MCPearson

It's to do with how Salamander archives users instead of deleting them. I assume that's the default so that it can use the same record if the user is re-added to the MIS. Usually I'll take my used tokens down to the nearest door and scan them all. They then appear in the main Net2 event log, you can just double click the token ID it'll take you to the user record even if its hidden. Then I just delete as required and reassign the token.

Domain users should already be a member of the local users group when you domain-join a PC I think. All of the PCs I've done this on are domain-joined, and I've no funky configuration messing with local groups.

That could be the difference, this was set up on Win 10 and I'm still on Win 11 23H2.

I don't get any UAC prompts at all when running it. I haven't had to do anything on the client PC (I deploy this to 30+ PCs) and don't have any GPO changes to UAC behaviour, just the default. If you downloaded it from ruidacontroller.com then it should be the right one. Ours doesn't seem to be digitally signed either though. This is how the permissions are set on the folder, it just uses the local users group from the PC and isn't something I am setting myself: You can configure AppLocker to give everyone execution access to the whole folder incase it's stopping execution of the other items. That's just about my entire config for this.

Have you given the folder read & execute permissions? I don't give modify permissions on the folder.

Do you have AppLocker configured? I had to add an Allow executable rule with it not being a standard installation, granted access to staff and students.

We're using it here. I tried capturing it and repackaging as an MSIX but it didn't really work as expected and found that it didn't make any reg changes. Now I just use cmd file using xcopy to copy the installed program files directly onto PCs and haven't had any issues from staff/students using it. Been doing that for a couple of years now on Win 10 and Win 11.

If it's Windows, you can retrieve logon data from the Security event log with Powershell. Something like: $LogonEvents = Get-WinEvent -FilterHashtable @{ LogName = 'Security'; ID = 4624; } You can then filter out the noise from impersonations etc. by just querying the properties of the event. After that, you can write it to a csv, db file, etc. I think there's ways to integrate with MySQL if you need. This way you can run the script under SYSTEM or whatever other account without giving users write privileges.

I can't speak for 2025 but I did an in-place on my hosts from 2019 to 2022. I migrated everything over to one host and removed the upgrading host from the cluster, did the upgrade as normal, then added it back and verified the cluster. Left it running for four weeks to make sure nothing was going to go wrong, then did the same procedure on the other host. I think then after I was able to raise the functional level of the cluster from the Failover Cluster Manager console, much like you would do with AD and upgrading/replacing your DCs.

I had issues with DelProf and the GPO as well, so ended up scripting a version myself which I then run through ConfigMgr as a baseline detection, then remediation script but you can simplify it down more than that if needed. I find that the last login details from CIM and WMI and even the folder dates are useless, so I query all profiles with CIM, then grab a list of everyone who's logged on in the last 14 days from the security log with Get-WinEvent. Compare to see who hasn't been on in that time and then remove the profiles with CIM as well. I can share the script if needed but you'd need to adapt it to your own use.

Odd, didn't think it would be cached on my phone, but just tried again and it's unreachable now. Cheers.

Hi all, anyone else who has a Smoothwall, do you any issues connecting to www.1stclassmaths.com? I was getting a err_empty_response issue to be begin with and after adding it to a HTTPS inspection rule only validates the certificate, I'm getting my Smoothwall block page with reason "Server socket errored", or sometimes "connection error". I took a peek through the web filter logs and are seeing 503 errors for the site so I thought possibly it was an issue their end, but I've no issues connecting on an unfiltered connection like my mobile data. Any help would be appreciated.

Have an absolute mess of Netgear, HP Procurve, Meraki, Dell and Ubiquiti gear here, some approaching 22 years old. Everything except the Meraki kit is going this summer as its a nightmare to manage, half of the gear won't take firmware updates and I'm just waiting for some big hardware failures. Only reason we're going Meraki is because the core and wireless are Meraki and were given to us as part of Connect the Classroom.

Used Pebble for about 3 years here, in the end we swapped to Live Register and went back to having an on-site cashless catering server because it was a far better experience for the catering staff, office staff and students.

MAT secondary but we don't have centralised IT, so numbers just for my secondary 700 Students 80 Staff 440 Windows desktops, 80 Windows laptops, 570 Chromebooks, 20 iPads and a few Macbooks hanging about Maintain both Google and MS tenancies but Google is the main one We design and develop the school website as well as a few other in-house web apps as well as hosting them. Look after wifi, switchgear, switches, servers, the usual. Install and maintain the CCTV, of which there are about 80 now. A few Net2 doors, TVs, most classrooms still have projectors, all of the desk phones and mobiles. Fit all of my AV in-house, luckily we own a scissor lift. Also install all my own data points, power circuits, replace any faulty lights/emergency lights. Only contract the electrical stuff out when I'm too busy. Only other thing contracted is the printers and even then still have to look after PaperCut but mostly runs itself. About to start supporting one of the MAT's primaries in April. Team consists of myself (IT & Electrical Manager) and an apprentice IT tech.

Yes, just received the same email here. My finance department are running around like headless chicken.

Hi all, We currently have a number of staff that use Doceri on their iPads to annotate over the top of PowerPoints/Google Slides being presented on our Windows machines. I'm aware that Doceri is now out of support and on top of this you can't log into their admin page to claim your licenses back, so only a matter of time before we encounter an issue, and I do have staff from other departments asking about similar solutions? Has anyone come across a similar piece of software? It feels very education-specific so the options I've found so far don't seem to fit the bill. A lot of them go the other way of presenting the iPad screen to the device which I don't think is what I'm after. Any recommendations welcome. Thanks in advance.

I also massively back VEEAM, it's really easy to use and it costs me very little each month. It supporting immutable cloud storage is a big plus from a security standpoint, as well as 2FA, its ability to spin up on just about anything, and the monitoring features from VEEAM One keeping an eye on my cluster. I've used BackupAssist in the past for a primary I looked after. It was very basic but was a one-time purchase license, which you could upgrade further if you wanted guest file level restore, etc. Not sure how they do pricing now.

I know you want to serve over different ports, but if it's possible you might find it easier to serve sites with different subdomains. Then you have all 443 requests come in to one web server and have the webserver serve different pages using virtual hosts.

We're using Google Meet with us being mostly a Google school. Presentations on the board (Google Slides, PowerPoint, etc.) just use the screen share function. Our teachers also teach quite a bit of the curriculum out of paper booklets, so if it's that or marking past papers etc. we use the IPEVO V4K visualiser - probably the most used teaching tool in our school, even before COVID hit. Well worth the investment if you ask me. Staff aren't allowed to point visualisers at the class. Students at home are almost always on a school-owned Chromebook, so we just use the Chrome OS policies to restrict camera usage.

We use Tali and TillApp from Pebble here. It's pretty clunky working with Arbor but it has good integration with SIMS. Also no biometrics so every child has to have a PIN or QR code, or the catering staff have to search them up by name, which is a bit of a pain.

Hi folks, Currently we're a Google Workspace school and provision our accounts from a local AD using GCDS and Password sync. Previously we were a Microsoft school and in the background we're still syncing groups and users up to Microsoft with Azure AD Connect, although our tenancy has been left to ruin. I'm looking at changing how users are provisioned and authenticate, so it's all done through Azure AD. This is to get SSO more centralised for our systems, and well as have access to MS's superior conditional access policies. So, my question is: does anyone have any experience swapping this all around? Are there any tips you can offer, or know of any pitfalls to avoid? The last thing I want is for all of our docs to vanish into the ether trying to swap it all around