Primus

As always Roger you are a fount of knowledge. I will have to see if Salamander can automate the process of the custom attribute and then we'll need to reverse how we do password changes - at present we change on prem only and sync to G Suite - from your post it sounds like it'll be change on G Suite and have it sync down to AD?

Previously we deliberately didn't look into SSO on Windows (basically we wanted students to learn their email addresses so they could use them reliably at home). Things have now changed and I want to make things a bit smoother but my Google-Fu is letting my down. Does anyone have a link to instructions on how to make SSO work for G Suite using Chrome on Windows please? Thanks!

Interesting isn't it. We use a PSK network with our Chromebooks - the only devices that do. They all authenticate with Smoothwall using the Cloud Filter extension - previously Connect for Chromebooks. As I said we've had no problems so maybe the issue is with Radius if the people with Radius are having the problem. That said we use Radius extensively with lots of other devices and don't see the issue there. We're Smoothwall for the UTM, HPE for the core switch and Unifi switches and APs.

Have to say we've never had any issues whatsoever - we've also got some of the DfE HP Chromebooks and they're all fine too. I'm wondering why some are having so many issues - are you using PSK or Radius? Unifi switches or a different brand?

Just had mine - AZ - in and jabbed in less than 5 minutes. Very impressive.

If you struggle you can get Nominet to handover control of the domain to you - they have a process that involves a signed letter from the head teacher.

I honestly don't think he is. Google have recommended separate OUs for devices and users - unless that's changed and you've got a link to Google's documentation saying otherwise now and we've missed it?

Watching their back?!

Do you not worry that by doing this you encourage staff to use weak and reused passwords? We've encouraged staff to use the password suggestions and have Chrome remember them for them - their Google account is protected by MFA. Obviously everything is a balance. If someone walks away from a PC without locking it then that itself is an issue that needs addressing, but making it harder to use strong and unique passwords doesn't mitigate this - if they walk away without locking it they're likely logged into key sites already in any case.

https://www.amazon.co.uk/gp/product/B010SEARPU/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1 We've had them work with Dell Latitude 3190s and SCCM for PXE imaging.

You can actually register .academy domains now.

On Unifi auto is just high power mode. We back the 2.4 off to low and set the 5 to medium. But we have an AP in every classroom.

Agreed, we never run singles.

On the flip side, the Unifi switches are way way cheaper so you can afford to have quite a few cold spares sitting ready and still save a fortune. We use the Unifi switches everywhere but the core and they've been brilliant. Easy to manage, reliable and very cost effective.

You don't think Microsoft licensing is difficult to understand?

It's like they enjoy making it difficult to understand!

My Friday no change rule is honoured more in the breach than the observance!

I'm updating now - you are all getting the blame if this cocks up on a Friday! I've always kept Veeam up to date in the past but this seems a rather large update with lots of new features.

Anyone upgraded to Veeam 11 yet?

Don't use .local - use an actual domain name you own - some people like to prefix the domain with internal. for AD - some prefer to just use the domain as is. Eg. you could use internal.mat.co.uk or just mat.co.uk.

Unless students have vulnerable family members at home who haven't yet had the vaccine or have only recently had it and they take covid home to them...

At this point, given they've not been receiving security updates for quite some time, it would be way easier and quicker to just do a reimage as @internetuser said.

I got bored and switched off after so many long and drawn out advertising videos. Just tell me the changes and demo them - the really long ads were tiresome in the extreme. It was also just a repeat of what they've already shown to other audiences including the US previously this week so Twitter already had the details. To sum it up - a complete waste of time.

Because the licence isn't limited to 3 years - it's for the life of the device so whoever you're talking to is talking nonsense.

Who is quoting you? Have you spoken to Rebecca - [email protected] ? Roger is right, we've been paying about £16 and the licence is perpetual for that model of device. He's also right about the price rise!