Jump to content

mjk

Members
  • Posts

    938
  • Joined

  • Last visited

Everything posted by mjk

  1. In Apps > G Suite > Settings for Google Hangouts > Meet settings, turn "Let users place video and voice calls" OFF.
  2. Question: Suppose a site has ADFS and also uses Google SAML Single Sign on. Can we use Windows Integrated Authentication so that when the user signs into a workstation the password is automatically passed through to ADFS and this intern logs them into the browser ?Has anyone done this? Sounds like it 'might' be possible but would be interested if anyone has tried: https://social.technet.microsoft.com/Forums/en-US/0886b8e4-3b46-48be-b00b-358e3327c548/windows-integrated-authentication-adfs-30-any-browser-windows-and-mac?forum=ADFS
  3. Thanks. I think MyConcern really does need a way of deleting data that is not related to safeguarding. I appreciate we can keep non safeguarding data for a long time if we chose to, but we also have to inform parents and students that we are doing it, which causes issues in itself. One of the reasons we want to delete irrelevant data is also to lower the running costs of the organisation and simplify Subject Access Requests. I think it is difficult to justify we we are keeping the fact that a child searched for a 'kermit suicide' meme when they were 11yr's old if an investigation concluded it was innocuous, and the IT team had been over-cautious in reporting it via myconcern. The ability to delete certain data in Myconcern would be a benefit to schools and myconcern alike.
  4. I think this is the issue, that the human processing is done by the IT dept and the training we were given is simply to refer any issues to the safeguarding team. The new process (MyConcern) means that ALL data we forward to them is kept for a long period. MyConcern tell us that the data cannot be deleted. To my mind this could become a GDPR issue. DSL is happy that we publicly say we might hold internet content and email data for a longer period, but I've not heard back from DPO if this is acceptable.
  5. Suppose our college data retention policy states that email is kept for 12 months and internet logs are kept for 3 months. Safeguarding information is kept until the childs age is 25 based upon historic 19yrs old + 6 (I understand this could be much longer and keeping the data for 35ys is acceptable). Our DSL has been advised that all suspected safeguarding information must be recorded as such, but if it is investigated not to be safeguarding information would be within our rights to hold the data ? In the hypothetical situation, somebody 'catches' a child searching for a safeguarding trigger word eg 'suicide'. Should this be recorded as a safeguarding incident if it is a false positive? Please discuss
  6. Other android stores available https://fossbytes.com/10-google-play-store-alternatives/
  7. We did this so long ago I can hardly remember ! I certainly don't recall any major issues, other than getting the staff to login to the browser. Speaking to other technicians we think it was in 2010 we made the switch.
  8. There will be a middle manager, somewhere in Capita, who's bonus is dependant upon the amount of money the educational sector wastes on creating tickets.
  9. I'd start here https://tools.google.com/dlpage/exchangemigration
  10. Is that INC VAT? The BENQ list price is for 4K is cheaper than these. https://www.avpartsmaster.co.uk/p-73091-benq-rm7501k-75-4k-android-education-interactive-touchscreen-9hf4atkde1.aspx
  11. Would you mind giving some indication of prices. When speaking to promethean re-sellers, even they don't seem to be recommending them on price - just on the fact that the migration path is simple due to their software locking you in.
  12. Staff only need to login once, it's hardly a dealbreaker
  13. ok. Better than the IIYama, but not as good as the Samsung*. There was no overlay on HDMI, the wireless is optional, and there is no way of moving the IR sensor. Sound was good, display was reasonable, touch was good. We aren't really using the onboard software which I think is what @christhetech is referring to with the intuitiveness of the $$$$Geeneeworld displays - I'm only really looking at the hardware. * There are some firmware issues with the current model that they are working on.
  14. That's £500 more per using than the 65" 4K IIyama or BenQ. What makes these screens £500 better ?
  15. Yes you would have to take the backup retention into account in the policy.
  16. If your email retention policy is short, the problem is solved.
  17. I'll still need SQL for our Web server, Library system and for Google App Maker. I can't see any way around these apps at the moment so Cloud SQL is a good fit for us. I think we could drop Active Directory and Windows fairly easily, but when a lot of web based apps require SQL it;s a bit harder.
  18. Sorry I hijacked talking about my current hybrid solution.
  19. 2000 users. It's part of a longer term strategy. Ultimately we won't need to buy new servers so yes it will save, but I need to move more things across before it is cost effective.
  20. The database is and extension of the LAN, but clearly the webserver is accessible from elsewhere - the same as we previously did in school: Before we moved it, the webserver was in an internet accessible DMZ and would talk to a database on the internal LAN - a pretty common setup. Now the webserver is hosted in the cloud and talks to a load balancer/failover on in the internal cloud. The load balancer then talks to the database servers (high availablility,failover) on the internal cloud. So it's a pretty similar setup to how you would do LAN servers now, except all the patching/security is managed by google.
  21. Via a proxy load balancer, behind a firewall, With no external access. There is no way to access it externally, unless I want to do that - I'd have to go out of my way to have it externally accessed - much like an internal LAN and it's really not that much different from an internal LAN in that respect. There are a lot of things wrong with cloud, but respectfully, I think you are barking up the wrong tree here.
  22. You'll find you swap one problem set for a problem set a tiny fraction of the size. We moved from Exchange to gmail 9 years ago. I've not replaced a single power supply, disk or server in that time. I've not needed to increase capacity, power it down or call in a warranty. I've not needed to patch it or upgrade it. I've not even needed to pay for it. User training is simplified as people use gmail at home. Moving off Exchange is really a no brainer for schools. At least it was nearly a decade ago. I'm struggling to think how you got this idea because I've recently setup a cloud SQL service in Google. When I did it a few weeks ago it would only allow login with a security key. You would have to go out of your way to set a password. It won't allow connection from any old ip address - you have to explicitly configure this, it automatically chose a hardened distribution, it automatically configures security updates (pre tested so I don't have to) and it automatically chose the most sensible environment defaults. Could you explain how you found it easier to misconfigure compared to doing it all by yourself?
  23. It's laughable how ssh has been on mac,linux and other unixes for the last 20 years. I always thought it was down to the licensing which meant microsoft couldn't put it into windows given how useful ssh is ! I guess they are focusing on developers a bit more now, but does anyone have any ideas why they neglected this for so long ?
  24. The people who are doing themselves out of jobs are *always* those that don't move with the times. I've now got loads of experience with running failover services in the cloud and redundant connections. Next I'm learning Kubernetes to get some better value. Meanwhile the died in the wool Windows Admins will be getting their redundancy emails or retraining to change toner cartridges.
×
×
  • Create New...