IAMCloud_Curt

Hi, So most the networks I have built for our Trust are either Dell (inherited) or HPE/Aruba. I would usually have a L3 core switch that would do all the routing and VLAN's however I am trying to plan it out for 2 new networks next year for a couple of schools we have sponsored and in need of refreshment. We are going with Ubiquiti as we have used their switches and access points the last 4 years with no issues, but obviously planning on scaling up our UniFi capabilities by trunking fibre into a UniFi core switch, creating VLANs etc. With our cloud controller we have already got configured for the Trust - I noticed we can create Corporate Networks with the IP range and subnet and it will work out the scope for you and give it a VLAN number, UniFi works out the routing by the look of it automatically. Schools currently getting /24 internal range so I'll dissect that into several VLANs how I would usually do this on HP/Aruba Core. However, I think we require a USG for this, but the standard USG only offers around 80-100mb throughput and BroadbandBuyer told me earlier that the USG-Pro-4 only really offers about 250Mb throughput - the schools will getting 1Gb broadband next year so seems a waste to not be able to use it with all this nice new kit we are potentially putting in. Has anyone achieved this? If so please advice me what steps to take. Thanks.

Hi everyone Please try this firmware below - sorry it's taken so long https://clpt-my.sharepoint.com/:f:/g/personal/curt_blunt_clpt_co_uk/EguENQp3BoxEi4qIdrF-G6IBvuCVkUyp7gHSXgLgermKrQ?e=KhtqTY

Hi, Is it better to run delprof on system power on or when students log off? Just a thought with delprof it usually moans about deleting profiles even after they have logged off - we would then restart computers and they would delete fine. At the moment we manually run this on affected devices.. CMD on tech desktop to run this script powershell -ExecutionPolicy RemoteSigned -Command %~dp0\Remove-UserProfile.ps1 -UserName "*" -ExcludeUserName "Admin*" -Force -WhatIf Powershell below... Remove-UserProfile.ps1

Is it Google ReCaptcha V3?

Hi, I would recommend WPRocket Plugin and also Imagify to compress your images. Rocket will compress your HTML/Js code [emoji1303] Use pingdom and Google pagespeed to run Web tests to see their resolutions and recommendations DM if you wish, I have extensive web developer experience especially WordPress and website compression.

Have a look at PDQ Link got launched last week, VPN integration with Deploy/Inventory apps.

Are you running a delprof script at logoff or using the GPO profile deletion method?

Full fix that works for us is to. Restart the PC to begin with when you get hit with user profile failed the logon error.. It's important you restart, otherwise the profile remains open by SYSTEM service and you can't delete ntuser.dat Once restarted logon as domain admin or local admin Go to C:\Users delete the affected profile. If it's not there, not to worry. Skip to the below step Open regedit when the profile has been deleted HKLM\SOFTWARE\MICROSOFT\WINDOWS_NT\CURRENTVERSION\PROFILELIST Find the affect subkey S-I-512 etc and delete it Restart the pc and logon on to the affected user again should work I experienced this alot with Windows 10 v1909 or v2004. Scraped roaming profiles, and we just use folder redirection via GP and local profiles. Works a treat now [emoji3]

Thank you. I will give it a try now I have all the information.

Hi, So the built in policies hosted on Senso (violence, racism etc) only log and monitor in the violation center. We can create our own custom detection libraries and push them all schools so that they "close" the window if someone searches a banned word (similar to impero) I am looking for a website/kb hosted by DfE or someone on that page where they have uploaded useful keywords for us to block in education, just so we are being careful and covering ourselves with DfE/Ofsted guidelines. Does anybody happen to know if there are any sources of information like this available for free? Just looking for a global keyword library that we can copy/paste. Appreciate the support. Curt

Hi, Where are you pulling the below from? SiteID WebID ListID URL WebTitle ListTitle

No - and the crap thing at the moment is you can't make guests owners of Teams groups.

Multiple devices on those users.

Hi, We have been doing something very similar as migrating into a central tenant is something on our list, but we wanted everyone working and smooth as possible during covid. Invite all school users into the tenant where you want to host the central site, you can do this via powershell, csv bulk invite - I can send template script over for you. Teams exactly the same, create the team on the central tenant, then I have another script where you get the Group Object ID from Azure and bulk import all your guests. Make sure you have guest/external access enabled in Teams admin center. Drop me an email - [email protected]

Hi, Random error but bugging me. No matter what or where we try to log onto certain users they are getting "The User Profile Service service failed the sign-in" attached a screenshot from test machine The account is an AD account with profile path to our FS - even if you give it another profile path same issue, or remove the profile path same issue. Tried delprof and my powershell script but the user doesn't even exist in the C:\users or registry I have even deleted the account, and remade the same username and that didn't fix. Other users are fine, just 3-4 dodgy accounts with no explanation

Hi, Does anybody have any scripts to map the sharepoint library ID? Tried over GPO but Microsoft TechNet reckon it takes a while, we need it instant on logon as we are looking at replacing drive maps. SSO is configured and OneDrive auto logs them in, but looking to take it further now and not just their personal onedrives but also sharepoints. Thanks Curt

Hi, Have not done this for 3 years and didn't document it in my knowledge base (my bad) - I have a Root CA expiring soon which is used for authentication of 802.1x in NPS via Protected EAP - I am pretty sure I renewed last time and used same key and it renewed it for another 3 years. Right click CA that's expiring All Tasks > Advanced Operations > Renew This Certificate with the Same key... Then just select the new certificate in NPS Network Policies. Any ideas before I click it and break it before kids come back on Monday

Hi, one of our MAT schools the CA for NPS expired during the holiday - back in the day I used to just renew with a new key and happy days it would work. I've issued a new CA through MMC and then edited the Protected EAP settings and pointed it to the new one. However laptops can't connect to the WiFi anymore. Checked Error Log in NPS and this is what most warnings are showing; Network Policy Server denied access to a user.

So, if you create the subdomain via GoDaddy first, you can then create a DNS record on GoDaddy linking back to your helpdesk IP (if it's internal only). Once done, you can generate a Let's Encrypt SSL which every 3 months you have to renew but it's free. Generate the CSR request and you should be able to import an SSL via your GoDaddy portal, without needing access to cPanel.

Can you access your schools domain hosting (cpanel) if so it would be easy. Let me know.

How many iMacs you talking?

Really sorry for the late reply, hope you are all well. I haven't been on here for yonks, bogged down with a few projects. Link: https://drive.google.com/file/d/1RmAVoZHTKXeYTD85nGOqda-3HO8yaQ_Z/view?usp=sharing

Even later to the party, however, I bring good news if you're still looking (anyone) I have Upgrades to v6, v7, v8 and all release docs and cli commands if they are any good to people. Thanks

Hi all, Best way of doing this? I've used Sharegate in the past which was good, but too expensive. Anyone had any joy with free software? Or has someone compiled a PowerShell script for it? Thanks

Hi, Anyone got this working? Can't seem to export start menu Thanks