Jamo

Sounds odd.. I would on the phyiscal: Ping DG Ping another interface on the core switch ping the fw, and watch for the traffic to see if its being dropped. Without knowing a bit more I would say it could possibly be, FW config or mismatched subnet masks maybe. It's unlikely to be a nic team issue, as I would have expected the communication issues to be further reaching if there were fundamental comms issues with the nic of a dc

I hadn't heard of any noticeable performance impact of many SMB shares on a server? Mainly I would say its more of a housekeeping thing so that when you browse via SMB you aren't bombarded my loads of shared folders. Saying that there are downsides to not using shares if you have your system setup with the old style homedir as My Documents you will be hit by the interesting "Everyones folder is called My Documents" issue! Both methods have their merits, choose whichever works best in your scenario

I've seen it done both ways, don't think either is better as such but as the others have said its a little easier on admin to use a global "homes" share I've just tested the script, try this:

To use powershell it would be something like: I haven't tested the code above but it would be something like that

You could have a play with net share

On the upside if they do run that, as long as your MACs are AD authenticated they will leave a pretty obvious trace in the sudoers file!!!!

Xibo has improved significantly in the last few years, would definitely suggest another look. Install isn't hard if you have installed anything LAMP based before

If when you get into the solutions accelerator screen, you can press F8 and a command window will pop up. Do normal network diags in here, ie ipconfig, ping your gateway/MDT server. Sounds to me as if either your server isn't configured to look for itself correctly (ie no DNS or the DNS name is wrong in the bootstrap.ini) or the network drivers arent installed for the particular machine type. The second is easy to test, just image a VM, if it works and the physical machine doesn't then its time to inject some drivers!

Not in the reference image. I do in the final deployment though.

My preference with MDT has always been to create a bare reference image (ie just deploy and capture the OS with updates) and then apply everything else in the task sequence. This means that you can get away with just the one OS image for all hardware and software combinations without having to rebuild the base image too frequently. I have always used VMs as the capture target just deploying the drivers to the OS rather than the VM tools complete. The VM is a much easier target to rebuild as well (saves space on your desk ) I also use driver filtering to make sure I get a consistent image to all desktops and laptops. See my website (RS Applications | Simple Software for Simple Things wmi | Search Results | RS Applications) for some info on driver filtering with MDT as I also created a couple of tools which were useful when doing this (WMI information tools and a couple of scripts to clean invalid WMI data)

Just by creating vlans doesn't necesarily prohibit the networks from talking to eachother if you have a router which bridges the VLANs which is what it looks like to me. You would have to create ACLs on the router to stop the VLAN with the APs attached talking to the other VLAN else the router will see it as a directly connected LAN and just route packets between the VLANS.

There will be a hidden .ini file inside the folder which tells Windows what to display as its name in explorer. Make sure you enable show all files to see it though. The actual folders will be named correctly, I'm guessing you have redirected all the folders to the same place?

Use obs its by far the best screen capture tool for free

Best Practice for MS Server 2012 DeDup Repo | view topic This thread has some good info on the dedup and veeam. Tbh the issues I saw were likely due to the size of the backup files which many are way over 1TB. https://msdn.microsoft.com/en-us/library/hh769303(v=vs.85).aspx MS apparently doesn't support dedup on volumes ~64Tb and files approaching or larger than 1TB. However it does work! Just has the caveats that its rather slow!

I have never had to do this since not using CC3!

I have had experience with that. It does work, however the 2012 dedup is not inline so we had to seriously up the scheduled tasks to actually achieve anything like useful de-duplication performance. Space savings once it actually did dedup were impressive but were nearly wiped out during every full backup. Also you can't successfully run reverse incremental with it as it will rehydrate the whole backup each night meaning 2012 would have an insane amount of changes to dedup every backup cycle. Personally I am much more a fan of arcserve's global dedup, its a huge improvement over veeams per job dedup and it means you no longer have to rely on the 2012 nightly optimisation jobs to fix the space issues.

I would say RAID6 to be honest, are you going to require RAID10? The performance gain is mostly on write, unless you are backing up gigantic data its not required. You would be better off being able to keep more restore points for longer than to write them to disk faster! Regarding blocksize, NTFS and the newer filesystems don't tend to fragment so much due to the way they allocate the file blocks. The VEEAM files are also huge so block size isn't important. Partition alignment is, but I believe the OSes are dealing with that by default now. https://support.microsoft.com/en-us/kb/140365 https://technet.microsoft.com/en-us/library/dd758814%28v=sql.100%29.aspx

Make sure its got a >> else you will overwrite the file each time. Also need date and time echo %date% %time% %COMPUTERNAME% %USERNAME% >> \\server\share\log.log

Not sure exactly what you are trying to achieve with this but... ps -NU root will give you a list of processes which are not owned by root, you can grep as you wish then.

That sounds an awful lot like network issues to me. Wireshark will only show you traffic which hits your network interface, so that's broadcast traffic, or traffic directed at your IP/MAC. It might be worth looking at the switches and checking the counters, on a cisco its show int gi0/0 haven't used HP for a while but it will be a similar command. Look for Errors/Discards, if there are loads, clear the counters and leave it for a few days and have another look. Your errors and discards should be low, even on aggregate/portchannel links. I agree with the others, with an active directory network you shouldn't target an outside DNS server (unless you are testing something). It won't break anything its just not recommended due to AD being tied so closely to DNS. However I don't believe that DNS is the root cause of the issue you mentioned.

Anything in the event logs at all? There should be a GPO/folder redirection related event category in the more verbose event logs in >2008

Or they are on different subnets and the smoothwall doesn't have a route back to the original host

How many websites do you have on the iis server? Right click on each one and check the bindings of each as as unixman said its likely there is already a site using port 80. Try running netstan -an in a cmd prompt and look for something listening on port 80

That will only apply after the machine has been imaged as the Local GPO script is run during the deployment. It could be DNS resolution issues, make sure your deployment share is correctly referenced in the properties windows (right click/Properties on the share name) Try FQDN and the IP if that doesn't work Edit - ignore My post above I misread your post! As someone has already mentioned its highly likely to be the local GPO option.

What about the Windows event logs? is the website started?