Davit2005

Friend is on Manjaro he lost well over 1 stone in a year with a good diet (he was not very over weight), he has long standing nerve damage many years before so exercise is difficult as is even normal physical activity at times leaving him in pain and on pain meds. Always seek medical advice yes there may be some issues as with a lot of meds/surgeries and unfortunately for a few these can be dramatic side effects or life changing outcomes. I had minor heart surgery in 2018 there were risks with the surgery but I went on to complete a marathon and many more long runs after building a exercise regime post surgery and consultant advice If you can lose the weight without them that should still be the preferred option.

I'd of thought that would be useful for troubleshooting, as if Windows does much useful in the way of troubleshooting these days i.e. useless globe, lol. So my question also is why would you want to hide that, is it some security, curiosity and/or behavior you are trying to curtail.

We have 6 stacks of 2930f's put in about 3 years back, total about 50 switches, 3 failures. 2540's have failed only slightly more, total 130 put in about 9 years back 5 failed, 40 2530's put in 9 years back cannot remember replacing one yet. 5 year warranty NBD replacement. Upgraded stacks a few times pretty straight forward no issues with the stack as a whole.

Where you have 4-8 switches in one space I don't see how that is going to work without been a nightmare cable/configuration job compared to a stack of 4-8 switches, top and bottom switches connected to uplinked switches 🙂 Especially in some cases where creating a stack is as simple as enabling stacking feature and then jus adding an extra switch with possibly one change on each switch for a port to make it a stacking port in the case of VSF. Usually simpler if you have dedicated stacking ports.

The ability of stacking of switches is to remove a single point of failure certainly in large groups of switches. But again the need depending on org, SLA, etc. To an extent some resilience can be made with the use of spanning tree but that does not balance the load but is a viable solution 🙂 We employ at the moment OSPF internally with 4 cores in a mesh, 3 instances of spanning tree so are getting some load balancing. New project I don't think will be stacked core but will be stacked edge 🙂

Jus trying to point out that educational Establishments includes a broad field, some of those are doing critical research and even providing health services and holding patient records 🙂 Yep the budget is sometimes there but does not mean it is not fought for any less to get funding for infrastructure projects 🙂

There are educational establishments that require much more than those available features 🙂 I'd always say look at the features you need then go from there, no need to over spec but maybe look at possible further requirements. Not all Cisco or Aruba need licensing, both offer various solutions depending on what you need.

https://www.sslshopper.com/ssl-checker.html#hostname=forums.ruckuswireless.com Even if you do follow the link you get a 404. Below is what looks like the new one. Looks like they have some DNS house work to do, lol. https://community.ruckuswireless.com/

I'd also use an account that is not your normal user account email address as well as 2FA 🙂

😲 that is crazy. Make sure controller fully locked down if that is the case but I'd certainly ask on forums. Seems a design flaw and opens up controller to abuse if not able/aware to secure.

No break for us, but we did have 2 extra days one of which I worked but getting compensated for 🙂 And we do system checks over breaks too, xmas and easter as we have student residences, etc. Hope all had a decent break though 🙂

Should not need a admin account for LDAP/LDAPS auth, a bog standard Domain User account should be enough (certainly with the many services I have setup that use LDAP/S), I'd create a specific AD service account for it too and name appropriately so you know if you change password it will only be one thing effected. Some devices can also be a bit of a mare to setup LDAPS, one of our devices we have to add an intermediate cert that is used on our LDAPS otherwise auth does not work

Yes you would normally tag the traffic on the switch port connecting to the phone then untag the normal data traffic which normally just passes through the phone. Don't forget to set the vlan to voice mode on the switch where the endpoints (phones) are connecting 🙂

It is jus one of those things, IPv4 addresses are running out, NAT/CGNAT is a solution to make the most of what we have. If you run a business you could potentially get a static IP even on mobile networks.

In the case of exchange it will likely be the name of the exchange server. In the case of a desktop you should get the same. I don't work in that area of support anymore to guide further. But it should hopefully give you an idea of where to start looking.

We have students living on site who face NAT issues notably with xbox and switch. For us we can give them a public IP but not ideal.

Yep I think it is important to add in the differences of different APs not jus place newer and/or more powerful APs in the same location and expect better performance overall without some thought of overlapping channels etc. Good example been where our plans for APs were ignored by builders and as a result we ended up turning off a 3rd of the APs and had less issues because the APs were overlapping as were not to plan and too close. Literally 3 APs placed within 5 meters in an open plan area, lol.

Each device acting as a router has to know how to get to a network it does not know about to pass traffic. Routers will not forward traffic if they have no route for that traffic. So for instance if you have a core switch which has local interfaces in the 10.10.0.0/16 subnet and another router, core switch or firewall that has interfaces in the 10.20.0.0/16 subnets the 2 routers will need to know how to get to each others networks.

The Smoothwall will need to route traffic back to the core switch if it is routing traffic i.e. been a router for the site but I don't understand how local only traffic is been passed to it. By default connected routes i.e. those that have their gateway on the actual routing device should have a metric of 0 for directly connected. This means that any layer 3 interfaces should communicate directly with each other and not be passed on to another router. I don't have much experience of Smoothwall and limited experience lately of Cisco and with cisco it is has all been cli when ever I have done things in the past.

AI defo is not perfect. It might tell you something is not working but does not go much deeper. Yet a quick test can show you error message which you can sometimes easily get a hint on where to start to look, but not always (MS error codes), lol.

TBH I am not familiar with AD Audit Plus, I have always just used a combination of the lockout status tool and the security logs on the DC identified. There is a way to check which process is locking out an account I believe.

Local Administrator account locked out or a domain admin account? When you identify the DC then examine the logs you should search for the source. As @psydii mentions make sure all advanced auditing is enabled. I do think you need to rule out the source of the lockout before going much deeper though. Is the domain admin account used on any services? Always found best to create a specific user account per service and give that only the access it needs. i.e. LDAP auth does not need domain admin, normally a standard domain user account will do the job.

This is the same story with laptops. I've seen a few with the Trackpad completely destroyed leading to at least an hour repair job. I jus put them in a pile and got around to them eventually, no one moaned at me for not dropping everything else to repair them.

Whilst playing with Linux and using it to create videos with Davinci Resolve I had a script that detected new files in a specific folder then convert them and dumped in a new folder with ffmpeg. Worked really well, why Linux version of Davinci needed the files converted and Windows version did not I don't know, lol. But it was an ex server with a Xeon 16 core, 24GB and a decent'ish GPU that converted files very rapidly.

Bill the department, of course that means backing from SMT/SLT. It's what we did at a school I worked in and it worked, the parents mostly got the bill. The IT suite had CCTV.