Remove-ADGroupMember command, you may need to add -Confirm:$False so that it doesn't get help up with a confirmation prompt: Remove-ADGroupMember -Identity "COLOURING IN" -Members "RECEPTION" -Confirm:$False

Google Docs can do it, but YMMV WRT tables and any other 'exotic' formatting. Also, if the Preview app on a Mac does a good job of it, you could use it as an excuse to buy a sexy computer.

For those kinds of errors, a private browsing window, clearing browsing data or a fresh browser profile will resolve broken sites. I wouldn't keep a whole other browser around just for that.

Simple browser-based screen recorder - Google Admin Toolbox: Screen Recorder No account or browser extension required.

We use Google Workspace so in our case, it's Edge that feels like a pointless complication. If you're not using Google accounts, and your users are able to make us of MS sync services within Edge, then you don't appear to need Chrome. The UI in Edge is increasingly cluttered and unfocussed though, IMHO, so may need more work to keep it simple and simpler to support end users with.

IDK if MS promotes MTA-STS at all, but that's another one to add alongside SPF, DKIM and DMARC whilst you're at it. It works to ensure that inbound emails are encrypted in transit from the sender - https://www.ncsc.gov.uk/collection/email-security-and-anti-spoofing/using-mta-sts-to-protect-the-privacy-of-your-emails.

And MX!

I think you're basically looking to block "google.com/search". I was going to suggest adding that to a URL blocklist in Google Admin, but I'm not sure that you can do that as a per device setting in Google Admin, only as a per user.

When Wonde first appeared, I seem to remember there being virtually nothing in the way of a school-facing interface or services. I guess their initial business was geared on that basis, but now that each school can be presented with a more comprehensive web app for managing all the different permissions, reporting, etc. and are also being presented tools for SAR, DPIA, etc. they actually have a product to sell to schools, whilst at the same time having to cover the cost of providing that. Get into schools initially by riding on the back of existing services who see value in an MIS-agnostic sync service, and then upsell to schools after the fact.

Press F12 after powering it on until the boot device selection menu appears. If there isn't an option to boot from the network, then go into the device setup (press Fw2 after powering on) and enable the UEFI network stack. I'll leave the configuration of a network imaging solution as an exercise for the reader.

On the Google groups. In the settings for each Google group is an option to allow web posting (on by default but you'll most likely wat it turned off), along with a bunch of others that you'll want to familiarise yourself in terms of whether non-members can email the group, etc.

The Classroom Teachers group will accept other Google groups as members, and work accordingly, so you'd just need to sync your existing staff groups to Google and then add those into Classroom Teachers. Word of warning. Google groups by default will have web posting enabled (so that they work like a web forum), but you'll want to turn web posting off for each of your groups, leaving them to work just like regular mail groups. Otherwise members can see posts from before they were a member, which is a bit of a data protection fail.

Google Admin > Apps > Google Workspace > Classroom > General settings > Teacher permissions. Set it to "Verified teachers only". That will set it such that only members of the "Classroom Teachers" group can create classes.

Wouldn't AppLocker's default rules prevent your users from executing anything in "C:\Users\Public" anyway? If so, all you would need is a rule to allow your pastoral group to run the CCTV app.

Hmm, it seems like a new setting in Google Admin was the culprit. "Google Admin > Directory > Directory settings > Contact sharing" was off. Turning it on has resolved things. Perhaps a new or a reworked option that has for whatever reason started life in an OFF state. There's nothing in our logs for that option other than me turning it now just now.

Hi all Is anyone else experiencing this problem with Gmail and Google Contacts this morning? Gmail recipient suggestions are incomplete, with entires from the organisation directory missing. The Google Contacts web app is also missing the Directory section from the left-hand menu (from memory, I think it's meant to be there). Nothing on the Worspace status dashboard, so wondering if others are seeing this problem.

We point our MFDs to an on-prem mail relay (postfix), which relays on to a gmail smtp relay service. IIRC there's an equivalent relay service you can do with M365.

Not using Smoothwall, but we have a similar measure in place. We have a profile set up on our filtering that we've named "Walled Garden", which is an allowlist of the bare minimum of sites required for core teaching and learning: Google Workspace URLs for Docs, Drive, Classroom, etc. and a couple of other revision sites, with no access to web searches. That profile gets applied to Windows users via Group Policy proxy settings, depending on membership of the relevant security group. We also have Chromebooks dedicated for isolation use, which are also configured to use that "Walled Garden" proxy., regardless of the user. It's used fairly sparingly, but I know that there have been cases where it's a safeguarding thing, so a little too serious for the "it's not a technical issue" thing.

Reminds me of that bit in Death Becomes Her when Meryl Streep picks herself up off the floor after being pushed down the stairs by Bruce Willis.

Self-hosted GLPI. I absolutely love it for asset management, and am always surprised by how little it gets mentioned on here. Would highly recommend deploying the Windows agent, too.

Not seeing this problem here. Have a look at the solution posited in this thread if you haven't already - https://support.google.com/chrome/thread/239508594/err-ssl-key-usage-incompatible-error-in-chrome-but-not-edge-for-all-google-sites-and-some-others?hl=en

I've a feeling you can do it without having to re-join or reboot. Reset-ComputerMachinePassword - https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/reset-computermachinepassword?view=powershell-5.1 Also, this might to the trick, too: Test-ComputerSecureChannel -Repair https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/test-computersecurechannel?view=powershell-5.1

MCM (aka MECM, aka SCCM) or Autopilot/InTune, I guess. I looked at MCM at little back but was put off by how complex it was to put together. MDT seemed like the right tool for what we want (deploying an OS and drivers over the network and it only taking 20-30 minutes), despite being long in the tooth. I expect MCM would be an easier prospect for me now, having had to wrestle with MDT so much to streamline it to as near zero-touch as possible.

Yeah, I'm just wondering whether WDS would continue to serve up the earlier boot image until the WDS service is restarted. Restarting WDS from the WDS console should suffice for that.