ShellfishClive

Likely due to them being low spec tablets that can't handle the login vey well. You could try to make local profiles smaller to reduce the logon time but looks like they are just low end devices.

Let me know if it doesn't work and I will tell you my way of doing it and hopefully explain it for you.

The responsibility is in the person in question not the controller. If you have no physical way to stop them from signing up and your school policy is to allow students to have email addresses then it's not your responsibility. We let all students have email addresses at the main school I support, it's not my policy but the school have asked for it. After that, as long as they are password protected and only the student in question has access to that account then it's not breaking GDPR.

Shouldn't be, they are a legit website. Would they be able to do this without asking you? You're not actually storing the information that they are inputting into the website, they are doing that themselves so it's out of your control. There are hundreds of other websites they could input their information into without anybodies knowledge. The GDPR police can't expect us to know it all, yet I think they want us to!

I know a way to turn this off but it will also turn it off for the start menu as well. This article has it already explained probably better than I can: https://social.technet.microsoft.com/Forums/windows/en-US/7b6a9da4-ad4b-45b9-a525-584c9ad70e81/group-policy-to-remove-hibernate-and-sleep-from-the-start-menu?forum=winserverGP I use the same method and it works perfectly.

You should be able to do this via GPO. User Configuration > Administrative Templates > Windows Components > Windows Explorer - "Hide these specified drives in My Computer" and "Prevent access to drives from My Computer". Both are set to "Disabled" Then set the scope to that AD group.

Try what @LeMarchand said, if you boot via CD or USB with Windows 10 on it should ask for a clean or upgrade which should do it for you. Also as advice look into using Offline Files, it's a lifesaver!

You should be able to download it if you have the licenses for it. You could create media USB sticks to boot then install that way using the VLSC. Edit: Why can't you do a fresh install? Assuming that you can take the data off and put it back on?

Open Broadcast Studio would let you do this: https://obsproject.com/

No no, those are far too advanced we need something simple!

The staff here put that under the medical notes and events. Should be able to store it all there.

Do you not have an MIS system that you can input this information into?

It's under Proofing in File > Options, uncheck "Check Spelling as you type" and "Mark Grammer errors as you type". If you want to disable via GPO I think there is a reg key (DWORD) that needs setting to 0 under Office, It's "wordspellingoptions" IIRC.

Not sure on the actual legal issues when it comes to keyloggers but I am fairly sure that the person you are "keylogging" needs to be told that they are otherwise it's invasion of privacy. They could be writing something personal to someone while on a work machine which is not in your legal right unless you tell them they are always being monitored.

We have some Acer P253s for our exams which seem to do the job, they aren't great by all means but they have enough power to do the job they need to. Not sure how it is there but the Exam Manager here likes the internet to be turned off on the exam laptops so they can't use it during the exam, I am not sure how or if you can disable the wireless on a Chromebook because everything is in the cloud there so it would make them be pretty pointless.

Bit of a shame it's so late as most people are used to using Chrome or IE now so changing could cause uproar with most staff, nice to see that they are expanding though!

Data retention policies are generally local to what the governing board say. You could only keep it for 1 year if you really wanted, we keep ours for 4 years I believe after that it's wiped.

Looks like that is the lastest BIOS update they have released. They are fairly old machines so I suppose they are now in their legacy age.

Malwarebytes is great, I've never used it as a first defence but it's really good for scanning systems. I've used Bit Defender before and not too keen on it, seems to take up a lot of system usage which has always put me off, personally I'd switch to Malwarebytes.

Yeah I use VSCode because it has built in powershell terminal. Copying directly from there shows the syntax highlighting, I use a dark theme so it doesn't display nicely on a white site.

I'll try break it down for you: 1. $importPath is the location of your custom csv file. The one I created had "Password" written in the first cell and then a random list of passwords in each cell below. Bluedog1, bluedog2, redcat3 etc. (Ordering doesn't matter) 2. $ou is the OU that contains the users that you want to change the passwords for. E.g. $ou = "OU=TestOU,OU=Staff,OU=Users,OU=School Name,DC=Domain,DC=org ,DC=uk" 3. $users this gets the users from the OU that you have pointed to above, so any users in the OU "TestOU" will have their password reset. 4. $PasswordFile will get the lists of passwords from the CSV file in a list. The Foreach loop says that for every User in the OU I want to you do whatever is inbetween {} these brackets. Once you have done this move onto the next user, then the next user until no users are left. $password just grabs the passwords from the file and makes it easier to use in the script. $randompassword tells the scripts to get a random password from the $password varaible (which is just the list of passwords in the .csv) Write-Host just shows you what the password will be for that user. The next line makes the password secure in order for it to be used as a password. Set-ADAccountPassword is what actually does the setting of the password in AD. I am awful at explaining things but hopefully that helps even just a little.

It's not a GUI and I only just noticed that @ADMaster already did this but here is what I have: [color=#d4d4d4][font=Monaco][color=#dcdcaa]Import-Module [/color][color=#d4d4d4]ActiveDirectory[/color] [color=#569cd6]$[/color][color=#9cdcfe]importPath[/color][color=#d4d4d4]=[/color][color=#ce9178]"C:\User Scripts\Scripts\Create User with Random Password\password.csv"[/color] [color=#569cd6]$[/color][color=#9cdcfe]ou[/color][color=#d4d4d4]=[/color][color=#608b4e]#ou path here[/color] [color=#569cd6]$[/color][color=#9cdcfe]users[/color][color=#d4d4d4]=[/color][color=#dcdcaa]Get-ADUser[/color][color=#d4d4d4]-[/color][color=#d4d4d4]SearchBase [/color][color=#569cd6]$[/color][color=#9cdcfe]ou[/color][color=#d4d4d4]-[/color][color=#d4d4d4]Filter [/color][color=#d4d4d4]*[/color][color=#d4d4d4]-[/color][color=#d4d4d4]Properties [/color][color=#d4d4d4]*[/color][color=#d4d4d4]-[/color][color=#d4d4d4]ResultSetSize [/color][color=#b5cea8]5000[/color][color=#d4d4d4]|[/color][color=#dcdcaa]Select-Object[/color][color=#d4d4d4] GivenName[/color][color=#d4d4d4],[/color][color=#d4d4d4] Surname[/color][color=#d4d4d4],[/color][color=#d4d4d4] SamAccountName[/color][color=#d4d4d4],[/color][color=#d4d4d4] Password[/color] [color=#569cd6]$[/color][color=#9cdcfe]passwordFile[/color][color=#d4d4d4]=[/color][color=#dcdcaa]Get-Content[/color][color=#d4d4d4]-[/color][color=#d4d4d4]Path [/color][color=#569cd6]$[/color][color=#9cdcfe]importPath[/color][color=#d4d4d4]|[/color][color=#dcdcaa]ConvertFrom-Csv[/color][color=#d4d4d4]-[/color][color=#d4d4d4]Header [/color][color=#d4d4d4]Password[/color] [color=#c586c0]foreach[/color][color=#569cd6]($[/color][color=#9cdcfe]user[/color][color=#c586c0]in[/color][color=#569cd6]$[/color][color=#9cdcfe]users[/color][color=#569cd6])[/color][color=#d4d4d4]{[/color] [color=#569cd6]$[/color][color=#9cdcfe]password[/color][color=#d4d4d4]=[/color][color=#569cd6]$[/color][color=#9cdcfe]passwordFile[/color][color=#dcdcaa].Password[/color] [color=#569cd6]$[/color][color=#9cdcfe]randomPassword[/color][color=#d4d4d4]=[/color][color=#dcdcaa]Get-Random[/color][color=#d4d4d4]-[/color][color=#d4d4d4]InputObject [/color][color=#569cd6]$[/color][color=#9cdcfe]password[/color] [color=#dcdcaa]Write-Host[/color][color=#569cd6]$[/color][color=#9cdcfe]user[/color][color=#569cd6]$[/color][color=#9cdcfe]randompassword #You could log this line or export to CSV to get a list of the passwords just make sure it's here before it converts to secure string[/color] [color=#569cd6]$[/color][color=#9cdcfe]randomPassword[/color][color=#d4d4d4]=[/color][color=#dcdcaa]ConvertTo-SecureString[/color][color=#569cd6]$[/color][color=#9cdcfe]randomPassword[/color][color=#d4d4d4]-[/color][color=#d4d4d4]AsPlainText [/color][color=#d4d4d4]-[/color][color=#d4d4d4]Force[/color] [color=#608b4e]Set-ADAccountPassword -Identity $user -NewPassword $randomPassword[/color] [color=#d4d4d4]}[/color] [/font][/color] All you have to do is make a CSV file with a header of "Password" and then a list of your chosen passwords that it would randomly select, it will then choose once at random and apply it to that account.

Do you still need a hand with this? I can hopefully whip something up for you that would do it.

I would recommend getting in touch with an ISP for a business line to be installed. They are far more likely to rewire and get you a proper line, it's slightly more expesnive you it will pay off in the long run. Running a business on 4G isn't a great idea purely because downtime is more likely.

Pretty much the same for most of the schools we support too. Head says not enough staff can make it then closes the school.