Davit2005

Aruba, 2300 APs.

If this is a Windows DHCP in a domain Is the dhcp server authorised in AD, this should be obvious as the DHCP service should not start. And yes if you have any DHCP relays or different vlans then the ip helper addresses will need to be updated as @msi_school mentioned otherwise DHCP discover step will not get to the DHCP server.

Add a domain group to the local administrators group on the PC is my preferred way of doing this. Any sub contractors installing software on local machines could even be added to the domain group which then been a local administrators group very easily and separated from your normal technician group, it stops the need for giving anyone local administrator passwords. I'd suggest on disabling the local built-in administrator account anyway and create a different local admin account. Adding this domain group can be done via Restricted Groups setting in Group Policy.

Have you got the wds server on a different network than the VM? Are clients that are working OK on the same network as the VM If not check to see if you need an ip helper address for the WDS server on that vlan as well as your normal DHCP servers.

As far as I know there is no stacking on Unifi/ubiquiti switches that allow them to act as one logical switch And if you need routing redundancy at the core you may need to look elsewhere. At home my last Ubiquiti ES-16-XGs had layer 3 only for IPv4 and no IP redundancy or IPv6 routing which I wanted, now I have a few Aruba 2930fs stacked which I use as core. Whilst you could do various stuff like using VRRP for IP redundancy and have multiple links then using STP protocol to stop loops. But for core personally I'd go stacked or modular each have advantages depending what vendor/model you go with.

I have an old ThinkServer TS140 with a 4 core Xeon E3-1226 @ 3.3GHz. I put a Geforce GTX 750 Ti in along 20GB ram with an SSD for OS, 2 250Gb SSDs as scratch disks and bigger spinning rust for non-live files/normal usage. I don't do 4k or anything but for YouTube 1080 Vids it does the job. I did used to use CC 2015, had no issues but moving to Resolve as want to move to Linux.

There are ways with some to mitigate like having HA in place i.e. Internet connections, controllers etc.

Why not Investigate yourself. Orgs have different needs it is for the org to decide at the end of the day. I'm not a sales person or in any position to say what will work or not work for any org.

What has scare tactics got to do with the fact of some thing needed not been available. Of course if you go buy a car are you going to listen to sales person telling you without doing the research first? Have a look at what the features are available on other manufacturers/model kit and decide if you need them. And not necessarily just one area but the whole package.

Yeah I am still on 5 something. Got it running on a Ubuntu VM at the moment but have a Cloud Key Gen2 for Unifi Video which I could upgrade and move an AP to.

6.0.36 maybe not perfect. Some changes to UI and move of some features and upgrade/migration issues Some changes to UI and move of some features. Official link below https://community.ui.com/releases/UniFi-Network-Controller-6-0-36/9e57165b-3422-4fcf-ae02-13affcb388c8 Worth a watch of the YouTube video by Lawrence Systems, he does not have any say or mentioned tie with Unifi but has had a fair bit of experience of the products.

I don't see how creating a separate account on a personal device is going to make it any safer. People will get fed up between swapping local desktop accounts and just end up using the one. Whilst I do like the idea of having elevated accounts for certain admin procedure's and tasks that is a bit different.

Personally I have a MS 365 business account with exchange, teams, sharepoint, etc. but they offer cheaper plans with just the apps + OneDrive. Should be able to then connect up Outlook to another email provider of your choice. https://www.microsoft.com/en-gb/microsoft-365/buy/compare-all-microsoft-365-products Or as @3s-gtech says use the apps online.

Ping the gateway on one of the PCs that is not working. A bit more of a description of your network including running config of the core would be helpful, please take out any identifiable or private information. Make sure vlans are tagged correctly and you have not got any network loops etc which are causing spanning tree issues.

Ouch, hope you are doing OK and take it easy.

Whilst that will always be the case unless we put the students in a faraday cage with no cellular communications able to get through :-) If the students are using iMessage during lesson time when they should not be then that is a classroom management issue as well.

To be honest basic ping is not really a suitable test for a service, the server may respond but it does not prove it is able to provide the service it was designed for. For example pinging a web server does not necessarily mean the web server is providing http/https services successfully. It really only proves basic connectivity but it is not full proof. If it was internal then there should not be much of an issue and it provides a good basic test of connectivity but going accross the internet you are going to be going through multiple firewalls some of these may be setup to block or limit ICMP

Apart from the N36 I have had a N40 and currently have a Gen8 and a Gen10 (not to mention the other servers at home including an IBM x3650 M3, Dell T620 and a Fujitsu TX1310, I think I need a clear out, lol).

Love the MicroServers, funny your post has just given me the idea of what to do with my old MicroServer N36L (still going strong but the VGA port broke) , not storage but a pfsense box, lol.

Really depends what the org needs as a WiFi package as a whole. There are things that Unifi simply does not provide/do that would make them a no go for bigger complex setups/organisations. If the org needs good support and is willing to pay for it then it changes things. I'm not saying Unifi is not good as it is, I've used it at home for years for WiFi and as a product it is unmatched at the price point but it just does not fit every scenario. I've experienced/managed/administered other WiFi infrastructures including HP, Aruba and Ruckus. Unifi also makes it extremely easy to setup vlans etc. and the networking side of things but it lacks switching/routing/HA functionality available from other vendors. If that is of no need to the org then it does not matter but some orgs do need the extra functionality.

I must admit that I have not used Hyper-V that much, only tried it a few times at home but never stuck with it. I've managed and administered VMWare at quite a few previous orgs but no longer do the server stuff as a day job. Although my home lab (, well actually a over complex home network) keeps me busy and up to speed with some of the server side of stuff and networking.

Have you got the lab Server with DHCP/DNS running on a VM on Hyper-V? Sorry if you have mentioned this before and I have missed it.

Nothing wrong with cheap and salvaging parts that might otherwise go to scrap :-)

If it is a different subnet that subnet will have its own gateway which should be excluded if the whole IP range (all available IP addresses) are being set in the scope. If using a 192.168.1.1/24 and you have set the scope to give out 192.168.1.1 to 192.168.1.254 then you will need to set exclusion for any static ip addresses. Or alternatively address reservations could be used even if the devices are set statically. You need something that prevents a DHCP server giving out a IP address that has been set statically. I don't think Windows dhcp (or any dhcp server) for that matter is that intelligent yet.

Youl want to set an exclusion range on the scope. Exclude any addresses that you set static including the server and the default gateway. Give your self a bit of room for manoeuvre for future other static devices, i.e. printers and other servers, etc. If you can, you will have to make the call on how many IP addresses you will need but try to make it big enough either way with some room for future it is easier to do this at this stage.