howartp

The other possibility is that this is a primary key, in which case it won't let you turn off required. That being said, it should never have blank/null values already so maybe not.

Thank you. It turns out that if you set Trusted IPs in the 'old' bit of Azure (https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx) then those apply regardless of Conditional Access - so when I disabled my conditional access policy, the trusted IPs were overruling it and therefore I thought MFA wasn't applying. I've now moved the trusted IPs to a Named Location in the 'new' bit of Azure (within 'Security'), then adjusted the policy accordingly. Peter

Thank you, i've changed it for our Year 7 (about to be Year 8) students and had a play. Do you know (whilst i'm here) - I can turn on MFA per-user in the "Users" section of Azure, and I can create and apply Conditional Access (we have P1) in the "Security" section. But if you have a Conditional policy for a user, but haven't turned on MFA in their Per-User entry, it doesn't apply - is there a global/group based "enable MFA for everyone/this group" somewhere that i'm missing? Peter

Hi. We're an RM CC4 school with a schoolname.local AD/DNS but with @myschool.net email addresses and (existing but barely unused) Microsoft tenancy. Looking to sync with Azure ready for MFA and the conditional features - we have P1 etc. Query is about adding an additional UPN suffix and changing it for our users; are there any issues doing this? Equally, if I just changed the UPN suffix would that break anything - would our domain logins still be schoolname/username whilst our UPN became @myschool.net? I've added the UPN suffix and changed one test user, and they can log in ok to Azure and to the domain, but I don't know what else I might be breaking/have broken in the process! Peter

We have a dedicated printer under reception that does nothing but fire evac. It may be overkill, but the direct queue to the reception/office copier is only ok until the copier is jammed or in the middle of a large run, then it can't be accessed whilst printing fire reports.

I rather suspect the school name is "St John's Something" and the import (and Excel) either doesn't like the apostrophe, or it's been output as a smart apostrophe like Word does with double quotes.

Impero NetSupport Senso.Cloud Those are the three I know of that do this. We used to be on NetSupport (when it was resold as RM Tutor) but moved to Impero about 8 years ago and we're happy where we are. A local school has moved from Impero to Senso but it's clashing with a recent Sophos update, rendering it inoperable as I understand it.

It's a fair question that i've never considered; Veeam only backs up the VMs on the vSphere hosts to my knowledge - the OP is asking about backing up the Host configuration which is certainly a valid thought. Anyone any thoughts on that?

We're using the questions as a list of things we need to fix before we even try applying; you only have 14 days from failure to fix things and re-apply for free, otherwise you have to pay again. Better to not submit until you're reasonably confident you've done what you can see needs doing, first.

From the ESS Support Site, posted today: --- 11/07/2022 at 14:00 - Issues Importing Key Stage 2 Results We have been made aware of a small number of schools in Wales that are having errors when upgrading to the Summer (7.206) with some returning "Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <= , >, >= or when the subquery is used as an expression." In this situation we have now released Patch 27421 to resolve this issue. Please contact your SIMS Support provider to obtain a copy of the patch. 11/07/2022 at 14:00 - Issues Importing Key Stage 2 Results We have been made aware of a number of issues importing the Key Stage 2 results obtained from the Pupil Assessment Gateway into SIMS. The issues that have been raised surround but are not limited to; incorrect filenames, CTF version numbers and incorrect content within the downloaded files. We are currently liaising with colleagues at the DfE and Pupil Assessment Gateway to understand when there will likely be a resolution to these issues. We are aware that some users have amended the filenames or tried to fix the issues themselves in some other way. We strongly advise against schools attempting any solution that has not been ratified by the DfE or PAG as this has the potential of corrupting the file itself or creating further issues 11/07/2022 - Update - We have been advised by the team at the Pupil Assessment Gateway that a resolution to the issues faced last week with Key Stage 2 results should now be resolved. The latest files should now be available via the PAG for Key Stage 2 / Key Stage 3 providers.

The second error we had, which is also all over the forums, is that the destination school didn't match. Nothing to do with that closing supplier tag. We know how to fix it, but advice on the forums is to wait until the correct file is published as even when correcting the schools and importing, the data was still wrong - which kinda matches what @Seb1780 mentioned. Peter

The first answer to this, though overkill for this specific query, is to use Salamander: https://www.salamandersoft.co.uk/ That will populate and maintain your student's email addresses, and lots lots more besides. The second answer is SIMS | Routines | Data In | Pupil Data | Import from Spreadsheet, which is probably the answer you want.

Ah, i'm glad I spotted your typo! I didn't realise there was a difference between the Extended and basic codes, however i've just opened the CBDS and seen what you're talking about. Unfortunately we only use the base codes already so I can't see more than my screenshot; however if you use the Bulk Update routine mentioned above, you can click the header of the "Assigned" column which (if you already use subcodes) should sort them in bulk, then you can 'tick' the relevant column for the main codes on the right hand side?

Those codes are set by the Common Basic Data Set (CBDS) set by the DfE/Government for all inter-school / county / DfE transfer of data. You shouldn't be trying to change them unless you really know what you're doing. https://www.gov.uk/government/publications/common-basic-data-set-cbds-database

Is this not what you're looking for?

Routines > Students > Bulk Update

1) Extend the VLAN and move the APs to statics (beyond your county identification range), leaving more room for actual users. 2) Add a static password to the guest network (the SSID) before they hit the actual guest portal, so that passers-by aren't occupying IPs. 3) I don't know about this but I suspect you can kick clients off that haven't authenticated in x amount of time.

Agree with what @TechMonkey said. Except I'd say FALSE not TRUE at the end of vlookup, particularly if using a row per year group. See attached (sorry - updated attachment) TermFees.xlsx

We still try and replace approx 10% of PCs every year (~750 total) give or take, but have just agreed budget to ensure the 400 that won't run Win11 are all replaced by Summer 2025. I'm not saying we'll definitely go Win11 in that Summer, but at least we're ready and planned for rather than reacting to.

Hehe, we actually did - each field was presented as something like: ATF Data: $fromATF Parent Data: $fromParent Auto Suggested Data: if($fromParent != "") : tidy(trim(properCase($fromParent))) else (tidy(trim($fromATF))) Manual override: [Entered by Admin] with a radio-button to choose which data was carried through, but at that time the admin person doing that process barely gave it a glance. The current admin (newly formed data team) could indeed use it to do that. However SLT feel there is is too much dependence on me and my coding skills; if I go under the proverbial bus and the CTF/ATF schema/validation changes each year (which it theoretically does) then school are stuck.

We typically start with forname, legal forename, surname, legal surname - which returns far too many results - then filter it out using SIMS to tell me all the false-positives eg "Forename SMITH", "Forename JONES", "Sam SURNAME", "Emma SURNAME" etc.

With the Spring update to SIMS, you can bring in a lot more data from the ATF than previously (and can de-select what you don't want, just like CTF). Therefore you could do what we've done for many years which is a PHP/HTML form to capture the data and save it to MySQL, then output an ATF with all the data. However last year and this, we imported the ATF to get the basic records there, then we're copy/pasting from a Google form. Far quicker than manually typing but still allowing the office staff (3 of them) to gate-keep the data as it is entered, versus taking the mishmash that parents have provided and importing straight in. We have also looked at Admissions+ but it still has the inherent problem of taking parent-entered data as gospel.

Has anyone been invoiced for their April 2022 renewal yet? We did register for the break-clause but won't be exercising it, but the recent email about that talks about a refund being issued - which implies we've already paid the invoice for the full 3 years by then. Peter

Apologies, I presumed you meant they were local AD accounts rather than Azure AD accounts. If this is a custom tool then I doubt any of us can advise further.

$Expiry = Get-Date -Hour 15 -Minute 15 -Second 00 write-host "Account Expiries will be set to: " $Expiry #Today at 3.15pm Import-Module ActiveDirectory $subjects = "Maths","Geography","History","Science","French","German","Spanish","English","Drama","Music" $subjectnum = Get-Random -Maximum 9 -minimum 0 #$subjects[$subjectnum] $number = Get-Random -Maximum 999 -Minimum 111 #$number $randomPasswordTxt = $subjects[$subjectnum] + $number #$randomPasswordTxt $randomPassword = ConvertTo-SecureString -string $randomPasswordTxt -AsPlainText -force Set-ADUser fred -AccountExpirationDate $Expiry Set-ADAccountPassword fred -reset -newpassword $randomPassword write-host "Account updated" Send-MailMessage -SmtpServer "192.168.x.x" -From "[email protected]" -To $("[email protected]") -Subject "Guest account" -Body $("Account for guest students:`r`n`r`nUsername: fred`r`nPassword: $randomPasswordTxt`r`n`r`nThis password will expire at 3.15pm.`r`n`r`nYou will receive a new one at 8am.`r`n`r`nIT Support.") write-host "Email sent" The above code is what we use to reset the password for our guest student account each day (it runs on task at 8am) and automatically expires the password at 3.15pm It may be worth reconsidering your workflow, so that when you actually setup the accounts for the given days/weeks training, you automatically set them to expire at the end of the day/week? Alternatively: Disable-ADAccount -Identity fred That will disable the account, rather than setting the password and/or password expiry as such.