leegcvcc

Only by their request, surely?

Fair point, although apparently the majority just email Personnel with any changes! As for the form, I have a 365 rule set that if the subject line contains a keyword "" then encryption is forced. This tag is included in the forms email subject field with the other variables. I'd forgotten about that. In terms of Electronic Pay Slips, I doubt that fields for car registration is included unless there are custom fields available for such stuff? Possibly depends on the system used

Do you have wordpress anywhere? Contact forms plugin is what I used, had to secure it though with SSL obviously. I think we are now going to the full SIMS Parent App but unsure what staff will do as I think they are just left to update the details with Personnel when they change. I might do a form on Wordpress for staff if it's deemed necessary.

Yes, I do this in a AAD connect sync environment. You need a mail-enabled security group > assign the people you want to receive the emails > set a mail flow rule in 365 that sends the emails to the hosted quarantine that includes words in the sender address of "twitter.com" for example, > then do an exception which includes a member of any groups in the To box named Hope that helps edit: i did separate rules for various emails as some can have twitter but not facebook for example

The best way in the long run is to have a domain Certificate Authority and request a Self-signed certificate for the intranet server. You can then distribute the CA cert to clients via GPO and that will trust the self signed cert from this web server and also can be used for other certs. Loads of stuff on google about certificate authorities and self signing... or a wild card 3rd party cert of course edit: I have recommended the CA and self signing as it's an "intranet" - but if you will give the users external access to the intranet then the 3rd party cert is by far more beneficial for you and everyone else.

an NPS restart?

not enough licenses? (if they are licensed)

regardless of anything else, i'd certainly provision another DC

I think we should code the parent's names too and be done with it

I think that this type of policy is suited to information regarding a student or staff member sent out externally. There are much less cases where this is prudent and can be used in cases such as child protection, safeguarding, with various agencies etc. They will usually be corresponding about a select number of people who are all connected to the topic, so the people reading these emails know 'who is who' quickly and easily and satisfies some data security no doubt, even if there systems are not GDPR compliant :-) Doing this is a work environment would be a nightmare for all and is totally unnecessary in most cases, but there will be a few, and we do it here in some cases, but they are far from the norm and specialist cases.

thanks, some good ones there. I suppose this also comes down to how granular you want to get, who would maintain it and how much time it takes to keep it up to date!

Not meaning to hijack this post, but i will It may sway decisions made or make us think about other features that the suppliers offer maybe? Does anyone use the features in anger? Particularly Net Support Notify. what other uses do you use for the alert system? Reluctant to spend this money on a system, just in case there is a lock-down, bomb alert for example. I know it's like insurance, but it would be great to use it for other things that are useful

I will rather chew both my arms and legs off risking infection rather than having to deal with our BT local business again. This will be our second spell with a BT leased line, and whilst the line hasn't gone down once in 3 years (touch wood) dealing with them has been painful and so time consuming, it makes you consider moving elsewhere, just to avoid the pain. but the line is great

hmmm....Did they mention a price to have a useful safe line for schools or business use???

Is it a BT Leased Business line? I thought the service would have covered all of that...

Do you have a RDS server that they can use for work purposes? Can be all contained within there. Just a thought

I think I am going down the route of whatever benefits us, with minimal work but ensuring compliance. It seems a 'blame game' so as long as we can't be blamed for any breach or non-compliance, that'll do for me. There are so many different variables in terms of what people hold and supply, I think it is going to be a case of treating them individually depending on services. Have just sent one out and had it returned and signed for a residential week, but having gone through their Privacy notices etc that they kindly sent! we were happy with their compliance anyway, but it's now recorded and good to go. We use GDPRis and apparently suppliers have been slow to provide their Contracts to them, so we have to do it ourselves until they get on with it. Once they do sort it out, we should be covered with all the suppliers on their that we use. The issue I have is when and who should send the contracts out. A staff member will organise a trip and if the company's data protection policies don't match our expectations we shouldn't use them. BUt they may have ordered it all by then. Just need to suss out timings really. Has anyone sussed it?

great discussion, thanks all. Decided to pimp one from a LA site along with some help from @djrscally Another job in progress.....

thanks @mrbios. What happens if your users have quotas set on their on-premise home drive (500mb), and then uploads a file to OneDrive (50gb) that puts them over the home folder quota? Does it deny the user the upload with any sort of message? I'm thinking of the scenario where OneDrive accepts the upload then fails to sync to the on-premise home drive without anyone knowing it's not fully synced. Cheers

Hi All, appreciate this has been done to death with a lot of basic questions and protocols, but I've searched and cannot find the answer. I thought we had to have a Data Sharing agreement with suppliers/processors, which to me is a signed agreement with both parties signing it. Staff have been emailing suppliers/processors DPO asking for their agreement form and they are just getting sent their Privacy Notices and GDPR policies etc. Is this enough? Should I be creating a form? Why should I be doing it and not the processors? Appreciate any help, and if anyone has an agreement done, any chance of sharing it? Many thanks

@foofighterjim - why is it such a culture shock? Is it better from what you've seen? I have 4 instances of Spiceworks running here and always looking for better free helpdesks... not found one yet though

ah ok. Thought you had actual performance targets to hit, as in a defined number of repairs a day etc :-) I am going to start a thread on what IT depts. actually do these days. It must have moved on from previous threads! (when I get time!)

@psydii targets? What sort of targets?

Just been thinking about this, and each school is so different...we know that. Interesting read the various staffing levels and tech numbers. Here it's 1 x NM FT, 1 x senior tech FT, 1 x tech (Pro Rata +10 days) in a school that's 900 students, 130 staff The key is what you actually do. IT do, CCTV implementation and monitoring and requests, electronic door swipe card creation and support. All projectors, whiteboards etc. A bit part of it is 150 staff laptops where all staff have admin rights to the laptops for ease of use. Hard to keep updated and hard to make changes unless machine based GPP for example. This is a real time sapper. Can't believe some are running bigger networks with less people, so it really comes down to what the IT dept do a lot of the time. Seems to be more shozzle coming our way that's not really IT but because it involves a computer... must be us!

Is there not a difference between using "Protect" from OWA and using a Rule to Encrypt? I get different messages so assume there is. Maybe that's the issue?