Davit2005

In a on-prem domain environment PCs/servers joined to the domain look at the DC holding the PDC emulator role by default. https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/fsmo-roles The PDC should be configured to talk to reliable time sources if in the UK i.e. 0.uk.pool.ntp.org, 1.uk.pool.ntp.org, etc. Personally I'd configure the HyperVisor to use a reliable source if you are running a virtualized environment in the first place to stop any issues probably a proper ntp server if it is ESXi, I'd assume if HyperV and domain joined it would look at the PDC emulator to by default. With ESXi I have in the past used a reliable NTP source either a NTP server on the network or an external NTP server.

Thanks @ZeroHour I've enabled, I get the email then it gives me option to whitelist the IP but seems like that link is dead.

Not great news

I've worked in schools and I still work in Education and EduGeek is a great resource.

Without wanting to continue too far there was no mention on the OP about the scenario either. Yes when you are putting AAAA vs BBBB it is not always easy.

I did not see that as an important to mention as was simply an AAAA vs BBBB thread.

I thought I did mention that in the post I made :-)

Not a school. I did not mean to cause offence or start an argument by the point I made. We employ MSTP with multiple instances and VRRP as well as internal OSPF. We have a mesh core. If Unifi suits then by all means use it.

We are running OSPF internally and yes we aim to push L3 closer to the edge. We have a large org and many subnets.

I don't think there should be any case of snobbery, if the tech matches the need of the org then that should be the direction yep reliability plays into it but the price point of Unifi you can keep a few spares. And the single pane of glass is very handy. Not all manufacturers have licenses though, not known Aruba to have any license's for switching, firmware for switches can be got by signing up to Aruba Support Portal. I do know for a fact that Unifi would not be suitable for us i.e. lack of logical stacking, limited layer 3 routing, layer 3 redundancy, etc. But I know in previous places I've worked certainly the Switching at access port level Unifi would of been sufficient, Unifi Wifi possibly too.

Will have a look at those, I see they can come pre-flashed with ESPHome too :-) Yep that is handy, I have tablet displays that display Home Assistant Dashboards at home and have set them up so when the battery drops to 20% they start charging and when they reach 80% charging stops. But yep defo keep IoT on it's own network segregated from the rest of the network.

My main issue at the moment is getting reliable plugs. The ones I get apart from Hive the relays seem to fail. I have 4 Hive smart plugs at home none of which have failed but the TPLink KP115 I've got 2-3 bad ones out of 6, the relays seem to give up, even the button on side of the plug does not control the power to the connected device when the relay fails. I use HomeAssistant to control the plugs on a schedule rather than Alexa/Google/Apple etc. Jus trying to keep as much local and not reliant on cloud as possible.

I'm pretty sure unless you are hosting captive portal on the controller it does not need to be up 24/7. So based on that you could jus install it on a desktop and run when needing to make changes but make sure to take a backup jus incase.

Although slightly off topic as a different battery (CR-2025). I had to replace my KeyFob battery and the remote does not like Duracell. Managed to find out that the official battery might be a Philips one and guess what it worked straight away, seem to remember that I had this issue before and the dealer sorted it and told me that the fob does not like Duracell

I feel they will soon have a world shortage and not able to keep up with demand

100% VM. Why waste a valuable physical asset :-). I have not setup a print server on physical box for 10+ years.

I'd say 5mins but it goes out the window when Staff members let Students use the staff computer account. Had a request was made to open up a web site which turned out to be a proxy avoidance site. Only staff could request web site requests and we also got the member of staffs ID. The best the staff member came up with was those cheeky kids. We had loads of issues at that school where the shared area had it's folders renamed to childish/rude names too, I wonder why

MS make a good Video Editor, when did that happen I guess the only think good that it was free and relatively easy to use. But then there are other better options that are free or cheap.

You shouldn't need to backup the files on a VM if the VM is backed up by Veeam as a separate backup. I don't know about WSB I should imagine that is the same. If the files are on different storage to the VM i.e. iSCSI share then it would be different. We did have a scenario where we wanted to backup the SQL backups at more frequent time at a previous place so we setup a specific backup for that.

We did at a previous place have issues with this. People changed passwords but were still logged in on another PC. Setting up a nightly shutdown routine sorted a lot of these but quite a few were they were still logged into outlook on a mobile.

Honestly suggest getting the code read by a reputable garage that is not likely to take the mick. Could be something simple but you don't really want to throw money at it without knowing. Could be a simple thing as dirt in the fuel system or all matter of things including a faulty sensor.

If you have multiple DCs you find out the one that the user is currently locked out on then if you have security auditing on you can sometimes track it down to a source IP where the account access is been denied from. https://www.microsoft.com/en-gb/download/details.aspx?id=15201 A previous thread on the subject /forums/windows-server-2016/208820-account-lockout-issue.html

Adjusting priorities means you can do things like influence the link used, in the case of MSTP you can load balance traffic utilizing multiple regions without having stacking but still the luxury of redundancy should one link fail. If Unifi does what the org needs then why go elsewhere. For our org they simply don't have the features we need.

The community edition was great, do they still offer it? EDIT: Appears they do and you don't need to use PowerShell for scheduling anymore by the looks of it too :-)

Data centers have UPS devices to cover the time taken for the generators to start up. We test around once a year