PyROm

Smart notebook 11.4 with the version 12 drivers works fine on windows 10 for us (although on our test laptops for 1909 a windows update seems to have started making it crash after showing the loading splash screen)

Im currently looking at prowise presenter (suggested by someone else on these forums), its free, web based and they have a UK office. It can be linked to google drive/onedrive/dropbox, has its own storage for presentations and can download produced files. It will also open .notebook (smart notebook files). Not fully tested it here yet, but just a quick play with it and it looks good.

We use Impero and WOL with the default network card drivers. we set the below reg entries using GPO to control the behaviour as some of the drivers do support WOL even if they dont show the option in device manager. The repetition of some settings is to make sure that the registry entry is set on the physical network card (the 0001, 0002 etc. are the index numbers of the network devices in windows). The only problem I have had is with 20 HP machines where there wont WOL if PXE boot is enabled in the bios. HKLM\SYSTEM\CurrentControlSet\Services\NDIS\Parameters\AllowWakeFromS5 REG_DWORD 00000001 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000\EnablePME REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\EnablePME REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power\HiberbootEnabled REG_DWORD 00000000 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0001\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0001\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0003\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0004\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0005\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0006\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0007\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0008\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0009\PnPCapabilities REG_DWORD 00000024 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0002\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0003\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0004\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0005\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0006\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0007\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0008\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0009\S5WakeOnLan REG_SZ 1 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0000\WolSpeed REG_SZ 0 HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001\WolSpeed REG_SZ 0

Might be worth noting that after 1/7/2020 you wont be able to activate notebook versions before 17.0 - https://www.smarttech.com/support/discontinued-products

If you dont have CRL revocation setup properly/are not using it and are using your on CA server, then you need to disable CRL checking in GCDS (details on this page https://support.google.com/a/answer/3075991?hl=en ).

In smoothwall we tell it not to decrypt/inspect https traffic for https://outlook.office365.com , maybe your getting a performance hit from a webfilter decoding the https traffic?

We are with empsn/kcom but do in house filtering with Smoothwall. We have had reports from people using the web browser version of outlook that it can freeze for a few seconds when opening new emails.

We have an exam account we log into the machines the students will be taking exams on. We tend to use Impero to log them in remotely (normally we use an entire classroom with all people who need computer readers/writers in the same room). The account locks everything down (even shutdown/reboot to stop them changing accounts easily, needing Impero to log off cleanly). The desktop is redirected to a shared folder, just before the exam starts the exam paper is dropped into that folder, so it appears on the desktops of those doing exams, the invigilators are trained in the use of F5 should it not appear fast enough. For those who are typing, the invigilators have labelled blank memory sticks, they insert them into the relevant pc`s and tell the students to save the the drive. At the end the memory sticks are collected and handed to the exam officer along with the test papers, the exam officer then prints the work from the usb sticks.

It is free, Students/Faculty A1 plan (which is free) includes 365 exchange and if you setup an on premises exchange 2016 (not 2019) server and dont store any mailboxes on it (basically acting as a relay) then your exchange 2016 license is free as well (I believe it auto activates when running the hybrid setup wizard).

I am currently looking at this as an option to move away from an old isdn system. Currently we have 4 lines (on one number) come into school, these are handled by reception and then forwarded to the appropriate extension. Licensing wise, would we need 4 licenses for the incoming lines to reception and then these can be forwarded, or do we need to license every user?, eg. 60staff * £12 = £720 a month or £8600 a year?

Do people go for read intensive SSD or mix use SSD for generic vm host/file server? Im looking round at dell and the prices for 4x 1.92gb SSD Mix use seems mad at £1992.00 per drive.

The students used to bite 1/2 the rubber coating off the mouse balls, then put them back in the mouse here.

Maybe noise from radiator fan (radiator fans carry on running to cool engine even after car has been turned off)? does it only start when car is up to temperature?

I re-read first post, before posting, and somehow managed to completely miss that.

It could be something completely random has lost its suppression capacitor, eg. radiator fan, power steering, air con etc. Do you get it when the engine is turned off? what about if you turn the aircon and blowers off?

Microsoft always on VPN machine tunnel, the machine authenticates itself using a certificate, no user interaction required and it does so before login as long as it has an internet connection. You really need windows 1809 or newer to get best results from it though. Alternatively you could allow logging in using cached profile, so they log into the domain once, then their profile is cached on the laptop, allowing them to log into it at home, if doing it this way you would then also need to allow some form of file access for shares (unless using a cloud provider for storage), eg. a vpn, offline files work folders etc. Whatever you do, I would ensure the laptop is encrypted (we use bitlocker) to keep data safe. We currently are switching over to always on vpn machine tunnel, with cached profiles enabled while also using work folders, to allow access to the users home drive while they have no internet. If I did it from a fresh start I would just go for always on VPN though.

We use a master image like you, the trick is to run sysprep with /generalize just before you take the image, this clears the known hardware from the image and it will re-detect all hardware on next boot (so avoiding blue screens etc.) allowing you to put it on multiple computers with different hardware. You can also add (not install) drivers to windows driver database, so the drivers are in the image and available to be installed should they be needed when the image re-detects hardware.

I thought I had tried it, but cant guarentee it. Stuck in hospital for a couple of weeks, connected in and working over link, so cant sabotage it to test at the moment im afraid.

Just double checked, I do have both EAP and Allow Machine authentication for ikev2 checked in the authentication methods window (and nothing else)

Under The constraints, authentication section I have everything unchecked, with just "Microsoft: Protected EAP (PEAP)" in the list. Inside that (Edit "Microsoft: Protected EAP (PEAP)") list item I have just "Smart card or other certificate" Because I have the NPS server installed on the same machine as RRAS I do not get the authentication options from rras, it sends everything to NPS.

Hi, its working here with always on VPN, I have left the default time restriction line in place (I cant remember if it was required for it to work or not). The main thing is to make sure you dont have anything user related in the nps policy, it will fail to work if so.

With machine tunnels it is the machine that is authing, you can create a vpn group, add the machines you want to connect to it, then set the condition on the nps server that the machine is in the vpn group (it wont work if you try to set user based conditions at same time). You can also set permissions on the certificate template on the certificate server to only let the vpn group enroll/auto enroll the required certificate, preventing other machines getying the certificate. User wise you can use gpo security policy to limit who can log into the pc, however it will limit them all the time, regardless if on vpn or not.

Looking at https://docs.microsoft.com/en-us/windows-server/storage/dfs-namespaces/choose-a-namespace-type you might need to check the functional level of your domain.

If you dont want to run third party software you can do a defrag /d, this will defrag the traditional way and move everything to the beginning of the drive, as opposed to the new default way for VHDX which is just to trim.

The first 3 segments of a MAC address specify the vendor. Google just the first 3 sections eg. 00:00:00 might narrow down the make/device type you are looking for.