Chaniel

OK - but if you set the BIOS settings correctly on a student/staff machine, they can't do that... they don't tend to carry around their own machines. With MDT, you can get it to require a password on start by removing the settings in bootstrap.ini, it'll then prompt for login details to access where the MDT content is stored. See here: https://social.technet.microsoft.com/Forums/en-US/09911b92-86d4-4217-9c6e-8d73437bc668/how-to-require-an-administrator-password-to-allow-mdt-deployment-to-start?forum=mdt With SCCM, you can have it so your WinPE image requires a password before you can do anything. If you are concerned about the fact that someone could in theory plug an unsecured laptop into your network and PXE boot, you're looking at this from the wrong viewpoint, that isn't a PXE boot/MDT issue, that's a network security issue and would be better off using VLANs (where PXE is restricted to certain ones) or port security, but that's usually a bit extra for a school network.

Yep - provides an easy way to export the information if necessary (e.g. 3rd party service that links in with Bromcom), shows to parents on the parent apps etc.

We've also had it where if they click to accept the invite but are signed into another Google account, it just auto accepts it as that address. If you go into the Classroom admin, do you still see their email with (invited) next to their name? That means the invite hasn't been accepted, if the (invited) bit is missing, it means it's been accepted. If we have issues, we ask the parent to make sure they're signed out of all Google accounts or open their email via an icognito/private window, getting them to sign out of all Google accounts seems to be easier for most parents to understand though. Incognito is one of those trigger words that sparks the "I'm not good with computers" spiel!

If it's wired correctly, it'd work fine for 100Mbps traffic, you only need 4 pins for that. @SteveB_NI - Unscrew the RJ11 port from the wall and check what the cabling is like at the rear. If they've used Cat5e then just remove the RJ11 port and install an RJ45 port and ensure it's punched down correctly on the patch panel in the server room.

I've said this before so I'm just going to copy paste that bit below, we've also had it where we've sent a PO for some work and been told they'll get it booked in... and then have to continually chase to get a response. Useless. We use Civica (used to be Nationwide Retail Systems). I cannot recommend them. The software works, but everything costs an arm and a leg. Need to install the software to manage the system on a new PC? That'll be £300 please, and no we won't give you the software to install yourself. Need a new till? That'll be a billion pounds and you need to pay for a engineer to come onsite to turn it on and confirm it works (aka change a few registry settings).

This is already a reality in a lot of environments though. You can have multiple authentication methods (App on a work phone, physical key such as a Yubikey), simple to set up and simple to use. I've been using a Yubikey + PIN for a little while now to test, no issues really.

Gotta ask, did you get these for free from the DfE and are now selling them on?

{2 Digit Intake Year}{First 4 of Legal Surname}{First 1 of Legal Forename}{Unique Number} That Unique number will usually be just "1" and it gets incremented if there are duplicates. E.g. John and Jane Smith will be 21SmitJ1 and 21SmitJ2 respectively. Hyphens or apostrophes are removed from usernames.

I didn't ever get a proper fix - we migrated from Offline Files to Work Folders instead. Have had no issues like this with work folders

If I ever get hassle deleting a folder/file, I just use robocopy to delete it. Make an empty folder (e.g. C:\empty) Robocopy c:\empty /mir /L The /L switch will list what will happen (Basically a WhatIf) without doing any harm. /MIR could really ruin your day if you entered a path wrong so I always verify first. After verifying you didn't type the path wrong, just run it again without the /L switch.

Sorry - What do you mean by HD LED?

Honestly, if you aren't going to invest in a sync software like Salamander, you need to be using GAM. Google even has a support article that references it (https://support.google.com/a/answer/10014088?hl=en). Doing it manually or "The google way" is just a waste of time. Students can just leave classes if they want to, you'd then have to manually invite them back again and hope they accept the invite (unlikely). With GAM/Sync solutions, they just get added. If they leave, they re-added when it next syncs, very straightforward. TA needs to be added to all the classes of a certain student? That's one line with GAM. If student names aren't quite right in Google, do you use AD? If so, set up Google Cloud Directory Sync to synchronise your AD and Google environments, that will keep names, emails etc. all up to date. GC Password sync for making sure passwords stay synced. EDIT: You shouldn't be moving students around in OUs for this really. You just archive the old academic years classes and make new ones for the new academic year.

Bottom row, third from the left. It says "USB" but it's Mini-DisplayPort, right? Edit: And "ADAT" is TOSLINK?

I can't help you with Wonde but we have been usingSalamander for our sync to Google Classroom and other bits (Office 365, Outlook etc.) for about 4 years now. Their support has always been good for me and with some sync issues at the start of term (aka running it before term started...), they remoted on and sorted within a few hours. Think the longest I've had to wait is about a day. They've been very accommodating with adding extra workflows, like syncing reg groups/houses to GC, or making tweaks to remove certain class types etc. Cannot recommend them enough!

I had something similar - the old IT team added a load of superfluous stuff to the Default Domain Policy and I wasn't sure what was support to be the default. I duplicated the GPO and then used dcgpofix (https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dcgpofix) to recreate the default policy and went from there. Compared settings and added everything that was required into my own policy at top level (for domain wide stuff) or just straight up removed settings that weren't required anymore.

You'd give students access to a local administrator account? Even if another lockdown happens, that's a bad idea.

AppLocker policies perhaps? You should see events in Application & Service Logs\Microsoft\Windows\AppLocker. It might be something as simple as you have an AppLocker path rule allowing from the UNC path, but not from the drive letter? EDIT: Just saw your screenshot - Is the "interactive book" using Flash? Might be that 1607 still has flash installed whereas the more up to date ones have had the update that removes Flash.

How random are we talking? Does it cut out mid-lesson when actively using the computer? Is it after freezing and unfreezing? After a period of not being used (e.g. powerpoint left displayed, but not frozen)? How long are the HDMI cable runs? Are the projectors running in any sort of eco mode? Have you tried any sort of HDMI signal amplifier?

Yeah that's the same here on 20H2. "edgeupdate" and "edgeupdatem"

I think in the case of a basic disk, you're right. If the C drive is the 1st partition on the disk and the the D drive is the 2nd partition, you wouldn't be able to extend the C drive. In this case, I would add a new virtual disk, copy the contents of the D drive (We'll call this D-Old) using robocopy (or Veeam) to this new partition (We'll call this D-New) , switch drive letters about, ensure it all works and nothing is broken. You'd then have two virtual disks, one being your original with your C drive and D-Old, and one being a new disk with D-New. You could then delete the D-Old volume and just extend the C drive. ANOTHER ALTERNATIVE Convert the disk to a dynamic disk, you can then just extend the C Drive with no issue. NOTE - dynamic disks aren't supported by Veeam at all.

You said it's a VM - I'd just expand the disk. Turn the VM off, go into settings, edit the disk > expand > add X amount of GB to size. Turn VM on, login, go to Disk Management, right click your C: drive and Extend Volume Sorted.

Yeah, my opinion is that if you're expecting them to work at home, you have to provide the kit. The most cost effective way to get them working from home is a decent laptop with a VPN for secure remote access.

Just had a thought (danger!), you could change the URL to your RDS Change password setup (if you use RDS). For example, "https://remote.school.org/RDweb/Pages/en-GB/password.aspx". Shouldn't make things any less secure? If you change your password via RDS, it'll update in AD and then sync to Google via Password Sync.

We use generic logins (Supply01, Supply02 etc.), the cover team can then assign those to specific cover staff and know who is where, email the right person etc. Short term supply staff get very limited access, essentially the same as a student account, coverwork is put into a folder for them to access which is mapped as a drive. Long term supplies will get a proper account set up like a normal member of staff.

Definitely looks corrupted, you might have some luck with a file recovery program like Recuva but from experience, I doubt it'll work. From what I remember, the .spotlight folder on Mac's is created whenever any drive (USB or otherwise) is plugged into a Mac, it'll store index info about the files on the disk to make searching faster, things like file sizes, types, creation dates etc. The actual files won't be in that folder.