MatTheTech

also, they will be given a word document to make more friendly to to read but essentially they have to re-create it because of the formatting etc also.

Hiya, Had a query today. Are there any applications out there that can take text and content from different sources such as websites and allow you to quickly and efficiently enlarge text and pcitures and other content within the source document easily? would be useful to know as have had a few queries around this.

Hiya, has anyone seen this issue before. We're on windows 11 as standard. we noticed the other day our IT rooms have randomly start closing browsers on loading. On room edge and chrome close straight down when clicked. One room chrome predominantly works but edge doesn't. we've been through GPOs etc and cannot find anything. any ideas why this might all of a sudden have broken!? Only fix atm we've found is to reimage. thanks in advance!

Hiya, I was looking at making a JAMF rename script which would rename our macs on enrollment or on check-in (once per "computer" or Mac rather!). I remember somewhere I used to be at a big complicated script that renamed it based on a spreadsheet and you had to have a file-share to the csv and setup permissions etc which for people less experienced in Macs and JAMF might be a bit of a pain! I made something which and easy in a sense in about 30 mins and I wanted to share as might help you with your mac deployments and renaming process... I've put a basic one for rename one mac, but the idea is you use the script (but just replicate by copying and pasting section "2a" for each mac you have)... How it works is section "2a" creates a MATCHED=Y value and a NEW_NAME variable IF a serial number match is found. The bit in section 3 then runs the rename script if the MATCHED and NEW_NAME variables are created in section 2a. " #!/bin/bash # 1 - Get the Mac's serial number SERIAL=$(system_profiler SPHardwareDataType | awk '/Serial Number/{print $4}') echo $SERIAL # 2 - List TTA Mac Names and there serial numbers in query below. # 2a - Compare Mac Serial and Mac Asset and if match is found then rename the mac using scutil script # Room: T9 if [[ "$SERIAL" == "<** ONE OF YOUR MAC SERIALS **>" ]]; then MATCH="Y" NEW_NAME="<*** NAME OF WHAT YOU WANT THIS MAC TO BE CALLED ***>" echo "This mac matches a mac in the list!" else echo "Not this one!" fi # 3 - Rename Mac using below script if a match is found if [[ "$MATCH" == "Y" ]]; then echo $NEW_NAME scutil --set ComputerName "$NEW_NAME" scutil --set HostName "$NEW_NAME" scutil --set LocalHostName "$NEW_NAME" # Flush DNS cache (optional) dscacheutil -flushcache echo "We are renaming this mac now." else echo "This mac didn't match any assetted serial numbers" fi " Hope this helps people and perhaps just restart the mac as a box ticking task!

morning! just and update. We had an issue a couple of days ago. Miracast wouldn't work on said laptop, for any user on any screen i tried. i uninstalled ESET AV, it worked straight away. i then reinstalled ESET AV, it temporarily worked, then after about 20 - 30 mins stopped. that then lead me down the path of is AV blocking communication in some way. I then looked up ESET articles for AV and found the below... and added the rule to allow "C:\Windows\System32\WUDFHost.exe" to talk on "TCP & UDP". We did this 2 days ago and not aware of any Miracasting issues since then. We are hoping this has resolved our issue. But from our testing a couple of days ago we were able to make the issue happen and consistently make it go away with this firewall policy so we're hoping Miracasting is now stable here. So Far So Good! [KB8202] Allow wireless connection to displays or projectors in ESET Endpoint products

Hi all, quick question. wondered if anyone has come across this and worked out. We have shared apple macs with students who use logic for their music lessons. We're finding that students sometimes download their own copy of the logic sound library. I've tried the following to try to force script/jamf deploy config settings to ensure students pull from one central sound library on thew mac... - Tried Alias/symlinks but it transpires that Logic doesn't support this method. - I did a jamf composer package to look at new and modified files, and found when i change the sound library that logic updates a book mark file with the new library path. that however doesn't seem to work proerly when I deploy to others users despite doing the corrcet permissions. Has anyone encountered this issue and found a fix for it. All I basically want is to configure all users on a mac to automatically use the same sound library location rather than relying on them to manually pick the shared location. path is in "/Users/Shared/Logic-Sound-Library". I just want every new and existing user to automatically point to this path.

I'm in favour of settings above the client as such as its more of a blanket and simplified, clean cut approach.. definitely better than faffing around with software restriction polices. i think blocking the wifi to only one network/ssid is a good thing in GPO as it means the device can only join the block internet wifi which rules out room for error or cheating the system.

Hiya, I suppose the path of the application is whatever people want it to be depending on you environment, suppose the key thing is it loading on login to make it easy for the end user. the other key thing also is the text suggestion bits... which if you have managed to get working is brilliant and i may try it myself as I like to automate everything!

A common requirement for exams and exam laptops is for the laptop to have no internet access for the duration of an exam. I've seen people try to achieve this in various ways and to be honest quite complicated un-necessary ways such as in group policy with software restriction policies which aren't always reliable. If you require exam laptops with no internet. I would recommend: - Imaging them from the beginning with the bare minimum. - Ensure there is AV installed for security reasons - create a wireless VLAN which exam laptops only use. On this VLAN either have an ACL that allows access to get a DHCP address and local network access (for purposes if required such as local access to print for example). I will post a Cisco ACL shortly as an example or have a firewall rule which blocks internet access for that subnet/VLAN. The key is though that the devices are on a separate VLAN isolated separately so you can impose certain restrictions. - Have an "Exam Laptops" OU in AD in which you can create a GPO to block all networks apart from the one SSID that you join the laptop too to put it on the VLAN/Subnet with blocked internet. Hope this helps!

- Deploy using Intune or whatever software deployment solution you use to the relevant IT rooms, laptops. - Deploy to default location... I think c:users public it goes too. - ensure an icon is present in 😄 users public desktop (to save people having to go looking for it!) - Have a generic exam account which is only enabled for the test durations, and disabled the rest of the time. have a GPO which is targeted at an OU with that account in it. The GPO should be set to run secure client om file path on login, this means that you login with the account and the software should load automatically making the experience for the user and exams team much easier and straightforward. - If the software needs updating it will tell you this and ask you to restart the application, do this. - under the user's account "Autocorrect misspelled words" and "Highlight misspelled words" needs to be turned off. I and other very experienced Tech professionals have tried to do this in GPO with no luck! let me know if you've worked it out!? I hear though that for an Intune only enrolled device, this is possible in Intune.

- Use static IPs (because they don't support DHCP in iCard, last i knew had to be static). - When suing static, ensure the IP you give is outside of a DHCP scope (I shouldn't have to explain why!) - Don't keep renaming them when you move them! Simply name by the Asset label... For Example... <SITE>-PR1234> - Keep Site Codes simple! P.S: Hello to Bob at IPS also!

1. Networking: Put Entry-Sign serve/Host its own entry-sign VLAN subnet with the terminals OR put Entry-sign terminals on their own VLAN subnet and the host on a server VLAN. 2. Anti-Virus: Also ensure you have AV installed on the Entry-Sign server and ensure it can get it's signature updates from whether they're on-prem or over the internet 3. ACLs: Ensure that your server and terminals can talk to each other on their relevant VLANs, the server can talk to a WSUS server, an AV on-prem server or relevant signature update addresses on the internet. 4. WSUS: Ensure your Entry-Sign server can talk to a WSUS server to get the latest updates. 5. Entry-Sign "Sites": Ensure if you only have one site configured on your entry sign system otherwise this causes confusion and the sign in/out records will be inaccurate. So for example if your entry sign host is "Site 1" then ensure your terminals which are connected to that server say "Site 1" too. If your host and terminal are configured as different sites this means you automatically get signed out of the other site when you sign into one site! 6. Backups: Please don't backup the Entry-Sign server to its own drive! I'll let you work that one out for yourself!!! back it up to a UNC path which is picked up/backed up by your chosen backup solution. 7.. Vendor Support: Ensure you ALWAYS have a support contract as this is effectively your fire evacuation system... so its obviously quite critical!! 8. Regularly Test that you can print evacuation reports etc to test the system in action (as it were!)

Hiya, we have an EntrySiign Mifare reader. It is configured with conflicting IP address details and we are trying to find a way of resetting it so we can use it. issue is when it is plugged into the network it is one the correct IPv4 range but has incorrect gateway on a different range and maybe an incorrect subnet, not sure. An idea how you reset these things so they pick up DHCP. Have tried plugging directly to my PC and putting on the same ip range but because the network details on the device might be conflicting I'm not able to make a connection to reset it. Almost like i need to clear the LAN module of the IP. Have tried the reset on the motherboard in the device and removing the cmos battery, no luck! Its one of the old black an gray bordered Mifare readers.

Hiya, My school use mirror-casting on a wide basis in the classrooms, halls and conference rooms. We are continuously encountering issues with these. For example I had an issue today where i couldn't get a Microsoft display caster working at all, wouldn't connect on any laptop i tried. I plugged a different one in and that one was fine. i left the room knowing it was working and when a visitor connected it played up.. probably because there were updates on the laptop. then the original wireless caster worked fine for someone else up in the office later on that day. we are continuously being called to issues similar to this, does anyone know why we might be encountering so many issues or is the technology just not reliable? have other school had these issues with a wireless casting setup and did anyone manage to fix or find a good solution or setup to these issues? would be keen to find out.

Hi all, Wanted to know if anyone is encouintering the same issue as me. working on a new big sur mac image for next year. big sur doesn't seem to b playing ball when binded to AD. issues with profiles. when i login as different accouunts i have the issue where an apple popup comes up saying "mdm/profiles wants to make changes". it asks me to enter an admin password to do this so i do and then big sur deletes all the profiles and ca certs and then the mac is unenrolled. has anyone seen this or aware of a fix? Macs are enrolled with jamf.. this is where the profiles are deployed from. help would be much appreciated. Mat

I'm fairly new there but historically some of the software there in use will only operate fully under a local admin

Hi All, we're doing a project to move our workstations off of RM and to vanilla Windows 10. When we started imaging it was fine as i could image a machine using MDT (windows 1703 was the ISO. and then if a user required local admin access i simply added them to the biult in administrators group and all was well. I've updated the iso to windows 10 v1809 a few weeks back and the other day went to add a user as a local admin, we restarted the worksation and i had the user login but they were still not a local admin. In an rm network and cc4 imaged pc you would normally add the user in the management console to the pc a privileged user and restart the pc however the vanilla windows way of adding a local admin seemed to work on a v1703 windows vanilla laptop the other day. does anyone know what this might be? i would just use 1703 however it has that ridiculour problem where users logins stall half way through with a black screen. this is why we moved to the 1809 version but have obviously now come up against this problem with adding local admin rights. I've have found that by removing the Staff User Type gpo from the domain user it gives them a little more access however in 1703 there was no need to remove a gpo etc. any help greatly appreciated.

Thanks for your reply! We use an rm cc4 network, trend AV. Prometric have advised that we install as a local admin account, add c drive users surpass folder to ac as an exclusion, give full access to the surpass folder in c: users, unblock 443 port which is and bypass proxy for the sites they provided. We’ve done this with no luck. Yesterday we managed to get a bit further on a calling laptop which we took off the network and tethered through a mobile so going around the filter which is provided by rm in partnership with the herts IT. We managed to successfully lunch it. Even though the satellite launcher was already installed we downloaded it again after we logged into Prometric and ran it and then loaded up the demo and it worked. I couldn’t even get it goin on my home PC until even though I’m obviously an Local admin on my home pc. Prometric simply say it’s something with our network but at the same time it’s obvious that it doesn’t work out of the box on a home pc and home internet connection. On the RM network find that if I login to pro-metric and download the site launcher as my domain admin account I get a third app is blocked by your administrator blue pop up. The website is obviously trying to launch the client wrapper application in the program files. If we’re bypassing the proxy do you think we may still need to configure the proxy xml? Prometric have remote in several times and haven’t been a great help. At one point I asked them what sites and what ports need to be unblocked on our network and they told me that we would need to find out what ports there software uses (ourselves!?) ... shocking Prometric said to check that the c: users surpass folder is t being cleaned out but I can’t see any sign of that and Real-time scan etc is turned off for that directory too. I never thought I’d say it but this software is actually worse than Pearson POP LAN. Ive lost count of how many weeks we’ve been trying to get this going

Hi! We're looking for help too! I've been given the task of setting up Surpass Secure Client and prometric on our system. We're using a windows 10 network. We've installed Surpass client and the prometric satellite launcher and whenever we've tried to run the tests they fail after we click the launch exam button. it tries to load up the surpass client and then crashes out. ive evan tried from home and it doesn't work. prometric say its a network issue but every time we get a different issue with it. we've only managed once to get it to load properly and that was on a machine that we took off the firewall and disconnected it from the network and thered it but that only worked once. the software is an absolute nightmare please help!