Davit2005

What scope options do you mean? DHCP server role can sit on any server, switch or router at the end of the day as long as the clients can get to it whether it is on the same vlan/subnet or a helper address (i.e. on a core switch) if the client is on a different vlan/subnet. Are you on a flat network, do you use a layer 3 core switch for IntervLAN routing, is your firewall relaying DHCP?? Fresh out of the box I'm not aware of scopes replicating between windows servers.

Had flaky broadband over the weekend then no internet at all from Sunday night to Wednesday morning. I'm on vDSL with BT but other neighbors were also effected on different ISPs including SKY, all on vDSL too but one lucky neighbor on FTTP was not effected. The vDSL signal was jus in training mode and could not seem to sync but no errors on the line. There were lots of reports across the country of BB not working.

As others have mentioned I'm sure the way is with licenses. When I rolled out M365 at a college we did not want students using certain M365 apps, the way we used to license was with a script which basically searched un-licenced users then apply correct licenses. You could potentially filter where students had a mailbox enabled and remove licenses for those that have got exchange mailbox.

"Mis/Disinformation – Promotes or spreads false or misleading information intended to deceive, manipulate, or harm, including content undermining trust in factual information or institutions" Would that cover a certain main stream media institution I'm sure most of us know which one.

So the core switch is not doing any IP routing?

What switches are you using, this is unusual behavior.

What flavour of Aruba are you using. Instant APs with one acting as a controller Instant APs with central controller InstantOn We do use ClearPass here but that is prob overkill for your average school, lol. Users get a prompt when joining if the MAC address is not registered.

Online Subnet calculator is your friend 😀 Use proper subnet ranges, it helps with routing. https://www.subnet-calculator.com/subnet.php?net_class=B

MS and it's incredible useful error codes, lol.

The command is filtering for disabled users i.e. Enabled -eq $False . So in it self not disabling the account. A more safer option would be to set OUs i.e. Service Accounts, Staff Accounts, Student Accounts etc and filter on the OUs that contain those users and not any user in AD otherwise you could end up in a right mess.

Think the better option would be to teach users to lock their PCs. Enough damage could be done in 10 seconds let alone 10mins. This is for their own protection not jus for protection of the network and it's data. This should be followed up/enforced by senior staff members and policies. At the end of the day if something happens and it is traced to the PC is staff member going to be able to prove it wasn't them. In first Edu role I was in there were loads of issues caused by students when the staff member was away from their desk and had left their PCs unlocked.

If you have a Helpdesk system why not use that. It is altogether in one place i.e. request > assigned to person for authorization > assigned to tech to change if agreed > call closed with outcome and/or further info.

Not jus windows but other devices allow wifi key sharing. The only secure method is to use WPA enterprise. MPSK where you have a different PSK for each device might be possible if your WiFi supports it but still not as good as WPA enterprise. And anything based on MAC address could be problematic due to random MAC addresses. MAC addresses can still be spoofed.

You'd prob want to open up task manager and see what is using up memory if possible or look at event logs. Not saying it is but lots of Chrome tabs can result in non-responsive windows desktop.

If you are updating and migrating I'd build new and transfer FSMO roles. If it is jus providing AD, DNS and DHCP then you can jus build with a temp IP, no need to use same name then swap over IPs when all done and DCDIAGS ran. Done this loads of times and normally leave it a day or two and run DCDIAG before and after. Then decomm old DC.

Sage is one of those bits of software that gives me a nervous twitch. Would recommend using localized either local servers or a VM with RDP in Azure so the data is local to the user. Start bringing any sort of networking into the picture and Sage will likely blame it for any issues. Or invest in a native web based alternative and migrate 🙂

Joining the Hyper-V hosts to AD?

I don't think there is a way. You could always enable lldp tx on edge ports when needed. As others have said if you have restricted management access, only allow SNMPv3 and use ssh/https (and not http/telnet you should be OK). Don't forget not to use untagged uplinks for client data either 🙂

Nearly all firewalls (and for that matter other security products,) have had their issues but what really counts is how they deal with them (i.e. LastPass) and their security practices. Gartner rates PaloAlto highly along side Fortinet and Checkpoint

Try that setting for allow MAC address spoofing. TBH I've not done much on Hyper-V at all, always gone bac to ESX after getting frustrated, lol. But if the 3cx uses vrrp it could be a cause?? Another thought would be try the 3cx user forum

I would look at the VMs network setting, unlikely to be the physical box. If multiple MAC addresses are on the same virtual NIC or potentially for failover reasons it could cause an issue.

Could this be down to promiscous mode on VM/Network???

Personally I would not use raid and jus use ZFS. Reasons for one, compatibility if anything happens to the RAID card or a drive. Proxmox has built in backup so configure it to save to a isolated location or you can setup the ProxMox Backup server appliance. If you lose a host can then just restore from backup to any decent desktop/server. I run a 3 host proxmox at home, I did not bother with a quorom device and jus use 2 hosts as that jus got complicated, all you need do is install proxmox on a spare desktop even and it jus saves the pain of setting up a server jus to be a quorum. Then I jus run docker on a VM on proxmox rather than a container as I can jus setup a debian template with Docker and portainer already installed. I used to run VMWare but I find ProxMox jus a good if not better as it is jus Debian underneath. Plus you have backup built in and no need to run vCenter. Implementing the ProxMox firewall is something you want to do but be careful as to not lock yourself out in the process. https://www.youtube.com/watch?v=yA9e7A9v7Xc

If you do enter the credentials anywhere make sure that you are using an account with jus the right delegated permissions and not jus a domain admin.

Have about an hour at home on UPS. Time to get the Proxmox servers to shutdown when UPS goes low I think so a project for the weekend. Work has huge diesel generators for the datacenters but use a UPS till the generator starts up as long as they kick in, lol. The new library building has a genny too. Emergency phones are analogue with digital lines which is a bit of a concern now.