BlueScreen

You may have to manually create a sort function over a couple of cells. Here's something that should work, but it's a bit of a hack, and you will want to hide the columns used. There are probably more optimisations that can be made to either simplify or reduce the checks. There may also be logical errors, and it will break if 2 of the columns on the same row have the same value. This uses array formulas to simplify the logical lookups, after pasting the formulas into the formula bar use Ctrl+Shift+Enter to tell excel (and google sheets) that these are array formulas. Columns A-D = Subject choices. Column E = blank Column F =IFS( AND(A1AND(B1AND(C1AND(D1) [/Code] Column G [code] =IFS( AND(OR(F1:F1=A1),AND(B1AND(OR(F1:F1=A1),AND(C1AND(OR(F1:F1=A1),AND(D1AND(OR(F1:F1=B1),AND(A1AND(OR(F1:F1=B1),AND(C1AND(OR(F1:F1=B1),AND(D1AND(OR(F1:F1=C1),AND(A1AND(OR(F1:F1=C1),AND(B1AND(OR(F1:F1=C1),AND(D1AND(OR(F1:F1=D1),AND(A1AND(OR(F1:F1=D1),AND(B1AND(OR(F1:F1=D1),AND(C1) Column H =IFS( AND(OR(F1:G1=A1),OR(F1:G1=B1),C1AND(OR(F1:G1=A1),OR(F1:G1=B1),D1AND(OR(F1:G1=A1),OR(F1:G1=C1),B1AND(OR(F1:G1=A1),OR(F1:G1=C1),D1AND(OR(F1:G1=A1),OR(F1:G1=D1),B1AND(OR(F1:G1=A1),OR(F1:G1=D1),C1AND(OR(F1:G1=B1),OR(F1:G1=C1),A1AND(OR(F1:G1=B1),OR(F1:G1=C1),D1AND(OR(F1:G1=B1),OR(F1:G1=D1),A1AND(OR(F1:G1=B1),OR(F1:G1=D1),C1AND(OR(F1:G1=C1),OR(F1:G1=D1),A1AND(OR(F1:G1=C1),OR(F1:G1=D1),B1) Column I =IFS( AND(OR(F1:H1=A1),OR(F1:H1=B1),OR(F1:H1=C1)),D1, AND(OR(F1:H1=A1),OR(F1:H1=B1),OR(F1:H1=D1)),C1, AND(OR(F1:H1=A1),OR(F1:H1=C1),OR(F1:H1=D1)),B1, AND(OR(F1:H1=B1),OR(F1:H1=C1),OR(F1:H1=D1)),A1 ) Column J =TEXTJOIN(" ",TRUE,F1:I1)

Here's a PowerShell script to go through the folders in a folder and update the permissions. This script assumes the folders have the same name as the AD user. Import-Module ActiveDirectory $FolderPath = "\\Replace-With-Path\To\Container\Folder\" foreach ($Folder in (Get-ChildItem -Path $FolderPath -Directory )) { try { $User = Get-ADUser -Identity $($Folder.Name) $User_SID = New-Object System.Security.Principal.SecurityIdentifier $User.SID #get the folder's current Access Control List $acl = Get-Acl $Folder $aces = $acl.Access #remove permissions which aren't inherited foreach ($ace in $aces) { if ($ace.IsInherited -eq $FALSE) { $acl.RemoveAccessRule($ace) } } # See this page for a full list of access controls # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.filesystemrights?view=net-7.0 # see this page for inheritance flags # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.inheritanceflags?view=net-7.0 # see this page for Propogation flags # https://learn.microsoft.com/en-us/dotnet/api/system.security.accesscontrol.propagationflags?view=net-7.0 # add read access to the folder and files # Replace "ReadAndExecute" with "Modify" to allow the user to create files and folders in this one. $User_Perms = $User_SID,"ReadAndExecute","ObjectInherit,ContainerInherit", "none", "Allow" $User_ACE = New-Object System.Security.AccessControl.FileSystemAccessRule $User_Perms $acl.AddAccessRule($User_ACE) #add full control to sub folders and files $User_Perms = $User_SID,"FullControl","ObjectInherit,ContainerInherit", "InheritOnly", "Allow" $User_ACE = New-Object System.Security.AccessControl.FileSystemAccessRule $User_Perms $acl.AddAccessRule($User_ACE) #write permissions back to the folder Set-ACL -Path $Folder -AclObject $acl } catch { write-warning "Issues with $($Folder.Name)" } } As always test before deploying in anger.

Have you tried to visit edge://policy to see if there are any warnings?

If you sign into Apple School Manager you should be able to manually create the accounts - use the Add button at the top of the users list https://school.apple.com/#/main/users. These will behave like personal Apple IDs. After the federation has completed the accounts will merge with the federated accounts and they will be able to sign in with their Azure account (we didn't have to create any accounts during the 60 day grace period). If you can't manually create the Apple IDs give Apple support a phone and they should be able to advise you (they were helpful getting one of our old Volume purchase accounts linked).

When you hit the button the 115 accounts will receive an email asking them to update their email address and a reminder every couple of weeks until the 60 days have elapsed. If they are using their Apple IDs for work, enable the OnMicrosoft email address for their O365 account and have have them update the Apple ID to this. I do not think Apple School Manager can import 'personal' Apple IDs. The account federation won't be available until the 60 days have elapsed. After that time you'll have to sign into ASM and manually enable the directory sync. It will run an initial sync (which may take 15 minutes or more to complete). I believe that the sync will pull all the users from your federated source (even suspended users from Google). It should merge accounts that had been manually created in ASM (except Administrators and Site Managers). It will then create accounts for the remaining synced users. If the Apple ID was not in ASM before the directory sync then the federated Apple ID will be linked to a new account and not the one they have been using. Newly created accounts are created as students (I had to manually assign staff to different roles). After the directory sync has completed you can import the new Apple IDs into your MDM (again you may have to manually assign roles). Federated accounts are not removed until they are removed from the federation source. After they are removed from the source they are deactivated and are marked for deletion from ASM. If you delete an account from ASM that still exists in the federation source it will be created again during the next sync.

When re-doing the music suite this summer we used a pair of mirror corner brackets at the front and a single s clip at the back to prevent the iMacs from being 'accidentally' knocked over.

Can anyone recommend an alternative to Cisco Packet tracer for the computer science teacher to help teach networking. Preferably one that is stand alone, does not require a VM, nor to sign into an account.

Registration for the ChromeOS Administrator exam is currently free, until January 2024 https://chromeoscertification.com/chromeos-administrator

I don't think this is an MTA-STS issue, I think the error might be relating to the MX record of the subdomain. They may still have the MX record pointing directly at the 123456789.mail.outlook.com server instead of a newer school-domain-co-uk.mail.protection.outlook.com. server. They will need to check the tenant's O365 Admin Center -> Settings -> Domains -> DNS records for the updated MX value. They can even connect O365 to some DNS providers to automate any changes that might be needed. If you manage the DNS records of the domain can't you just change the SOA / NS record for the subdomain so that you control it again?

A question for those who have replaced SIMS, what are they using to replace FMS?

Here's the Ubuntu guide to connecting to network shares from the Files application: https://help.ubuntu.com/stable/ubuntu-help/nautilus-connect.html.en#types Generally for a windows (samba) share you'll connect to the server using: smb://server.FQDN/sharename (remember to add the $ if it is a hidden share). On older linux distros you'd have to install the samba client (smbclient) to access windows shares.

I assume you're working from a copy of the virtual disk so that you don't accidentally remove the partition. You might just have to install LVM2 on the new VM then restart the VM to pick up the partition. To install LVM2 on ubuntu, open a new terminal window and enter the command: sudo apt install lvm2 You will have to enter a root password and confirm the install. Otherwise there is a guide to mounting LVM2 partitions here: https://www.cyberciti.biz/faq/linux-mount-an-lvm-volume-partition-command/

You will need to mount the partition before you can access the data. After selecting the partition, click on the gear icon then look for 'edit mount options'. Make a note of the 'Mount Point' options as this shows where the partition will be on the file system. You can then use the file explorer to browse for the files you need.

You can perform the same export using DISM. From an elevated command prompt, run: dism /online /export-driver /destination:c:\drivers\ edit: Ninja'd / imped

Does anyone have any experience with the tootoot site / app? https://tootoot.co.uk/ Our safeguarding lead is looking to trial it for a year and is looking for feedback in case there are any technical issues / reasons not to go ahead with the trial.

I have to go for Oatmeal, raisin and Sicilian lemon cookies.

We have ours installed on Windows but I have updated the certificate (to one generated by an internal CA). I believe the process is mostly identical on Windows and Linux. You will have to use Java Keystore to edit the [unifi install location]/data/keystore file with the updated certificate. I believe you can use this guide to manually update the certificate: https://www.jeroentielen.nl/ubiquiti-unifi-controller-ssl-certificate-creation-process/ Or from the command line: keytool -import -alias unifi -file $certfile -trustcacerts -noprompt -keystore $KeyStoreFile -storepass $KeyStorePassword Then restart the unifi network application to pick up the new certificate. Systemctl restart unifi You will have to adjust the command (see the site link above), and combine your CA, all intermediate and wildcard certificates as well as the private key into the $certfile which is imported into the key store.

Have you tried Explorer++? You can try running as the elevated user then accessing the remote share.

I'd look at my steam wish list and realise I'd have to sell the computer to afford half the games on the list. (although I might pinch the GPU to replace my aging graphics card).

Is there a way to view Smoothwall Cloud filter logs after a student has signed off a device? I know there's the online real-time log viewer for when a student is logged in, and the on site appliance Reports -> [Realtime | Logs] -> Web filter, but neither of these seem to provide the historical activity logs of a student filtered using the cloud filter. Is there a way to see if a student signed on similar to the Reports -> Logs -> System (Section: Authentication)? Thanks

I think you'd have to set the values in one of: /Library/Preferences/com.apple.HIToolbox.plist (for system defaults) /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.HIToolbox.plist (for new user defaults) /Library/Preferences/com.apple.HIToolbox.plist (for existing users) You can use your user's ~/Library/Preferences/com.apple.HIToolbox.plist as a reference. These locations aren't manageable from an MDM. If you can define custom settings payloads on your MDM you can try adding com.apple.HIToolbox as a payload but this would create the file in either the macs /Library/Managed\ Preferences/ or the users ~/Library/Managed\ Preferences/ folder and I'm not sure if the mac would use these files. If you can run logon or start up scripts you can try using defaults write to specify the values in these files. Changes to these files may require a restart or log off / log on to apply.

I believe you have to specify British PC keyboard (otherwise it selects the British Mac keyboard).

Went to see the new Spider man movie on Thursday. 20 minutes before the end the movie started to lock up and after a couple of minutes the projector gave up and froze altogether. They had to restart the projector and re-wind it so we got to watch the climactic fight all over again. And if you're wondering, there's a mid-credit Easter egg, and an end credit teaser for the next movie in the MCU.

We have monitor, and have had to remind the safeguarding team to click on the link in the alert email to get the actual time that the flag was raised. The email alert contains the time that the human moderator picked up the alert and not the time that the activity happened. Low priority alerts may not be moderated for several hours.

We've seen this with a couple of our teachers and shared Google drives. Have you tried going up a level, Shift + Right click on the folder, then selecting 'Refresh Folder'? This seems to allow the teachers to get all the contents of the folder without having to disconnect the google account.