DNM

Hi Guys, Thank you very much for your answers. Would the same apply for email system generated passwords and documents home to parents that contain student data. So for example we could use a US email server to send the information out? I will be reading all of the attachments that you all have provided. Kind Regards,

Hi All, This is going to be a quick question for someone out there that know alot about this. I can't find an straight forward answer to the question. Are we as Schools / Acdemies in the UK allowed to store Student / Parent Personal data outside of the EU? I'm going with No as the answer but I have been asked to try and find out the answer to the question. Is there a document that gives details of this? Kind Regards,

Hi Guys, We are looking at using Windows 10. We have been running a few test computers running Windows 10 Professional. We use a proxy server to monitor our students internet but have found if they go into Settings > Network and Internet they are able to select the proxy from the left hand menu and then disable the proxy server.Is there a way to prevent or gray out the 'switch' to disable the proxy settings? If anyone has any ideas or suggestions that would be excellent. Also posted on Microsoft TechNet link below; https://social.technet.microsoft.com/Forums/en-US/win10itprogeneral/thread/26e45860-2f42-4a0c-ba11-06b805b6824a/#26e45860-2f42-4a0c-ba11-06b805b6824a

Hi Guys, After a bit more digging around and a few checks, we have all the Authentication servers for O365 as Exceptions in our exception Policy. Both in IE and on the Smoothwall. We have the autodiscover of autodiscover-emeacenter.outlook.com which is a C record on our DNS with autodiscover.school.org. When we untick the proxy box Outlook 2016 is able to configure its self (finds the Autodiscover DNS and connects to the server) but when the proxy box isn't ticked it fails. I have raised this with Smoothwall but don't seam to be getting anywhere with them.

Do you install all of your Application before deploying the OS or after? If after how do you install them? (SCCM Push, GPO Application Install or Other App Deployment).

Hi snagrat, Yes I have tried with both Ticketed and Unticked hasn't made a difference.

We block all Social Media with a few exceptions; Facebook and Witter - Allowed for Media Technician and Head of Communications YouTube - Allowed for staff that have signed a form to say they take responsibility for any content they show in lessons and that they have screened the YouTube Video(s) for appropriateness for the age of student thy are showing it too. With all the monitoring for Extremism and Terrorist Activity that Schools and Businesses are have to do now I wouldn't recommended allowing and Social Media in a School of any age except for the staff that have signed their life's away, and have full HTTPS Inspection turned on logging their activity. I would suggest looking at Smoothwall UTM, WatchGuard or Sophos UTM, also maybe worth looking at DrayTek routers as they have web filtering built in.

Hi Guys, We are using a smoothwall to filter our internet traffic for Staff and Students. We also use Office 365 for our email. We would like to allow our staff to use Outlook 2016 to Manage their email and Calendar. This all seams straight forward so fare... Well it doesn't seam to work.. Every time we try and run the connection setup wizard it take and age to find the email server settings (fails), then tries and unsecure connection (fails) but if we uncheck the 'use proxy box' in IE it works first time. Once outlook is configured, if you re-tick the proxy box Outlook continues to work perfectly with no issues. Has anyone else had the same issue? Does anyone know of a solution to fixing this issue. In our exceptions box we have the following; *.ourdomain.org;*.office365.com;autodiscover-emeacenter.outlook.com;odc.officeapps.live.com;proxy.ourdaomin.local Any constructive suggestion welcome.

Hhhuummm.... Well that is a useful feature then I will setup a test network to see if that works and I will post back shortly.

Hi Guys, I currently have a Ruckus Wireless Network installed in one of our Academies. I am trying to setup RAIDUS Authentication with our Windows RAIDUS Server. For some reason when I try to verify the settings with the built in tester I keep getting request timed out. Does anyone have any suggestions or an example configuration that might help resolve the issue. Kind Regards,

Hi Guys, Not sure if this is the right location for this post but I thought I would start here as its a 'How do I do it' section. We have a Sharp MX 2610N printer which has a User Pin (for Staff), This is a single pin number for all staff. We have setup the Default Printer Options to have be as follows; Under Job Handling we have set the Retention Printing and tick the User Pin box and Entered the Pin Number. When the users connect to the printer all settings except the pin number pull down to the user. Does anyone know how we can force the pin number to pull down to the users?

Hi, We are currently testing the Deployment in Hyper-V so not sure about UEFI but will check. The 3 Partitions are all still there I haven't deleted them. TheCrust - I am using the built in Capture Image process using a Bootable ISO image on a VM. I have Managed to download the Log File to one of our Servers so will upload it while I am looking through it later tonight.

Hi Guys, I am running a development Environment (before moving to my live system) with SCCM 2012R2 for OSD. We are using MDT to deploy Windows 8.1. After every deployment the computer is unable to boot saying it can't find the boot drive. We have a single Windows 8.1 Enterprise Image ready for install that we have captured. We have set the Task Sequence up to install the OS Image (2-2) onto Disk 0 partition 2. A few things that I have noticed: 1) In the OS Selection section of the OS Deployment it says 'Windows 7 RTM' is this correct? 2) If I try and apply the 1-1 image to Disk 0 Part 1 the Computer boots but it says there was an error and to run Start Up Repair (I haven't tried this as yet). Does anyone have any suggestion as to why this might be happening? Kind Regards,

Hi Guys, We have a bit of an issue currently were our students are saving Flash Games in our shared Documents Folder. We can't block .swf Files complete because some of the Resources are in .SWF Format, is there a way to block based on groups is the possible in Server 2008 R2 or 2012? I'm looking at restructuring the Student Shared Documents to have subject folders which are read-only for students and then have a Hand-In area where they are only able to write too (will have to drag files onto the folder to put them in) but block .SWF Files from being saved. I know I have most like answered by Own Question but thought maybe someone else might have a better solution. Kind Regards

Hi Guys, I have a question, and if there is no answer (or simple solution I may setup a database). Is there a freely Available List of words such as 'game, porn etc' and different Languages such as Russian, Arabic etc. We are finding that Students are now going home and finding these words and then using them to bypass our filtering to access games by searching Google. If there isn't a list or Web Site I will arrange for a online database to be created for Education with these filter URL's and Search Trims to be downnloaded and used by anyone. Kind Regards

Hi, I have managed to fix the Certificate part but now i have an issue with the Authentication Service. The issue for the SSL/TLS was a missing intermediate certificate for Rapid SSL. Once I installed the intermediate certificate the SSL error wwnt but a new error occoured, which i will post the error in the morning. Kind Regards,

Hi Guys, We are looking at using SchoolPod a MIS System from Teachers2Parents. I was wondering if there is anyone out there that is using this system and what their thoughts are on it?

Hi Guys, Not sure if this is in the right place... We have a Citrix XenApp server environment for our remote access. Our users have recently started seeing the 401 - Unauthenticated error after logging into the Citrix Access Gateway. I have been looking around on the internet and can't find a solution. Within Windows Event Viewer I am seeing the following error; Site path: C:\inetpub\wwwroot\Citrix\CAG. A communication error occurred while attempting to contact the Access Gateway authentication service at https://gateway.aatm...thService.asmx. Check that the authentication service is running. The message reported by the underlying platform was The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.. [unique Log ID: 7a3270ce] Does anyone have any idea as to what is going on and how I can go about fixing this issue? Kind Regards

Hi Guys, A new bit of information that I have fund out. On our wireless Network we were using AES Encryption if we change to TKIP the network start working Again. Is there something in a AES Policy that Expires or needs to be updated to ensure that the connection continue to work? This is across all our networks even the ones that use a Pre-Shared Key. Kind Regards

Hi There, I can't find any Certificates on the Laptops (which is strange) and here are some of the other errors that are showing up. *dot1xMsgTask: Oct 20 15:17:38.523: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:3136 Max EAP identity request retries (3) exceeded for client 44:6d:57:62:d9:dc *Dot1x_NW_MsgTask_0: Oct 20 15:17:37.544: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:3136 Max EAP identity request retries (3) exceeded for client c4:85:08:04:53:d0 *Dot1x_NW_MsgTask_0: Oct 20 15:17:37.543: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication Aboted for client c4:85:08:04:53:d0 *Dot1x_NW_MsgTask_7: Oct 20 15:17:34.566: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:3136 Max EAP identity request retries (3) exceeded for client 1c:3e:84:9b:8b:e7 *Dot1x_NW_MsgTask_7: Oct 20 15:17:34.566: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication Aboted for client 1c:3e:84:9b:8b:e7 I found this in the TrapLog AAA Authentication Failure for UserName:host/TL0840.Ashdown.internal User Type: WLAN USER

Hi Guys, I have a CISCO Wireless system which uses RAIDUS to authenticate computers. I am currently have issues were the computers are not connecting to the Wireless Network. There are no errors showing up on the RAIDUS Server and the Wireless Controller is able to pint the RAIDUS Server. Also the Wireless Controller is showing the following error; *Dot1x_NW_MsgTask_7: Oct 20 14:53:53.071: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:3136 Max EAP identity request retries (3) exceeded for client 1c:3e:84:9b:8b:e7. This is an example log which is repeated but for different MAK Addresses. Does anyone have any suggestion as to why this might be happening.