DavR

Have you got any blanking plates free on the front of the machine? You could always mount a couple of these or similar on the plate, and run short cables through the machine to the rear ports.

A timely resurfacing of this question, I'm just processing two iPad screen repairs now. I've asked ipadrepairs.co.uk for a quote and will try them! Last place I used was www.quickmobilefix.com but I wasn't massively satisfied with the work. www.medrepairs.co.uk look to be very cheap, they get great reviews but I suspect they're doctored - no-one gets 5/5 all the time!

Thanks for that @JohnJackson, understood you want to get the product right before launch. Look forward to it in April Might have been nice to have some communication though, as "Webscreen 3 available after Feb half term" was one of the big takeaways from BETT for us.

Anyone heard anything about where we are with Webscreen 3.0? When I spoke to Atomwide at BETT, they said this was being implemented over the half term, but there's nothing on the support site about it :/

I think the problem remains that your LGfL connection isn't just an Internet link, it is in fact a whole network of it's own. For that reason, they're incredibly cagey with their firewalls, because if one school mucks up it's config and lets something nasty in, that doesn't just endanger the school, it endangers the whole London Grid network. I guess this is one of the reasons that Atomwide often seem to take a security above usability approach to things. That said, it is frustrating having to submit a change request for the smallest insignificant tweak. I think there is a middle ground to be achieved where schools get some control over firewalls, but short of a major design change, I don't think they're ever likely to grant full firewall access.

Do you have RDP access to your servers? If external firewalls are outside of your control, you could always have an RDP to a server, then use that as jumping on point to then VNC across the network, using a classic VNC client. If you're up against LEA firewalls outside of your control, your first step will probably need to be to find out what remote access services they will permit. We're an LGfL school, and they are red hot on blocking remote access services.

To be honest, most of the best tools are going to be an installed client on each device IMO. Then configure your firewalls accordingly. Click to meet stuff can be a bit hit and miss.

I've used CentraStage with great success in the past, has VNC and RDP options for remote takeover, and does a load of other management and remote action options. Pricey though. Only thing I will say is avoid the on demand stuff, that download an exe into user local data to make the connection. We have a supplier that insists on using something like that (LogMeIn or GoToMeeting variant? I forget now) and it gets caught in the firewall every time they try and remote in. I can't add a rule for it, because the exe is never the same twice...

Ah, yes, also we were using MPC 5000 units on Windows 7. I think from circa MPC 5001 they started encoding username, so it wasn't in a plain text field. We're on MPC 5002 on Windows 10 now, and I can confirm that it's all buried in binary for me....

Hi @Jooky, I never did get a seamless solution, no. I think in the end I bodged something with registry to get User ID to be Windows Login name (first eight characters), and did a custom driver with a pop-up box for the four digit User Code. We've since upgraded copiers, my new copiers I set User ID to be Windows Login name as a Printing Default from day one, and again the driver is tweaked to prompt for four digit User Code.

Fair point I suppose. No point getting GP to manage it if something in the SCCM client is then going to argue with it.

We're running WSUS on Server 2012 R2 with Win 10 1803, and we're using regular http without any issue. First thing I would do is make sure you've knobbled all and any connections to online Windows Updates, which is surprisingly difficult to do. It could well be that the missing updates it's flagging are one's you don't want, such as the 1809 upgrade. I've got the following enabled to do that: Do not allow update deferral policies to cause scans against Windows Update Do not connect to any Windows Update Internet locations Do the clients have the updates that you are expecting them to have?

Forgive me if I've missed something, but couldn't you just put a group policy in place specifying the correct server name and port?

Oh really? Wow, I wish I'd known. I won't pursue it now though, with only ten days of Webscreen 2 left.

I am REALLY looking forward to Webscreen 3. To finally be able to integrate AD groups into our web filtering will be a godsend - farewell extra logon and that blasted 30 minute timeout window!

Interesting point - I went to the stand at BETT, there were a couple of announcements, but nothing on remote access that I saw.

Hahaha 1:1..... we're primary, more like 1:10....

I've got mine working, mainly out of stubbornness than necessity. Funnily enough, after the initial debacle, I actually ended up setting up a whole new Azure AD tenant (issues claiming our school domain name), and with that already in place, it was actually very easy to just log on to VLSC, associate the Azure AD account with one of our VLSC logins, and off we go. I can now allocate Office licenses in our Microsoft Store quite easily. Heck of a learning curve to get to that point though. Luckily I will now be using the Azure AD with another project, so not a wasted journey.

Wow, that sounds like a PIA, just to use the correct methodology. Script it is then!

True I suppose.... but then in that case, wouldn't the payment provider need their own opt in permissions for every parent?

How very frustrating. What's the point of any system these days if it isn't automatically populated with MIS data? That said, I'm not sure how our data gets into our comms package.....

In which case it's definitely complete cobblers. You are sharing with them, and they are holding, a dataset which receives regular updates. That, in GDPR terms, is what is happening. Whether you update manually or in a automated fashion is purely a technical point, not a GDPR one. Too late to back out of this contract?

Sounds like a cop out to me. There's nothing in the GDPR says you can't share data, I bet you're sharing data live with a number of third parties for different systems. Garbage especially given that they've already got an initial version of the data in question. As long as you have an appropriate agreement in place with the supplier, and list them on your privacy notices as someone you share data with, you should be good to go. Maybe run a DPIA to be watertight.

There is a risk there I suppose, but we're up to date as of December, and we're not using it heavily. I'm waiting to junk one application tbh, then I should be ok to remove it from production machines.

Interesting. I was anticipating a lot of confusion when we launched Chromebooks here (primary), especially as it meant every child being issued with a rather clunky username and password. But in the event, we didn't really have much trouble at all. There was a bit of a learning curve, but they love them now. Different environments get different results I suppose. We only use ours with Year 5 and 6, must admit I'd be wary of giving them to lower years.