Tones

We keep all the staff photos imported into SIMs in HR so I went ahead and got a list of all the ones that were too big so I could check them after we got our test site from Bromcom. They were all correct, didn't need to change anything. What it did impact was uploading new ones as they force the file limit on those. So I think you can just see what happens because I didn't have to do any :-) *Edit Just to say I also confirmed that the file sizes in SIMs were larger than 200 kb by using the Salamander tool to extract all the photos.

I've started the installation with Salamander btw. It's nicely customised to our domain specs and they flexibly added in a new custom attribute with a UDF for me as I wanted the ability to create an account for future starters by ticking a box on MIS earlier than their start date. So far so good, I'd take a look @ITGuyNW don't write it off.

Any advice for best practice on the setup of OUs or something you'd like to change? :-)

Yeah, they recommended I use GCDS instead of their own internal sync tool also. Do your AD and Google OUs match? I'd like to avoid going through all the settings applied to the OUs on Google if I can.

Going to Bromcom if that changes anything. Salamandersoft is low cost and certainly worth it from what I can tell, I'm just trying to figure out any potential issues with on-prem to gcds in an existing deployment before I move over :-)

I don't think I'll be able to do it. I created the PowerShell script and tasks to automate AD creation based on SIMs and rules but not a clue how to use an API to get the data so thought I'd just purchase the software that can do that for me. Would be helpful for those that take over from me also in doing this as it requires less knowledge really. Is this something you guys have done instead of buying software then?

We're Google but principles are the same. We allocate each Governor an account (naming scheme "gov.surname.firstname@"), after they complete the NCSC cyber training for school staff. They have limited access but are allowed gmail (with no contact list) and enforced 2-step verification. They can only access a single Google shared drive which is also shared with SLT, Clark, and Trustees so they can all collaborate submit/read papers electronically.

Hey all, Moving to a new MIS presents a syncing issue for us as we currently automate account creation based on scripts to our on-premise AD however aren't able to continue this with a cloud MIS. Has anyone recently swapped over to Salamandersoft's Integration Suite after changing MIS or swapped from another sync partner to them? Also anyone using Google Cloud Directory Sync if you had to change your AD/Google OUs and naming conventions? Any pitfalls or advice would be appreciated on a smooth transition. Regards, Tones

I sent you a PM with what our password was at the time. They were done in batches as noted by TheRobins so may not be the same.

I find the Arts and PE facultys dept take a lot of storage. Now we're on Google Workspace it's not a problem as they have shared drives dedicated to this. I think you'll find it difficult trying to regulate file types and sizes as a lot of videos are taken by the students at clubs outside of school for PE. And typically the students who take that subject isn't going to be as technical. It you're deadset against fixing them down I think take a look at the spec of submission and go from that. Probably is 720p MP4. Then get equipment that can be loaned out that's preset up.

When we replaced our DT machines with new ones and we tested GPUs vs onboard and didn't find much difference using SFFs and GT1030s so we didn't use them in the end. If you were using AutoCAD or something then I think you would need them but Fusion doesn't utilise them that well from what I could see.

I was a pilot school for CE and never re-certified. I'm happy with just using the RPA insurance instead of having the commercial insurance CE gets you. FYI the insurance provider with RPA is: https://cyberclan.com/gb/ I check the questions still to make sure we stay updated and I know we'd fail as cloud is in scope and we don't restrict using context aware tools older systems from being able to access Google Workspace.

A little late to this one sorry. I'm using Synology on prem which also serves as an offline share should we lose the Internet (read only mapped via GPO in disaster scenario I just turn on the links). This backup is also rotated onto USB drives connected so we have an archive copy of the data (encrypted). My online backup is split; A Google Cloud Compute server running CubeBackup pointing to Backblaze (50TB). This costs $2 per user licence per year £3.5k for Backblaze and approx £8 per day cloud services. The first upload will cost you, I think my first month was around £800 as I had 6TB to backup from Google. Cube does have a self service portal if you want to install it. I'm also using Redstor mapped to the Synology to backup crucial data such as HR drives (SCR). I think this might be the cheapest option; Backblaze is set to immutable buckets. Redstor can't be overwritten and I have rotating termly archives.

Already covered for us. All the points mentioned are covered by the AHT and DHT for T&L - I figured that was standard? No specific governor link role as it's not stutatory however the plan goes to Resources each year.

Only IT can create shared drives and set permissions for them. Drives labeled with prefixes Staff / Student / External. The drives starting with External allow sharing outside of the domain or to whitelisted domains depending on content. So we allow external sharing only on specific drives created for the purpose required. E.g. large media file sharing, y11 bridge sites, shares with local schools. This mitigates accidental breaches, never had an issue.

I used sconfig and setup the remote options in there and you can add specific users you want to manage the host here. These are the commands I used after sconfig: Enable-WSManCredSSP -Role Server Enable-PSRemoting Set-NetFirewallRule -DisplayGroup "File And Printer Sharing" -Enabled True -Profile Domain Specifically the last one allows c$ share access. As PotNoodleTech asked - is it on the domain? Does the user you're using have access?

If you're going with a Synology unit for the Google Backup note that you'll need the rack intel Xeon for processing if you're going for users not just shares. If you do this, you can also put Docker on it and install PaperCut that way instead.

Given the new RPA DfE requirement of "offline backups" I decided to not go with the Synology NAS for our Google Backup. I'm using Spinbackup which is hosted elsewhere, immutable, no backups can be deleted, retention and data centre all set by you etc. It was so ridiculously easy to setup and get going. It's user licenced so I got 250 licences and only going for shared drives and teachers. Made a deal on price and got extra storage to equate for how large our workspace storage is (12.5 TB atm)

We're Cyber Essentials approved. Went through the extended trial. Cloud was not in the original scope but now is so wasn't much of a consideration however I tried to implement as much as I could for next year already. We're a Google school and using 2-step successfully for all staff. We purchased Yubikeys @ £26 per key, they can be reset and reused. No need to carry a mobile around the school. However you'll see some Apps start requiring authentication codes anyway (CPOMs for one). Google don't have the option of IP geo locations unfortunately but I've heard some people purchase Azure and connect that to Google in order to get conditional access applied. I think the idea of only conditional access isn't a good option by itself, if an account is compromised and remote access is available in some way then game over. MFA is required to secure data online and against insider threats.

Confirming this is a real form - OP's URL matches the one we were sent by the CMA.

Thanks for taking the time to break down what you meant, that sounds like a good solution if they didn't have their own printer as PaperCuts work around (set default budget on printer to disable Auth popups) wouldn't be a good idea on an MFD. I'll keep that in mind if I ever have to move them to a shared printer.

SIMs is outputting correctly we can see that on the computer however the order is jumbled when it's actually printing; they wait for the queue to hit the number and tick the box for apply settings to each print with the account to charge. @MatthewL that sounds in-line with what our SIMs support company said; do you happen to know how/what you did for the change, I'm not sure I know how to do what you've described :-( *EDIT*For anyone else that has a similar issue here's the solution from PaperCut: https://www.papercut.com/kb/Main/BatchPrinting

Hello, We're having an issue where printing the tracking reports does not come out alphabetically - it mixes up the order of the prints. Our SIMs support suggest that this is an issue they're aware about and advise using local printers instead. Anyone using SIMs/PaperCut and having the same issue or have fixed it? Any ideas and help would be appreciated! Regards, Antony

Our offline ones finished at 11 apparently sent back up - the only issue we had was that extra time wasn't actually applied to the test like it should have been for one student.

That's fair paulkerton, there's a lot of them. :-) What's a reference school? You directly linked with Google? Edit: Nvm I googled it lol