azureusnation

We used to use calendars but it then always came down to us doing the bookings as the teachers wouldn't enter in the times right. That's when I love the HAP room bookings as the teachers just have predefined times and nothing to screw up

We've used SnipeIT, then i moved to GLPi, and now we're finally settling on PS Assets as it will also help with finance with contacts and helpdesks as well.

They can share, they will just need to remember to log out and and other person will need to login.

All depends on how you are migrating. Are you having your emails hit Office 365 first or your on-prem first? If your emails are going through your onprem first and then to office 365 then the current transport rules you have setup will continue to run. However if emails hit office 365 first and then on-prem they will not run. If you wish to keep all your transport rules then you will need to recreate them in Exchange online as the hybrid migration will not migrate these over.

For tablets? i can understand Macs and windows desktop/laptops but you cant do that with a tablet.

We do the opposite here and have GSuite authenticate with Microsoft. But we get a google login much like you are getting a Microsoft login page. Once you enter in your email Microsoft should know to redirect you to Google for authentication. This is needed as Microsoft needs to Authenticate against google to see who you are. After the first login it will just be SSO but this is purposly intended. Alternativly, you could go down the ADFS route and it would be a true SSO login.

Unfortunately this is correct. Users that need to see sensitive information will need the CPOM Authenticator App.

I have this exact problem with my Trust. However we have done the following: 1. Agreed at the Trust board that I have overall say on all IT 2. AD Sync is inplace with Forest Trust with schools not currently on out AD infrastructure 3. The other parties only need to edit their users and distribution groups in AD as you have the sync tool in place. All you need to to is make sure they are licensed or you could do what im looking to move to which is automatic licensing https://techcommunity.microsoft.com/t5/Core-Infrastructure-and-Security/Assigning-Office-365-Licenses-Automatically/ba-p/259125 Ignore the ADSync modifications at the top and Sync a security group with Office 365. The assign that security group to your license group and the users will get their licenses automatically. If you want any help let me know.

I've been looking in to this over the last two years and i still say that G-Drive and O-Drive still are not at the level of something that is workable. You cant sync fileshares with G-Drive or Office365 unless there is a bit of software i haven't seen. Unfortunately you either go all in or not at all with Cloud storage. However saying that if you have the G-Drive or OneDrive client installed on all the computers and user redirected folders to it, that will work. Just make sure you have the client not to sync all of the user data to the computer or profile.

Hi All, I'm looking to push SharePoint at the Trust i am working for currently but one of the things we have in our intranet at the moment is HAP+ room bookings. Im trying to find away of either implementing/designing a way of doing this in Sharepoint or trying to make something custom in Sharepoint to achieve what HAP+ does. Has anyone else gone through this process and if so would they be willing to share on what they have done? Thanks

Hi All, I've been given the green light to migrate all our servers to a data center and also to take the trust in to a thin client setup for ease of access at home etc. One sticking point though is the Lego Robots. From what i understand there is a feature called RemoteFX USB Redirection which will redirect nearly all USB devices to the RDS host. My question is if anyone has had experience of this before? We haven't got thin clients as we will be re-purposing old hardware for the mean time and will be installing Windows 10 2019 Enterprise N LTSC on the computers with a auto logon to the RDSH server with a Remote Desktop Connection or we'll look at ThinStation. Thanks

That is my next project across our trust. Except the Crucial BX500 128GB i get are £17.99 each, might have to buy bulk... hmmm 400 should do the trick. When our system is up for renewal we're tendering to other suppliers as Civica just want to replace everything here now anyway so we may aswell try and make a break for it and get new kit and maybe a better software solution.

Sorry ive only just gotten back. Been busy at work being the only tech across 4 schools at the moment. They were running windows xp embedded. I don't know the version of the NRS software but it is one of the older ones from around 2013. Keep persisting and complaining but when I and my CFO questioned them about it, it is just a ploy to get everyone on to the 'Civica' platform.

Do not agree to it. We were given the same and after an argument... 'heated discussion' they agreed to just replace the hard drives in our tills to ssds with windows 10.

I've added in reverse lookup in to the DNS. What's the best way of testing this now?

I don't think I replied back regarding this but I have a solution and Smoothwall have now posted a KB on the issue so ill like that instead of trying o explain enjoy https://kb.smoothwall.com/hc/en-us/articles/360004357100-Using-SSL-VPN-on-a-multitenant-Smoothwall

Sorry to drag this old thread up but I am having this exact issue on Leeds-12. I've set the settings above but I'm still getting IP addresses and not hostnames. The smoothwall is on another subnet and the actual computers are using the AD Domain Controllers as the DNS servers.

its a bit difficult when most people have dynamic ip addresses at home or they are on the move. I've spoken to the guys on the helpdesk and they have applied a hotfix that now works flawlessly. However I think ive now found a funny issue with the policy tester with a Perl error on line 251.

No other users can login and when I do the link you have suggested it works as expected. Also I think I should mention I have multi tenancy enabled for our 4 schools currently. Also the representative ive been talking to says that this is related to multi tenancy.

yep, im putting in my info correctly. I've tried sAM username, upn username, domain\username, username@domain. all the same outcome. logged a case today and just waiting for a response.

Evening All, Just moved to Smoothwall and trying to setup the SSL VPN for access when I'm at home. However no matter what I try to login with credential wise I always get a AUTH_FAILED. All of the directory services are ticked and green so I'm stuck. Client Log: Try to start OpenVPN connection Connection Wed Apr 10 18:44:10 2019 OpenVPN 2.2.2 Win32-MSVC++ [sSL] [LZO2] [PKCS11] built on Dec 15 2011 Wed Apr 10 18:44:16 2019 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page). Wed Apr 10 18:44:16 2019 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Wed Apr 10 18:44:16 2019 Control Channel Authentication: tls-auth using INLINE static key file Wed Apr 10 18:44:16 2019 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Apr 10 18:44:16 2019 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Apr 10 18:44:16 2019 LZO compression initialized Wed Apr 10 18:44:16 2019 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Wed Apr 10 18:44:16 2019 Socket Buffers: R=[65536->65536] S=[65536->65536] Wed Apr 10 18:44:16 2019 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Wed Apr 10 18:44:16 2019 Local Options hash (VER=V4): '2f2c6498' Wed Apr 10 18:44:16 2019 Expected Remote Options hash (VER=V4): '9915e4a2' Wed Apr 10 18:44:16 2019 Attempting to establish TCP connection with x.x.x.x:443 Wed Apr 10 18:44:16 2019 TCP connection established with x.x.x.x:443 Wed Apr 10 18:44:16 2019 TCPv4_CLIENT link local: [undef] Wed Apr 10 18:44:16 2019 TCPv4_CLIENT link remote: x.x.x.x:443 Wed Apr 10 18:44:16 2019 TLS: Initial packet from x.x.x.x:443, sid=fd0d2f9b 5a7afb19 Wed Apr 10 18:44:16 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Wed Apr 10 18:44:16 2019 VERIFY OK: depth=1, certificate Wed Apr 10 18:44:16 2019 VERIFY X509NAME OK: certificate Wed Apr 10 18:44:16 2019 VERIFY OK: depth=0, certificate Wed Apr 10 18:44:17 2019 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Wed Apr 10 18:44:17 2019 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Apr 10 18:44:17 2019 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Wed Apr 10 18:44:17 2019 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Apr 10 18:44:17 2019 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA Wed Apr 10 18:44:17 2019 [VPN] Peer Connection Initiated with x.x.x.x:443 ERROR: Received AUTH_FAILED control message Wed Apr 10 18:44:19 2019 SENT CONTROL [VPN]: 'PUSH_REQUEST' (status=1) Wed Apr 10 18:44:19 2019 AUTH: Received AUTH_FAILED control message Wed Apr 10 18:44:19 2019 TCP/UDP: Closing socket Wed Apr 10 18:44:19 2019 SIGTERM[soft,auth-failure] received, process exiting Smoothwall: 18:58:45 SSL VPN TCP connection established with [AF_INET]x.x.x.x:60741 18:58:46 Authentication service Authentication failed (user unknown); username: ajtaylor 18:58:46 SSL VPN 2.127.65.34:60741 WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 1 18:58:46 SSL VPN 2.127.65.34:60741 TLS Auth Error: Auth Username/Password verification failed for peer 18:58:46 SSL VPN 2.127.65.34:60741 Peer Connection Initiated with [AF_INET]x.x.x.x:60741 18:58:48 SSL VPN 2.127.65.34:60741 Connection reset, restarting [0] Please help

Required as soon as possible ICT Technician Scale 4 (£18,070 - £20,138) 37 hours a week, all year round We are seeking to appoint an ICT Technician to provide support for the school IT systems and staff. The post will be mainly based at Sheringham High School but will involve regular travel between all Trust schools. Closing date: 3rd April (9:00am) Interviews: w/c 22nd April The successful candidate will have to meet the requirements of the person specification in order to be offered the post and will be subject to an enhanced DBS check. We welcome applications regardless of age, disability, gender, ethnicity, sexual orientation, religion or belief. Only applications submitted on the school's application form will be considered. Sheringham High School is committed to the protection and safety of its students. Apply Now!

Hmm, Im currently moving everyone to a redirected mode instead of roaming profiles as they really get on my nerves and constantly have issues, but I may have to also put the chrome folder in to their redirected folder (currently H drive). his may work really well... @Rob_D I like it Great idea!

Evening all, Just signed up to GSuite and set it to use our Office 365 tenant as the IDP. My question however, to take advantage of the YouTube benefits of GSuite and other Chrome features, does any one know a way to get Chrome to auto sign in with the users credentials. I know you can set chrome to force login to chrome but can this be done magically in the background by taking the users username? Thanks Ashley

Just passing and wanted so say give Shayne at Novatech a call. He has been nothing but an angel with our tender process, smoothwall and MPLS connectivity for our trust.