SwedishChef

@pcstru You make a very eloquent case if you were the one running the business, and can clearly see have an acumen on development/project and change control. I don't think you need educating but again the point of this thread isn't to make a business case or to justify why not to make one. It's to highlight something missing from a product from the point of protecting the students. Step back and think about where we are trying to do here. I also think there are enough replies to this thread to see that people have requested this. I do agree with you though some transparency on decision making from Capita might be beneficial.

@pcstru. I think you miss the point of the thread, whilst some of the points you make are valid. In a nutshell....Big company, large product, seen to be providing the users with a voice (change requests) and not listening or addressing the problem. Whilst still staying silent and only answering the "corporate tick box" questions. If it's 100's days worth of man hours......then so be it. If Capita had started when the problem was first raised.....they'd be finished by now.

Just barking, nothing else. :-)

woof woof

Hi @PhilNeal thanks for replying, I won't go into the views on the change request system, however I would address your "approach" to think capita don't need to audit staff access due to the fact that staff are "vetted". I think this approach is naive. The DBS check to vet staff will only flag up certain criteria and wont find "first time offenders" or ones who are breaking school policy but not the law. Neither is is a proactive approach (neither does it support a reactive approach!) I think the point regarding a canvas of senior leaders and that nearly 99% would think an audit trial on staff access is a good yes is very true..... btw these are the leaders who review the schools MIS, when looking for alternatives.

Thanks Phil, I would appreciate that. Case number 1602-3448972, although I'm not sure what can be done in this instance. On your comment I don't think the storage is the issue, there's cheap enough storage and SQL is more than capable of being scaleable. It's pure functionality. I'm sure it would be a massive task to implement given the size of the product, but I feel a given the market share capita has (which stems from the LEA days) a duty of care is needed and at the minute it fails this, maybe the government could help with funding the changes needed to safeguard the students ? (I'm sure it's a nice sentiment that would be laughed at)

Just had to call CapitaEs support, we have an urgent need to see what records in sims a user has accessed. (this may even escalate to local law enforcement) However I am told that the biggest educational MIS system in schools (SIMS) cannot log an audit trail of access, it only logs when a users logs in or out. -WHAT?! I'm then given some feeble reason that it is due to how large the product is and the storage requirements that it would generate. Modern systems can log 1000's of records in seconds,and there are a number of ways/mechanisms this can be done. even if sims just logged the area of sims they went into and what was typed in search bar etc. eg:Our school filtering system can log every access of the internet proves that high volume transaction records can be logged 100's per hour instead of 100's (there are other examples too) this reason is purely not good enough, and I suspect the real reason will be development costs versus marketable benefit. I'm baffled....well actually I'm not, I'd rather people were up-front. @PhilNeal - I'd really like your input on this. :-) Anyone else have an opinion on this ?

redraw! redraw! redraw! Thanks guys!

Yup we had this when we rolled out a custom build of IE, new user profiles had no proxy settings as the first initial branding overwrote the GPO settings, and as Chrome was set to follow it had no proxy. This is a handy info tool (same as listed above) chrome://net-internals/#proxy

Yes we have an EEES and also have SCCM, so I could use this an an endpoint.....what's the footprint like ? (unfortunately it doesn't come with a removal tool, when you deploy the client.....and I've lots of clients.) I could script it but I'm lazy (and it's unsupported)

I took a look on their forums, seemed to be a number of people reporting the same issue regarding crashing, domain login issues, I haven't looked in the last few days post Bett, but they seemed to still be looking at customers reporting the issues. I've just taken a look and I cant seven find the relevant threads....spooky......ahhh there they are...... Critical Problem in Eset Endpoint Antivirus 6.2.2033.0 and https://forum.eset.com/topic/4985-endpoint-6-causes-slow-domain-logon/ for example.... I don't want to write it off as these could be isolated instances, wanted to see who is using it fine here.

I've been looking at alternative solutions to our current Sophos solution (won't go into why), and I like the patch management of the Kaspersky product, although I've heard good things about ESET (and bad especially the new client and windows 10) Has anyone upgraded to the latest versions of these products and how have you found them from footprint (we have some v.old hardware) to usability.

Saw Shaun and Chris, but sorry didn't say hello to everyone as I'm not familiar with there names....just drink orders from nights out. ;-) (I did miss @vikpaw being there though!!)

Just arrived in the big smoke for tomorrows show. Is there a gathering of edugeeks tonight? If so where?

This was a brand new 3.10 install for us (from Solus2) if a workstation that ran the SCCM application deployment already had sims on it then it was marked as a sims client. For bare bones deployment I created an exe based on powershell that prompts for the computername it then uses the command line tool, to run PSEXEC and allocate sims to the target computer C:\Program Files\Solus3\DeploymentServerUI\Sims.Solus3.DeploymentServer.UI.CommandLine.exe

I used the "Export Agent Installer" from the Settings --> Solus3 --> Solus Tab, I changed the MSI parameters as above in the script to deploy silently then created an application in SCCM that was advertised and deployed (type was script installer) ( id a few cool things to detect the application if already deployed but nothing special that would get around the issue that you describe) It just worked tbh.

I think that's rubbish, I installed exactly the same way and have no issues.

Where can I see ESET at BETT 2016, anyone know if they are on a suppliers stand ?

@GroupcallSupport (B188) Will be opposite the Capita Stand (Brave move!)......they have Coffee as well as showing off some cool software!

As a school you are entitled to Google Apps for Education, I played around with the following...... Very roughly on my backup server I created a Folder and installed Google Drive Sync (you can Specify the Folder to Sync), I then ran a backup copy job to this folder and it syn'cd to Google Overnight using little used upload bandwidth, and unlimited storage ;-)....for free, it was RAW and worked well, just needed to be kept an eye on. (I did need to purchase AlwaysUp to run the Google Drive Sync as the Backup User) More reliable was that we also have a QNAP which comes with an app to backup to google drive......this means you can use NFS iSCSI etc etc to use the QNAP as a target and then backup/sync to a google drive space, this worked better as I was able to throttle bandwidth exclude files etc etc. https://www.qnap.com/i/uk/business_solutions/con_show.php?op=showone&cid=26 ps: I'll be at BETT should anyone want to discuss this further,or ask any questions ;-)

My two pence, I'll stick with SmoothWall whilst the product still maintains good updates, and a forward looking development plan. I've looked at the others and then don't offer me as much flexibility, however I do run a separate firewall and use the SmoothWall for filtering/BYOD/RADIUS/SSL inspection, with AD and location based authentication. We have quite a few VLAN's and being able to configure different methods of authentication on different ports/lans is key, I'm not sure if all the others platforms will allow this type of config simply. I think when looking at changing solutions you need to look at where you are going as well as support your current infrastructure. Then seeing if the product meets your needs, so if your looking at google apps etc look at a platform that will support it, I suppose we all have our differing tastes as each one has it's positives and negatives

Hey has anyone set this up (ie: auth onto the Wifi using your google account) ? Better still got any instructions the manual is sadly lacking!!!!!

Has anyone installed the SOLUS3DeploymentServerUI.exe to other admin workstations, so others can install/re-install clients ? Any issues?

I have used SCCM for deployment but the script can be the same run from a computer OU startup script.......my advice is leave the batch mostly alone....the only changes I made were to run the msi silently... note the /qn wshShell.Run("msiexec.exe /qn /lv* "" + fso.BuildPath(wshShell.Environment("SYSTEM")("TEMP"), logFileName) +

Ahh yes that makes sense...