MatthewL

We get the same issue when passwords are changed, when we unlock their account for the x number of times they do get around to sorting it after been told although many say their phone isn't connected when it clearly has been!

M62 J21 to J24 between Rochdale and Huddersfield is closed due to the snow.

I'd agree with that Face-Man. God knows what they will store on them, least you can save your backs if its lost.

Let them use them as "personal" devices but still have them managed, they belong to the organisation, if they get lost with data one at least you can cover your back by disabling or wiping them. Need to enforce things like pin just to cover your backs, you wouldn't leave your computers wide open.

Why are you not managing them? Get them added will save the hassle later on.

Never seen that before with a rule and I've got loads on my mailbox. Odd.

Can you open Outlook in safe mode?

Unifi is more than suitable for what is needed and it will be a lot cheaper. Portacabins if the true metal ones they often block the signal of anything like that, looked into it a few years ago when my Dad worked in one. If its 2 normal sized portacabins I cannot see you needing many AP's in this instance. As regards to leased line, where are you internet requirements, what connection do you have now, does it suit you needs?

Just install the client on your PC and point it to the server and use the card reader locally.

Port TCP 3389 could well be blocked outgoing, I know we only allow it to certain external IP's not in our network. Try connecting via it's IP first and go from there.

I've run Watchguard for years never really had an issues, has been an issue recently with an update that broke NAT but there was a workaround. Is the Watchguard on the latest update available or are you miles out?

Thanks, worked perfectly and what I needed. Cheers for that.

I have a conditional formatting rule that fills a cell with colour if below x number of characters which is below and does the job. =LEN(J1)<7 I want to expand this now so it can look at column F and check if there is anything in there. Result is that if column F is filled and column J is below 7 characters I want it to highlight. If F if empty I don't want it to in this instance. Not sure how to get the IF F is not null sort of of thing.

All good and well people using cursive font, most now just use a normal one but we would only accept an electronic document like that from their email address, if it comes from anything else unless verified then no. Even if they complete it on paper which is the easiest way, scan/photo and record that electrically and shred the paper simple answer. People say that electronic isn't viable for some everyone has a smart phone these day so poor excuse. Having paper means its accessible and your not discriminating anyone but as long as there is an alternative means then I would say go with what works in getting consent then make it all electronic, no paper to go missing/get lost then.

When it happens can you still ping external? Set an external monitor up here, will help you determine where the issue is and see if it drops out of hours too.

Didn't know about this, went into Tesco tonight and shelves were empty, said to the lass is there a shortage and got a deadly serious reply back saying yes Walkers have an issue. Thought she was talking rubbish but now IT are getting the blame of for it!! Only wanted some for my pack up whilst I'm out this weekend!!

Has anyone been involved in using radsecproxy on a Linux box? We are reconfiguring our setup for EduRoam due to chance in WiFi and need to use radsecproxy to enable this. It is literally a config file to setup then we point our WiFi at this and adjust our firewall rules to talk to the eduroam server. This is the config file, there are 2 severs we will be connecting to on TLS 2083 to the 2 upstream servers so made bold what I think we need to change. Also got some certificates to upload. Is there a way I can restrict what device can connect i.e. put my subnet for the access points in? # Master config file for radsecproxy # First you may define any global options, these are: # # You can optionally specify addresses and ports to listen on # Multiple statements can be used for multiple ports/addresses #ListenUDP *:1814 #ListenUDP localhost #ListenTCP [2001:700:1:7:215:f2ff:fe35:307d]:1812 #[b]ListenTLS 10.10.10.10:2084[/b] #ListenTLS [2001:700:1:7:215:f2ff:fe35:307d]:2084 #ListenDTLS [2001:700:1:7:215:f2ff:fe35:307d]:2084 # To specify a certain address/port for UDP/TLS requests you can use e.g. #SourceUDP 127.0.0.1:33000 #SourceTCP *:33000 #SourceTLS *:33001 #SourceDTLS *:33001 # Optional log level. 3 is default, 1 is less, 5 is more #LogLevel 3 # Optional LogDestination, else stderr used for logging # Logging to file #LogDestination file:///tmp/rp.log # Or logging with Syslog. LOG_DAEMON used if facility not specified # The supported facilities are LOG_DAEMON, LOG_MAIL, LOG_USER and # LOG_LOCAL0, ..., LOG_LOCAL7 #LogDestination x-syslog:/// #LogDestination x-syslog:///log_local2 # Optional log thread Id #LogThreadId on # For generating log entries conforming to the F-Ticks system, specify # FTicksReporting with one of the following values. # None -- Do not log in F-Ticks format. This is the default. # Basic -- Do log in F-Ticks format but do not log VISINST. # Full -- Do log in F-Ticks format and do log VISINST. # Please note that in order to get F-Ticks logging for a given client, # its matching client configuration block has to contain the # fticksVISCOUNTRY option. # You can optionally specify Log MAC and FTicksMAC in order to determine if and #[b] how Calling-Station-Id[/b] (users Ethernet MAC address) is being logged. # Static -- Use a static string as a placeholder for # Calling-Station-Id in F-Ticks, of omit it in normal log. # Original -- Log Calling-Station-Id as-is. This is the default for log. # VendorHashed -- Keep first three segments as-is, hash the rest. # VendorKeyHashed -- Like VendorHashed but salt with F-Ticks-Key or Log-key # respectively. This is the default for F-Ticks. # FullyHashed -- Hash the entire string. # FullyKeyHashed -- Like FullyHashed but salt with F-Ticks-Key. # In order to use LogMAC or FTicksMAC with one of VendorKeyHashed or # FullyKeyHashed, specify a key with LogKey or FTicksKey. #LogKey #FTicksKey # Default Log andF-Ticks configuration: #LogMAC Original #FTicksReporting None #FTicksMAC Static # You can optionally specify FTicksSyslogFacility to use a dedicated # syslog facility for F-Ticks messages. This allows for easier filtering # of F-Ticks messages. # F-Ticks messages are always logged using the log level LOG_DEBUG. # Note that specifying a file (using the file:/// prefix) is not supported. #FTicksSyslogFacility log_local1 #FTicksSyslogFacility x-syslog:///log_local1 # If you are using radsecproxy outside the eduroam context, and you want # F-Ticks messages to have your own prefix instead of eduroam, you can set: #FTicksPrefix # There is an option for doing some simple loop prevention. Note that # the LoopPrevention directive can be used in server blocks too, # overriding what's set here in the basic settings. #LoopPrevention on # Add TTL attribute with value 20 if not present (prevents endless loops) #AddTTL 20 # If we have TLS clients or servers we must define at least one tls block. # You can name them whatever you like and then reference them by name when # specifying clients or servers later. There are however three special names # "default", "defaultclient" and "defaultserver". If no name is defined for # a client, the "defaultclient" block will be used if it exists, if not the # "default" will be used. For a server, "defaultserver" followed by "default" # will be checked. # # The simplest configuration you can do is: #tls default { # You must specify at least one of CACertificateFile or CACertificatePath # for TLS to work. We always verify peer certificate (client and server) # CACertificateFile /etc/ssl/certs/ca-certificates.crt # CACertificatePath /etc/ssl/certs # You must specify the below for TLS, we always present our certificate [b] # CertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem # CertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key # Optionally specify password if key is encrypted (not very secure) # CertificateKeyPassword "follow the white rabbit"[/b] # # Optionally enable CRL checking # CRLCheck on # Optionally specify how long CAs and CRLs are cached, default forever # CacheExpiry 3600 # # Optionally require that peer certs have one of the specified policyOIDs # policyoid 1.2.3 # this option can be used multiple times # policyoid 1.3.4 #} # If you want one cert for all clients and another for all servers, use # defaultclient and defaultserver instead of default. If we wanted some # particular server to use something else you could specify a block # "tls myserver" and then reference that for that server. If you always # name the tls block in the client/server config you don't need a default # Now we configure clients, servers and realms. Note that these and # also the lines above may be in any order, except that a realm # can only be configured to use a server that is previously configured. # A realm can be a literal domain name, * which matches all, or a # regexp. A regexp is specified by the character prefix / # For regexp we do case insensitive matching of the entire username string. # The matching of realms is done in the order they are specified, using the # first match found. Some examples are # @example\.com$", "\.com$", ".*" and "^[a-z]. @example\.com$". # To treat local users separately you might try first specifying "@" # and after that "*". # Configure a rewrite block if you want to add/remove/modify attributes # rewrite example { # # Remove NAS-Port. # removeAttribute 5 # # Remove vendor attribute 100. # removeVendorAttribute 99:100 # # Called-Station-Id = "123456" # addAttribute 30:123456 # # Vendor-99-Attr-101 = 0x0f # addVendorAttribute 99:101:%0f # # Change users @local to @example.com. # modifyAttribute 1:/^(.*)@local$/\[email protected]/ # } # An example client #client [2001:db8::1] { # # type can be one of tcp, udp, tls, dtls # type udp # # secret is optional for TLS/DTLS # secret secret # # Might do rewriting of incoming messages using rewrite block example # rewriteIn example # # Can also do rewriting of outgoing messages # rewriteOut example # # if also want to use this server for accounting, specify # accountingServer 127.0.0.1 # # statusserver is optional, can be on or off. Off is default # StatusServer on #} # Equivalent to example.com #realm @example\.com$ { # server 2001:db8::1 #} # One can define a realm without servers, the proxy will then reject # and requests matching this. Optionally one can specify ReplyMessage # attribute to be included in the reject message. One can also use # AccountingResponse option to specify that the proxy should send such. #realm /\.com$ { #} # #realm /^anonymous$ { # replymessage "No Access" # AccountingResponse On #} # example config for localhost, rejecting all users client 127.0.0.1 { type udp secret testing123 } realm * { replymessage "User unknown" }

Absolute rip off, one of them additional services companies like to offer to get some coin in, will always be some who take it.

Toshiba are good machines, I prefer Sharp over anything but that is personal preference. Out of them options it would be Toshiba but there all much of the same now. Get samples from each, also look at which one is more user intuitive get your repo person to go to a showroom and try each and get a feel as they are the ones using them they will know what works best.

Don't pay for up front copies just pay for what you use. Also an extras like IT Support that are not engineering calls maybe charged at extra so get these costs, plus the likes of any software maintenance i.e. PaperCut and card readers. Also if you don't need a colour device in an area don't let them sell you a colour one, they won't like it as not making as much money but don't let them force you into stuff you don't want. Check the machine can handle what you want to put through it aa month and a bit more, so they cannot say that the machine is been overused and try and charge you when there are issues that are costing them. They will sell you the best as that is where they are making the commission on them, I've seen guys walk away with thousands in commission before from copiers.

Just out of curiosity I looked at Lab Expert, it does appear that it can be hosted on a SQL server and that the access is just a front end for it. With that in mind could you get a developer to integrate and create a front end linking to the SQL database in a web form? Just my thoughts in what I'd do if its a good system adapt it if you can!

If you are upgrading PaperCut make sure both servers are the same PaperCut version when restoring the backup, either do an upgrade before you migrate or install the old PaperCut on your new server, restore then upgrade. Be good to upgrade the old server and check you have no issues first in my eyes.

Do you use a .uk or .uk.com with yours? I have an existing domain I have a sub domain of that I wish to use with this but struggling. I have a ticket open with them.

My domains are with 123 Reg. It's individual client computers that will run the client and update that way. No I cannot put a VPN on them for that is needed before anyone asks!

I wasn't even aware 2022 has been released yet, I'm still deploying 2019 servers, its stable and in life for a few more years yet. Will be deploying Windows 11 before upgrading severs.