tomo1095

Get yourselves on a few MCSA courses for server 2016. It's easier than you think to bulk manage users... You've already got all the tools on the servers like Active Directory and Group Policy - Have a look around them, just don't make any changes if you're unsure. A vanilla networks not much different, infact most find it far easier and less time consuming. Plus any issues you come up against will have solutions easily found on the web, rather than relying on RM support.

Haha, love it! Well done on the Ofsted results too!

Burn it down and start from scratch! On a totally genuine note though, we're considering this here too. Can you create a new DC? - The way I think I'd do it is to pretty much to start from scratch, with a new DC and a small selection of PC's being imaged from scratch. Then a gradual move over once everything seems fine. Drive and printer mappings won't be hard with group policy and log on scripts.

Most ISPs will already block IWF listed sites. Even with the relative short list though, it's probably worth blocking yourself even if it's just for your own peace of mind. Along with the other lists.

Jeez, it looks like you really are having a 'mare with this new fandangled technology!

What? You've avoided windows server environments for the past 15 years? How? - Any advice? But joking aside, get your head around Active Directory and Group Policy and you'll be fine! I believe in you.

Only reason I can see for uploading to vimeo over YT is the fact they're less stringent on copyright protection. People might assume it's more for "commercial/corporate" videos than youtube as well I suppose. - Also sometimes I think it's easier embedding from vimeo than youtube on some web platforms. I'd always use youtube though. Tried and tested, with adult content adequately blocked and the ability to just unblock certain videos with smoothwall.

Sat listening to this in the office with everyone around me thinking it's a brilliant idea... Not sure our SLT would appreciate it though!

Yeah, there's not really many ways around the things you've said. Kids bringing in photos and showing their mates is really nothing new though, there shouldn't be too much backlash on you guys, unless they access the photos through the wifi which smoothwall should filter and report on. The main things probably going to be setting clear boundaries, making sure they (and parents) agree to access rules and are given E-Safety lessons before they're all given access to the wireless network at all. - If you're only just implementing it, the AUP's might need changing to include own devices. Think about setting up some way of students authenticating individually to the wireless/smoothwall so you can track which student has been accessing what and to allow blocking of individual students devices. Do you let staff on the wireless at the moment? Maybe select a trusted few to use as dummies for a while to get your head around the filtering/reporting after you've got smoothwall setup and working.

No need to make it complicated more than it already is... You don't need any USB devices, just an IR receiver that can plug into the motherboard in place of the usual power button connections, that comes with a remote control.

I second this. We've used Smoothwall for a while and made the decision recently to start giving students slightly more freedom with their personal devices, on the proviso that it's through our wireless and filtered by Smoothwall. I found it strange at first seeing so many 'dodgy' domains (dating apps etc) from random apps staying connected and updating.

I don't think I can get away with 'showing off' my photoshop skills in work time, but check out DRM Media. I studied media production and do quite a lot of design work (everything from 3D animations to photoshops and logo designs) in my free time. - I won't even charge you, as long as I get to use the finished product in my portfolio!

The interface we use for the proxy for students accounts uses NTLM authentication... I've never had trouble with Chrome authenticating in the past. How can I check it isn't being bypassed? I presume it must be authenticating and putting the students into the right group seen as the account I'm blocking everything for is the one I'm getting proxy errors on, as if Smoothwalls just refusing the connection? We have an authentications exceptions category, but that only contains the Office 365 domains and the policy is way further down the hierarchy than the Block everything for the specific student? The only other way I'm aware of to bypass authentication is by using a different proxy port which is set to just authenticate as staff, but it's only used on staff devices.

That was my first question when I got the phonecall, but no. Definitely his own, I saw it with my own eyes.

Alright, so we've had a situation, which has made us go down the route of disabling the internet for one user. Proxy settings for smoothwall are pushed out via Group Policy and not changeable for students. I've put the user in question in a filter policy to block the 'everything' category. When I've tried to log in to the students account on the computer I couldn't access anything on the internet (I get a proxy connection failed error) and couldn't change the proxy settings. But I've been stood watching him access BBC bitesize and games on Chrome. Then when I tried again 5 seconds after I got the same error. I'm at a total loss as to how he's managed it, any help would be brilliant!