Jump to content
EduGeek EdSec 2026 is on Tuesday in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

3s-gtech

Members
  • Posts

    12,317
  • Joined

  • Last visited

Everything posted by 3s-gtech

  1. The 'local' PolicyDefinitions store is for local group policy, i.e. configuring them on the machine itself. While this works on a DC, to a point, it doesn't work properly if you have multiple DCs with a DFS-R sysvol for instance. You need to copy any policies to the \\yourdoman.com\SYSVOL\ yourdoman.com\Policies\PolicyDefinitions and that should be your baseline location for any ADMXs (and ADMLs).
  2. Here's a variant of mine. I have two server ranges (1.0 and 2.0 below), so two static routes. This works for me, but I have two NICs and this configuration is not necessarily good practice - you need to tailor that to your needs and requirements. Also note that I install this directly within the Powershell, not as a separate XML file (shouldn't make a difference though). my.vpn.server.com IKEv2 Certificate SHA256128 AES128 AES128 SHA256 Group14 PFS2048 SplitTunnel true 172.19.1.0 24 172.19.2.0 24 172.19.1.0/24, 172.19.2.0/24 true true true internal.domain.com
  3. We went from Cisco 1Gb to desktop with 1Gb uplinks (with an HP 5406zl v2 core) to Aruba 5Gb to desktop (mostly at 1Gb) with 10Gb uplinks (and 50Gb stacking). Not noticed any difference. The Cisco and HP kit was reliable and there was no saturation of any links. It wasn't as resilient due to single PSUs in edge switches, but the core was a beast (and lives on as our CCTV core, with the old PoE switches on the edges). This kit should give us good future proofing though.
  4. You want the Uninstall option - Remove will orphan it off (it's for machines that have been retired/reimaged/have been dropped by their owner).
  5. SOLUS3 to remove the SOLUS client, then a GPP or startup script to remove the folder itself (or both can be scripted).
  6. That's how ours are set up. Office 365 login (I have to enter the username twice on the login screen!) then it goes through using our GW settings. Office 365 link is then on the GW dashboard.
  7. I'd be interested if anyone has had any luck with cleaning. Thankfully, our laptops have avoided this punishment (through being locked away) but I've lost more than one Apple aluminium keyboard to it.
  8. From what I've seen, yes it is. When you link up that the addresses would all be linked to children, potentially students of the school, that this was data being controlled by the school and that it has been disclosed then the parents would have a cause to be concerned. The next step is for this to be reported to your DPO, who will manage what happens and whether it's reported to the ICO (which is a bit more involved).
  9. I have the same, loopback and a static internal as well as a DHCP internal. I have an external too as that was the guide I followed. The actual server, in Control Panel, only shows one internal and one external NIC.
  10. Did you put it as e.g. 10.42.6.0 (not a wildcard)? My routes don't have any wildcards in them. Not sure this is the cause of your issues - but can only relate what I have and it works here.
  11. In my XML I have the IP address set as 10.42.x.0 (where the x is the subnet of that server) with 32 as the prefix. I then have another route for another range I use. Bear in mind that you need to clear the profile once it has been set on the client - it doesn't update or overwrite a previous configuration. Remove-VpnConnection -AllUserConnection -Name "AoVPN_profile" (where that's the configured name of your profile).
  12. I used to do this with a simple mixing desk and three wired microphones, with Skype for Business. It worked fine, and could be set up in seconds. We replaced it with a Logitech GROUP that does the same thing with a single mic. Still quick and easy. Pop-up works fine IME.
  13. I lose around one a year, of 500. Had one recently due to a teenage strop (but not deliberate). I did buy hard glass ones, years back. With that low loss rate, it wasn’t worthwhile. I have more die through life expiration now (BenQ ones seem to lose the ADC first, so I just switch to DVI from VGA).
  14. They’ll take an i7 6700T. Thermal limits are your barrier. These are a bargain Dave. I’d be all over them if my budget hadn’t been spent on face masks and social distancing yellow tape.
  15. You’ll be very close, the fact that the VPN connects shows that. Have a look through all the pointers in the blog link, and re-check those steps in the setup guide.
  16. I added routes to the specific server ranges, so I could access internal services. Not sure this was the best way - you could just allow to the particular servers you need. DHCP/DNS and AD will be necessary.
  17. Bear in mind that 21H1 reaches EOL well before 20H2 does, if you plan your deployments over a longer timeframe. The lifetime of H1 versions is pretty short!
  18. Any RAID diagnostic tools installed? That could be a dying disk or controller. Any warning codes or lights on the front panel?
  19. Does seem strange. Any changes to the host PCs? Extra load on their USB ports from other devices? Do they connect reliably from a short cable into a device with nothing else attached?
  20. What USB cable is being used with them, and how long is it? They're flakey with some extensions and some active cables - I've found that some passive extensions are better than others too up to a max of about 5m.
  21. You should be able to remove this as a startup entry which then disables the background capabilities. That'll need a registry tweak which can be deployed with GP.
  22. You're certainly skirting the limits.
  23. How big is the (SIMS+SOLUS+Discover) DB? If it's bigger than the allocated memory for SQL Server, you'll have constant swaps - hugely so. If your DBs are that big, you'll need to look at slimming them down as they shouldn't take up all 25GB normally.
  24. Though SQL should load everything into RAM to reduce swapping, perhaps the host server is overstretched when it comes to disk waits? Seems unlikely with 64GB of RAM - unless that RAM is actually allocated across other VMs too. If that's the case, it'll run like a dog.
  25. Stack them with DACs (J9281D I think). Cheaper and better.
×
×
  • Create New...