Davit2005

You may have to check if the Unifi camera supports RSTP. I've seen post on here suggesting some gen Unifi cameras do not. There is also this which maybe worth a look https://store.ui.com/collections/unifi-protect-accessories/products/unifi-protect-viewport You may also need the Unifi Protect controller on a cloud key or something too.

https://github.com/Anonymousdog/displaycameras I've used DisplayCameras on a Pi at home for this, takes a live feed from a standard IP CCTV camera.

Many years ago I migrated DirSync to AAD Connect on a new server and it was pretty painless, MS were also very helpful and from memory I think they had a specialist team. But then again I did speak to them regarding a phishing attempt that was hosted on MS forms and basically gave up frustrated.

Don't forget to use plenum rated cables if required by local regulations and outside cable protected from elements and if underground use armoured to help prevent rodent and other damage.

Can you ping from Router to the Internet from the CLI or GUI of the firewall. Sorry not familiar with the firewall. If you have not got access I'd suggest you speak to your ISP and get them to give you at least read only access, if they do not kick up a fuss and involve the SMT or who pays the ISP bills.

I renamed my home AD domain about a year ago to a subdomain of a public domain I own but different domain to my O365 email using the Microsoft ADMT tool. Created 2 new domain controllers, created conditional forwarders in DNS, created a 2 way trust between the domains. Then started the task of copying GPOs and migrating AD groups, computers/servers and users over to the new domain. If all goes well there is no visible impact to users, I did have some issues with one Laptop as the ADMT requires access to the admin share of the computers in order to do the profile stuff etc. AAD connect was simply a matter of going through the wizard from memory. The only other thing I had to do was remove WDS feature on my server running MDT (copying the boot images beforehand) then adding the feature back in. I also made a DNS forward lookup zone so I could keep the DNS names of my ESXi servers. I don't run any SQL or Exchange at home so cannot comment on that side. Many guides tell you to install the ADMT tool on the new domain controller but I just installed on VM on my local PC in VirtualBox in the old domain then it all got destroyed when I got rid of the old domain. Quite painless apart from the admin share issues on client PCs. I did keep my O365 email domain the same though.

Tried Zabbix but it broke for no apparent reason and building on a Pi was not great as difficult to backup so could not be bothered to build again. I like PRTG but can quickly run out of sensors on the free version. Currently got PRTG running at home and some maps are setup in Home automation software.

No pop ups at all from what I have noticed on Android. Multiple restarts on the android phone but no pop ups :-)

Still using Version 16.7.8.121 client with v18 server OK. I did a new install using the Debian image.

Many years back I had great success with getdataback ntfs. I say great success as my first IT role I got told to re-install an OS on a customers PC but they'd forgot to tell me to use a new hard drive, lol.

I've seen worse happen when someone accidently configured the servers IP address the same as the networks default gateway. That was fun but they quickly realised jus as all our monitoring software started going hay wire

What about the server, is that on the same subnet as the printers or different, is there any L3 ACL on core switches or is there a firewall in between the subnets. Also try disabling the firewall on the server temporarily to see if that resolves.

I used Application based firewalls for near on 10 years. You do need to make sure that you have all the dependency applications added otherwise it can sometimes be a trial and error also if there are non-standard ports in use this need to be added too. In actual fact a previous place we used 95% application based rules. It was the preferred method, why pay all the money for a application based firewall if you don't use it. It does catch people out when they try to putty into web severs or databases as a connection test then you explain to them why it does not work.

Prob a new Windows feature, on a serious note maybe worth speaking to RM.

Without getting into the whys etc. Have you also considered NAT if the local addresses are private i.e. RFC 1918 . Would a reservation help instead of a static IP address, I use reservations all the time at home for IoT stuff, etc. so I can specify the addresses in the firewall for outgoing traffic and traffic that needs to talk to internal servers. I did have a DynDNS paid for account some time back.

Are these ISO file images, if so would Ventoy be worth a try. Install Ventoy onto a USB stick then it boots into a GUI where you can install the required OS from a ISO file.

How are you doing your homefolders, is it via the Profile tab in the users AD account object. This will not work if you are using hidden shares but on a test user simply update the home folder to \\Server\HomeFolderShare\%Username% Not tried this under 2019 however and it depends on the existing permissions on the shared folder. The last time I did this was with 2012 R2 over 7 years back.

I've used comms express ones quite a bit and never had an issue. In fact I have about 12 OM3 long patch cables at home running between different server cupboards, don't ask :-) Also purchased some off amazon which have only used a few but again OK and some off cable monkey too.

Our ASDA has the pay booths, it was a real choke point during the media created panic recently seen. I'm not sure why they designed it that way, they have jus in the last 2 years moved the petrol station to a different location too. Why they did not change to pay at pump at that point I don't know but then again the plot is so small it would of been pay at pump only. Our Tesco (about 1.5M from the ASDA) has been pay at pump option for years. But then again I have a feeling that ASDA is been run into the ground here.

I have a Chinese CNC machine at home, got Mach3 running on a Windows 7 PC (Windows 10 I've found a bit flakey and MACH 4 does not want to seem to connect to the CNC due to driver) . I've made sure the CNC cannot talk to the Internet but given it read only access to a share which I then dump the CNC programs onto from PC running CAD/CAM package then jus pick them off from the share. I'll keep me going till I replace the controller on the CNC and maybe build my own eventually.

Personally I would not get involved. There is no need and you may one day become responsible for it.

If that does not work (I'm now thinking it may not) the other option may be to deny any traffic to an IP range i.e. the DHCP range given to the clients on the ISP router permit everything else

On the edge router block client traffic to everything but the gateway on the ISP router, would that work for you. I've got no experience with the edge router however. i.e. permit any traffic to [LAN default gateway address on ISP Modem] deny any any When I was with Virgin I used the cable modem in modem only mode then used enterprise grade firewall behind it. Now I am with BT and have allocated addresses and a DrayTek with vDSL passing the ISP subnet through to the enterprise grade firewall and dealing with the NAT and all the rules there.

Nail on the head. I once had it out with a member of staff who said a few times to students to save their work regularly because systems were untrust worthy, nothing to mention about a power failure. Once had to rescue a students work which they'd been working on for 3 hours and had not saved once. Keep telling best advice is if you want to keep something save it as soon as you start to the location you know where it will be and not leave it till the last minute when rushing out the door to the next lesson.

Been aware of this for a few years now. My home line no longer works with normal telephones or fax machines and I went cloud VOIP about 3-4 years back, although I have been running a 3cx for a few years too which will migrate to fully at next renewal.