Davit2005

What permissions have you given the account used to join to the Domain to the OU? I used delegated roles and not a domain admin then jus gave it the permissions to the relevant OU. Are the permissions still enough? What happens if you remove a PC from the domain and re-add. Do you still get the issue?

We use the Shentongroup. They seem really professional. I don't know how much the service costs but they look after all our Key areas. We are in the London area.

Jus one thing, why use hidden shares? If permissions are right you should not need them.

That was an idea at the 2nd school I worked. But not for that reason, although I suspect it was damage issue which was rarely if never acted upon.

If machine uses a none standard control protocol i.e. non standard control code (i.e. not gcode) that many CAD software packages support i.e. Fusion. Then you are limited

SD card on external USB readeror internal slot? Very unusual they should be hot plug like a USB unless you have the OS running on them, lol. I'd certainly look at the BIOS and drivers.

So many times I've had this and so frustrating. When I had my issue they point blank blamed it on a device on the network hogging the traffic, spent 2 days isolating different bits of the network, with one device plugged directly into router it was fine, browsing was fine, 2 devices and started having issues. Only when I spoke to someone else they bothered to do a physical line test then sent BT engineer to investigate and saw the tree had damaged the BT post to post copper cable. Glad you got it sorted.

Personally my view, Should in no way be a role of IT support, end of. Even a previous school managed web content between the teaching staff, all we had to do was made sure they had access. It goes back to the line of "well it involves using a computer" and demeaning to our technical role and abilities.

Don't mention Yealink teams phones, lol. We went from a VOIP system to Teams, the YeaLink phones have been a disaster. Foobarred and buggy updates. I have 3cx at home with Yealink handsets and they are faultless.

What happens if you do a speed test once when no issue evident and one with. Many moons ago we had an issue at a school where I worked. A tree had fell onto a telephone cable (we were ADSL) some serious head scratching ensued. If you are on ADSL can you get a line test done? The fact pings are OK certainly points to something specifically around browser, web browsing. The ping tests can rule out basic connectivity tests although they are not always successful. For instance we don't add ping to rules between servers by default on firewall zones because a ping does not prove a service is running.

Start with some basic ping tests when you have issues, i.e. ping the default gateway IP, ping 8.8.8.8 Then ping www.google.co.uk and see if it responds with the IP When you have ruled out above then go deeper, might also be worth trying above tests when you have not got the issue so you know what you should expect from the ping tests. It is no good basing tests on something that does not work anyway 🙂 If the ping fails to the default gateway then that is a place to start looking. Basically jus work methodically to try and find the likely cause.

I also understand that to have a separate domain for the cluster is best for security. I've never really got into HyperV, TBH, always considered it too much of a backwards step compared to VMWare, yep you have got licensing options that are cheap. An OS designed for Virtualization is a better choice INMO, i.e. ProxMox (ok so it does use Debian underneath), VMWare was before it was taken over and prices sky rocketed, XCP-NG (never tried personally but have done some work on ZenServer). Early support of Linux was not great on HyperV (wonders why, lol)

Agree, Just adding vlans on their own without an ACL/firewall does not improve security, It ends up been security via obscurity. But I don't see anything wrong with running DHCP on a DC as long as firewall rules are configured correctly. I have a different view of 3rd party Apps on DCs. If an app needs to be installed on a DC you need to ask why. And if need be install on a read-only DC. I would only run DHCP, DNS and Domain services on a DC.

Have been working with Palo firewalls for about 9 years now and I am a fan as far as the firewall but I don't think you can match any combined FW and filter with the separate solutions from different vendors.

Never works as in????

You could obfuscate any sensitive info?

Does the LEA provide your Internet, if so might be worth specifying the supplier.

I would certainly note down expired certs i.e. CCNA. You still passed so although might be lacking some new tech or maybe even forgotten some stuff it should still be relevant. I still put down my CCNA even though I passed in 2003, yep forgotten some of the stuff because I did not have daily or even any experience since. But basics such as IP addressing, subnetting, DHCP, DNS, etc. will still be handy no matter what you role do in IT support.

So the Meraki seems to get over whelmed and allow anyway? Does the same happen for other blocked sites? I would certainly look at the log files for traffic and system and see if their is any correlation.

I have to quite often packet capture files but I'm struggling to achieve a way (unless I am missing something) of identifying capture files once merged i.e. we get a packet capture from our firewall and the 3rd parties firewall. I've tried adding hardware i.e. MAC address. Even putting the file name in a column would help before merge if I could do that. Anyone?

I only wear a Garmin Fenix 5 on run days. I found I have sensitive skin reaction towards watches and as I was a mechanical engineer for 18 years previous to IT career I never really had the chance so don't really miss it TBH.

Have you a thing for old Microsoft Icons or is that a screenshot of your desktop 🙂

Amazing what you hear sometimes. We had a student in a previous employment who used to brag openly to friends, there was no quota on storage cause it was never setup. File share ran out of storage and guess who was the main user by a country mile. Home folder full of downloaded pirate goodies. This also enforces that between malware, virus, etc and the internal users you need protection from inside as much as out.

From a 5406Rzl2 SFP+LR J9151A SFP+SR J9150A The SFP+ module on our 5406 is a 8 port 1/10Gbe J9993A v3 zl2 Unfortunately we don't have any J9990A modules to look at but have found them normally quite transferable between different HP/Aruba switches and modules. I bought some ipolex ones for some 2930f switches I had at home, had no issues with them. We don't buy 3rd party SFPs at work. We just have so many of them and so many issues with some 3rd Party SFPs we won't go back.

What about an iPad Mini? The Pro is great and have one for watching movies, the sound is awesome, but you need that if you are jus taking notes and watching the odd movie or streaming and prefer the smaller size?