Blue_Cookeh

We didn't even get started with Smoothwall, they were quoting literally 4x what our Sophos UTM cost us two or three years ago - it was just a non-starter.

FYI, I'm not sure if it helps but I've been using USB 3 Gigabit Ethernet adapters to PXE (on UEFI) boot our Lenovo laptops to WinPE/SCCM for a while now if they don't have built-in Ethernet ports. Both the StarTech.com USB 3 Gigabit Ethernet and Anker adapters have worked great for us. You have to make sure SecureBoot is disabled in the UEFI settings until after Windows is installed and put the USB3 Ethernet drivers into the WinPE boot image.

Can I just ask how these are holding up for you? Our staff are very interested in getting VR into our classrooms. At the moment I'm looking at something like Google Cardboard (so we can cheaply replace them) with Wileyfox phones or something.

Juniper core, HP/Aruba access, UniFi wireless. No problems here!

Yes - it's more annoying because 6 - 8 months ago we were told this was being solved "soon". Tbh I get that downtime happens, its just embarrassing from my POV because I was the one that recommended SB to our SLT

[15/12/2017 09:00:59]: No usable machine certificate found. [15/12/2017 09:00:59]: Found 0 machine certificates on this client computer. Do you have a PKI setup internally? Do your machines have machine certificates?

Lightspeed 9 and 11 problems. AGAIN. I'm really not happy. We still have a year and a half to go on our contract and it's really starting to get on our staff's nerves. We moved away from LA provided broadband due to poor support thinking anything could be better, now we get downtime like this. Our school relies on our broadband since we rely on RM Integris, and now very heavily rely on Office365. I've shifted all our VPN activity for remote workers onto our backup line with another company now because SB is so unreliable. The only reason we're still with SB is because we're stuck in contract.

I havent touched 62000 on our DA deployment, only TCP 443 and it works fine (although our's has 2 NICs and is in our DMZ). The network location server should only be available externally. Connect one of the problem machines to a 4G hotspot or home internet connection and run the DA diagnostic tools to see why it isn't happy, this will give you a very detailed log of what it's doing: https://www.microsoft.com/en-gb/download/details.aspx?id=41938

I know the hardware is probably decent (we use UniFi wireless) but we bought into HP/Aruba for our access switches a few years ago with a Juniper EX2200 as our L3 core - I want UniFi to mature a little more first! I did look at the UniFi 48 port switch, but a few people said they're *loud*, unfortunately the 2530s are the loudest switches we can get away with since they're going in our main office - our office ladies would probably kill me

We were in the market for an Aruba 2530-48G-PoE+ this week, looked at the price last week and it was about £900... gone to order it today and it's nearly £2,000! Has anyone else seen this? Just managed to bag a bargain from VeryPC instead.

Maybe for some people - we were being quoted £20,000 to do a Wireless uplift in our primary school, something we did using Ubiquiti for < £2,500. It's typically Cisco of them. Meraki were also incredibly pushy on sales wrt switches and firewalls. I get that's what they sell, but they put me off before we even looked at the pricing because we were not in the market for them. Also bricks when you stop paying the licensing cost blah blah

Are you sure about this? We run RADIUS on our UniFi APs in school and as far as I can tell the RADIUS authentication is between the access point and our RADIUS server. I don't have our Controller IP in our allowed RADIUS clients lists in NPS, but only our AP IPs. We run our controller 24/7 though, and I don't want to try it EDIT: @XiJ; @FN-GM; rolling update is still available in the current version, but I believe it did move. You have to go to Devices > 'APS' tab specifically to see it now:

I have to admit every Ubiquiti AP we've bought in the past that have come with the PoE adapters have also come with the European molded plug. Never thought to change supplier since we actually use PoE provided from our switches anyway. But yes, I agree with @m25man; you're using a single Ubiquiti AP - so of course it's not going to be the nicest of solutions. The Ubiquiti controller uses Java so it's cross platform, you can run it on Windows/Mac/Linux/embedded systems like the CloudKey. It's a nice controller, and designed to run an entire network - not a single AP. Ubiquiti's line of VoIP products, UniFi switches, UniFi security gateway, and all their access points rely on this controller. If you were deploying an entire network then it makes sense to only use one central controller. Of course, once the AP is provisioned you don't actually need to run the controller - you could uninstall it if you don't plan on making any changes to it in the future. Apples to oranges.

Sounds like you could do with consolidating your existing domains, really! So long as you setup your AD sites and subnets properly there shouldn't be any reason why it wouldn't work, just make sure you plan for file access properly since you could end up syncing user data in and out of Azure. I can't imagine this would be very cost effective, a decent XenDesktop host in Azure would be $$$$.

Has anyone got anything relatively simple I could show our staff explaining why/when to use this? Tbh it's something I know we should be using for some stuff - we just never got around to it.

KCOM Business hosts our .sch.uk domain, NS is pointed to Cloudflare.

I honestly can't help but feel like KISS applies greatly with Windows 10 deployments nowadays. I've got around a third of our staff on build 1709 now and am doing a rapid (full laptop rebuild) deployment. I've totally ditched roaming profiles and decided to just stick to local profiles with heavy GPO restrictions. We redirect Desktop/Docs/Music/Video folders to OneDrive using the new online files functionality. Seems to be working *really* well so far. I don't remove any applications from the base WIM for the sake of simplicity.

Line of sight is important for any wireless link like this and you still need to work out the Fresnel zone if you want decent performance. Trees/leaves will ruin your day very quickly at 5GHz, less so at 2.4GHz but then you're contending with the rest of the wireless population. Buildings will cause you major problems. If this really is PtP then you want as narrow a beam as possible at 2 miles. The Ubiquiti NanoBeam AC series would suit a situation like this.

First things first, do you have LOS between the buildings? https://www.solwise.co.uk/wireless-elevationtool.html will give you topographical information, obviously you'll need to check for trees and buildings. 2 miles is doable very easily and the Ubiquiti stuff makes alignment easy with GPS etc.

We have 1709 clients working just fine on our RADIUS network without any changes. We use Ubiquiti UniFi APs with Windows NPS. Are you sure the machines have pulled their policies correctly, and are trusting your various RADIUS certificates? When you try to connect with a username and password are you specifying DOMAIN\username?

Which model AP is it exactly? Would it be possible for you to try a 5GHz-only SSID? How many SSIDs are you broadcasting? Are there many other Wireless networks in range? 15 doesn't sound like a lot at all, we run carts of 30 off one UniFi AP without problems.

That's depressing. Nice read though!

If the computers have php installed and the install location in the system PATH variable, you can simply run 'php c:\path\to\script.php' in a batch file or whatever. Should be pretty simple to do.

The term you're looking for is 'hunt group' and just about any phone system you choose should be able to do this for both internal and external calls I know with our Avaya system I can set a hunt group to ring all extensions before voicemail, go directly to voicemail, ring extension A, then B, then C and so on. This stuff is hugely flexible nowadays.

incompatibilities everywhere!