howartp

From his profile:

Love it!

Yes we still use them. And yes their website is shocking.

Erm... yep!

Ours is 5 pages/screens long - everyone just swipes it up to the bottom and hits ok. [emoji56]

If you're going licensed, there's two types of licensing - shared and coordinated. Both cost money, but shared is as it says - still shared, so you've not guarantee that the pub next door doesn't have the same shared license. Coordinated assures you that nobody else can legally use your frequencies in your area. At my school we have 23 frequencies in use with Audio Technica; 4 on the free frequencies, 11 on shared and 8 on coordinated. Peter

We use SSO to Google from Freshdesk. We do have to sign in twice for some reason - hit sign in with Google, sign in, then hit it again on the next page - but it works. Peter

Thanks for the hint about contacting the CEO; I've just done so. I contacted my account manager about the previous ticket and got a pretty quick response but I shouldn't have to keep chasing. Peter

We use LeavePlanner for annual leave. It does allow staff to log in and report same-day sickness although we don't allow them to; they have to go through line manager as normal.

Hi Does anyone have any problems with Sophos Central (Server Endpoint with Intercept-X) running on the SIMS server, or any additional exclusions over and above the automatic SQL 2016 ones Sophos puts in? We've had Central for 18 months but I think I got fed up of it causing problems when we rolled it out, so we disabled it back then. With Cyber Essentials, we turned it back on on servers last month - but the server is running like a dog and we have to reboot it every few days as nobody can get into SIMS. VM is 16GB with SQL limited to 12GB, which has been fine until we put Sophos back on.

By contrast, we moved from Konica to Kyocera 3 years ago, and would not have renewed that contract, even ignoring lockdown usage.

Completely off the top of my head, I think Google can use ADFS to authenticate. You could therefore schedule your AD accounts to only be active during certain hours, which ADFS would presumably honour. You'd have to set session expiry length in Google which I believe is available somewhere.

We've had 23 Kyocera's with them (via Annodata) for 3 years. Just renewing the contract for further 2 years (assuming Governors said yes last night!).

Hi Ashleigh I'm here for another hour if the engineer feels like ringing me at all. I'll be back tomorrow from 9am until 4pm. Peter

Morning Ashleigh. I'm around all day until 3.30 today. Peter

Thanks Ashleigh, I look forward to hearing from him. Peter

Yes, we opened ticket on 15th April, marked as Urgent, and CC'd to Lee and Alison, as we were under ongoing DDOS attacks. (Lee is service manager, not sure who Alison is). 4 days later I nudged my account manager and had a phone call from Alan within the hour. Alan later closed the ticket with my consent and opened a new Normal priority ticket for a related issue. It's 12 days since I heard from him despite me providing three updates 9 days ago. Ticket IDs 308947 and 309319 if anyone from Smoothwall is watching.

Something like https://www.arenagroup.net/page/electronic-document-management They've pestered me for a while and I had a look a few years ago but school isn't/wasn't ready for it so I didn't follow up.

Is there similar for digging into Kerberos auth? Verbose auth logging shows “Error” receiving reply when seeking group memberships, and browser demands you feed it more credentials. I want to see what my AD is saying to Smoothwall to make it ask for credentials.

We've used Optech for the last 15+ years Optech Fibres Ask for Jamie or Robbie and mention my name. Peter (South Craven)

Reading this thread with interest. We're both Meraki and Airwatch at the moment but looking to move to Jamf for our staff iPads and next student scheme. In Airwatch we can tick per app whether the app should be removed when the profile is removed; can you go and untick that (per app) in Lightspeed before you remove the profile? Then in Jamf, tick the "attempt to make existing unmanaged installs managed" on the app. Does this prompt anything on the iPad, or (because it's supervised) does it go straight on? Most of our students won't notice that we've changed supplier if the profile just changes, so they won't try and remove it (they tried that at the beginning and realised it doesn't work) - but if they get prompted for a new profile, they'll try their luck in removing it. Has anyone else gone through a change of MDM mid-scheme / with existing devices? Jamf is ~£15 per license Airwatch is ~£27 per license Meraki was free (hence why we have it) but is now ~£41 per license Peter

Good morning We discovered the Add-DnsServerQueryResolutionPolicy cmdlet and its associated friends for ZoneScopes and ClientSubnets yesterday. We have split DNS (.school.internal and .myschool.com) served by our DC DNS servers. Both LAN PCs and iPads use the internal DNS. We have two ADFS servers - one internal (using integrated windows auth) and one proxy (using forms-based auth). The problem we're trying to solve, through which we discovered the above policies, is that iPads are hitting the internal ADFS and trying to use integrated auth. I tested the policies on a nonexistent domain yesterday which worked great, for the one URL I was testing. When I implemented live, I discovered that only entering the one URL works great for that URL, but all other *.myschool.com URLS return no result unless I re-add them to all the ZoneScopes. Does anyone know if it's possible to "fall through" so if a ZoneScope doesn't contain an entry it falls back to the parent scope that shows in DNS Management? I really don't want to add and maintain separate DNS records for four scopes just for the sake of one server. Peter

Does this service still charge £495 for a van to come and take 20 old PCs on the off-chance they've got a bit of plastic in them?

System Logs > Authentication

Good morning Mark Firstly, did these tips ever get written or disseminated? Secondly, please could you advise the appropriate name and email address (pm or publicly) for sending a formal query to Exa? We’ve been DDoS victims for several days and management want more answers than I can give. Many thanks Peter South Craven