Jump to content

BlueScreen

Members
  • Posts

    37
  • Joined

  • Last visited

Reputation

165 Excellent

About BlueScreen

Personal Information

  • Occupation
    ICT Support Technician
  • Location
    East Sussex
  1. You may have to manually create a sort function over a couple of cells. Here's something that should work, but it's a bit of a hack, and you will want to hide the columns used. There are probably more optimisations that can be made to either simplify or reduce the checks. There may also be logical errors, and it will break if 2 of the columns on the same row have the same value. This uses array formulas to simplify the logical lookups, after pasting the formulas into the formula bar use Ctrl+Shift+Enter to tell excel (and google sheets) that these are array formulas. Columns A-D = Subject choices. Column E = blank Column F =IFS( AND(A1AND(B1AND(C1AND(D1) [/Code] Column G [code] =IFS( AND(OR(F1:F1=A1),AND(B1AND(OR(F1:F1=A1),AND(C1AND(OR(F1:F1=A1),AND(D1AND(OR(F1:F1=B1),AND(A1AND(OR(F1:F1=B1),AND(C1AND(OR(F1:F1=B1),AND(D1AND(OR(F1:F1=C1),AND(A1AND(OR(F1:F1=C1),AND(B1AND(OR(F1:F1=C1),AND(D1AND(OR(F1:F1=D1),AND(A1AND(OR(F1:F1=D1),AND(B1AND(OR(F1:F1=D1),AND(C1) Column H =IFS( AND(OR(F1:G1=A1),OR(F1:G1=B1),C1AND(OR(F1:G1=A1),OR(F1:G1=B1),D1AND(OR(F1:G1=A1),OR(F1:G1=C1),B1AND(OR(F1:G1=A1),OR(F1:G1=C1),D1AND(OR(F1:G1=A1),OR(F1:G1=D1),B1AND(OR(F1:G1=A1),OR(F1:G1=D1),C1AND(OR(F1:G1=B1),OR(F1:G1=C1),A1AND(OR(F1:G1=B1),OR(F1:G1=C1),D1AND(OR(F1:G1=B1),OR(F1:G1=D1),A1AND(OR(F1:G1=B1),OR(F1:G1=D1),C1AND(OR(F1:G1=C1),OR(F1:G1=D1),A1AND(OR(F1:G1=C1),OR(F1:G1=D1),B1) Column I =IFS( AND(OR(F1:H1=A1),OR(F1:H1=B1),OR(F1:H1=C1)),D1, AND(OR(F1:H1=A1),OR(F1:H1=B1),OR(F1:H1=D1)),C1, AND(OR(F1:H1=A1),OR(F1:H1=C1),OR(F1:H1=D1)),B1, AND(OR(F1:H1=B1),OR(F1:H1=C1),OR(F1:H1=D1)),A1 ) Column J =TEXTJOIN(" ",TRUE,F1:I1)
  2. Here's a PowerShell script to go through the folders in a folder and update the permissions. This script assumes the folders have the same name as the AD user. Import-Module ActiveDirectory $FolderPath = "\\Replace-With-Path\To\Container\Folder\" foreach ($Folder in (Get-ChildItem -Path $FolderPath -Directory )) { try { $User = Get-ADUser -Identity $($Folder.Name) $User_SID = New-Object System.Security.Principal.SecurityIdentifier $User.SID #get the folder's current Access Control List $acl = Get-Acl $Folder $aces = $acl.Access #remove permissions which aren't inherited foreach ($ace in $aces) { if ($ace.IsInherited -eq $FALSE) { $acl.RemoveAccessRule($ace) } } # See this page for a full list of access controls # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.filesystemrights?view=net-7.0 # see this page for inheritance flags # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.inheritanceflags?view=net-7.0 # see this page for Propogation flags # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.propagationflags?view=net-7.0 # add read access to the folder and files # Replace "ReadAndExecute" with "Modify" to allow the user to create files and folders in this one. $User_Perms = $User_SID,"ReadAndExecute","ObjectInherit,ContainerInherit", "none", "Allow" $User_ACE = New-Object System.Security.AccessControl.FileSystemAccessRule $User_Perms $acl.AddAccessRule($User_ACE) #add full control to sub folders and files $User_Perms = $User_SID,"FullControl","ObjectInherit,ContainerInherit", "InheritOnly", "Allow" $User_ACE = New-Object System.Security.AccessControl.FileSystemAccessRule $User_Perms $acl.AddAccessRule($User_ACE) #write permissions back to the folder Set-ACL -Path $Folder -AclObject $acl } catch { write-warning "Issues with $($Folder.Name)" } } As always test before deploying in anger.
  3. Have you tried to visit edge://policy to see if there are any warnings?
  4. If you sign into Apple School Manager you should be able to manually create the accounts - use the Add button at the top of the users list https://school.apple.com/#/main/users. These will behave like personal Apple IDs. After the federation has completed the accounts will merge with the federated accounts and they will be able to sign in with their Azure account (we didn't have to create any accounts during the 60 day grace period). If you can't manually create the Apple IDs give Apple support a phone and they should be able to advise you (they were helpful getting one of our old Volume purchase accounts linked).
  5. When you hit the button the 115 accounts will receive an email asking them to update their email address and a reminder every couple of weeks until the 60 days have elapsed. If they are using their Apple IDs for work, enable the OnMicrosoft email address for their O365 account and have have them update the Apple ID to this. I do not think Apple School Manager can import 'personal' Apple IDs. The account federation won't be available until the 60 days have elapsed. After that time you'll have to sign into ASM and manually enable the directory sync. It will run an initial sync (which may take 15 minutes or more to complete). I believe that the sync will pull all the users from your federated source (even suspended users from Google). It should merge accounts that had been manually created in ASM (except Administrators and Site Managers). It will then create accounts for the remaining synced users. If the Apple ID was not in ASM before the directory sync then the federated Apple ID will be linked to a new account and not the one they have been using. Newly created accounts are created as students (I had to manually assign staff to different roles). After the directory sync has completed you can import the new Apple IDs into your MDM (again you may have to manually assign roles). Federated accounts are not removed until they are removed from the federation source. After they are removed from the source they are deactivated and are marked for deletion from ASM. If you delete an account from ASM that still exists in the federation source it will be created again during the next sync.
  6. When re-doing the music suite this summer we used a pair of mirror corner brackets at the front and a single s clip at the back to prevent the iMacs from being 'accidentally' knocked over.
  7. Can anyone recommend an alternative to Cisco Packet tracer for the computer science teacher to help teach networking. Preferably one that is stand alone, does not require a VM, nor to sign into an account.
  8. Registration for the ChromeOS Administrator exam is currently free, until January 2024 https://chromeoscertification.com/chromeos-administrator
      • 5
      • Thanks
  9. I don't think this is an MTA-STS issue, I think the error might be relating to the MX record of the subdomain. They may still have the MX record pointing directly at the 123456789.mail.outlook.com server instead of a newer school-domain-co-uk.mail.protection.outlook.com. server. They will need to check the tenant's O365 Admin Center -> Settings -> Domains -> DNS records for the updated MX value. They can even connect O365 to some DNS providers to automate any changes that might be needed. If you manage the DNS records of the domain can't you just change the SOA / NS record for the subdomain so that you control it again?
  10. A question for those who have replaced SIMS, what are they using to replace FMS?
  11. Here's the Ubuntu guide to connecting to network shares from the Files application: https://help.ubuntu.com/stable/ubuntu-help/nautilus-connect.html.en#types Generally for a windows (samba) share you'll connect to the server using: smb://server.FQDN/sharename (remember to add the $ if it is a hidden share). On older linux distros you'd have to install the samba client (smbclient) to access windows shares.
  12. I assume you're working from a copy of the virtual disk so that you don't accidentally remove the partition. You might just have to install LVM2 on the new VM then restart the VM to pick up the partition. To install LVM2 on ubuntu, open a new terminal window and enter the command: sudo apt install lvm2 You will have to enter a root password and confirm the install. Otherwise there is a guide to mounting LVM2 partitions here: https://www.cyberciti.biz/faq/linux-mount-an-lvm-volume-partition-command/
  13. You will need to mount the partition before you can access the data. After selecting the partition, click on the gear icon then look for 'edit mount options'. Make a note of the 'Mount Point' options as this shows where the partition will be on the file system. You can then use the file explorer to browse for the files you need.
  14. You can perform the same export using DISM. From an elevated command prompt, run: dism /online /export-driver /destination:c:\drivers\ edit: Ninja'd / imped
  15. Does anyone have any experience with the tootoot site / app? https://tootoot.co.uk/ Our safeguarding lead is looking to trial it for a year and is looking for feedback in case there are any technical issues / reasons not to go ahead with the trial.
×
×
  • Create New...