enbiggen

Sorry if this has already been mentioned, but there seems to be an nmap script to test for this vulnerability now - which should indicated whether you've been successful in your patching? Use NMAP to Scan network for WCRY or WannaCry Ransomware vulnerability | CompuDay

Does anyone have any preexisting settings for Smoothwall for allowing all of the challenges to work? Some of the challenges use things like Gravatar, YouTube videos etc, which are routinely blocked. (I suspect KB-86, https://kb.smoothwall.net/Content/applications/allow-YouTube_channel.htm, "How do I Allow a Specific YouTube Channel?" should help for the YouTube part.) If anyone's already done this, and can share, that would be a wonderful time-server. Cheers.

Hi, I *think* I've got SOLUS 3 setup - although I'm having problems actually doing anything with it. I'm in "Environment", "Agents" and the "Targets" tab: None of the targets has anything in the version field. (I've the SIMS server itself, with "SIMS Database", "SIMS DMS" etc, and my test machine with "SIMS Workstation.) I've pressed the "Get Target Version" button, and it gives me a message saying "A request has been sent to retrieve the selected agent target versions", but then nothing - no errors, no warnings, no versions. When looking at the "Agents" tab (same location), the last message received (which updates periodically) is that "Data has been tampered with". Before I brave Capita's support, has any one any idea what dumb thing I might have overlooked or done? Cheers, Duncan.

Hi, Our Head Teacher would like a new laptop - similar in form factor to a MacBook Air (but not a MacBook Air) - preferably the 11" version. We still use Windows 7 Pro - and I'm having a hard time finding anything modern and thin that has Windows 7 drivers - does anyone have any recommendations? Normally we tend to go for HP laptops with 3Y NBD onsite warranties. Sorry for such an inane question. Thanks, Duncan.

Yay! Sys Admins rule!

Hi, I went with a login script that created the directory structure in the user's AppData folder and copied the authentication file into it - this seems to be working. (The problem I've found isn't so much that they "don't do a network version", as that they seem to refuse to acknowledge what they have isn't a network version!) Thanks, Duncan.

Scrap that - my memory was playing tricks on me - you can exclude things from "AppData" when redirecting, but you can't include things (excluding everything else).

Hi, I'm having problems finding an acceptable way to get the serial number into the application. The school's bought licences for it to be installed on 120 computers. Once installed on a computer, each user that logs in on that machine needs to type in the serial number the first time they run the software, even if I've typed it as the administrator. Once they've done that it won't prompt them again on that same computer. It appears to store the the serial number in the user's AppData folder (Windows 7), inside a folder with a randomly generated 8-character name (although it looks as if it may not care what those 8-characters are). Kagan's support seems aimed at teachers using its software, rather than IT, and while pleasant, I haven't really gotten anything useful from them. I'm thinking about redirecting the AppData/Macromedia/Flash Player/#SharedObject folder (which it creates) to a read-only location on the network which is pre-populated with the serial code - but it seems like a lot of faff to get it to work. Has anyone used this software before, and do you have any advice on the best way of doing it? Thanks, Duncan.

Ahah... I could always have another Apple Configurator restriction to lock it down - locking immediately after getting it setup with the MDM, and unlocking it as needed if I ever had reason too?

Cheers - I'm just about getting there. I'm not 100% sure on this bit - does that mean that I have to de-restrict this everytime I want to re-enroll a device? For example, if I'd set up all the iPads and then a few weeks later need to re-provision it using Apple Configurator, I'd have to re-allow it in the profile, then unallow it afterwards? Cheers, Duncan.

G'AH! I take it back - at least I'm a bit closer though. It appears something in my restrictions is removing the facility. I took off my Apple Configurations, and was able to set the password for the Apple ID. I then sent an invitation from my MDM (Apple Profile Manager) for this Apple ID and iPad and accepted it successfully. I then pushed my VPP app to it, where-up-on my iPad advised me that I needed to sign in. However, the sign in button in the App Store wouldn't work, and the password was removed from the settings. When I tried to type it in, the grayed out box wouldn't let me put anything in. (So I feel slightly less muppet like now - as you can really tell when you can, or can't type something in.) Has anyone gone through this before who can point me at the right settings to leave unrestricted (in both in Apple Configuration and Profile Manager)? At the moment, I have (in Functionality): * Allow use of camera. * Allow screenshots. * Allow installing apps. * Allow removing apps (supervised only) - this gets removed by the MDM profile (if this isn't the problem then I'd probably remove this one too in Configurator). * Allow my Photo Stream - which I allow because of the scary "disallowing can cause data loss" warning. * Allow users to accept untrusted TLS certificates * Allow automatic updates to certificate trust settings * Allow configuring restrictions (supervised only) * Allow installing configuration profiles (supervised only) * Allow documents from managed sources in unmanaged destinations. * Allow documents from unmanged sources in managed destinations.

GOOD GRIEF! It's grayed out and I can just type it in, then the button is ungrayed. I AM A MONUMENTAL MUPPET!!!! - - - Updated - - - I still loathe iPads with a vengeance though :-)

Hi, I'm looking to transition from a single shared Apple ID, to a layered model with each iPad having it's own Apple ID. I'm using Apple Configurator to set up the supervised iPads, which copies across the VPP apps using our shared apple ID, keeping track of the number of licences used. So far, so good. I go through the set up steps of the iPad, and get prompted to enter an Apple ID, which goes fine. When I go to "Settings"->"iTunes & App Store" the Apple ID is present, but it says the password is required. However, the "Sign in" button is grayed out. I am completely stumped. I may be doing something obviously wrong, or I may just be cursed... I have iPads, I'll go with cursed :-(

Hi, In the end, I cheated. The apps I wanted were trying to go to specific sites (associated with the app) - I white-listed them (after checking that the sites were appropriate) for requests coming from the iPads' IP address range. Sorry it's not a magic bullet :-( Cheers, Duncan.

Hi, We haven't changed the password (and hope that we never have to, as that's 200 devices to go around :-) It was a good idea though. Thanks.

Hi, It doesn't appear when installing content - it just "appears" supposedly randomly. I will look into the restricted apps age limit, but I don't think I applied any age restrictions except on explicit lyrics, movies etc (none of which they should be able to download anyway). Thanks.

Hi, We use Apple Configurator for the initial setup, and we use Profile Manager. (While Profile Manager can silently push out apps, and we've had some success with that, we don't tend to use it, as reimaging with Apple Configurator usually turns out better. We didn't really have a problem with Airwatch MDM pushing out apps even, previously.) The issue with the Apple ID *seems* to have coincided with iOS 8 (although that could be my mind trying to come up with patterns). Thanks.

We have around 200 shared iPads (don't ask), which were set up just before IOS 7 came out. They all share a common Apple ID - which is probably not the best solution any more, but we're probably stuck with it, as paid for apps are attached to that ID (they were bought before the new VPP scheme Apple introduced). However, we're now having iPads constantly prompting for the Apple ID, and no amount of clicking cancel will stop them. Often the Apple ID will be locked (presumably because someone's typed in the wrong password multiple times), so we have to unlock it first, before we can type the password in successfully. Is there anyway to counter this? We've also noticed that iPads that have been reimaged tend to not prompt for the Apple ID as soon, while the longer the iPad has gone before reimaging, the more likely it is to persistently prompt. Is there a "one true way" of handling shared iPads? (They seem to be the bane of my existence.) Thanks.

I'm not sure if this will help, but I've found that I can't supervise a device in Apple Configurator and install the profile manager enrollment profile. Instead I need to supervise it, power off the iPad (hold the power button down until the power off appears, then swipe), before powering on and installing the profile, where upon it works.

We've abandoned AirWatch completely - we've started using Apple Profile Manager now (the iPads are only used in school) and it seems a lot easier and cleaner to use. They fixed the issue at their end with the logging in/out issue, but it just seemed very clunky and hit and miss.

We got this when we didn't have an speakers connected (or the motherboard drivers for the internal speakers weren't installed).

Okay, Airwatch has not been a good experience for us. We wanted to use it for multi user iPads, and it hasn't allowed users to login or out for about 3 months (a problem with their software - they can reproduce it outside of our network) and the level of service in response has been no where near what you'd expect.

Whoops I was thinking of air server then (when referring to the same subnet).

I'm afraid that, because of the schedule, we cheated, and put the iPads on the same subnet as the PCs so that air watch would work. We set the iPads to use the Smoothwall box as a gateway and set up a transparent proxy. Safari prompts the students for their username and passwords when they start browsing (or if they don't browse for more than five minutes). For specific apps that need to access specific sites to function, we whitelist those sites so that authentication isn't required.

My boss has been asked to fill in 2 quality assurance evaluation forms (its a new scheme that's been introduced)... Background: We have a Windows 2008 network, Exchange 2010, Moodle etc. The first form is based around the strategic provision of ICT (how the provision of ICT impacts on the effective running of the school), while the second form is based around the impact of ICT on teaching and learning. Both forms have sections for: Focus points What is going well Areas for development It's one of those things we're we know what we're doing and where we're going, but we're not really sure how to condense that down, and we're looking for guidance. As focal points for the upcoming year regarding the effective running of the school we're proposing improved communications within school, and monitoring of how existing ICT resources are used: At the moment the main services that we provide for communications are email (which is reliable and efficient), and Moodle (with front-page news items and a staff-room area). We don't manage the telephone system, so this is something that we might look at, and we don't have a digital signage solution. While we have effective monitoring of our services (whether they're up/down, what issues are arising etc), we don't have any data on how our ICT resources are actually being used (other than anecdotal), and we'd ideally like a way of monitoring how frequently laptops/netbooks/iPads/PCs are being used, and what they're usually used for - this will help us make better plans for the future - possibly shuffling resources around rather than just adding extra resources. Regarding the impact on teaching and learning, we're a little more stumped, as we're usually given less flexibility here, and provide what is requested. If anyone has some contributions we'd receive them gratefully (even if the contribution is that we're doing it all wrong!) Thanks.