Tefters

Yup aware of this one, same as a Bluetooth keyboard and mouse however the SLT wont approve for the school to buy the adaptors and teachers wont out of their own pocket!

Whatever solution you choice that bests suits your needs make sure it has 2FA. Even if its a basic remote tool connecting to your PC in the office.

Love my UDM Pro Max, highly recommended, be warned however that creating the firewall rules is a bit of a mind bender and time consuming! P.S. In before someone says "You have an STP network loop warning", I know, its 1 of my 2 core switches because I have so many fibre links and the router doesn't support MLAG (yet) so the 2 cores are connected together with 2x 25gbE links lagged and then each switch has a 10gbE link to the router and I leave Unifi blocking one with STP in case of switch or link failure and then STP unblocks and voula! Unfortunately I only have 1 internet line so only 1 router, if the router goes pete tong I have a supplier I can get another from within a day or 2 on my doorstep. EDIT 2: Yes those are the real names for my router and core switches!

This ^^^ although I am a little concerned that you say previous network manager. Are you the new network manager or are they getting one because you sound a little out of your depth (no offense). Unless you know exactly what your doing I would not be setting up remote access or at least confident enough to know the surrounding technologies/methods and just have to read up on the finer details of the specific remote service you choose.

You can setup email alerts in Solus3 for when patches are made available.

Look through my previous posts in this thread about the porn incident earlier this week, that was a failure on their filtering. As for the monitoring, look at my profile for previous threads and you will find one from about a year ago where I did screenshots, tests and updates on their safeguard monitoring and how cr#p it was and still is. However, I have said it several times and will say it again for a disclaimer: I am talking safeguard monitoring and alerting on IPADS only, I have not tried the solution on Windows or Mac as my specific use case is IPADS and the solution probably works hell of a lot better on the other devices due to being able to install a software agent. Again just for reference, iPads iPads iPads.

ESS would ultimately be your best port of call in which case due to direct support with the application owner. I would imagine they should be able to offer you just support as your county are buying licensing in bulk for many schools.

What server support are you after exactly? Software, hardware, what are your expectations?

Doing both of your DC's within a week of release with no time in between upgrading each server is nuts, i'm brave but I'm not that brave (or stupid to be honest, sorry but this was gun ho!). If you are using a semi decent backup software like Veeam then backup the upgraded DC's, accept the mistake (learn from it!) and restore both to before the upgrade then do an item level AD object restore from the upgraded DC backup for any new/changed objects. In future this close to release of a new OS upgrade minor/non-critical servers and do them 1 at a time with a good long period in-between for testing and validation purposes. Sorry to sound rude but this is just plain stupid and a hopefully a mistake you make once in your lifetime. #Nonegativevibes is giving me the impression that you are of a fairly young age / new to enterprise management and hopefully will listen to people on this thread. This is why businesses have change control and test environments.

I would avoid Lightspeed like the plague when it comes to safeguard alerting / monitoring and iPads. As I've mentioned previously, cant speak for their PC / Mac options which are probably pretty good due to agent installs but for iPads please do not do it, it is not fit for purpose on iPads.

I've not heard anyone shout about that but then again the user in my school that does that just gets on with it and is likely to just do it again if it doesn't work or keep doing it if it reverts. When next in their direction I will ask if they have had any issues like you've described.

As a heads up for anyone in your school that might use/run the attendance time report it will now show as all 0 instead of time/durations so enjoy that! ESS response at present: "oops, we gone done fcuked up".

Nope, all i have is the Autumn patch which I have already applied last week (spoiler alert for others, don't, they broke more sh*t *shock*) and the new Stat Returns Fileset 2901

Sounds like you're talking about a completely different scenario. I'm talking about cloud filtering proxies with PAC files being deployed via MDM to iPads along with active word monitoring. Not that I'm thinking about it that much but can you push out a PAC file via DHCP and if so how does that work when your not on the network that gives out the PAC file and at home? That's why you use a deployment app method or management solution to push the settings out to the device.

Pretty much the same here as what others have said above. Our school issues 1:1 iPads to all, headteachers choice, they don't like using them and want to use their own laptops, tough. Due to the sheer amount of WiFi devices we have in school now 1200 roughly on an active day we don't permit a BYOD network or offer WiFi to staff, mainly they want it for their phones and emails, get a better contract is my usual answer, £8 for 50GB a month is the norm nowadays. Anyways, we do allow a very small number of staff due to desperation circumstances and it's internet only, no internal network. Majority of our files are now on SharePoint along with email, Teams and the rest of Office365 gumpf. Sims is still sh#t so go use a school device or NextGen on the web which we are a trial of in the god awful state that's in. Use to offer remote desktop until I finally pulled the plug and told SLT tough as I got fed up of monitoring people logging on to remote desktop to use Outlook and web browsing only even after explaining just use office.com and your own home web browser. The staff hate iPads because they are not computers but I tell them it was the wish of the headteacher and digital strategy leader so go take it up with them, eventually they give up and admit defeat. For the few that really do try to dig their heels in I start speeling off the DofE guidelines about security, data protection, safeguarding and web filtering even if you are a teacher etc etc etc and then throw them a link to the DofE IT guidelines page with a "enjoy the read" sign off.

School. I was also looking today out of curiosity to see if there was a feature for locking or blocking iPads between certain out of hours but couldn't find an option. I'm sure there used to be one but I might be wrong. Maybe this is now a JamF pro feature and school is too basic for our needs? At time of original purchase the only advantage pro had over school was Mac management which we don't have any of except a caching server. Also, cheers @Brax so looks like it's just a general feature fix to the original blocking background restriction then as I cannot find any new options but in all fairness have not tested this on an iPad either due to time.

Turns out the Windows upgrade path to 2025 may have been an accident https://www.neowin.net/news/microsoft-blamed-for-windows-11-kb5044284-automatically-upgrading-server-2022-to-2025/

I did my print server from 2019 to 2022 fine with no issues. All mine are 2022 now and will be doing a sneaky upgrade tomorrow during the day but not got any 2019 to upgrade. I have installed it a fresh on a VM today and looked at it for 5 minutes, it looks like Win 11, start menu in middle and the setup screens were slightly changed / modernized.

Ow, do you happen to know what/where the fix is? I'm about to go diving into JamF restriction settings again but cannot find anything on a quick knowledgebase search.

To put it bluntly, the staff don't have a clue. My staff user base are about 5 to 10 % competent power users, the rest just surf the web not having a clue what browser they are using or any of its main features. If anything, iPads are the only Apple product in use within the school so using Safari competently and saving bookmarks etc... would have no benefit off device as they use Windows PC with MS Edge and Entra accounts where their bookmarks are all cloud synced so they would be better off having Edge over Safari on the iPad purely for the cloud synced features being compatible with PC's or replace every PC in the school with a Mac to utilise iCloud sync. The same logic applies to the Apple mail app and when I first started I left it on iPads and made Outlook available for ease and whoever wanted it. After having so many issues with the native mail app and shared mailboxes being a PITA I removed that when it became available as option and forced Outlook mail app on iPads which is a breeze to use in comparison when using Office365 mailboxes. My big concern with using a third party browser is how does that tie in with the likes of JamF teacher or even Apple Classroom apps as they offer URL blocking / Allow options and does that only translate to Safari or does it translate to any browser on an iPad as teachers do use those options on a class by class basis for control with misbehaving kids and trust me there are A LOT of those in Secondary schools. Again, this is where extensive testing comes into play. The smartest department in Apple is not their technology department but their marketing department. They do a fantastic job of making everyone want an Apple product and the latest one but people have no idea how to use all the functionality in them and when they also pitch their school marketing about how great for education they are but when you look at what Apple themselves offer for education in terms of controls, management, document sharing and even blocking of simple features its abysmal and left to third parties to try and clean up the mess with what little access Apple allow to iPads as they advertise them as being able to do everything and more but they are simply not a full blown computer replacement. Yes, I'm looking at you Airplane mode that you can't restrict so kids just flip this on to kill WiFi and Bluetooth so teachers can't manage them, you can individually block WiFi on/off and Bluetooth but not Airplane mode! Or even background image change, you can restrict that but then they released Focus mode which can then circumvent that. It's a nightmare.

Owwww that's new, In-place upgrade option through Windows update I like the sound of, might have to give it a go.

Urgh i remember the days of constantly having to call MS volume licensing for MAK keys as all they gave were the master KMS activation keys and then you would have to google the client KMS key. Going to go check my licensing now. EDIT: Owww i had all options:

"My iPads not working" > "That's not an iPad" > "You know what i mean"

Big fat NOPE! SharePoint is the schools choice platform for online file sharing, management, security and auditing. Simples. Just stick your foot down.

I'm with Tom on this one and I said it earlier in the thread before Tom joined in, from the last 2 years of experience, testing and investigation, unless you are using a custom web browser from a company (we are talking iPad only here) then not everything is being picked up and alerted on properly.