Davit2005

Tell me about it :-)

When you search by the server it should say supported releases enter as much detail as possible including the CPU series. You could try giving HP a ring.

Have a look on the VMWare compatibility matrix I should imagine v7 should be fine on a Gen 10 but check first, make sure you do not need to do a interim step. Do you use vCenter and have you got that on a different host. Normally the thing to do would be upgrade vcenter then upgrade the hosts using vcenter. I've done that a few times.

Plenty of hobbies only 90% of them involve using a PC :-( . Most are creative though i.e. designing and making stuff on 3d printer and CNC Router, loads of upgrades on said CNC router, desktop video then running and Ju-Jitsu takes up the rest.

Saved a child about 8yo from been run over the other night. Walking with older teen sibling was jus about to cross the road as a lorry was reversing in and I said hold on, he had stepped on to the road and his older sibling grabbed his hand to pull him back. Drivers do seem to be giving cyclists more room now you still get some that have the attitude must get in front, there is bad on both sides as always and that will prob never change. A lot more awareness still needed drivers take too many risks for what will be a prob end up a few mins at most off their journey. Almost a head on last night between 2 cars, car behind a big van decided to get past a van waiting to turn right in Datchet, a lot of cars think nothing of going down the wrong side of the road there to get past cars waiting to turn right even though they cannot see enough to be clear.

Naming convention is good policy. Also a physical map of where they are and what patch panel ports and switch port they go back to especially with bigger deployments. We have 2400 (not Unifi) Aps on our site they all are labeled with the building and floor and in rooms are labeled with the room number. This way we can quickly reboot an AP if there are issues or locate to replace. Unifi lets you import maps and place APs and if possible that would be a great idea. I'd also go for a cloud key for management rather than looking after a OS whatever that may be, I've done Linux before now but you have to consider a lot of stuff before upgrading the controller software i.e. the Mongo DB.

There should not be any issues with doing this at all. I've done twice now. https://docs.microsoft.com/en-us/microsoft-365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization?view=o365-worldwide I'd also consider in future changing your local AD to a subdomain of a public domain your org owns rather than a .local . It might be easier to consider that now before setting up AD Sync, depending on your current setup it might be quite a task but worth considering. https://techcommunity.microsoft.com/t5/office-365/same-users-but-new-domain-with-ad-connect/m-p/218706

Redirection for documents, app data etc. is the way to go. We had a redirection for the actual Desktop at a previous place for students. We could chuck any shortcuts on there but they could not save anything on the Desktop as they had read only access. The redirected Desktop was in shared folder Steering well clear of roaming would be my advice too. My only caution with redirecting app data is that you might want to exclude certain folders, we had users with iTunes that backed up their phones and this got backed up to the home area too. I'd suggest you could setup with some test users.

^^ Have you checked this. If the smoothwall (or next hop router) is unaware of the subnet that is routed on the core switch it will not route return traffic back. Routers only forward traffic if they have a route to the destination. If you have a lot of routes you can add a route summary. So for instance if your subnets routed on the core switch were /24 networks 10.2.1.0 to 10.2.254.0 you can summarize that to 10.2.0.0/16. Even if you have a subnet routed on the smoothwall (directly connected) that is in that range 10.2.0.0/16 by default it will put the priority of the directly connected subnet higher than a static/dynamic routes due to the default route metric.

Woke up 2am and pillow was soaked, dozed off for about an hour but then awake again at around 3am, watched some Only Fools and Horses then 5am alarm sounded but then wanted to sleep When used to be in a workshop used to take off t-shirt, run a cold tap over it then put back on again on the warm days.

Our GJJ has been cancelled. I used to do Muay Thai years back, the sports center where it was held had steam and sauna rooms so used to go in both and get as hot as I could stand before Muay Thai on the warmer days, made the lesson easier to bear somehow.

Yes I did this about a year ago for some ASA 5505 firewalls I had. It did not take me up to the latest version of the software though

I briefly played with MAC address authentication many months ago at home for WiFi. Not sure if I still have the VM setup, I'll have to have a look. It can be down to the format of the MAC address even. The better way would be to use certificates and have the devices connect using 802.1x policies.

You really want to filter by categories rather than lists but with the option of either whitelisting or blacklisting URLs. Then have a look at how and how often these are updated. Some filtering products allow you to check the category of a specific url. Filtering in schools can be a challenge.

Also need to consider decryption and how the org deals with or plan to deal with personal (BYOD) or guests.

We are going to have need for a VPN for many years to come, many reasons for this. There are services we can provide in Azure WVD, services completely in the cloud/3rd party providers, services not feasible to allow external access to without a VPN, etc. How does this go with accessing CCTV and other site systems that you don't want to expose to the internet?

I've used AB tutor but deployed LanSchool at another org. Get a trial of what looks good, test yourself and onboard some willing staff to test and possibly be mentors to other staff.

I take it this for school owned/managed devices?

Same here, jus documented the settings of the hosts including the management, virtual standard switches, etc. If you use VMware Distributed switches (VDS) I would back up those as well as obviously backing up vCenter too, the Appliance (VM) and the configuration.

You still need a backup for DR. What happens if you lose your hosts totally or something else happens. Consider you lose both DCs. The implications of Cloud email systems connected to AD etc. Other data that may be stored on the DC such as home areas etc. Other services i.e. DNS, DHCP commonly installed on DCs. Personally I'm a believer in belts and braces when it comes to systems the more options you have the better.

Try not to over think it. Evaluate the risks to AD, set backup retention (don't skimp on backups) and regularly monitor AD for issues. Before doing any AD work i.e. bringing in new domain controllers, check AD for any existing errors. Work/test through some DR scenarios.

For Aruba/HP, On a layer 3 switch where the vlan is routed i.e. it's default gateway. All arp entries sh arp Search for a IP address from a known mac address sh arp | include [MAC-ADDRESS] Search for a MAC address from a known IP address sh arp | include [iP ADDRESS] Search by specific vlan sh arp vlan [VLAN ID] From a windows desktop if you know the IP you can ping then list the arp table by running command arp -a very handy if you have a rogue DHCP server and are running on a effected client

Defo No I'd still want a backup. If your AD environment goes badly wrong you have that option. Jus personal choice for me would be to build a new DC if one DC turned bad as a first choice after checking the existing AD for errors of course. This is an older document but it goes though a bit about restoring DCs with Veeam https://www.veeam.com/blog/how-to-recover-a-domain-controller-best-practices-for-ad-protection.html License permitting I find it is hard to beat Veeam as a product for functionality, I may be biased as I used it for 4 years and upgraded all the way in steps from version 6 to 9.5. I no longer work in systems/server/AD though so up to date working knowledge of Veeam is missing. I did use it to restore AD objects and groups very successfully, they have made that so easy since version 6 where you had to spin up a virtual lab and then boot the backup into this isolated lab where it could write back to the DC. You could even spin up exchange in the same fashion and schedule testing of backups.

I have used Veeam to backup DCs and restored AD objects. If you have more than one DC I would personally not go down the route of restoring I'd look at building a new DC to replace the broken DC and if that DC had the schema roles etc. you can seize the roles (did that before many years back). If you have only one DC it should be fine for the job. I'd always be keen to have more than one DC (both Global Catalog and not RODCs)where possible for anything but very small environments on different hypervisor hosts.

I think it really depends on your setup i.e. if you have only 1 or 2 DCs and a single domain forest what is the point of having only one Global Catalog. I could be mistaken. Last time I built DCs years ago I looked at the similar of FSMO placements. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/fsmo-placement-and-optimization-on-ad-dcs