howartp

We have two DHCP servers. Windows DC does all the wired vlans. Smoothwall does the WiFi/BYOD; wifi traffic can't get at wired network except where firewall bridge rules allow. Works fine and hasn't caused us any issues.

I bought Blink in the autumn, thinking i'd power it off the existing doorbell - unfortunately it can only be powered by battery so I made a false move on that part. It uses the wire to ring the existing bell, not to draw power. I have three doorbells, a fixed indoor camera and a PTZ indoor camera on the system with local USB storage and cloud backup. Make sure you get the right batteries - I can't remember if it's alkaline or NiMH off top of my head but the system for monitoring battery health can only read one type, so they show dead within 2 days of replacing. Equally if you're up for a bit of mcgivery, there are couple of options for hard-wiring AA battery packs into the battery compartment. My technician swears by https://uk.eufy.com/ which I did look at, but misunderstood the Blink wiring so went down the wrong rabbit hole. I'd probably go Eufy if I was starting again.

Do you have a vCenter VM or vMSA running, or are they both standalone?

Does [smoothwall]/modules/auth/cgi-bin/auth/useractivity.cgi (the User Activity page) show you the SSL type? It shows us Radius versus iDex etc.

Sorry, I probably confused things. We use Salamander, I was just responding to the fact you already had the scripts setup and seemed to be preferring not to splash out on Salamander. It's well worth the cost, and the ongoing supportability as you mention. I happen to be a developer so I do use APIs, and am planning on subscribing to Wonde's API when I get a bit of time, to streamline some of my other internal processes that aren't Salamander-related.

Scrap that. My VLSC account historically uses my daily staff account, but i'm not an admin on Azure or MS365 with that account so was looking on my 'admin' account which doesn't have the Volume Licensing tab. If I log in to MS365 with my daily account, I can see/do very little - but I can see Volume Licensing!

I've just looked and can't see this tab on mine?

Or, have a look at Wonde's API (available to end-user schools) then update your scripts to match that.

FYI if anyone can't find it, the route (on my tenant at least) is Entra > Security > Authentication Methods, not Protection. There's then a "User registration details" report on the left under Monitoring.

I'm lucky to work closely with the SIMS Manager. Two years ago we agreed to abandon the current permission groups that were assigned in SIMS, including the defaults, and create our own 2021_Admissions, 2021_Exams, 2021_AccessArrangements, 2021.....etc We warned staff that they would be stripped back to basics and only given access to what we (SIMS and IT) understood to be their roles; any requests for extra had to come via their Line Manager. This was all approved by SLT. There was some shouting but overall it's worked very well. Even SLT only have read permissions to areas they should read but not edit.

I've used https://batchgeo.com/ I *think* it's free for the bits you're asking for.

Not with ActivPanels but we have this week with Iiyama TVs. We suspect a student has a remote or IR blaster on their phone, though the teacher thinks it's more random than that.

Just checked; mine is still there...

Is the date/time correct on the one PC that is struggling with it? What is the date from/to on the certificate?

Yes, you get a directory structure with ticky boxes for each OU/level that you tick/untick.

We've had Meraki for staff and Airwatch for students. Just moved to Jamf School (last summer) for new students and will be continuing with it - far cheaper than Airwatch. Probably move staff when their devices are next renewed in 12/18 months time.

All North Yorkshire schools have had them through at least three tenders. I think the odd large secondary school may have moved elsewhere but the rest of us (inc various sized secondaries) are happy sticking with them. I wouldn't want to move to another product now having been through maybe 5 others prior to the Smoothwall era; I know what i'm doing with it and how to respond to foibles.

Ok here on Exa.

We had our coffee machine confiscated several years ago. Fortunately they moved the staffroom from 3-classrooms-away-down-a-corridor to right-next-door so we have ready easy access to refreshments including "help yourself" foods that appear from time to time.

Excellent idea.

I've not seen any posts that say this; all the posts i've seen say/show that ClassCharts are NOT reporting themselves as the non-issue was not reportable?

The ICO are aware and were having an internal meeting/discussion according to a post on the other thread.

Hehe, yeah I've pointed that out to them as well.

Hi We're starting to move towards O365/Azure/Entra and Salamander want Global Administrator privileges which is clearly frowned upon the same as giving users/services Domain Admin rights on local network. What level have folk given Salamander before I re-invent the wheel?

If I could just add a firewall rule for 456, I would consider doing so. Unfortunately because it is appearing as a website on 456, despite the front end URL being on 443, Smoothwall has another setting that governs whether I can browse to it - where you have to list ports that websites are allowed to be hosted on. This setting is system-wide, not a rule I can build to/from certain IPs/etc. The company are aware as they contacted me, to see if I'd found a solution - as another school seems to have the same issue (presumably also using Smoothwall). I've replied appropriately suggesting they re-think their architecture.