Search the Community

hi, just stop the pupils from using it and them getting into trouble every time, is there a way we can give certain permissions to staff so the pupils can not use all staff or all pupil e-mail groups?

Hi, I can't seem to find anything online but was curious to find out on Microsoft Teams under Chat tab if from an admin point of view i can populate all staffs contact list/groups? Maybe following a similar structure that is currently in our AD. At the moment it is somthing like Users -> Staff -> Assosiate Staff/Teaching Staff -> [Faculties] Thanks in advance!

We would like to give students access to Gmail, however, some staff are worried that Students will send emails to the distribution groups (i.e. All_Teachers, All_Staff), is there a way of hiding these email groups so that it will not appear in the students Global Directory but will still appear for everyone else?

We're trying to set up some infrastructure to allow us to manage Mavericks Mac clients, as we're going to be buying new Macs in the summer which won't be able to downgrade from Mavericks. We have a server with OS X 10.9.3 and Server.app 3.1.2, the server is an Open Directory master and is bound to our Active Directory. We can see the AD groups in Profile Manager but when we click on Members it reports "No Members". Members are visible in the Directory Editor in Directory Utility. Additionally, I've just noticed that Profile Manager is only displaying some of the AD groups we have and not all of them. There are many groups visible in Server.app that are not showing up in Profile Manager. Anyone have any ideas what to do to correct this? I've already tried wiping the Profile Manager database using the wipeDB.sh.

Hi Moodlers, We have just had our Moodle upgraded to 2.3.x. I like it but thought I'd look at some things I'd not thought of before. It is LEA controlled so I have no access to the backend - yet am a site administrator. This year I have decided to introduce self marking quiz tasks and other self marking elements into Year 7. What I want is that when 200 Year 7 access the quiz and complete it they are stored in class order and not in one long list of 200. Would this be done using groups? I have never used groups but think it could help me organise marking better. I'm getting a bit tongue tied with what I want to achieve here. Basically - how do schools with large year groups sort their Moodle access/marking so that they do not have masses of lists and do not have to create a copy of the course for each individual class. Sense? To me it does. Gareth

An almost verbatim lift from my own blog (just as well I wrote it...)

I need to change the group owner to "07, 06" etc.... wbinfo -g | grep 07 07 07 exists from winbind ! setfacl -R -m group:"07":r-x ./07 getfacl 07 # file: 07 # owner: root # group: domain\040admins user::rwx group::r-x group:lp:r-x group:teachers:rwx group:support\040staff:rwx mask::rwx other::--- It doesn't change the group to "07" - instead it changes it to lp (lineprinter) group. Same with 03,04,05,06 respectively. grep lp /etc/passwd lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin ha - group 7. I can see its' obviously picking up the unix groups, not the windows ones. It DOES work for other windows groups (teachers, support staff, domain admins as above) I tried deleting the winbind cache, restarting winbind etc.. any ideas? It seems to be a new phenomena. TIA

Hi All Firstly please feel free to move this to a more appropriate forum if necessary. I have an O365 group (Unified Group) that has 122 too many members. It would seem that all of year 7 students are also in the year 8 mailing list. The Year 7 students are also in their own year 7 mailing list. I need to find a way to remove all the year 7 students from the year 8 list. I've managed to get a text list and CSV file of the year 7 and year 8 mailing lists. Is there a way to use the list of year 7 students as a feeder file and delete them from the year 8 list? For some reason the year 7 list is a standard mail-enabled security group but the year 8 list is an O365 unified group - not sure if that makes any difference. Pretty sure the commands for working on unified groups are different to those for standard groups. Any way is acceptable as long as it works and it teaches me a bit more about powershell - bit of a newbie when it comes to scripting so please be gentle! Thanks in advance...

I'm trying to set a different homepage for our 6th form but nothing I try seems to work. We have a gpo that sets internet settings including the homepage, if I create a new policy for the 6th form to set the homepage in IE and Chrome the main policy still applies to IE (Chrome does get the update), even if the 6th form gpo is enforced. I've used Windows Components\Internet Explorer and tried using GP preferences for IE10. Any ideas?

Hi All, I work at a school where we have the following setup - Users > Students > Year 7 ... and so on What I would like to achieve is so that every student in Year 7 is part of a Year 7 'security group'? and then when they move up to Year 8 they're removed from year 7 and added to Year 8 - Is there any sort of 'Dynamic' groups that I can use in order to achieve this? Many thanks, James

Hi I have had access to SIMS Discover for a while now but have not been able to get much info on it. What I would like to do is to create groups that are not based around the existing ones. For example, in Discover your have your various drop down menus eg, attendance, within this there are various choices of graphs that you can drag onto the canvas. What I want to do is to create my own groups, for example, students with less than 90% attendance. Can I do this or am I limited to the graphs that are built in?

Hi all, When our Smoothwall was first installed in the school (Feb 2014), we set up the following group structure within our AD: AD Security Group "Pupils" - contained an explicit list of all student accounts in the school AD Security Group "students2013" - contained an explicit list of all student accounts for intake for that specific year AD Security group "Year 7" - contained just the AD Security Group "students2013" (i.e. "nested") AD Security Group "Key Stage 3" - contained the AD Security Groups "Year 7", "Year 8" and "Year 9" (i.e. "double-nested") (and same for all Year Groups and the 3 Key Stages) So, to clarify, the Key Stage groups contained no explicit student accounts - just nested groups. Easy to manage - each year we just needed to update the membership of the "Year x" group to align with the relevant "studentsxxxx" group, and all other groups would update accordingly. And excellent granularity for use in Firewall rules.... In Smoothwall, we mapped, within our AD integration: AD Security Group "Year 7" to Smoothwall Local Group "Year 7" AD Security Group "Key Stage 3" to Smoothwall Local Group "Key Stage 3" AD Security Group "Pupils" to Smoothwall Local Group "All Students" We then created Firewall/Guardian Rules based on the above hierarchy - so that, for example, we could add an explicit permit to the rule for "Key Stage 5", which would give access to a specific Website to 6th Form Students, but not the rest of the school student population. Or we could grant temporary access to a Website (perhaps a gaming site for one lesson) for just Year 8, etc. But the above is no longer working. All Students are only being categorised by Smoothwall only as a member of the group "Pupils" (which is, of course, the only group that has a full, explicit list of student accounts - no nested groups). So, can I throw this out there - is there anyone else using nested groups within AD, and mapping said groups to Smoothwall Local Groups...? I would really welcome any positive confirmation that someone else has, or more importantly is, using nested groups successfully in this manner.... I realise that a lot of school implementations may more simply have a couple of groups, such as "All Staff" and "All Students" (or indeed have granular groups, but perhaps with explicit lists of student accounts in them - with a potentially higher management overhead?) - but the simplicity of group management, and the granularity that this approach provides to us is really useful in demonstrating, for example, the use of technology in safeguarding - it's not always appropriate to permit Year 7's to have access to Websites that Year 13's need to get to. Of course - if anyone *not* using nested groups would like to consider the above hierarchy and do any tests between their Smoothwall and their AD, that would be great... Thanks,

So, I have a database, lets call it 'till' and a piece of software to administer the data in that db. The application uses the logged in users details to connect to the db, and the users with permissions are a member of an active directory group 'till-managers'. Can someone describe the process to me of adding permissions on the DB server to allow everyone in that group read and write access to the database I want. As it stands, I've added DOMAIN\till-managers as a login, set the default db as till and set user mappings for that database with the roles 'db_datareader' and 'db_datawriter'. I should also mention that the app makes use of stored procedures, views and normal tables. What am I missing?

I was looking again at disabling group creation, the conclusion was that you had to have an azure premium account to do this, I see that the document also contains now a licence called "Azure AD Basic EDU licenses" are these free? I can't find them on the googles. I wanted to create some team group SharePoints, but limit their creation to staff.

Hi All, Havent had much luck getting any information from SIMS so far (shocked face) We are a large school and would like to audit the permissions staff have in SIMS. Is there a way to run off a list/report of staff names and the groups they belong to? Also my manager wants to know if there is a report which can be run once a day for example to show what changes have been made to pupil records and who by. Any help appreciated. Charlotte

Hi all, we are having trouble with the way we have our network currently configured. for example... we have a group called "Reception Staff" which is used as a securty group on one of the their shares. we also use the same group within Exchange 2007 as a way for staff to email all of its members. however the problem is when changes are needed or staff decide other people should be in that group but not get access to the shares, or vice versa.. shouldnt be in the group but get access to the shares. all opinions and reccomendations welcome. thanks, :bored::confused:

Hello! Our headteacher wants to know how to send an email to ALL STAFF without having to add individual emails one by one to a distribution list. How can I set up these groups centrally as admin so they appear on everyone's lists? I'd like to be able to do it via a csv or something. Or by being able to select all the emails already in the system and putting them in that way. It's a horribly convoluted system this Outlook 365 Hope you can help!!