danielghares

Fslogix all the way for shared PC's - wouldn't touch anything else now. Staff laptops are all local profiles though.

Check that the user account you want to use has at least read permissions on the MDT deployment share. Also ensure they have the rights to domain-join machines, if that automatically happens as part of the task sequence

No idea - it was in place before I started. The issues are being noticed by SLT now though, so hopefully will get backing to move to an alternative provider

Same here for biostore. Our office team are pulling their hair out trying to get hold of them. We’ve been told the only way to contact them is via their online ticket portal (no phone, email, etc..), but their response times are diabolical. Going to request a copy of our contract and see what the SLA terms are, as it’s not listed on their website.

If you need user profiles to ‘roam’, I’d suggest using fslogix rather than roaming profiles or appdata redirection. We use it for 2000+ users and it’s been faultless. All profiles are stored as virtual hard disk files and get mounted during the login process. So much faster than roaming profiles

We had the same problem. The only way around it is to implement some kind of provisioning app which users could download that'd auto configure all the WiFi settings. We ended up joining Eduroam and using that for our BYOD needs, and it's been fantastic so far. They've got apps that'll autoconfigure pretty much any device with minimal user effort needed.

Personally, I'd ignore UEV (I believe it's no longer in active development) and use Fslogix profile containers instead. We've got it running for all our staff at the moment and it's fantastic, but very storage / network intensive.

Zabbix, along with Grafana for nice graphs

To be honest a lot of the guides aren't great, as they're mostly approaching it from a RDS view point. This HP whitepaper covers quite a lot of stuff, but the basic steps are: Install the FSLogix agent onto your PC's. This will then add a security group called 'FSLogix Profile include' to the local groups on each PC. By default all domain users will be in this group, so you may want to change that via GPO and add your own groups to control who uses FSlogix profiles. Create a file share on your file server to host the profiles. Make sure this has enough space (we're seeing around 5gb per user at the moment) and set the correct security permissions (details are in link above) Import the FSLogix ADMX templates to your central store, and create new GPO's with all the relevant FSLogix settings (again, details in link above) Clear the 'user profile path' attribute from each user in Active directory. FSLogix works by redirecting each users local profile into a profile disk on a file share, so if you still have a user linked to a roaming profile it'll cause lots of weird issues. That's basically all the main steps. Feel free to DM me if you need any help

I can't give any specific advice on UEV, but I would 100% recommend trying out fslogix profile containers instead. We're just about to roll this out to staff and are seeing login times around 15 seconds, which is so much less than the roaming profiles it is replacing. Also I believe UEV is no longer in active development.

Could you PM the address to me please? Thanks

I've taken on the ICT Manager role, so my previous position of Senior IT Technician is now being advertised. This is a great opportunity to work in an large, outstanding school, with lots of exciting projects on the horizon. If you'd like an informal chat about the role, feel free to DM me. Job Description Person Spec For the full applicant info pack or to apply, please see here https://www.tes.com/jobs/vacancy/senior-it-technician-oxfordshire-1509824 Senior IT Technician, The Cherwell School, Oxford Permanent Position 37 hours per week; all year round Annual Leave: 29 days per annum (plus bank holidays) Salary Grade 9: £27,741 - £30,451 per annum Start Date: As soon as possible The Cherwell School is a successful comprehensive school in Oxford, rated ‘Outstanding’ by Ofsted. We are looking to recruit a Senior IT Technician to support staff and students in their use of ICT equipment, providing second level in-school support for complex requests. We are looking for an enthusiastic colleague who has a flexible and positive approach and who enjoys working in a team. Key Responsibilities Day to day management of Cherwell’s core infrastructure, services and data to ensure the availability of a fully operational IT network throughout the school Provide second line support for more complex requests and issues, performing diagnosis procedures on hardware, peripherals and applications and liaising with 3rd parties as required Assist the Network Manager with business-as-usual projects and to take a lead in resolving infrastructure related issues Act as the Network Manager in their absence General Tasks Assist in managing the IT helpdesk system correctly and respond to requests Create and maintain documentation of all IT systems Give appropriate level of advice on compatibility of hardware and software Maintain the schools IT Asset register and carry out regular checks Manage the school’s Google Workspace and Office 365 environments Building and testing software packages for deployment over the network Ensure IT changes are managed in a structured way and documented To keep abreast of developments in technology and their application for education Liaise effectively with staff to provide a solution to their requirements Perform advanced diagnosis of faults on computers, network hardware, peripherals and applications Train groups of staff as appropriate Assist in the design, implementation and management of a comprehensive Disaster Recovery Plan Liaise with vendors to discuss requirements and negotiate on purchases Development of scripts and processes to increase productivity within the IT Department Infrastructure General management of all infrastructure (updates / patches, maintenance tasks,monitoring). This includes, but is not limited to: Servers, both Virtual and Physical Firewalls Switches / Routers Access Points [*]Maintaining a high level of network security by monitoring new CVE’s and applying patches when released [*]Working with the network manager to design and implement new network infrastructure to meet the schools requirements [*]Leading the commissioning and decommissioning of servers and services, as required [*]Maintain the backup and disaster recovery processes of all systems

I've used SnipeIT in the past and thought it was really good. It's easy to get it up and running in a docker container, if you want to test it.

A L3 switch will only route traffic if it's set as default gateway. You can have multiple layer 3 switches in the same subnet, but the only one that will route traffic is whichever is set as the default gateway. What needs to be done depends on how your VLANs and subnets are setup already. If clients across all your buildings are in the same subnet (i.e they're all in the same vlan), then adding a L3 switch at each 'main building' wouldn't do anything as that client subnet would still need to go across all buildings. Instead you'd need to create a new subnet for each 'main building' so that traffic is isolated to it, and then the core will be able to route that traffic.

We're running SVE across our hyper-v environment. One SVE VM running on each host, and then the client installed on each guest VM. I followed this guide to install https://docs.sophos.com/esg/virtual-environments/1-0/help/en-us/pdf/sve_10_central_sgeng.pdf

A couple of our users have reported that Drive for Desktop (File stream) crashes immediately on launch. All our installations are set to auto update, and the problem machines are running version 48.0.13.0. The logs show the below: 2021-07-01T08:55:31.657ZI [13384:MediaManagerThread] root_preference_db.cc:735:UpdateSchema Outdated RootPreferenceDB schema version. V2 stored in sqlite file vs. V1 in executable. 2021-07-01T08:55:31.658ZE [13384:MediaManagerThread] root_preference_db.cc:739:UpdateSchema RootPreferenceDB schema downgrades are not supported. Sign out and uninstall required. 2021-07-01T08:55:31.658ZE [13384:MediaManagerThread] root_preference_db.cc:318:Initialize Failed to update schema for RootPreferencesDb. 2021-07-01T08:55:31.658ZE [13384:MediaManagerThread] media_manager.cc:449:StartInternal Failed to initialize RootPreferenceDb: Status::UNSUPPORTED_SCHEMA_DOWNGRADE 2021-07-01T08:55:31.658ZE [11444:NonCelloThread] client.cc:318:Initialize Failed to start MediaManager: Status::UNSUPPORTED_SCHEMA_DOWNGRADE 2021-07-01T08:55:31.658ZI [11444:NonCelloThread] drive_fs.cc:576:RunDriveFS Return code: CANNOT_CREATE_UI 2021-07-01T08:55:31.683ZI [11444:NonCelloThread] ipc_server_manager.cc:40:~IpcServerManager Quitting the IPC thread 2021-07-01T08:55:31.685ZI [11444:NonCelloThread] ipc_server_manager.cc:43:~IpcServerManager IPC thread destroyed. We've tried clearing the users' appdata, and reinstalling the application but neither fixed it. Has anyone else experienced this?

+1 for using James Rankin's guides to help with this, they're great. He has accompanying YouTube vids too

+1 for zabbix and grafana. Completely free, and you can do some cool stuff once you dig into it. I'd recommend installing the front end and database on different servers though, as we were having performance issues with them on the same VM.

We've got 16 Kyocera copiers and support with them. When the machines work they're fine, but our reprographics ladies have had to call out so many engineers in the last year to fix various hardware faults. We've also found they're ridiculously slow to respond to our calls, citing various excuses for the delays. They also provide support for our papercut, which is very hit and miss depending on who you're speaking to. We had an issue ongoing for nearly 2 months with certain MFD's not scanning to email, and in the end we ended up solving the issue ourselves before they did!

We had a similar issue on our site. We're running Ruckus R320 / R510 AP's, and when we initially unboxed the HP chromebooks most failed to join our PSK enrollment network with a 'disconnect-failure' error'. Tried so much to narrow down the cause but haven't got anywhere. Most seem ok now, but we still get the odd few with issues.

Yep we've had several reports of this today as well

Securly. We got it in the summer, but the rest of our trust have been using it for much longer. It's been great so far, and was easy to setup and deploy across our windows & chromeos devices, as well as on our BYOD network

Another solution incase anyone is interested would be rclone, utilizing the --drive-impersonate switch. All it would need is a simple script to iterate through all your user folders and execute the command for each one

Has anyone had any luck with this yet? I've tried everything I can think of with roaming profiles, and can only get FS to auto sign in on PC's that the user has previously signed in to (i.e not a first time login). Strangely though even when completely clearing cached copies of the users profile folder from a client machine, when they login again file stream successfully signs in without prompting for approval. This makes me think that there is either something in each profile that tracks which PC's that the user has signed in with previously, or something on each machine which keeps a track of previous file stream users. I'll try and do some more digging with procmon / regmon

You aren't the only one - all our admins got the error 'your account does not exist'. Cue a major sigh of relief when I found out it was a wider problem..