Julian

I also agree about more storage, moden games with "good" graphics are very large, so lots of storage is needed.

When removing Windows 11 apps, you need to remove them twice! Once as an installed application, and once from the repository of installable apps. Otherwise Windows just reinstall the missing app from the repository, when a user login. try Get-AppxProvisionedPackage -Online | Where-Object DisplayName -eq "*WindowsTerminal*" | Remove-AppxProvisionedPackage -Online Get-AppxPackage -name *WindowsTerminal* -AllUsers | Remove-AppPackage -AllUsers

You are correct CMD does not support UNC, you will have do do a drive mapping first, net use z: \\DomainName\SysVol\DomainName\Policies\{C4AFE593-28FA-4ABA-B880-63E386AE8B43}\Machine msisexc z:\filename Net use /delete z: Alternative Powershell does support UNC, but that is often disabled.

We have this happening to random computers round the school, (users have local mandatory profiles) the computer gets to "Preparing Windows" blue screen -long wait, black screen - very long wait. One very patient user left the computer on the black screen, 2 hours later the computer was working. CTRL-ALT-DEL to bring up task manger, and killing the Windows Update task, gets the computer working, so our current belief, is that we have a bad Windows update.

Secondary school 1200 pupils Costs per side A3 colour £0.12 A3 colour duplex £0.10 A4 colour £0.06 A4 colour duplex £0.05 A3 grayscale £0.05 A3 grayscale duplex £0.04 A4 grayscale £0.025 A4 grayscale duplex £0.02 We are using Papercut as a unified copy/print tracking Pupils get a weekly allowance for printing (pupil printing is minor compared to staff). They are not charged, but the limit encourages them to think before printing. Staff can charge the appropriate cost centre, It is the responsibility of the cost centre owner to manage their budget. Papercut has been configured to automatically report (email) to each budget holder, on how their budget is being spent. Some budget holders do not care (until they have no money!), others put strict limits on printing.

Have you updated the certificate templates to the new Microsoft standard (and issued new certifficates)? You now need a Kerberos Domain contoller template, for domain contollers, and a update template for member servers. Windows 11 Clients will not accept the older standard, so they fail. Here are some hopefully useful links. https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/deploy/on-premises-cert-trust https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/requirements-domain-controller https://dirteam.com/sander/2022/09/14/todo-upgrade-the-certificates-for-your-windows-server-2016-based-domain-controllers-and-up-to-enable-windows-hello-for-business-hybrid-scenarios/

Thank you for the tip about breaking the protection, we had the same issue this morning. Personall I wish to inform a news website, nothing forces a change faster than being on the front page of a site like the BBC for the wrong reasons.

We have had our Chromebooks, stop wireless connecting! They needed a Chrome O/S update. USB to ethernet adater, for wired networking, to run the update, solved the problem, mostly. Some did need a powerwash, and then a reload of settings from Google.

Ouch - that was bad. Which exam board provided the .PDF? I currently have a .pdf from WJEC which was not protected, and is working fine.

Please see the links below for more details abot the certificate template versions https://www.gradenegger.eu/en/description-of-the-generations-of-certificate-templates/ https://learn.microsoft.com/en-us/archive/technet-wiki/13303.windows-server-2012-certificate-template-versions-and-options For DC;s https://dirteam.com/sander/2022/09/14/todo-upgrade-the-certificates-for-your-windows-server-2016-based-domain-controllers-and-up-to-enable-windows-hello-for-business-hybrid-scenarios/

Can you please vertfy; The cert server has issued a certificate to itself, and then you have used Group policy, to tell every other computer in your domain, to accept that server as a "Trusered Root Certificate server". That you have added Microsoft updated server templates, to the cert server templates, note there is a special requirement for DC. That you have bound the server to use the new certificate, and removed the old certificate. Sorry to be pedantic, but server certificates requirements are not simple.

Think about a sighned powershell script. The sighning means that if the script is chanaged, it will break the sighning and not be runnable. new-smbMapping -localpath "v:" -remotepath "\\172.16.*********" -username "172.16.*******" -password "*******" # SIG # Begin signature block # MIIJAQYJKoZIhvcNAQcCoIII8jCCCO4CAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR # AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUmiFPtWS67EPZ7YyQOnYwIIXs

Is it split scope , or is it load balancing / reduancy. Microsoft allow 2 DCHP servers to both supply DHCP to the same range, for the purposes of load balancing and reduancy. The easy way to spot this is to look at both DHCP servers, if the same computers are listed, with the same IP addresses, on both DHCP servers, it is load balacing. This also make it easier to work on a server, without lossing DHCP services.

I am using MDT, with a very similar process. Useing a VLSC Will 11 Education image, the process includes a Powershell script to remove some UWP apps (bing new, bing weather, windows alarms, xbox games, ...), install MS Office, install anti virus, join the domain. Updating for a new iWindows 11 mage is a simple process, get the image, upload image to MDT, change 1 line in the sequence to use the new image.

Autodesk Fushion, is basically Fusion 360 in Webassembly (WASM) format, so that it will run in most browsers. So the functonality is the same. Also as it is downloaded on each use, the school does not have to do the update of Fushion 360 every 6 weeks, as specified in the Autodesk agreement. The download does make the Fusion slow to start, but the advantage of using a free industial standard product, which our student can also run on a home computer, makes for a compelling solution.

I also had problems with the Fusion 360 login not working, Gave up and used Autodesk Fusion (the browser based version), which worked. Also can be used by pupils at home, as no install required.

We have been having pupils use computers for exam for some years. Here are some of my experiences. Exams take priority over almost everything. It is the job of the exam officer to organise the exam, we are to assist. We use special exam accounts, the students do not know the password (control over the account), the exam officer decides which accounts will be used for which exam, so where necessary the correct paper or .MP3 file can be put into the account, the exam officer informs us of the seating plan, and which accounts will use the reader software. IT login to the account, connect headphones when needed, do a sound check, Word processing students use "ExamWritepad” , which will be opened. IT checks that there is paper in the printer. We check that the invigilator is happy that the room is ready, and then leave. We remain available to respond to any issues. Student just come in, and use the computers. I can recommend “Claroread” reader software, it works, and install using .msi is easy!

Are you using a printer, with a fold and staple boocket maker attachment? On out Riso printer, with this attchment, it is the printer driver, that takes a document of sequential pages, and reorders them so they form a booklet.

Photoshop CC is a large program, that takes time to load, then requires a sign into Adobe. Also while powerful it is complex, and needs time to how to use it. Paint.net (windows), is free, and much smaller, and simpler. Students can be using it before Photoshop has finished loading, It does not require an Adobe CC login, and the simplicity means that basic tasks, can quickly be taught. We have both Photoshop CC, and Paint.net, but for years 7, 8, & 9 art classes, they use the simpler application.

I teacher had this issue, this morning. What worked was use Chrome, sign into Google, then open YouTube.

Similar to others, VMWare hosts sync to NPT source, Servers get time from the hosts. I also have one sever set up as a NTP server, so that all my network switches have the right time, and date. Logs are much easier to understand when the data and time is correct.

Cloud based MIS mean that there is no problem with staff accessing the MIS from home in a browser. Both Arbour and Bromcom have mobile phone apps. (We have a deputy head who find this very useful for locating pupils.) I would recomend asking other local school, if they are using Bromcom, or Arbour, if they could give some selected staff a demonstration (not a saleman demonstation, but real life useage).

DHCP and FSMO are seperate, so you can promote a diffrent server to FSMO with affecting DHCP. Try changing your DHCP mode to "Load balancing" for all your ranges, and then check the statistics to see that multiple servers are giving out DHCP addressees. That way you can safely take down any DHCP server, knowing that the network dhcp will still function. If you are doing a inplace upgrade to Server 2022, then the existing settings will be retained. If it is a clean build, you will have to reconfigure the failover, when the new server is running.

Thank you for the link, I assume that you are refering to firewall rule 4, block UDP, on ports 80, 443, and 5353. I wonder what else will get blocked if UDP is disabled?

DNS over HTTPS, No we can not block port 443 (without blocking all the sites that use https!).