BKGarry

Thanks at XiJ I found their RAG lists yesterday, very very useful

Thank you @robyholmes I am slowly building a big check list

Hello all, It is that time again where I am looking at our internet supply. We currently use the LEA which are charging quite a bit for a 300mbps connection with firewall and filtering. I seem to remember back in the day there was a nice list of things to check with internet suppliers and filtering, to make sure that it covers x, y and z. One thing I will be looking at it splitting getting filtering and internet from the same supplier, to see if that works out more cost effective. I have gone to Exa, BT, the local Authority and Stone at the moment, and prices are definitely looking like we will move away from the LEA. Does anyone remember the list, or have a list of requirements they have used to check filtering systems against, so that we make sure we get the correct functionality, as I do believe just URL and DNS filtering isn't considered good enough anymore but I may be wrong there. Looking forward to all the input

Was there not an update a few years ago which caused the windows update service to hog all the RAM? It could also be that the previous tech just had enough of people complaining about updates

we have openboard https://openboard.ch/index.en.html. Although most people use the touch tools built into windows/office now

I will get that booked soon :-)

We do the same, it is all on it's own VLAN

By server I meant subdomain. Oops

I do believe each server you can put /a/emaildomain Such as classroom.google.com/a/theoretical.lea.sch.uk and it will have thay at the end We do this with our links to drive and classroom (we don't use gmail, we use office 365 for email)

OK, a little more information, instructions here to deploy the Client Computer Certificate through Group Policy https://forsenergy.com/en-us/radius/html/9d3f798f-0854-4602-adce-0b888e8c00ef.htm Settings for RADIUS: Wireless Settings in Group Policy:

Hello @neonetman This is done through certificate authentication on the RADIUS server, it will be the same RADIUS server (I am assuming you using a Windows NPS Server) You will need a Certificate Authority to deploy Computer Certificates through Group Policy and setup the Rules on the RADIUS server. Hopefully this will push you in the right direction for getting the answers

Does that also mean that you are "THE LAW" Sorry couldn't resit. Can we all agree that different scenarios lead for different implementations. All our establishments run differently, this means that we have people who would switch without any issues, but we still have those people that we have to switch the plug on for, which is just going to drive them further away from using something that will truly help them. This is going to be the same argument as completely serverless schools, and what is better G Suite or Office 365. You cannot compare everything like for like. Each point here is perfectly fine and valid but please let's not become 60s-80s USA v USSR over this

sounds good to me :-)

Ah stupid thought, did windows 7 have the Automatic Detect Proxy Settings turned off by default and windows 10 has switched it on, and that is why you have not seen it before.

Sorry typing on the phone, so everything is very short. I would say it is proxy issue causing it, but the exact one is a mystery. You can turn automatically detect off in group policies. With us it is turned off because our filtering uses a bit of client software to do it rather than a traditional proxy

It get's a little confusing, In all likeliness you will have a Proxy Server run by your internet provider for your filtering. This is usually what will cause the internet to be filtered. The Certificates are to do with that and HTTPS google and stuff, I wouldn't worry to much. Now there a possibility that http://clienttemplates.content.office.net/ is being blocked, it will not render properly in a browser, but I would see if you can open it or if it is blocked.

That is very strange, as the behaviour you are describing (where you are having to remove Automatically Detect Proxy Settings) is that there was a proxy setting somewhere. Without specific knowledge of your Proxy/web filtering, I would not be able to tell you the exact instructions on what needs editing. What I would say is you could change GPO to deploy settings with the Automatically Detect Proxy settings unticked but, and I cannot stress this enough, I do not know what effect this will have on your internet filtering

Wasn;t your windows 10 installation done by the MAT? It may be they are best ones to say what I said to, as they would know the location of the file

It sounds like you have a proxy PAC or WPAD file setup for you when you went to windows 10. I am guessing that this had a Man in the Middle certificate for web filtering, and as such, that is probably what is stopping your templates from loading. In the file for the proxy settings, an exception would need to be put in place for the location of the Office templates so that it does not try to filter them through the MiM cert. I hope that makes sense.

As with a lot of people here, we just do not have the time available to implement open source systems everywhere we would like, we cannot get the cost returns as quickly as what would be needed for extra staff. In the current age where every bit of money spent in school is highly scrutinised (we are NOT an academy) staffing is one of the highest ones. As much as I would like to run my entire network on The Linux for Schools project (formerly Karoshi) it is never going to happen. The cost implications on retraining everyone (Tech, Admin, Support, Teaching, etc) and moving the MIS alone is going to far outweigh what we are paying in some Microsoft Licensing and some other costs. There are different horses for different courses here and not everything that can be run open source should and visa versa, it is down to the individual needs of each establishment and just because we can doesn't mean we should

I am good from the 20th December :-)

Salamander does what you need. I have it setup to do this for year groups, subjects etc (anything that can be pulled out SIMS). For of a Student, we used to use Mailfinder, but that seems to have disappeared, we now Use the messaging tool in Edulink One for this, which works really well, and allows parents to easily communicate with their Child's teachers as well, without "guessing" email addresses.

Oh wise and wonderful edugeekers, time to utilise the hive mind here. We have been using Bluesky Education for the past couple of years for Performance Management of both Support Staff and Teaching Staff. From a support staff point of view I find it clunky and forced, but that isn't important right now. I have been asked to look at alternatives, that are hopefully cheaper (and I don't actually know how much Bluesky is right now, as it doesn't come out of my budget) I am yet to get a definitive list of what it needs to actually do, as I really do not have a clue about the Teacher Performance Management process at the moment (waiting for a meeting on that one). So the long and the short of it, does your school use any software for performance management, if so, which one? This is so I can compile a list to look at and start offering alternatives to the Leadership Team here. Thank you all in advance. BKGarry

We allow any device for Sixth Form and staff, the student connects to the BYOD and then puts in their AD username and password. On Android they have to tell it to ignore the self published certificate. Our wireless authentication is then setup to pass the details through to our Web Filter (Lightspeed) for the accounting details, so that is reported as it should be as well. As we use Unifi for our wireless we can see the name of the device there, and if it is causing issues, we can set it on the Unifi Software controller to be blocked

We have a RADIUS Rule for a BYOD SSID that is set to authenticate against certain AD Groups. As long as the user is in one of those groups they can connect. This is done on the Microsoft NPS server