jthompson

We have a dedicated user account for running the software, which has sufficient privileges on the install directory to allow it to apply automatic updates. If we're conducting an exam that uses the software, the machines would all be signed in in advance of the exam, with the Surpass software already launched when candidates enter the room.

Ditto. The URL is timing out for us. There's a note on their status page: https://www.cpoms.co.uk/service-status/ EDIT: Pages are now loading for us, but feeling a little slow. Hopefully on its way back to normal service.

Even with well defined admin accounts/roles, there's presumably going to be a superadmin account that isn't associated with a named individual. That account will need suitable 'shared' MFA, with documented credentials. Documenting/sharing MFA for any non-admin, departmental mailbox accounts, for instance, seems like a good idea.

An account being shared shouldn't be a barrier to adding 2FA to it. For instance, T-OTP (aka Authenticator) will be available to add and can be shared easily: when setting it up, either scan the QR on all devices that will need it, or display and note down (in a password manager) the secret/QR so that it can be added to further devices later on. Devices with the same secret will generate the same codes (the codes being a function of the secret and the current time). We have a number of admin and/or shared accounts on Google and M365 that all have 2FA enabled in this way. If you have USB security keys, you can also just add those to the account(s). Accounts can have multiple security keys associated with them, and an individual security key can be associated with multiple accounts.

I really like the effect you've achieved on the armour plating. I really struggled with deciding on a colour scheme for my nids. I started with genestealers, which was perhaps a mistake because they're a little atypical where nids are concerned (not much of the hard plating).

Are you also using a socks proxy?

Ours is a custom thing, which is not a particularly suitable suggestion here, but we use Azure application proxy to make it available from home for staff. It will secure it behind their Azure AD accounts, and means that our little intranet site doesn't need to be web-facing.

Perhaps some of the first responses are no longer present because they were just test responses that have since been deleted.

We have sets of exam accounts for each subject (exam.sci0000, exam.sci0001...) as sometimes assessments are spread out over a number of weeks. A student could therefore be assigned more than one exam account, depending on the subjects they're taking. That makes it easier to keep track of them and to know when accounts are able to be recycled. Spreadsheets of names, exam usernames and passwords shared to staff as required. Staff sometimes need write access to the exam account user areas, so separating them into subject-specific sets allows those privileges to be more easily minimised. Passwords are all unique. If web access is prohibited, we assign non-functional proxy details via GPO. If access is required only for certain website, then we configure Chrome and Edge URL block/allow lists via GPO. If any apps are to be prohibited (e.g. Calculator, Excel) then we block those for the accounts using AppLocker. ExamWritePad is used in most instances. Computers used for exams will have a GPO applied which adjusts the Windows power plan to keep the machines awake for several hours before sleeping. We always try to keep on top on Windows updates ahead of exams as well, to avoid forced restarts.

Do you know if this will remove an old Citadel paint called Smelly Primer, which was used to prime metal minis? Tyring to redo some of my 90's era models, I could get the colour off with isopropyl alcohol but the primer wouldn't budge. I had globbed it on to plastic minis as well as metal ones, and lost a fair amount of detail.

I'm not going to sweat it too much because I'm sure my wife will buy me the Leviathan box for my birthday... ...PAHAHAHA!!

Haven't come across that, but then we don't use the proxyaddress attribute. One thing to check might be whether the user account that GCDS is using to query AD has privileges to read that attribute. Bit of a long shot.

I would love that box but I already have plenty of models still on sprues. The new screamer killer looks immense.

I'm wondering if this is the reason why. https://support.microsoft.com/en-us/office/changes-to-microsoft-365-email-features-and-storage-637e353b-87b8-40d4-aa3f-a269bb9dfeb6 It's typical Microsoft level of [non]clarity but it looks like that may apply to free personal accounts as well.

Hi all Does anyone know whether MS have recently altered storage quotas for Hotmail (or live or outlook.com) customers? I've noticed a definite jump in the number of parents' addresses (hotmail) that have started to bounce back with the following whenever we send out comms. smtp;554 5.2.2 mailbox full; STOREDRV.Deliver.Exception:QuotaExceededException; Failed to process message due to a permanent exception with message [beginDiagnosticData]Microsoft Unified Storage is full. QuotaExceededException: Microsoft Unified Storage is full.

Maybe wait until 25 years and proclaim a Silver Jubilee Edubilee?

You might be able to make use of a VNC utility to connect to your current machine and have a window containing your entire [extended] desktop. You may end up Dr Who'ing into an infinity mirror, though.

That's surely got to be a misinterpretation by somebody at some point along the way?! I'd be inclined to regard any candidate that did surrender their private social media passwords as being in need of some training before being trusted with a school user account.

Really? I've always found Android pretty well-behaved when adding additional accounts. The work profiles feature is awesome, but I appreciate that that OP is not actually wanting that in this case.

I think I'm still below 50% equity when it comes to years spent lurking vs years spent contributing posts.

We've found this, too. I've heard a possible reason for it being that the water is hot enough for coffee but not properly hot enough for tea.

I still haven't had mine. I'm telling myself it's because I'm cool and have a system-wide ad-blocker running* rather than me being not worth saving from a dinosaur attack. * it won't be that

Maybe it's a pop-up on the till.

For me, a Kit-Kat Chunky provides the most consistently satisfying "systematically-nibble-the-chocolate-off-each-side-in-turn" experience. You end up with a decent sized wafer, which itself can then be systematically deconstructed from the top layer down. I also like to eat Cornish Wafers dry, on their own, and use the grid of perforations in the cracker to progressively reduce it from its circular shape to a little square. As neatly as possible, of course. Whilst I enjoy a good Easter egg, I do find that they aren't conducive to this style of consumption: they only seem to become less regular in shape the more you try to breaks bits off neatly.

It amuses me that technology as sophisticated as a starship food replicator would have 'cold' as a default setting for serving a cup of tea.