craig-schools

Looking at a SAN and 2nd server for DR as currently although the backup server can run some VM's it will run from the last backup, requiring a restore, whereas stored on a SAN would be instant. Not on VOIP, has been put back until we think we need phones in every classroom, which will likely be never! We are in the process of being upgraded to 100mb on gigabit bearer Fibre broadband after being on 10mb for the last 3 years (bought as the guy I replaced left)

We have IRIS here and it's getting people to use the thing thats a pain. I end up setting it up for them in class as they have no idea, one recorded a session of just the ceiling as they couldnt work out how to adjust the tripod..SMH. I sell it as "would you rather have SLT tutting in the corner making notes, or be able to watch your own mistakes and learn from it". Most "NQT" or new ish teacher will have a go or 3, but the older generation won't touch it.

We use the Epson Interactive Projectors on Standard 8" x 4" whiteboards. means the teachers can use normal whiteboard pens on the board if they want, project on to it and if they want to interact use the interactive pen. Had some of them in for 3 years now and had no major issues. We have 3yr lamp warranty on them and had a few lamps that started flickering despite the usage and Epson sent out lamps next day. Pens needing batteries isnt too bad either, ours seem to last a decent time.

We have 2x Monarch LapCabby 16V Laptop Trolleys for sale, Blue Handles. They just have power strips and you can connect whatever you like into them. PM for more info. LapCabby 16 Bay Laptop Charging Trolley (Vertical) - with Blue Handles LAP16V-BL LAPCABBY16Vs LAP16V - buy at Primary ICT for Primary Schools & Education Sorry if I've broken the rules posting a for sale thing.

The USB's we have are the older 8GB Jetflash 220's which of course are end of life. We bought 50x at the time and so far none have failed, although we have had maybe 6x broken or lost. They are hardware encrypted and essentially show as a virtual CD drive which you run the SecureDrive software from, type in your credentials and then the encrypted partition is available. The closest I can find is https://www.amazon.co.uk/Transcend-TS16GJF200-JetFlash-Flash-Drive/dp/B0050FVEH8?ie=UTF8&*Version*=1&*entries*=0 although I'm sure Kingston have something similar. The laptops were originally bought and encrypted back in 2014 but yes I'm aware TrueCrypt has folded. No school / children data is actually kept on the laptops (only teacher planning if they choose to save it), it's overkill really. If they were using SIMS on it, or saving pupil information then I'd have to change it, I'll probably look at it if / when I upgrade to Windows 10.

We are using Transcend Hardware encrypted USB's, they have a master password option and multiple users so I set an Admin user and then create the staff member. It has fingerprint and / or password option. Then the staff laptops are encrypted with Truecrypt and I force a 16digit passphrase with at least 1x number, 1x capital and 1x symbol. The staff hated me for the first couple of times they had to type it in, but then they got over it, maybe a week tops. We also have a VPN to connect staff devices to work from home etc. This is the weak point for me.

I've been a Primary School Technician (level 2) for just over 3 years, term time only plus 2 weeks. I'm the only person here and I've replaced servers, built domains etc, I look after a fleet of approx 200 staff and student devices, then all the network infrastructure etc too, some of which I have changed in my time here. The powers that be won't raise my title or pay grade as I don't manage anybody.

@dry - Doesnt that automatically overwrite the existing slide? or do they have to give it a name as part of the macro

We run Sedao ImageFlyer on 2x screens, 1x portrait and 1x landscape. Both run the same content but with slightly different layouts. I can't get a screengrab just at the moment but I'll try and get one up later. Interested in seeing what others have though these days.

I've got the EB475Wi's and some have started to flicker after 3 years. Putting them in ECO "helps" but ultimately it's a new bulb required. Thankfully mine all have 2 years left of the Lamp warranty so once I'm made aware of one I pop it into ECO mode and speak to Epson via the online chat thingy. Next day normally a lamp arrives. Hills Components are pretty good for lamps if your out of warranty.

Oh come on that would be far too easy!! :-p No it seems my current / old range will only be active for 45 days.

Hi there, I have a site which has it's internal IP set by LA, currently on a /24 but I've just had a new /23 range given to me as we were running out of space due to expansion. Alas the /23 range is different so i cant just extend. xxx.xxx.112.xxx /24 xxx.xxx.106.xxx /23 Is there a particular order of doing things? As I have 2x DC's should I move just one first then migrate everything over and follow up with the second? Or do I do the DC's last? I'll have other firewall issues as we have external IP addressing in place for VPN, CCTV access etc but I'm just wondering if there is a best practice. We have following servers 2x DCs, SIMS, PRINT, VPN, AV, APP, FILE, DEPLOY, running on 2x hosts which arent on the domain. All assigned static IP.

I was going to ask the same question.. is post-BETT flu better or worse than the killer known as M.A.N flu?

Indeed it was. i normally only post on here when I have a problem, I tend to lurk mostly but I'll try to post more this year!

Awesome! I never win anything!! Woot

As I am getting desperate I have screenshotted the Server config, and both client configs. I've also got the packet captures from our firewall supplier from a 4g tether test. 1: 12:30:11.335218 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 528 2: 12:30:12.253999 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 528 3: 12:30:14.333600 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 528 4: 12:30:20.093867 802.1Q vlan#3 P1 85.255.233.197.30979 > 93.93.xxx.xxx.443: S 81889752:81889752(0) win 8192 5: 12:30:20.093912 802.1Q vlan#3 P0 93.93.xxx.xxx.443 > 85.255.233.197.30979: R 0:0(0) ack 81889753 win 8192 6: 12:30:20.755743 802.1Q vlan#3 P1 85.255.233.197.30979 > 93.93.218.56.443: S 81889752:81889752(0) win 8192 7: 12:30:20.755789 802.1Q vlan#3 P0 93.93.xxx.xxx.443 > 85.255.233.197.30979: R 0:0(0) ack 81889753 win 8192 8: 12:30:21.393488 802.1Q vlan#3 P1 85.255.233.197.30979 > 93.93.xxx.xxx.443: S 81889752:81889752(0) win 8192 9: 12:30:21.393534 802.1Q vlan#3 P0 93.93.xxx.xxx.443 > 85.255.233.197.30979: R 0:0(0) ack 81889753 win 8192 10: 12:30:21.556901 802.1Q vlan#3 P1 85.255.233.197.29917 > 93.93.xxx.xxx.1723: S 1992912569:1992912569(0) win 8192 11: 12:30:21.556947 802.1Q vlan#3 P0 93.93.xxx.xxx.1723 > 85.255.233.197.29917: R 0:0(0) ack 1992912570 win 8192 12: 12:30:22.192800 802.1Q vlan#3 P1 85.255.233.197.29917 > 93.93.xxx.xxx.1723: S 1992912569:1992912569(0) win 8192 13: 12:30:22.192845 802.1Q vlan#3 P0 93.93.xxx.xxx.1723 > 85.255.233.197.29917: R 0:0(0) ack 1992912570 win 8192 14: 12:30:22.833300 802.1Q vlan#3 P1 85.255.233.197.29917 > 93.93.xxx.xxx.1723: S 1992912569:1992912569(0) win 8192 15: 12:30:22.833346 802.1Q vlan#3 P0 93.93.xxx.xxx.1723 > 85.255.233.197.29917: R 0:0(0) ack 1992912570 win 8192 16: 12:30:23.034040 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 384 17: 12:30:24.054684 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 384 18: 12:30:26.077327 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 384 19: 12:30:30.162985 802.1Q vlan#3 P1 85.255.233.197.4041 > 93.93.xxx.xxx.500: udp 384 19 packets shown 1: 12:30:11.335309 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 528 2: 12:30:12.253999 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 528 3: 12:30:14.333600 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 528 4: 12:30:23.034040 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 384 5: 12:30:24.054699 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 384 6: 12:30:26.077327 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 384 7: 12:30:30.163001 802.1Q vlan#8 P1 85.255.233.197.4041 > 10.2.112.38.500: udp 384 7 packets shown Anyone else want to have a go?

Ok, cheers. I've already put in the UDPEncapsulation registry entry on the server and client and my services are running (a service restart doesnt alter the problem). I don't really want to use PPTP but that may be my only option at this stage. Thanks tho

I've tried from both the internal network and using my 4g tethered phone connected to a laptop

anyone else going to offer anything?

Yup, I've done allow access in the DIAL IN tab both for me and also a brand new VPN1 user (testing). I've also done the same for the Computer objects which I am using for testing.

Did some more testing on friday with our Firewall team and they have confirmed the traffic is going both ways, but looks like the server is refusing the connections. I've checked all the settings on client and the server and they match. What have I missed?

MatthewL - My Firewall provider says they have these setup yes. plexer - We only have windows 7 pro not enterprise so DA is not an option.

I'm hoping someone can shed some light on this, it's going to be something very simple I'm sure but for the life of me I'm drawing a blank. I'm trying to setup a VPN so that teachers can access the network maps from home / starbucks etc on their staff laptops, saving the hassle of "I forgot my USB stick / Forgot to copy the files i wanted" etc problems. Spooled up a 2012 R2 HyperV VM, single LAN with internal static IP, installed RRAS and setup a L2TP connection with PSK. Spoke to our firewall / ISP and they opened the various ports and gave external IP. Spoke to our Filtering provider to ensure the proxy wouldn't cause agro. Should be a go-er. Tested using INTERNAL IP while on site - connects, picks up new DHCP range address. Tested using EXTERNAL IP while on site - fails. Error 789. Tested using EXTERNAL IP while using 4g tether - fails. Error 789. Re-spoke to Firewall / ISP and Filtering suppliers, all ports opened for a 5min testing window. retest yields same results and log files from firewall didn't seem to indicate a problem with them. What have I missed? Been at this on and off since the beginning of the summer holidays and it's starting to drive me nuts! Thanks

The server arrived on 16th June, so I've had it here for a while now. As space is limited in the building I've had it on my desk and to be honest the only time I can hear it is when it is booting, fans on full etc, the rest of the time it is whisper quiet. I've setup some storage on it and have begun to start spooling HyperV Servers in prep for the migration. I've even moved some of the less critical services over already like MDT / WDS and my AV. It's super quick and I've popped the side off to check the inside layout, cable management is top notch. All in all I'm a happy camper.

Just a follow up to the original topic. I've bought a server from VeryPC with the help of VeryPC_Ed with the following spec. Dual Xeon E5-2620v3 Six Core Processor 64GB DDR4 2133 ECC REG RAM (8 x 8GB DIMM Modules) DVDRW Optical Drive Intel 8 Port RS3UC080 SATA/SAS HBA Intel S3500 120GB Series Enterprise SSD (2 - Raid 1) Intel S3610 Enterprise 400GB SFF SATA SSD (4) Seagate 900GB Enterprise SFF 10k SAS HDD (4) Redundant 750W Hot Swap Power Supply No Operating System 5 Year Next Business Day Warranty Additional 8 x 2.5" SFF Cage and 8 Port HBA (for future upgrades if required) APC SmartUPS 1000VA UPS (Tower) Should be delivered 15th June, allowing me plenty of time to play with / prep it before my migration week of 20th July. Thanks for all your help