Davit2005

Think they have got a CX Chassis switch. Most of the focus now seems to be more powerful 1U switches for enterprise which Unifi have gone down with high density SFP 10/25/40/100g ports for core. It is the more layered approach for complex network layouts where you have core > distribution > access (end devices). We still get replacements for our 2650's which are at least 15 years old, occasionally we get a decent switch as replacement. Newer switches have limited but best to check the warranty as can be as little as 1 year.

There will defo be some "We bought these, we did not consult, they won't do this" moments. I would not say I was a MAC fan boy either but jus dismayed on Windows desktop OSs of late. MAC does what I need as a daily driver and creative device without too much pain. Putting off Tahoo update though.

The games I play work on MAC however my MOZA steering wheel does not work with MAC. That is the only reason I have not gone MAC for gaming too. Tried Linux for about a year on all machines both for creative and general work use, can't say I did not try. Depends how MS goes, already had one update that killed the settings. Think the game I play most (mainly driving) as have a rig setup is compatible with Linux, might try again soon.

I fell out with MS Windows, still use a Win11 just for gaming only cause hardware bought has no/limited Linux support. Daily driver is a M2 Mac Mini which I use for work (RDP) and creative stuff. Work VPN does not play nicely on Linux. With certain PC manufacturers pushing Linux as a supplied OS hopefully it will encourage peripheral manufacturers to develop Linux support.

This is the issue with Bambu labs, I beleive that most new ones do not support any local connection and all via cloud.

I concur Uni's will no doubt have specific needs such as software that needs either access to license servers and we would not want jus anyone using them. Other specific scientific/research software might need VPN access too. Occasionally we might only provide access to resources via VPN even if students are on the internal WiFi network.

Surely there is a difference here. Consumer based VPNs vs organizational VPNs. If a student is using a VPN to access services inside a school then they will be likely accessing the Internet through the schools filtering system at that time.

There is no need to stop using the outlook app, you could have the same problem if a user changes password whilst still logged into a PC. AD if used is a good start for investigating as that's what they are authenticating against 🙂 That will likely show source IP.

Suggest to finance that they could use MS forms with pictures as proof if they need support to get them started fine and leave it to them or you and any predecessor are going to be likely doing finances department job.

Do PCs regularly reboot. One thing we implemented at a previous place was a nightly reboot of all PCs and it reduced these issues to very nearly zero. Outlook app was another one that regularly caused it.

A logged in account will use old password, the other more troubling thought is a tried forced attempt on the account. Look at all the services you may provide including cloud, VPN, etc. Search those logs too.

The lockout tool will point to a specific DC if you have mulltiple then search that DC event logs for the user and hopefully this will indicate an IP address of the source. Been down this road many times before and it was one of 2 things either an App/service using old password or a PC where user was still logged into. Do you allow user switching on PCs? Can you ask user how recently they changed their password?

Yep Looking at my comparison from ssl shopper posted above 🙂

Fairly easy to live stream from OBS to YouTube plus as others have said you can have other elements. Plus you can install OBS on something like linux. Using YouTube means you do not have to open inbound ports either direct to a IP camera which I'd absolutely not do. Webcam, OBS to YouTube defo a way to go.

Whatever you do make sure it is secure. Isolate the camera on it's own vlan or subinterface on the firewall. Cameras can be notorious for been hacked.

Checking SSL certs, results below. https://www.sslshopper.com/ssl-checker.html#hostname=every.education vs https://www.sslshopper.com/ssl-checker.html#hostname=www.every.education

One Alternative possibly 🙂 Create reservations on DHCP server for the laptops, block those IPs at firewall level. No GPO to worry about checking/testing, no extra SSID to create. Easy on off, providing you manage your own firewall. One hiccup is for exams that do need Internet exams be that for Moodle or external exam boards. The rules could be limited to those services via the firewall above rule that blocks access, assuming firewall works from top to bottom.

Compatibility wise You are honestly better off using SFPs and fibre than trying to use DAC cables between different manufacturers. From experience to note that some longer DAC cables do not work with the smaller 1u switches, 3m seems to be max. Chassis switches normally can handle 5m DAC cables.

I would check for option 42 though on DHCP server as others have mentioned as I don't know if that will override setting the inform or not?? 🙂 Someone correct me 🙂

Are you on flat network? Or do do have specific vlans?? Thinking along the lines of the uplink connected switch port not configured correctly

I'd certainly go looking at ntlm settings. I don't know where they are but I know we had issue here, I'm not a desktop support role but I got involved as in networking team we get called in for nearly everything not working, lol.

I would not personally redirect downloads as it will jus be a dumping ground leading to poor user file management structure but also there will be a lot of stuff like images someone has jus downloaded to look at, but I guess that is jus me 🙂 And although not having a limit is no problem at the moment due to resources because you are redirecting downloads that could easily change things.

To put this in perspective I was earning more than this as an IT tech in a small independent over 10 years back but doing senior tasks.

I know you are jus posting the position so forgive me but advertising a senior role with out increasing the top grade/renumerance package is a bit off putting and may jus put off anyone that has already gained senior experience. Fair enough if org is happy to train, but issue most of the time is while experience/seniority increases pay does not always match which is a bug bear many relate too.

Do you have user based policy, is it not recognising user or some sort of cache in the IP to user mapping. What do the logs look like is it the expected user showing in the logs? Is the site allowed for staff or other user groups.