TwistedHelixis

I assume a safe counts as secure, you could just bung everything onto a few USB HDDs (same data on more than one) and keep them in the safe. Why encrypt them, if someone in 25 years needs the info they will probably not have the decrypt key You could also keep the data in 365 or G Suite.

That would be great. Even the GCPW windows sign in system doesn't seem to log into Filestream https://support.google.com/a/topic/9539498?hl=en&ref_topic=9441473

I got all my schools done in one hit :0)

Say they are not fit for your environment, point out that in the government info they should have consulted with the school, and request something different. Now wake up and realise that will never work :0)

I believe our LA requested Chrome books instead of laptops, so they could easily be managed across multiple schools.

Yep, all a bit rushed. i hadn't even picked up on this change until it was highlighted in this post. Apparently they will add something in admin GUI at some point.

I thought File Stream was only 'files on demand'. Doesn't seem to download anything when I login at a new computer.

Just got off the phone and not surprisingly they have been inundated with requests to keep anon access

Nooooo we are running class transitions with all our parents using Meet. Will need to request this is disabled for all my schools

I would also enjoy doing that as a job :-) Have fun, all the best.

Now I can't recreate the original issue. Not sure why its now working, Gremlins? Thanks for your help @computer_expert

hmmmmm, just tried using the old account and now that just lets me log in without the DC turned on. More testing needed to see if there is something else going on.

So I created a new user in AD, logged onto the data server, logged off, shut down the DC and managed to log into the Data server using this new account. So there is something about the old account I was given by the LA that seems to be blocking the details being cached. Would be handy to workout why this is happening, but at least I have narrowed down the issue to a user based issue.

OHHH might have worked out part of the issue. Ill do some more testing and report back

Interactive logon: Require Domain Controller authentication to unlock workstation = Disabled How are you trying to access the server when the DC is offline? = Via the Hyper-V Gui Hyper-V host is not domain joined. The host has both the DC and Data servers running on it. I highly recommend that all AD domains have at least 2 DCs for redundancy. Almost all the primary schools in the entire county are setup like this by the LA. All our files are now cloud based anyway and next year I might look at utility based DNS / DHCP and remove the MS server.

Just checked the html file and nothing listed that looks like it might be causing this issue. There are only a few policies being applied to the data servers, mapped drives, proxy settings, local admin policy, security certificate, default domain policy and that's about it.

Its OK. text looks as expected when opened in IE

I have done that. I am not sure the report is 100% OK. The first half looks how I would expect (looks like group policy editor) but the last half is just a mish mash. Any chance I can send the report over to you so you can see if it looks how it should?

Just one DC. When I check the 'Local Security Policies' on the data server itself for cached credentials, it is set to remember the last 10 accounts. I have also noticed a difference between this server and my other data servers with the login box. For the other data servers, just above the box that you type the password into it displays 'domine.lan\user' but on this data server it lists 'domine\user@domain' Might not be anything but thought I should mention it

Hi, I look after a few primary schools. At each school they have a DC server and a Data server. I have noticed that at just one of the schools, if the DC goes offline I am also unable to login to the Data server, with the error 'no logon servers to service the logon request' displayed. Yet at the other schools I am still able to login when the DC is offline. All schools are on the same 2012R2 server versions. Any ideas why this might be happening at one school?

If this is just one Primary school, its not that hard to do the migration yourself. I migrated a school last year and it was painless in the end. When I did it Google were working on new tools for migrating, so perhaps they are ready now, otherwise there are some basic tools in G suite admin system.

You can also add &hd=mydomain.sch.uk to the end of a web URL to add your domain to the sign in box

I have heard Good and bad things about Wonde, so decided to give it a miss.

You can easily create a ctf from SIMS (if you use that) with all the pupils in a list, then use the ctf template from Google to upload the pupils You can also create a login (on website???) where the domain gets automatically added, so the pupil only needs to enter their name + password in the login box and the @domain.sch.uk will get populated automatically. I believe there is an option in Chromebooks to do this also but I don't have any. I would probably just start with Years 5 & 6, get them logging in as themselves, fix any issues and then add more years.

Chromebooks would be good in this situation.