Chaniel

At work: Logitech MK330 (just the keyboard) Logitech MX Master At home: Steelseries Apex 100 Logitech MX518 (That I've had since like 2008, not the recent remake)

Having your internal and external domain name the same will mean you have split DNS. This is why the current best practice is to use "ad.mat.co.uk" rather than "mat.co.uk". It's not that much work to configure, but it's an extra bit of administration that isn't really necessary if you're starting from scratch. To try to make an example; 1) Computer on your domain tries to access http://www.mat.co.uk, it queries one of your DCs for the IP address 2) Your DC has a lookup zone for mat.co.uk (as it's the AD domain) so it looks for the host www 3) Can't find the host www - returns "not found" 4) Computer doesn't load the website To get around that, you'd have to make a record in your DNS zone for www and point it to the websites IP address manually

We moved from MLS Eclipse.NET to Access-it. We did look at Libresoft and it's a very good alternative, our Librarian just preferred Access-it.

It should still bypass their spam inbox if you create that bypass. If it isn't, then it's because their DMARC is failing and that is down to them unfortunately. Google's article says -

https://support.google.com/a/answer/2368132?hl=en#zippy=%2Cadd-a-list-of-approved-senders-that-bypass-spam-filters Pretty sure that will do what you want it to. Add "mail.ed.gs" to the domain list of approved senders. From anaylsing the header on MX Toolbox - looks like their IP is on a/some spam blacklists and the DMARC is failing which is why it's hitting the spam inbox.

I've been using an Archer A7 router with a Huawei HG612 modem for a little over a year now and haven't had any issues (unlike when I was using the Plusnet router). Something else you can try is flashing OpenWRT onto your VR200 to see if that improves its reliability at all - https://openwrt.org/toh/tp-link/vr200v - bit of a faff though.

Room size should factor into it as an underpowered unit in a large room is going to struggle. A £7.5K quote seems pretty high but might not be for 2 units if it's something pretty robust, we had one of our air con units fail and the replacement cost about £2.5-3K (not 100%, site team deals with air con!) I'd go back and ask what they've quoted for and why, and then get 2 other quotes from other local companies to compare. Hope this isn't coming out of your budget

For anyone who hasn't gone to the link to download the template spreadsheet, you can download that here: https://organisations.test-for-coronavirus.service.gov.uk/static/Register-organisation-test-LFT-PCR-template.xlsx I find it interesting that it says in the instructions - "Do not copy and paste email address or mobile numbers into the spreadsheet. This may cause the upload to fail. Instead, you need to type the information into the boxes." I wonder if having your data sanitised correctly beforehand (to remove things like random spaces before/after an email, making sure the number is in the correct format) and then pasting as plain text would be fine. Manually typing emails & numbers is just asking for errors.

Amazing - that'll make the mass testing on March 8th a lot easier!

Definitely enable it, we don't really see any issues and have been running dedup for like 4 years or so. If you want to do any file-level restores with Veeam from a backup that has dedup enabled, the Veaam Console must be installed on a machine that has deduplication enabled as well. If you make any large data deletions, you won't see the space free up immediately. You'll need to start a dedup job (powershell) to force a garbage collection task, or just wait until it does a scheduled one.

Windows Defender (Pihole and uBlock Origin to block ads) and sensible internet usage KeePass for my password manager. I keep the file in my Google Drive (2F) and use KeePass2Android when I need to use it on my phone.

No worries, glad you could understand what I was talking about. Just read my post back and it's not the clearest, must've been writing that in between tasks haha

We deploy Adobe CS6 using SCCM. I vaguely remember it being a pain to get working until I learnt it relied on Adobe Acrobat being installed first and then the full suite would install correctly. Copy over your customised install created from AAMEE to your SCCM Repo, if CS5.5 is anything like CS6 then it should be a few folders (Build & Exception). In "Exceptions\AcrobatProfessional" I created a batch file with the following msiexec.exe /i AcroPro.msi EULA_ACCEPT=NO REGISTRATION_SUPPRESS=YES SUITEMODE=1 INSTALLLEVEL=101 AS_DISABLE_LEGACY_COLOR=1 IGNOREAAM=1 TRANSFORMS=en_GB.mst /qn msiexec.exe /p AcrobatUpd1011.msp /qn msiexec.exe /p AcrobatUpd10116.msp /qn I then created an Application in SCCM with a script installer that called this batch file After that, I created an application to install the rest of the software which is just an MSI Installer on the MSI that you made using AAMEE. Add a dependency of this install of the Adobe Acrobat application and set to automatically install.

I lied, I can help with Google. Disabling forwarding: https://support.google.com/a/answer/2491924?hl=en To find all users with forwarding rules, pretty sure you have to use GAM (https://github.com/jay0lee/GAM) gam all users print forwardingaddresses todrive Hope that helps!

Can't really help with gmail but for MS365 Firstly, make a transport rule to disable forwarding rules. You don't want people (or malicious actors) to be able to set forwarding rules to send to external addresses. MS 365 Admin > Exchange Admin Centre > Mail Flow > Rules > New Rule Apply if: Sender is located inside the organisation And the recipient is located Outside the organisation and The message type is Auto-forward Reject the message with the explanation 'Client forwarding rules to external domains are not permitted' Save that. To get a report of any auto-forward rules, you'll want to use Powershell. This was part of the "Secure Score" section of the admin centre but I can't seem to find that anymore... https://gcits.com/knowledge-base/find-inbox-rules-forward-mail-externally-office-365-powershell/

Interesting, it's my understanding based on this that those settings should control it (and in my testing, those settings work). If you make a Class with your school Google account and then sign into GC in an incognito window on a personal google account - can you actually join the class via the class code? You can also try inviting a personal google account as a student to your Class, as this should also be denied.

I can't actually speak for primaries, but one thing that might be useful to know is that Chromebooks can run Android apps now. This can make having a touchscreen/2-in-1 a bonus as your daughter could use it for other educational apps, rather than just as a laptop.

Google Admin Console > Apps > Google Workspace > Google Classroom > Class Settings Change "Who can join classes in your domain" to "Users in your domain only" and "Which classes can users in your domain join" to "Classes in your domain only" If you set the above settings, an external user should get this message when trying to join via Class code: The code looks correct, but your account can't access this class. Switch to the correct account etc. etc.

For sports, definitely feels rough to watch. For cooking? Not bad at all. Kenji does almost all of his cooking videos using a head mounted go pro and because there isn't a lot of rapid movement it works absolutely fine.

We use Google Cloud Directory Sync to make our users in G Suite which gets all the data from AD, rather than SIMS. In AD, we have "extensionAttribute1" set to be the users first initial. In the GCDS setup, we then sync "GivenName" based on "extensionAttribute1" rather than their AD Forename. This way we can have full names in AD, but sync only show their initial in G Suite. All fairly pointless though, our email addresses are [email protected]

Definitely suitable. I always used to be on the Intel bandwagon but the AMD Ryzen chips are incredibly good for value, performance and power usage. Would definitely prefer to have (current gen) laptops with AMD procs vs Intel procs. (I might be biased as I've just upgraded from an i5-7600K to a Ryzen 5 5600X in my home PC...)

Some computers have audio enhancements on the microphone, have you tried checking that and disabling anything? We had major issues with microphones on some older laptops before disabling this Right click Volume Icon > Sounds > Recording > Properties on Mic > (here is where it differs per mic) > Advanced tab > Disable sound enhancements OR perhaps Enhancements tab > Disable all sound effects Possible screw up with noise cancellation in Google meet too (if enabled?). https://support.google.com/meet/answer/9919960?co=GENIE.Platform%3DDesktop&hl=en&oco=0

Does anyone have any way to find what is set as "Available Offline" using Google Drive File Stream? Got one user who's laptop is filling up constantly, DriveFS Cache is using 40GB or so (despite the registry key setting the ContentCacheMaxKbytes to 10000). Having a look through her G Drive, she had a few folders marked as a available offline which I've marked as online only, but still a load of space being used. What I then found, is that available offline is done at a file level so you need to go into each folder, mark everything as online only, repeat. Any way of quickly finding what is set as Available Offline, or making all as online only?

You're on the latest, it's January, it's not spring yet

Yeah, that's my thinking. Keep it simple for the test centre and then the lite registration can be done from home, in offices etc depending on staff availability.