computer_expert

have you (or your antivirus vendor) set the prerequisite registry key before applying the update? https://support.microsoft.com/en-us/help/4072699/january-3-2018-windows-security-updates-and-antivirus-software

There are a few appliances listed here: https://www.pfsense.org/products/

There is a good guide from pfSense here. No pictures but should help on understanding pfSense rules. Use aliases whereever possible - it makes configuring rules a lot easier.

An update removed the ability to set the password via GPP (the field is greyed out after the update is installed) Disabling SMBv1 is a good bet too, providing that you don't have any kit that can only speak SMBv1 (old nas drives, Server 2003/XP boxes, old network printers with scan to file share capability etc)

If you are looking for an SFF sized machine, the HP Compaq 8300 has Intel AMT on the I5 models (not sure about I7 ones though). The I5 models can be picked up for just over £100 on ebay.

Are you using Windows 10 1709 and sophos intercept x? if so see this: https://community.sophos.com/kb/en-us/127797 I ran into the same problem but ended up going back to 1703 before the above kb was published.

I know this is for Debian based distros (which centos isn't) but the process is similar assuming you are using apache rather than nginx. You'll need to find out what the package manager on centos is called (yum?) and replace the 'apt-get install' steps with the centos equivalent. Following the guide below should enable SSO too https://active-directory-wp.com/docs/Networking/Single_Sign_On/Kerberos_SSO_with_Apache_on_Linux.html

You'll need to apply the schema updates to AD according to this page: https://technet.microsoft.com/en-us/library/bb738144(v=exchg.150).aspx

If you were to use a build older than 1607 (the anniversary update) you would effectively be using an unsupported version of windows as the 1507/1511 builds are no longer supported (see this page for more - click 'See Available Updates' next to windows 10)

These only apply to the education and enterprise versions of windows 10 (an earlier build of Win10 supported it on Pro but MS removed it in newer builds) See this for more info: https://docs.microsoft.com/en-us/windows/client-management/group-policies-for-enterprise-and-education-editions There is another setting I'd recommend: Computer Configuration > Windows Settings > Security Settings > Local Polices > Security Options > Accounts: Block Microsoft accounts. This should apply to pro but you'd need to test it first

You can upgrade the firmware of various bits and bobs on these servers by using the integrated lifecycle controller. I've run it on a few servers and it downloaded and installed the latest firmware from the dell website - only issue is the server will be offline for the duration of the upgrade progress. https://www.dell.com/support/article/uk/en/ukbsdt1/sln292343/how-to-update-dell-server-using-the-integrated-lifecycle-controller-update-platform---lcc-update?lang=en It may be worth running dell diagnostics too. again, the server will be offline for the duration of the tests. https://www.dell.com/support/article/uk/en/ukbsdt1/sln283546/how-to-run-hardware-diagnostics-on-your-poweredge-server?lang=en#2 edit: Dell also have a firmware update ISO image here that you can use to update if you have issues with proxy servers etc. You may need to run the firmware update ISO several times depending on how out of date the firmware is

Windows 10 1607+ can dual scan windows update and WSUS servers - make sure you don't have any of the windows update for business settings set in GPO (I think they are in Windows COmponents > windows updates > defer windows update folder, not 100% sure on exact location but I think it is this section) https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/

you can disable the CTRL+ALT+DEL key press by using the following group policy setting: https://msdn.microsoft.com/en-gb/library/ms814164.aspx edit: the location of the setting is that same as the link above, but I think it is called "Interactive logon: Do not require CTRL+ALT+DEL" instead

Are you/the LA doing HTTPS inspection? if so you may need to install the filters certificate onto the devices in question edit - this page states that UDP/TCP ports 5228 need to be allowed (outbound I'm assuming) https://support.google.com/googleplay/answer/2651367

In the application log in event viewer on the machine you have reimaged (not much use now, I know!)

You can always set up an apache or nginx reverse proxy to handle the SSL termination. From what I can see this is the recommended way to deploy guacamole with HTTPS. There are many reverse proxy containers and this seems to be popular (however I have no idea if this will work with guacamole as I have never used this proxy container). I'm also unsure if it is better to run the reverse proxy server as a container or run the proxy on the docker host or on a dedicated VM/physical machine.

If I was you, I'd use the official docker images - https://guacamole.incubator.apache.org/doc/gug/guacamole-docker.html This way would be easier to keep it up to date (rather than relying on the outdated repo versions or compiling a new version yourself) as you'd just need to pull the latest docker image every so often. Here is a guide for setting up guacd in a docker container: https://www.cb-net.co.uk/linux/running-guacamole-from-a-docker-container-on-ubuntu-16-04-lts-16-10/

...for the first time (all the way back in 1995). https://www.youtube.com/watch?v=HyRklSLMqTM

Tech preview download now available: https://blogs.technet.microsoft.com/windowsserver/2017/09/22/project-honolulu-technical-preview-is-now-available-for-download/

I'd always avoid putting any certification authority stuff on a DC - It is difficult to rename the machine it's installed on (I think it gives you a warning to that effect when configuring ADCS) and if it is a DC, you'll need to remove ADCS before demoting the DC

Add the following to bootstrap.ini: UserID=accountname UserDomain=domainname UserPassword=password SkipBDDWelcome=YES KeyboardLocalePE=0809:00000809 The first 4 should be self explanatory, the 5th sets the keyboard locale in windows pe. Don't forget to update the deployment share (and the boot image in WDS) after editing bootstrap.ini. To set the language for the windows image you are deploying, add the following to customsettings.ini KeyboardLocale=0809:00000809 UserLocale=en-GB UILanguage=en-US For windows 8 & above UIlanguage can be set to en-GB.

Assuming you are using MDT (not sure about SCCM but should be similar), you can use the 'Install Roles & Features' task sequence step to do this. Check all the Hyper-V boxes and it should install/enable hyper-v for you (Don't forget to update the deployment share!)

It's hard to say really (as not many 13th gen dell tower servers have been listed). I've only got one example of a 13th gen Dell (the R630, rack version of the T630 you linked to above) as they are so new. The R630 finished at £479 with the following specs: 16GB ram, 3 1.2TB SAS HDDs + 2 300GB SAS HDDs and a single hex core xeon. Tower servers generally cost a little more as there aren't as many around compared to rack mount stuff. If you are looking for current gen stuff have a look at the dell outlet too as you may find something there.

If you are looking to upgrade the processor, an E5 2620 V3 will set you back about £200 (from ebay sold listings). An 8GB DDR4 stick will cost around £50 (ebay again) so you are looking at £250 or so on top of the auction price to upgrade it. Just as a comparison there was a T620 that went for £610 with 64GB ram, 2 E5-2640s, 3 1TB drives and redundant PSUs recently.

You can always google the visible portions of the key to see if it a dodgy key depending on the amount of results you get... Also, hardware wise, make sure you get a Dell 11th gen server (Rx10 or Tx10 for tower servers) or newer. The HP equivalent is G7 or newer. Anything using DDR2 ram will drink electricity and kick out an awful lot of heat too. Now that the 14th gen dells have been released, the 12th gen servers (Rx20,Tx20) should gradually start falling in price on ebay.