Julian

Given that as a school you have statutory obligations for "Safeguarding" and "Prevent" duties. Asking for unfiltered school internet access in a UK school is simple not legal. I would guess that some sites need to be unblocked, and someone is being lazy about specifying exactly what is requied.

Are you using a phyical server or a virual server?, If virtual, why not do a inplace upgrade? As that would save you lots of hassel.

4k HDR monitor 32" for a good view.

Not easily Bromcom Roles and permissions, can be exported, as an XML file, which Excel can import, and search. The Bromcom permission names are a bit cryptic. Create a new roles and permission, with just the permission you are looking for set, export, import into Excel, see what the name is, and use that to search all the other XML files, for that name.

The major problem I have had with Fusion is that Autodesk requires every user to login. With fushion 360, this opened a browser, did the login, and then failed to tell the programe that the user had logged in! With Fusion online, it all in the browser so the login works. So I recomend the online vesion. https://fusion.online.autodesk.com/

Both .mov, and mp4 formats are container formats, that allow multile diffrent encodings of the video data. it may be that a incompatable (with Google) video encoding format was use inside the file.

The big problem with summer is the exams, the migration cannot take over details about exams is progress, and with results appels and remarks, that can stretch in September. Easter avaoids the issue.

Windows 11 does not like UNC shortcuts, or network shortcuts. When testing I manually added shortcuts to my own "Start Menu - All Apps", and then checked to see if I could see the shorcut in the menu. As the user profile, has a section for the start menu -all apps, I have added new shortcuts into my generic local user profile template. And I have a startup script to sync the local copy, with the copy on a server.

The "All Apps" start menu redirect does not work in windows 11. The "All Apps" shortcuts come from 2 locations, C:\ProgramData\Microsoft\Windows\Start Menu\Programs C:\Users\%username%l\AppData\Roaming\Microsoft\Windows\Start Menu\Programs The first location is for all users, and has high security, to prevebnt changes The second location, is per user, and is writeable for each user, so a logon script, can put the necessary shortcuts, into that location, for a particular user.

The start menu will only show items, if they are are also in the "All Apps" menu, please check that a shortcut for the missing apps, is also in the "All Apps" menu.

Installing Python, and pygame using PowerShell works well, I am using a signed PowerShell script. Here is my PowerShell code # Script to install Python v3.13.1 # Using Powershell to use UNC ## Test if Python v3.13.1 already installed, and exit if installed if (Test-Path "C:\Program Files\python\python3.13.1") { exit } ## If Python folder doe not exist, then create it If (-not (test-path "C:\Program Files\Python")) { New-Item -ItemType "directory" -Path "C:\Program Files" -name "Python" } ## Install Python 3.13.0 cd \\joa-app01\Repository\Python\Python\ Start-Process -filepath ".\python-3.13.1-amd64.exe" -ArgumentList "/passive", "/InstallAllUsers" -Wait ## Install marker to show Python version New-Item -itemType File -path "C:\Program Files\Python" -Name "Python3.13.1" ## Remove old marker, if exists If (Test-Path "C:\Program Files\python\python3.13.0"){ Remove-Item "C:\Program Files\python\python3.13.0" } ## Explicitly set no proxy $Env:http_proxy ="" $Env:https_proxy ="" ## Install / Update Python libraries CD "C:\Program Files\Python\Scripts" .\pip.exe install wheel --no-warn-script-location .\pip.exe install Pygame --no-warn-script-location .\pip.exe install numpy --no-warn-script-location .\pip.exe install pyopengl --no-warn-script-location # SIG # Begin signature block # Signing code goes here Note I am using “Start-Process” so that the install of Python competes, before starting the install of the library components. (PowerShell will do line sequentially, except when there is a Windows command, then they will be done simultaneously) Ihope that this is of some help.

Using the Adobe site you can build packages, for all the items you have licenced (MSI files), You also must add all the users who will be using the Adobe software as they have to separately login into Adobe CC. When the software is run, the computer will connect to Adobe CC and check if it is licenced, and how many computers the software is being used on (and refuse to exceed the number of computers you have licenced). Warning Adobe software is large, 4+ GB / package. When installing / updating a room, boot times can be 30+ minutes

If you want to know the time it for the computer to process group policy, your computer already records all the information. Use "Group Policy Results" from Group Policy Management (it's the bottom option). If you run this from a DC you can get the group policy processing times for any computer and user on your domain. As an example, here is the details from my logon. Total time taken for user group policy processing was 6 seconds

We are installing Windows 11 from MDT, we are using a standand Microsoft ISO image, and then a powershell script (below) to remove some apps. It should be easy to customize this script. # Script to remove Windows 11 UWP apps # List of apps to be removed $AppList =@( "Microsoft.549981C3F5F10", "Microsoft.BingNews", "Microsoft.BingWeather", "Microsoft.GamingApp", "Microsoft.GetHelp", "Microsoft.Getstarted", "Microsoft.MicrosoftOfficeHub", "Microsoft.MicrosoftSolitaireCollection", "Microsoft.People", "Microsoft.StorePurchaseApp", "Microsoft.Todos", "Microsoft.WindowsAlarms", "Microsoft.WindowsCamera", "microsoft.windowscommunicationsapps", "Microsoft.WindowsFeedbackHub", "Microsoft.WindowsMaps", "Microsoft.WindowsStore", "Microsoft.Xbox.TCUI", "Microsoft.XboxGameOverlay", "Microsoft.XboxGamingOverlay", "Microsoft.XboxIdentityProvider", "Microsoft.XboxSpeechToTextOverlay", "Microsoft.YourPhone", "Microsoft.ZuneMusic", "Microsoft.ZuneVideo", "MicrosoftCorporationII.QuickAssist", "MicrosoftTeams") foreach ($i in $applist) { Get-AppxProvisionedPackage -Online | Where-Object DisplayName -eq $i | Remove-AppxProvisionedPackage -Online Get-AppxPackage -name $i -AllUsers | Remove-AppPackage -AllUsers }

Please take a long hard look at the profile, 10GB is very large. The less file copying on logon, the faster will be the logon, and the network is slower than the local SSD. For our users the "Document" folder is mapped to a server, so no sync. Please see my attchment, all staff are mapped to the same small profile template.

A few questions-Sorry, Computers have SSD? How much memmory? Windows 11 capeable processor? Size of local profile? For us logon times are 20 -30 seconds, on computers with 16GB ram, SSD, and Windows 11, with a profile template that is 60 folders, 107 files, and under 2 Mb (lots of small link fies). I also try to make most GPO's as computer not user, apart from the MSFT user polices (Microsoft Security Baseline polices) see https://learn.microsoft.com/en-us/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines

Autodesk Fusion requires no install, it runs in a browser, and is web version of Fusion 360. I recomend it because it just works! On any device with a browser, so your pupils can use it at home. https://fusion.online.autodesk.com/

The trust also want to do 2FA here (computers, email, and MIS), I think the school will have to supply a large number of mobile phones, with a contact, that are still getting O/S updates. My belif is that the cost will be a budet line item next year (2FA for staff, or hire another teacher, pick one!) We are using local profiles, so nothing is rembered, thus it is not possible to use an authenticator app in a browser on the computer. Also desktops do not have camera's, or fingerprint readers. One suggestion, for everyone using 2FA (some staff here), get them to get a set of one time backup codes, so that they can get into there account, if they forget/lose/destroy there phone.

Autodesk Fusion (not to be confused with Fushion 360) is a browser based version of fushion 360 (https://fusion.online.autodesk.com/). It works with no install, and can be used by your pupils at home. It is free for schools, but you do have to setup an Autodesk account for each user.

Currently the two leading MIS contenders, are Abour, and Bromcom. They are both cloud hosted, run in a browser, and so are available at home. My advice is to find a local school that is running either Bromcom or Arbour, and ask if they can show you the system in use. I would particularly speak to the office staff, and about their experience using the system, also ask about tasks such as the school census, sms messaging to parents (lates), bulk email to parents ("there is a tube strike", weekly school newsletter...). Cashless catering integration, and suppling data to third party systems (CPOMS, DfE,…) Also check on Parental access to the MIS information (timetable, behaviour…) We are using Bromcom, which is getting regular updates. Loggins can be linked to either a Office 365 account, or a Google account. 2FA in Bromcom requires the use of Google Authenticator app Be aware that you will lose some data when changing system, a CTF for the school will get most of the basic student data, but behaviour / finance information may be lost.

Do both of your DC have a certificate to identify themselves (needed for secure communication)? And was the certicate made using the recently changed Domain controller certificate template schema? Please see https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/requirements-domain-controller https://www.gradenegger.eu/en/configuring-a-certificate-template-for-domain-controllers/

Active directory, is build on DNS, I therfore have DNS on both DC's for redunacy (I am also running DHCP on both DC's for redudany).

Our Head of IT really likes PyCharm Community edition (free) by JetBrains. It an .exe, so requires a script to install, but will install silently.

If your IP phones are similar to the IP phones we have, there separate volumes, from ringing, and listening. Try using the volume control while the phone is ringing, (before you answer the phone).

If you are trying to future proof your options, look for a key with USB A, USB C , and NFC.