Sibrows

Managing it ourselves just on the iOS side (not yet managing our Macs using Jamf) if we were to go down that route we'd probably get them to manage the Macs for us as the cost of the separate kickstart isn't worth the cost for the number of Macs we've got.

I've had a brief look at Nick's GitHub but can't see previous versions for download. Can anyone point me in the right direction?

We've been subscribed and using their software for 18 months now (1,000+ iPads, no MacOS devices). They've always been very responsive to issues and quick to offer version updates. No system is perfect and some of the issues we've run into have been iOS bugs but everything else has been dealt with quickly and professionally.

Taken from the upgrade page: "Certify SSL Manager is free for up to 5 managed sites on a server, thereafter you need to purchase either a Professional or Enterprise license. You can purchase more than one license key of any type." (https://certifytheweb.com/register) I would imagine this would suit most schools. We upgraded as I needed more than 5 sites, automatic renewal and multiple servers.

I believe I'm seeing the same thing. The mapped drives are on 3 different servers (2x 2012 R2 and 1x 2016) the quota is returned for the user's home drive before you try and list the files and on the homepage tile. The files on all three drives appear to be stuck in a state of loading. Tested on: Domain Admin accounts, Staff and Student accounts on the following platforms . . . Windows 10 - Chrome 63.0.3239.132 - Edge 41.16... - IE 11 MacOS 10.13.2 - Chrome 63 - Safari 11.0.2 - FireFox 57.0.4 Chrome Console Output: Uncaught TypeError: Cannot read property 'CreateDirs' of null at Object.success ((index):218) at j (jquery.min.js?10.6.1801.600:3) at Object.fireWith [as resolveWith] (jquery.min.js?10.6.1801.600:3) at x (jquery.min.js?10.6.1801.600:9) at XMLHttpRequest.b (jquery.min.js?10.6.1801.600:9)

Have a look at https://certifytheweb.com. I've ended up paying for the license so I could certificate all of the websites we host internally currently running on a server running 2008 and one running 2012 R2. The 2008 server is for two legacy apps that I daren't move in case I break them.

Have you considered Lets Encrypt?

We'll take any that are still available.

Worked like a charm, thanks for your speedy response and your continuing efforts with HAP

Hi, I'm getting a server error while installing HAP+10.6 [ReflectionTypeLoadException: Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.] System.Reflection.RuntimeModule.GetTypes(RuntimeModule module) +0 System.Reflection.Assembly.GetTypes() +112 HAP.Web.Configuration.hapConfig.GetPlugins() +471 HAP.Web.Configuration.hapConfig..ctor() +1065 HAP.Web.Configuration.hapConfig.get_Current() +155 HAP.Web.Global.Application_Start(Object sender, EventArgs e) +22 [HttpException (0x80004005): Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.] System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app) +535 System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) +166 System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) +169 System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) +372 System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) +329 [HttpException (0x80004005): Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.] System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +525 System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +118 System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) +708 I can find @Darylrese having the same issue back in 2015 here: http://www.edugeek.net/forums/home-access-plus/155931-help-setting-up-hap-v10.html I can see that @nicbro has recommended checking the pre-reqs for HAP+ but I'm struggling to locate these in the install videos or on the GitHub. I'm attempting to get it running on IIS 8.5 running on Windows 2012 R2. Can someone point out what I'm expecting will be something obvious. Thanks in advance Simon

This may be a silly question: Is the content locked based on location? If so does the app make that clear? I apologise if I'm stating things you already know but for the complete picture of people referring to this thread later on: Firstly you need an Apple Enterprise Developer account, this is a different and more expensive than the standard Apple Developer account which is needed to submit apps to the App Store. Then you need a method of distributing the app(s) if using an MDM this is relatively straightforward but if not once to app is installed on the device it is registered as being written by an 'Untrusted Developer' and throws up a window telling the end user such until you go into the settings and manually trust the developer. See here: https://developer.apple.com/library/content/documentation/IDEs/Conceptual/AppDistributionGuide/DistributingEnterpriseProgramApps/DistributingEnterpriseProgramApps.html From your description of the issue, you might be better off jumping through hoops to get it into the App Store otherwise the end-user experience isn't great.

We moved from Cunninghams to BioStore 18 months ago. It hasn't been without its issues but they weren't anywhere near the impact of the outages we had with Cunninghams. Examples of issues with Cunninghams; Multiple days of being unable to track (i.e. charge the students) for what they were eating after actions carried out by Cunninghams. Issues taking 3+ days for an engineer to attend site just to dust the RAM in one of the tills with a toothbrush!!! and disappear without fixing the issue. Support took a long time to get through to and even then trying to get the call escalated was painful. Issues being pinned to our network which ended up being faulty hardware in the server they provided and thus supported. We have had some issues with BioStore but nothing where we haven't been able to track what the students have been charged for. Most have been issues with topping accounts up and incorrect balances between the cashless system and the tills.

We publish a couple of enterprise apps in-house and some to the app store. But these are updated once every couple of years so have to try and remember the dark art of getting the certificates right.

So having spent an hour on the phone with Microsoft support this morning. There is no way to achieve this. The max recipient limit is hardcoded into office365. They told me that it's been submitted as a feature request but after a quick Google it would appear that other educational establishments have been asking for this for 2 years: https://office365.uservoice.com/forums/289138-office-365-security-compliance/suggestions/9701511-change-exchange-online-recipient-limit I don't hold out very much hope. Thanks one and all for your input.

We've never had on-site exchange but extending the schema in AD allowed for settings like the restriction of who can send to the distribution groups synced from on-site. So I was hoping that something like this would work successfully. It looks like: Set-mailbox -RecipientLimits sets the value for msExchRecipLimit. Microsoft are due to call me back shortly so I'll update if they have anything to add.

Am I missing something the article finishes with this setting can't be adjusted? No problem - more caffeine is never a bad thing!

I think I've found the attribute msExchRecipLimit the frustration is that when syncing this value isn't reflected in the Exchange Admin Center. I've submitted a ticket with M$ Support to see if I can get this syncing correctly. I hadn't considered the GAL, while this would deal with any future I would need to remove any emails with the list expanded in their mailboxes thus far to avoid further 'reply to all'. This was my first step but that held the students back for about 6 months until one of them worked out they could expand the list and negate that control. Edited: to remove bizarre formatting from the quotes.

Do you know which attribute you set for this to take effect?

So after a good few hours looking into this, I'm pretty sure this isn't possible but thought I'd check the collective wisdom here . . . I'm looking for a way to either restrict the number recipients students or submit emails with large numbers of recipients for review. 6 months ago I restricted the students to stop them being able to send to the larger distribution lists and they've just worked out that they can expand the list and circumvent this restriction. While I would love to rely on sanctions for inappropriate use of the email system, I've been asked to investigate other options. Options to restrict the max recipient value on the mailbox. This is greyed out and from a bit of Googling isn't adjustable without a paid plan. Mail flow rule. There doesn't appear to be a simple option, unless I'm missing it, for 'recipient account greater than'. Add a bogus address to the lists they are expanding. Doable but hardly full proof. Have I missed anything? Has anyone found another way around this? Thanks in advance... Simon

Option 2. Consider the other benefits of faster connection between sites (centralised services, off-site backup etc...)

You will discover that Smart Notebook 11.4 doesn't support more recent versions of MacOS a quick Google suggests people having issues with 10.10 "Yosemite" the latest version is 10.13 "High Sierra".

If its not a silly question what are try to achieve by encrypting your file shares? Encryption on the host makes sense if your concerned about the hardware being stolen. Encryption on end user devices also make sense but encryption on your file shares sounds alot like your adding unnecessary overhead.

I'm currently looking at implementing UniFi APs at one of our schools and I've discovered that the Captive Portal built in to the controller doesn't support RADIUS authentication for users. This isn't ideal for BYOD devices but I appear to be able to implement an external captive portal. I've been trying to locate alternatives but I'm struggling? Is there something built into NPS? What have other people using? I'm hoping for a portal/login page that would authenticate users based on their active directory credentials.

Looking at the log file this stands out Is the task sequence either deployed to a Device Collection that includes this machine or 'All Unknown Computers'?

So I'm after some of the collective wisdom of those who've been here before... We're a relativley new MAT (less than a year into existance at this stage) and we're looking at centralising a number of the IT functions: Internet connectivity - currently investigating a VPLS which should allow the following. Centralised backups for our primaries. Centralised support - both end user and infrastructure. Centralised procurement Centralised services - phone systems, email (O365), speciffic software (finance software etc...) This leads on to various questions: What software are people using for the following tasks? Site-to-site server backups Central workstation backups for laptops Multi-site software distribution Multi-site intrusion detection (someone give me a free easy to setup piece of software that doesn't break everything - I think not!) Mobile and removable device encryption [*]What technical issues have people had to overcome merging multiple schools? Did you merge active directory domains or implement any form of trust relationship? Do you apply a one size fits most to all schools or opt to support each school as a seperate entity? [*]What haven't I though of? As a bit of background its 2 secondary schools and 10+ primary schools. Sorry that got a little bit longer than I'd planned. Any comments on the above would be appreciated. Simon