Blue_Cookeh

We've been running Win10 Education on our devices since August without any issue. Microsoft's stance on LTSB seems to be that it's for "sensitive" devices that don't need regular updates, and the feature set of Education is almost exactly that of Enterprise anyway.

MS would rather you use a subdomain of your external domain. See Active Directory Domain Naming Considerations - TechNet Articles - United States (English) - TechNet Wiki .local domains might cause you issues with Apple devices later on down the line.

You can hand off PCI and USB devices in most modern virtual environments . VMware KB: Configuring VMDirectPath I/O pass-through devices on a VMware ESX or VMware ESXi host Xen PCI Passthrough - Xen Hyper-V support possibly coming in 2016.

Hitting about 30-40 concurrent devices probably. A mix of Windows, iPads, Android devices. It's also routing between our voice/data/management/dmz VLANs.

What's your Internet connection like? Bandwidth isn't the only issue, your voice traffic will be contending with whatever else is going down your pipe, and latency/jitter can become a large problem. In your position I'd be finishing off or looking at a cheaper internal system (judging by the need for 12-15 BT lines, which you should be looking at ISDN for btw). We had great success both financially and in functionality with Avaya IP Office. I'm far from a telephony background and managed to figure it all out fairly easily.

You get the idea though

We've been running similar boards to these in one of our servers for a couple of years now, rock solid and very quiet. Jetway JNF99FL-525 1.8GHz Dual Core ATOM Mainboard | LinITX.com | Wireless and Networking (or something else similar) if you need more ports: Jetway Triple INTEL Giga LAN Add-on board | LinITX.com | Wireless and Networking

To put specs into perspective: We run one of our primary schools on a Sophos SG105 hardware appliance, which has the following specs: - Dual core Baytrail atom CPU @ 1.46GHz - 2GB RAM - 320GB HDD (not SSD) - 4GE ports Here is our usage graph: Here are the enabled features:

Use an RODC in a DMZ network. Tell the cloud company to use LDAPS.

Do you mind posting your smsts.log by any chance? A fresh pair of eyes might help

We support our system in house, but bought all the kit from Phone systems, handsets, headsets, data cabling, maintenance and more from Extera. Brilliant customer service, the guys were replying to e-mails at half 9 at night!

We don't have any unmanaged switches, but we use both HP 2920s and 2530s like you, in roughly the same size environment. I kept our servers, client machines, and printers as untagged VLAN 1 (no point separating them out for this small an environment), but created other VLANs for DMZ, CCTV, Voice, WiFi, and management access (for things like iLO/DRAC and UPSes). I then used QoS on our switches to give CCTV and voice higher priorities than all other VLANs. I quite like this setup for our environment, but I'll be rethinking it next year when building starts for our expansion. In your position I would look at getting rid of the unmanaged/web managed switches in favour of some more managed HP switches if your budget allows (since you can't pull more cable). Your VLANs look good, but I would keep the 'Apple' devices in your WiFi VLAN unless you start getting Apple TVs (they get quite chatty). Don't forget to implement STP!

Guys, Any ideas how this affects things in a DirectAccess environment? I'm looking at deploying a wpad.dat but I don't want staff machines going over DA for Internet access, which is what is going to happen if they pick up the WPAD whilst connected via DA I assume?

Do any of you guys on EES licensing still have access to Enterprise/Enterprise LTSB? Microsoft have removed our keys and only let us keep Education :/

Agreed! We have a 2530-24G-PoE and a 2530-24G in a cab in our main office area, they're there if you listen for them, but our office staff don't seem to mind it

I thought our's was bad :|

I always think not using the .sch.uk address looks a bit "dirty" to me. People like seeing the .sch.uk because it looks official and you can almost guarantee the recipient is a school worker. We own a .co.uk version of our address, but I use it for IT stuff (VPN etc)

I don't know what your developing skills are like, but I'd write a simple web app for this and then get an iPad in kiosk mode to display it. Easy. I'd be surprised if something already existed with all those requirements personally.

Touch wood our 1st gen Casio AJ130s are still going strong...

We have it (Win 10 Education) deployed to around 40 classroom PCs and 5 staff, no problem yet.

We're relatively small at the moment, we have two access cabs and one server/telco cab, so for now we have x1 spare SFP port with the ability to add the dual SFP+ module. Even when we get our server room finished and school expanded I'll get the SFP+ module and just about have enough ports unless we get an extra IT suite!

I'm starting to sound like a bloomin' salesmen with this! I spent months looking for a replacement for E2BN filering/Forefront TMG/Dansguardian filtering and couldn't really find anything that was a) reasonably priced b) worked properly c) had every feature we needed. Eventually I managed to convince Sophos we didn't need their bundled setup support and got the price down enough to justify it, and I'm so glad we did! It's always worked, it just sits there chugging along, any feature I've needed it's always had and the community support on it is extensive, before you even talk to Sophos. Loving it here.

Do you have POP or IMAP access to either accounts? If so, there's plenty of software that can pull mail out of these into Exchange.

Hey guys, Quite recently we've been getting more stuck print jobs on our server, which obviously stops anyone else from printing. I'm running our networked MFDs through one of our Server 2012R2 servers (which I'm pretty sure is a fairly tankard setup...) Does anyone know of a way to automatically detect these and force them out of the queue? I don't want to have to keep waiting for staff to complain to fix this simple thing and I'm sure you guys have already sorted this problem before! Cheers

I think the point with Apple is the technology is mostly already around, but they're refining it and making it a lot nicer to use. But you have to think, they do spend a lot of time and money on engineering now, a lot of their components are made in house and engineered by Apple, like the 3D Touch controllers.