dmj

ie it's a free for all until we are told otherwise.

There was a very similar post that I replied to yesterday on this very forum and I will give a similar answer. In it's most basic form, 'going cloud' means three things: Software As A Service SAAS Platform As A Service PAAS Infrastructure As A Service IAAS. Your goal is to get as many services on SAAS as possible, If you can't do that chose PAAS and if PAAS doesn't work out then - and only then - consider IAAS. In general terms IAAS means moving servers, networking, firewalls to the cloud. There are plenty of places you might need to do IAAS, but don't make it your first port of call. This general strategy will really help cut down on support problems so your tech can build some base images for his workstations (- if it is taking him more than 30 minutes to fix a problem he should be rebuilding it from a known good base image! *) As others mentioned, SIMS is your Achilles heel - that's the thing to move to SAAS first, which means replacing it (with something like Arbor), make sure whatever you chose can provision (and deprovision) your AzureAD/Gsuite accounts, integrate with your catering systems etc ! Once you have done that the other pieces of the puzzle will start to fall into place. * I'm not joking here, at my last place we had a 15minute rule and it would take 5min to reimage.

That's the bit I wasn't sure of. It's different from Apple because Apple don't sell their operating system separately from the device. Here the two product are separate from each other and the sale of one (software) influences the market for the other (hardware). I remember Microsoft had similar trouble when they tried to leverage their operating system dominance on the browser market and they were told it wasn't allowed. Anyway from the comments it doesn't look likely. It was just a thought to try and get a better deal for schools, save some money, improve the world etc

Anyone know that Prometheans UK marketshare is? If it's high there is a good chance this is anti competitive behaviour if anyone want to take that up https://www.gov.uk/guidance/tell-the-cma-about-a-competition-or-market-problem

Computer based training is absolutely effective. I've been doing loads lately. All of the courses I've chosen have a strong interactive element, so you typically watch 20min of lectures then login to a remote system and complete some tasks. Repeat until the course is finished. Do some practice exams then qualify. *most* of the cloud courses are done like this - Azure, Google Cloud, AWS courses all have a 'hands on' element. I guess that's technology for you - they ALL change rapidly. I took the Azure course about 9 months ago and they have gone through AZ0101, AZ102 , AZ-103 , AZ-104 since then. I don't think I'll even be able to pass the exam now without retaking the course.

Looking at their share price, we're not far off buying the whole company

Read the log files

@unixman. Have a look for Google Reference Schools in your area. Many will have trod this path with Chromebooks which are both touchscreen tablets and fully functional linux laptops: https://edudirectory.withgoogle.com/search?expertTypes=schoolOrDistrict Are you allowed to say Black country these days? I think 'Cole seam country', 'Very dark shade of grey country' or even 'west midlands' would be more woke.

If I had a spare £500 million I would buy it just to burn the source code so that it never sees the light of day again.

I had a similar experience, they are around the same price and fewer to chose from without touch. Get the touchscreen and turn it off. When a new head takes over you can just turn them back on.

It's like seeing a car crash in slow motion https://bbc.co.uk/news/technology-52725810

For nearly 20 years It's been illegal in the UK to change your phone IMEI number, which is what is used for tracking/triangulation. I recall it being dressed up as a method of preventing phone theft, but of course the data is held for years. A friend who worked with police on murder cases also told me that the accuracy of triangulation by IMEI number is more precise than is generally recognised and it really helps solve a lot of cases. Presumably it's not sensitive enough for Covid tracking - different signal strengths for different phones etc.

...and it turns out that there is also the UK Access Management Federation ( mostly used by Universities, but is also open to Schools and Colleges). Their job is to manage educational resources so that there is zero configuration for the end user (The educational establishment or Identity Providers). The idea is that resource/service providers sign up and are properly vetted. The service providers submit their security details to the UKAMF and they distribute them to the educational establishment (identity providers). AFAIK they have around 1100 services available. I believe there is a cost but they provide support and training. https://www.ukfederation.org.uk/

The problem with OAuth is (unlike SAML) is that it doesn't release user attributes, so it can be quite limited (great for API's though). OpenID Connect (OIDC) is essentially SAML (which releases user attributes) but rewritten with OAuth2. This is where companies *should* be going best of both worlds. OIDC FTW.

I think I'll go for the DP-3T option

Given the date the certificate was issued, I would expect the problem was that the server didn't know the certificate had been auto updated and didn't reload the new one.

I've used them before and carry always in a glove box Only time I used it the tyre was repairable from the inside, but I reckon if you went to town on it you could easily damage the tyre.

letsencrypt issued: Thursday, 2 April 2020 at 11:02:21

oh word of warning: Azure doesn't support Kubernetes on Windows yet, support will come - but for now you will need to run in GCP and wait for microsoft to get their act together. I suspect it will be there by summer.

Yep. If you can probably run it on a single machine Most kubernetes clusters will require a minimum of 3 servers though. Check it all runs on windows server core and start building !

Running 50 VM's costs you £5000 per month in Azure. If you can run your 50VM's on 5 Container hosts it will cost more like £500 per month and automatically scale as needed. Suddenly the costs of a cloud migration are much more realistic, plus you get self healing etc. The reason is that VM's require a minimum of 1 vCPU (often 2) and a bunch of RAM. Containers can be given as little as 1% of a cpu, which means we can have a LOT of applications per server - when the applications grow, we power up more containers and more servers, when they shrink we shrink them. There are a lot of advantages here.

So put them in containers. docker pull mcr.microsoft.com/windows/servercore

Have you thought about deploying them as 'infrastructure as code '? This would mean that you only back up the data and not the servers themselves. To recover on site you would run your install scripts which would provision your VM's and copy the data back. You would have to get your virtual infrastructure working first, and it will be a big job to rewrite every config in every server as code. Of course, containerisation would save a lot of time and money here. You could have a service mesh from onsite to offsite clusters and have no downtime when your building burns - but from a previous thread I know your not keen on that - but it does seem the obvious solution here.

@localzuk it's probably not worth your time looking at it by the sounds of things, it probably won't work for you.

So an example would be if I have A 2 x webservers, 2x DHCP, 2 X DNS, 2X RADIUS and a couple of file servers that would be 10 virtual machines. If I then want to move them 'lift and shift' to the cloud, I'd get little change from £10k if I wanted a reasonable size machine with backups, scalesets etc. Now - If I have these running in containers, I just need a cluster of three kubernetes servers. That's cut my costs by two thirds. Plus it means the application will self heal if fails, makes updates much more simple to deploy (zero downtime!) and means that if the server gets hit due to a snowday it will autoscale without me getting out of bed. Of course I could just load up lots of services on a single server, but I've been there and done that, when it fails it isn't pretty!.