Davit2005

Each device acting as a router has to know how to get to a network it does not know about to pass traffic. Routers will not forward traffic if they have no route for that traffic. So for instance if you have a core switch which has local interfaces in the 10.10.0.0/16 subnet and another router, core switch or firewall that has interfaces in the 10.20.0.0/16 subnets the 2 routers will need to know how to get to each others networks.

The Smoothwall will need to route traffic back to the core switch if it is routing traffic i.e. been a router for the site but I don't understand how local only traffic is been passed to it. By default connected routes i.e. those that have their gateway on the actual routing device should have a metric of 0 for directly connected. This means that any layer 3 interfaces should communicate directly with each other and not be passed on to another router. I don't have much experience of Smoothwall and limited experience lately of Cisco and with cisco it is has all been cli when ever I have done things in the past.

AI defo is not perfect. It might tell you something is not working but does not go much deeper. Yet a quick test can show you error message which you can sometimes easily get a hint on where to start to look, but not always (MS error codes), lol.

TBH I am not familiar with AD Audit Plus, I have always just used a combination of the lockout status tool and the security logs on the DC identified. There is a way to check which process is locking out an account I believe.

Local Administrator account locked out or a domain admin account? When you identify the DC then examine the logs you should search for the source. As @psydii mentions make sure all advanced auditing is enabled. I do think you need to rule out the source of the lockout before going much deeper though. Is the domain admin account used on any services? Always found best to create a specific user account per service and give that only the access it needs. i.e. LDAP auth does not need domain admin, normally a standard domain user account will do the job.

This is the same story with laptops. I've seen a few with the Trackpad completely destroyed leading to at least an hour repair job. I jus put them in a pile and got around to them eventually, no one moaned at me for not dropping everything else to repair them.

Whilst playing with Linux and using it to create videos with Davinci Resolve I had a script that detected new files in a specific folder then convert them and dumped in a new folder with ffmpeg. Worked really well, why Linux version of Davinci needed the files converted and Windows version did not I don't know, lol. But it was an ex server with a Xeon 16 core, 24GB and a decent'ish GPU that converted files very rapidly.

Bill the department, of course that means backing from SMT/SLT. It's what we did at a school I worked in and it worked, the parents mostly got the bill. The IT suite had CCTV.

Indeed, the playful minds of students. Reminds me of a call I had many years back in a school. Ticket jus said it keeps turning off when I log in. Turned out the little rascals were switching off the power switch (located by a front desk) when they saw the teacher logging in, lol.

Yep it really helped us when we had exchange, I think every time it was either exchange or user had changed password whilst logged onto another PC. The forced shutdown of PCs every night helped a lot too.

Check security events on the DC listed. Look for IP addresses or sources, then identify the service where user is getting locked out.

MS finally listening, will wait and see 😏

You jus need to look at the available logs and see where they are getting locked out from. Use the sysinternals lockout tool to identify what domain controller they are locked out on then check event logs of that DC.

You can use the fqdn for the share i.e. \\fileserver.somedomain\fileshare. It is 16 years since I worked with SIMS but I should imagine this been in the sims.ini file?? Additionally you could map then hide the drive for those people that need it.

Ref Devaluing IT jobs thread 🙄 But to be honest if you are not careful an external contractor will likely test every power cable they can find, including ones not been used and in storage, label it and charge for it, lol.

That is a good point. I jus done like the idea of a core system been able to be navigated by curious fingers. First school worked in we had all sorts of issues as a few teachers would leave students use their computer under their login. Multiple issues of folder name changes and even broke our messaging system too once as the config was on that drive and someone deleted it, thankfully by that point we had backups in place after years of under investment.

Yep don't go mapped drives for SIMs. It is one extra drive for curious fingers and unsupervised/unlocked PCs, been there, seen that.

What sort of management are you looking at? Updates, purely cli stuff? Or web management. I'm in the same boat, 3 node proxmox cluster, 3 docker VMs, and various other VMs running Zabbix, pi-hole, etc. Was looking at Ansible but did not get very far. Ansible would suit me well as I have Aruba CX switches at home and MikroTik routers. If anyone has some real basic pointers or links to good starter Ansible YouTube videos please let me know 🙂

I'd 2nd defo go for a VM preferably Linux, very easy to setup. And keeps the docker instances separate from the underlying OS of the hyper visor. Backup/migration will be far easier too.

Only one PC effected, if it is only one any possibility of a rebuild/re-image? Or if the same user delete the profile. Do you use roaming profiles for this user.

I have seen this once before and it was a dodgy McAfee update. Only effected specific machines as they were switched on between the dodgy update and an updated version sent down. That was back in 2010 I think, a fun day, lol. Caused a message and the PC restarted.

I'd 2nd not going for a cloudkey+ . Had one go bad with the battery bulge issue and no longer powering off PoE. Removed the battery and powering via the USB port now.

I think you will find that the shared is only going to be for things like Program shortcuts, not really good to have a shared desktop for staff where they can save documents to the desktop and other staff be able to access them openly even for students for that matter. The room for some serious issues is huge.

128GB depending on use is not going to last long. I did manage to exclude certain files for redirection but that was a long time back, like 10+ years. Iphones and the like if they are backed up will likely take huge amounts of space.

Not using individual logins??? Redirected Desktops are a great method. Students can have a shared (good for putting a link on the desktop and more control) and staff can have individual per account. One thing to note with a desktop is that for every link/file it will also try and locate the icon so not best practice to save lots to the desktop and it gets messy.