ADMaster

Yes I have security groups syncing. The only group I could not get to sync was one that was named the same as an online created O365 group. I've not really worked at fixing that though. I think your security group needs to have an email address to sync.

As others have said, it depends on the purpose / type of device. I have all of our internal devices set to 4 days. This usually means they keep the same IP week after week. Same goes for named guests such as student byod I prefer their IP to stay someone constant in the case I need to look at logs. Guest wifi is only a few hours to a day I’m not sure. Then I have one SSID that is set to minutes. This is for enrolling chromebooks. I ran out of IPs one year enrolling devices so set it up this way.

Enabled was the default as it was a new security feature. I trusted all the apps I think we use and set them to disabled over the summer so I didn't break anything mid year. Since the start of this school year, I've had at least 5 but no more then 10 requests. The biggest hassle is getting client ID from the user. If you go through the list of installed apps now, it is a click of a button to trust them. After you change to disabled you need to use the plus button on the trusted apps screen and enter the client id.

Welcome to the forum; Everything you ask has been discussed quite a lot, have you tried searching yet. Many of the windows 10 version release threads contain info to tweaking that release. There have been several GPO threads. As said above, I take the thin image approach too, push a basic win and deploy / tweak everything during OSD. Here is a couple resources to get you started. https://docs.microsoft.com/en-us/windows/deployment/windows-10-poc-mdt https://garytown.com/windows-10-customizations-during-osd

If you change that setting to disable then users will loose access to them unless you add them to the trusted list.

Between the two you have listed, Ruckus all the way. I’ve run their kit for the last 5 years. I too will be specifically excluding Meraki and the like from the process. One of my requirements is no ongoing subscriptions for functionality. If I can afford support and upgrades I’ll pay it, but if I can’t I do not want to loose function. I’m getting a new network this year, so I’ll probably be starting my own thread soon enough.

When they try to add an app, they get an error 400 admin policy enforced. Within the block message is a client ID. Add that client ID to your trusted apps list and they will be able to use it.

My 1809 checksum matches yours, but not my 2019 which is the one I was concerned about. I'm on 1709 now and skipped 1803. I'm going to at least test 1809 in a VM, but its not looking like the one to deploy either. As above we can't just keep waiting for the next version.

@mavhc That doesn't look like a vlsc file name. Mine is very similar to Arthur's SW_DVD9_Win_Pro_Ent_Edu_N_10_1809_64-bit_English_MLF_X21-96501 @ArthurWhere did you get those checksums, are they posted somewhere official or are those just your own results. I should verify my 2019 iso tomorrow with the way the download was going. 1809 was speeding along and was almost done before home time, the sever 2019 iso was very slow and had hours left.

My VLSC says the ISO was updated Sept '18 does that mean this iso doesn't have the data loss bugs fixed? Do I just need to patch the wim before deployment?

I use ISO 8601 in file names and such, all the windows 10 releases have followed that standard. I think 2003 might break older applications, but we shall see. It just might have to be delayed a month.

Will it be renamed to 1811?

This is a strange one. I switched to using version 4 instead of 2 and it is working. It was difficult to troubleshoot as when I tried switching to 4 last week it failed. I think powershell was keeping conflicting stuff in memory. If I run version 2 then version 4 without exiting powershell, it will continue to fail. With a fresh session of powershell v4 seams to be working without issue.

Hello again, Hopefully this is my last powershell post for a while. Once this issue is fixed, I'll be able to put the script into production. On the server 2012 r2 box I run most of my scripts on I have the Oracle odac 12c installed and this has worked for years. I couldn't get it working on my own workstation so I used the odp.net dll from here. https://www.oracle.com/technetwork/topics/dotnet/index-085163.html using this guide https://blogs.technet.microsoft.com/heyscriptingguy/2012/12/04/use-oracle-odp-net-and-powershell-to-simplify-data-access/ This worked great on my machine and no large install. One of my scripts runs on another w10 box that acts like a server and it is now in production running great. The other script needs to run on another 2012 r2 box. the odp.net dll fails to load, and the odac dll doesn't want to work either. I tried odp.net on server 2016 too, but got the same errors. Everything I've read suggests there are no dependencies. Windows 10 Add-Type -Path C:\oracle\Oracle.ManagedDataAccess.dll No errors. Here is the code working on W10 [color=#000000][font=Consolas][color=#0000ff]$[/color][color=#001080]constr[/color] = [color=#a31515]"User Id=myuser;Password=mypass;Data Source=serverip:1521/mydb"[/color] [color=#0000ff]$[/color][color=#001080]con[/color] = [color=#795e26]New-Object[/color] Oracle.ManagedDataAccess.Client.OracleConnection([color=#0000ff]$[/color][color=#001080]constr[/color]) [color=#0000ff]$[/color][color=#001080]con[/color][color=#795e26].open[/color]() [color=#0000ff]$[/color][color=#001080]sql[/color] = [color=#a31515]"sql select statements here"[/color] [color=#0000ff]$[/color][color=#001080]command[/color] = [color=#795e26]new-object[/color] Oracle.ManagedDataAccess.Client.OracleCommand( [color=#0000ff]$[/color][color=#001080]sql[/color],[color=#0000ff]$[/color][color=#001080]con[/color]) [color=#0000ff]$[/color][color=#001080]reader[/color]=[color=#0000ff]$[/color][color=#001080]command[/color][color=#795e26].ExecuteReader[/color]() [/font][/color] This is what I get when running this code on 2012 r2 [color=#b22222]Add-Type : Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.At .ps1:4 char:1+ Add-Type -Path "C:\Oracle\Oracle.ManagedDataAccess.dll"+ ~ + CategoryInfo : NotSpecified: ( [Add-Type], ReflectionTypeLoadException + FullyQualifiedErrorId : System.Reflection.ReflectionTypeLoadException,Microsoft.PowerShell.Commands.AddTypeCommand : Can't open connection: System.Management.Automation.PSArgumentException: Cannot find type [Oracle.ManagedDataAccess.Client.OracleConnection]: verify that the assembly containing this type is loaded. at System.Management.Automation.MshCommandRuntime.ThrowTerminatingError(ErrorRecord errorRecord) + CategoryInfo : NotSpecified: ( [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,.ps1[/color] Here is the slight code change required to use the odac version installed. [color=#000000][font=Consolas][[color=#0000ff]Reflection.Assembly[/color]]::LoadFile([color=#a31515]"C:\oracle\client\product\12.1.0\client_1\odp.net\bin\2.x\Oracle.DataAccess.dll"[/color]) [color=#0000ff]$[/color][color=#001080]con[/color] = [color=#795e26]New-Object[/color] Oracle.DataAccess.Client.OracleConnection([color=#0000ff]$[/color][color=#001080]constr[/color]) [color=#0000ff]$[/color][color=#001080]command[/color] = [color=#795e26]New-Object[/color] Oracle.DataAccess.Client.OracleCommand ( [color=#0000ff]$[/color][color=#001080]sql[/color],[color=#0000ff]$[/color][color=#001080]con[/color]) [/font][/color] Here are the errors I get when running this version. GAC Version Location --- ------- -------- True v2.0.50727 [color=#000000]C:\Windows\assembly\GAC_64\Oracle.DataAccess\2.122.1.0__89b483f429c47342\Oracle.DataAccess.dll [/color][color=#b22222] .ps1 : Can't open connection: System.Management.Automation.MethodInvocationException: Exception calling ".ctor" with "1" argument(s): "The type initializer for 'Oracle.DataAccess.Client.OracleConnection' threw an exception." ---> System.TypeInitializationException: The type initializer for 'Oracle.DataAccess.Client.OracleConnection' threw an exception. ---> Oracle.DataAccess.Client.OracleException: The provider is not compatible with the version of Oracle client at Oracle.DataAccess.Client.OracleInit.Initialize() at Oracle.DataAccess.Client.OracleConnection..cctor() --- End of inner exception stack trace --- at System.Runtime.Remoting.RemotingServices.AllocateUninitializedObject(RuntimeType objectType) at System.Runtime.Remoting.Activation.ActivationServices.CreateInstance(RuntimeType serverType) at System.Runtime.Remoting.Activation.ActivationServices.IsCurrentContextOK(RuntimeType serverType, Object[] props, Boolean bNewObj) at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Management.Automation.DotNetAdapter.AuxiliaryConstructorInvoke(MethodInformation methodInformation, Object[] arguments, Object[] originalArguments) --- End of inner exception stack trace --- at System.Management.Automation.DotNetAdapter.AuxiliaryConstructorInvoke(MethodInformation methodInformation, Object[] arguments, Object[] originalArguments) at System.Management.Automation.DotNetAdapter.ConstructorInvokeDotNet(Type type, ConstructorInfo[] constructors, Object[] arguments) at Microsoft.PowerShell.Commands.NewObjectCommand.CallConstructor(Type type, ConstructorInfo[] constructors, Object[] args) + CategoryInfo : NotSpecified: ( [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,.ps1[/color] If I run the script that loads the dll like this [Reflection.Assembly]::LoadFile("C:\oracle\client\product\12.1.0\client_1\odp.net\bin\2.x\Oracle.DataAccess.dll") on the 2012 r2 that normally runs my scripts it runs without error. The version of oracle odac installed of both 2012 r2 servers is the same, so I feel it must be some sort of dependency, I just don't know where to look next. Thanks,

Instead of .keys I had to call the .psobject.Properties method. I expanded out the foreach loop just for ease of reading, here is my final working code. [color=#000000][font=Consolas][color=#af00db]foreach[/color] ([color=#0000ff]$[/color][color=#001080]rec[/color] [color=#af00db]in[/color] [color=#0000ff]$[/color][color=#001080]ResultsArray[/color]){ [color=#af00db]if[/color] ([color=#0000ff]$[/color][color=#001080]rec[/color] -like [color=#a31515]'*,*'[/color]) { [color=#0000ff]$[/color][color=#001080]sfirst[/color] = [color=#0000ff]$[/color][color=#001080]rec[/color][color=#795e26].sfirst[/color] [color=#0000ff]$[/color][color=#001080]slast[/color] = [color=#0000ff]$[/color][color=#001080]rec[/color][color=#795e26].slast[/color] [color=#0000ff]$[/color][color=#001080]grade[/color] = [color=#0000ff]$[/color][color=#001080]rec[/color][color=#795e26].grade[/color] [color=#008000]#Write-Output "$sfirst $slast Grade $grade has extra commas"[/color] [color=#0000ff]$script[/color]:[color=#001080]body[/color] += [color=#a31515]"[/color][color=#0000ff]$[/color][color=#001080]sfirst[/color][color=#0000ff]$[/color][color=#001080]slast[/color][color=#a31515] Grade [/color][color=#0000ff]$[/color][color=#001080]grade[/color][color=#a31515] has extra commas[/color][color=#ff0000]`n[/color][color=#a31515]"[/color] [color=#af00db]foreach[/color] ([color=#0000ff]$[/color][color=#001080]val[/color] [color=#af00db]in[/color] [color=#0000ff]$[/color][color=#001080]rec[/color][color=#795e26].psobject.Properties[/color]){ [color=#af00db]if[/color]([color=#0000ff]$[/color][color=#001080]val[/color] -like [color=#a31515]"*,*"[/color]){ [color=#0000ff]$[/color][color=#001080]val[/color][color=#795e26].value[/color] = [color=#0000ff]$[/color][color=#001080]val[/color][color=#795e26].value[/color] -replace ([color=#a31515]","[/color],[color=#a31515]""[/color]) }}}} [/font][/color]

That looks promising, but I've tried a few variations and get this every time. Index operation failed; the array index evaluated to null.

I am pulling data from the SIS again with sql. If there are report on it, but also fix it so the comma doesn't carry to the next system. I can test the array for a comma, and echo a statement of what record has the comma, but I can't get it to replace it. If I am working with a simple array, the replace works fine. If I write out each row property such as $rec.scity = $rec.scity -replace ',','' It works. I've considered two methods to fix this, but hoping there is a better way. 1. write out all fields with a $rec.field = $rec.field -replace 2. write to a tab delimited file then use gc -replace and write back to a file. Is there a simple syntax / logical error I have in trying to do the replace in the foreach loop? Thanks, This simple array code works. [color=#000000][font=Consolas]clear[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]test = [color=#0000ff]@[/color]([color=#a31515]'black'[/color],[color=#a31515]'blue,'[/color],[color=#a31515]'red'[/color],[color=#a31515]'green'[/color],[color=#a31515]'yellow'[/color])[/font][/color] [color=#000000][font=Consolas]echo [color=#0000ff]$[/color]test[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]test = [color=#0000ff]$[/color]test -replace [color=#a31515]','[/color],[color=#a31515]''[/color][/font][/color] [color=#000000][font=Consolas]echo [color=#a31515]"corrected array[/color][/font][/color] [color=#000000][font=Consolas][color=#a31515]"[/color][/font][/color] [color=#000000][font=Consolas]echo [color=#0000ff]$[/color]test [/font][/color] This simple array code mostly works. I can replace the comma from the entire array, but not individually. [color=#000000][font=Consolas]clear[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]test = [color=#0000ff]@[/color]([color=#a31515]'black'[/color],[color=#a31515]'blue,'[/color],[color=#a31515]'red'[/color],[color=#a31515]'green'[/color],[color=#a31515]'yellow'[/color])[/font][/color] [color=#000000][font=Consolas][color=#0000ff]foreach[/color] ([color=#0000ff]$[/color]c [color=#0000ff]in[/color] [color=#0000ff]$[/color]test){[/font][/color] [color=#000000][font=Consolas][color=#0000ff]if[/color]([color=#0000ff]$[/color]c -like [color=#a31515]'*,*'[/color]){[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]c = [color=#0000ff]$[/color]c -replace [color=#a31515]','[/color],[color=#a31515]''[/color] [color=#008000]#this line does not work[/color][/font][/color] [color=#000000][font=Consolas]echo [color=#a31515]"[/color][color=#0000ff]$[/color][color=#a31515]c has an extra comma"[/color][/font][/color] [color=#000000][font=Consolas]}[/font][/color][color=#000000][font=Consolas]}[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]test = [color=#0000ff]$[/color]test -replace [color=#a31515]','[/color],[color=#a31515]''[/color] [color=#008000]#this line works[/color][/font][/color] [color=#000000][font=Consolas]echo [color=#a31515]"Corrected array[/color][/font][/color] [font=Consolas][color=#a31515]"[/color][/font] [color=#000000][font=Consolas][color=#0000ff]$[/color]test [/font][/color] This is the code set I'm working with $rec will have properties such as street and city, which a common places for extra commas to be. [color=#000000][font=Consolas][color=#0000ff]foreach[/color] ([color=#0000ff]$[/color]rec [color=#0000ff]in[/color] [color=#0000ff]$[/color]ResultsArray){[/font][/color] [color=#000000][font=Consolas][color=#0000ff]if[/color] ([color=#0000ff]$[/color]rec -like [color=#a31515]'*,*'[/color])[/font][/color] [color=#000000][font=Consolas]{[/font][/color] [color=#000000][font=Consolas][color=#008000]#$rec = $rec -replace ',','' #does not work[/color] [color=#0000ff]$[/color]rec.scity = [color=#0000ff]$[/color]rec.scity -replace [color=#a31515]','[/color],[color=#a31515]'' [/color][color=#008000]#works[/color] [/font][/color][color=#000000][font=Consolas][color=#0000ff]$[/color]sfirst = [color=#0000ff]$[/color]rec.sfirst[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]slast = [color=#0000ff]$[/color]rec.slast[/font][/color] [color=#000000][font=Consolas][color=#0000ff]$[/color]grade = [color=#0000ff]$[/color]rec.grade[/font][/color] [color=#000000][font=Consolas]echo [color=#a31515]"[/color][color=#0000ff]$[/color][color=#a31515]sfirst [/color][color=#0000ff]$[/color][color=#a31515]slast Grade [/color][color=#0000ff]$[/color][color=#a31515]grade has extra commas"[/color][/font][/color] [color=#000000][font=Consolas]}[/font][/color][color=#000000][font=Consolas]}[/font][/color] [color=#000000][font=Consolas][color=#008000]#$ResultsArray |Select-Object -Property sid,slast,sfirst,grade,schoolid,dob,sphone,sstreet,scity,sstate,szip,homeroom,name,email| export-csv -NoTypeInformation $guardiansfile [/color][/font][/color] [font=Consolas][color=#000000]([/color][color=#0000ff][color=#000000]$[/color][/color][color=#000000]ResultsArray) -replace ([/color][color=#a31515][color=#000000]','[/color][/color][color=#000000],[/color][color=#a31515][color=#000000]''[/color][/color][color=#000000]) [/color][color=#008000]#does not work[/color][/font] [color=#000000][font=Consolas][color=#0000ff]$[/color]ResultsArray |Select-Object -Property sid,slast,sfirst,grade,schoolid,dob,sphone,sstreet,scity,sstate,szip,homeroom,name,email| export-csv -Delimiter [color=#a31515]"`t"[/color] -NoTypeInformation [color=#0000ff]$[/color]guardiansfile [/font][/color] [color=#000000][font=Consolas](gc [color=#0000ff]$[/color]guardiansfile) -replace([color=#a31515]'"'[/color],[color=#a31515]''[/color]) | Out-File [color=#0000ff]$[/color]guardiansfile -Force -Encoding ascii[/font][/color]

Your definition of easy and mine differ a bit.

I have a separate wap rj 11 ADSL line into modem put in bridged mode rj 45 out into wan nic of sophos this is what gets the public IP. rj45 out of lan nic into a switch / wifi. All the dns / dhcp is done on the sophos box so there is no conflicts there. After doing a bit of reading up, it sounds like you really should have two nics, unless your just doing a demo. Two nics should eliminate the bypass concerns I was talking about. Here is some reading for you. https://forums.untangle.com/installation/40710-untangle-vm-bad-idea.html https://forums.untangle.com/hardware/37943-install-untangle-only-one-network-card.html

To go back to the question of using a VM or not; I think you will have plenty of spec depending on bandwidth. I only have a measly 4 mpbs at home, so my 10 year old box with 1.5 GB of ram does fine. The best advice I have is set it up and do some tests so you know how it performs on your network. My only concern about using a VM is how easy it would be to bypass? My dedicated box is physically inline, you’re not getting passed it without moving cables. I don’t know the age / tech savviness of your kids it may not be an issue yet, but dns / gateways are easily changed. Your home router may have tools it place to prevent this, it may not. I’m just putting the question out there for you to think about, test and decide.

The last time I looked at untangle, it didn't have that great of filtering unless you got the subscription. I don't know what you are looking to pay. I use Sophos utm 9 home edition. I run it on a dedicated old box with 2 nics, but I'm sure you can put it on a VM too. The reporting isn't the greatest, but it is the best free home network filter I've found. https://www.sophos.com/en-us/products/free-tools/sophos-utm-home-edition.aspx

They may be the exact same, but neither are very friendly for accessibility in my opinion. Admittedly I don't use a true screen reader every day, but I can run some basic tests. I do use text aloud on a daily basis though and it will not read google docs or the preview version from cursor. I must select the text I want it to read, or read the entire page. A PDF is about the same in this way, I must select the text I want read or read the entire document. I can also download the pdf and open it directly in text aloud so that gives a bit better navigation if needed, I can do the same with a google doc. Using NVDA the google doc provides no headings, links or anything to the screen reader. Downloading the document in zipped html format then opening does provide navigation links and headings. I only use NVDA to occasionally test accessibility so I'm by no means an expert, but that appears to be an accessibility fail to me. If we do have a regular screen reader user on here, I'd like to hear their take on this. EDIT: Also I've not tested but, I don't think the google html version will give the same control as HTML on your own site. I have icons on the site that allow a user to change contrast, switch to dyslexic font and change font size. I doubt these would work for google doc. The more we discuss the pros and cons of these formats, the more I'm in favor of pure HTML.

Some interesting thoughts on accessibility. The biggest issue I have with PDFs are those that scan them in as an image. Those PDFs are not accessible at all. A proper PDF vs google docs is a tossup on accessibility for me. Neither one are as easy as HTML but not too many extra steps either. It will be a chore to convert all existing governor minutes to HTML I’ve made an effort to have our new website meet all accessibility guidelines. I considered the PDFs accessible because they are not an image and you can get at them with a reader. They are all word docx converted to PDF.

I meant password protect in the manner of preventing copying / editing not opening. I know I've come across PDFs that don't allow for copying / printing etc. I used to think PDF was a more secure way of publishing as it was not easily edited. That changed with word 2013. None of my PDFs are protected in this way, I'm just curious. A couple examples, I have a PDF copy of lease agreements / receipts. What if I altered those and said no this is what I signed. In a school setting the student handbook / code of conduct is published in PDF, what if a student edits a copy. It of course is wrong to do these things, I'm just wondering if this is where the OP was going with PDF security. I'd like to think common sense would prevail but who knows these days.

@jthompson slight hijack here. One of the things we publish is meeting minutes. I asked for input from a few folks and just got a shrug saying do what ever is easier. The old website had a list of links October 2018 September 2018 etc The new website I shared a google docs folder with sub folders to each academic year. I convert the minutes to pdf and drop it in the appropriate folder. No faffing with uploading and creating an individual link for every month. Do you think providing the PDFs like this is out of the ordinary or not straight forward for end users? The only downside I can think of the new method is website stats / analytics won't report the downloads. On topic: Should we all be adding passwords to published PDFs?