Davit2005

Thanks for that, I guess I won't be going Vroom anytime soon if that is the case. I'd double check with VM and complain about this limitation personally, businesses will want to use their own firewall, maybe the conspiracy thought is that they would want people to go with their more expensive service without the Hitron.

Are you trying to setup IPsec behind a Hitron router? Or are you trying a IPSec site to site VPN? Modem mode should have no impact on Dynamic or Static IP. You are literally handing off the routing and firewall to another device behind the Hitron. The Vroom service is a VM business connection I'd be surprised if it had that limitation to be honest.

Suggested watch, update has caused a few issues

The BOYD element puts me on edge a bit, I think there needs to be a clear line of where support ends if the devices are not owned by the org, this to cover things like anything that is done to the device to fix an issue rendering it unusable. There is a thread on here somewhere regarding the ownership rights of parents and the freedom of students/parents installing apps brought up by a DH.

I have HomeAssistant and Alexa configured to talk to Phillips Hue, Hive and Logitech Harmony etc. Then harmony can talk to TVs and Audio Video equipment. I could remove Alexa and use the front end of HomeAssistant to do it all too. It has been a year or 2 since I set it up by following guides on the Internet but it is quite reliable with Alexa.

"I've started so I will finish", in that Magnus Magnusson voice. We had a low bridge on the way into a huge industrial estate for years as a sole route in and out, used to get hit by lorries often. Thankfully it has been replaced with a dual carriage way avoiding the bridge.

+1 There is nothing wrong with being helpful but I cannot help thing we are making problems out of nothing. I've worked in Edu for 10+ years and never had a bell system, I cannot even remember having them at school, although that was some time ago, lol.

I think you need as low tech method as possible. An MS update or software update could render any over engineered mechanisms for popups then you will getting earache as to why the system has failed.

I echo that that is the concept. Whilst in 6th form, FE and HE students may be at an advantage of working with industry used software I don't think that is the case until that stage.

That is pretty horrendous. You would be better with a webcam on a stick basically the same thing but less chance of adverts. Is there not a paid for version with no adverts, I'd be surprised if there was not because that is pretty much unusable and not fit for purpose. And It is pretty bad that it is advertised on Microsoft site without indication of adverts but bring that up with MS and you will prob get a reply to the tune of nothing to do with us we are not responsible. There is a Thread on here http://www.edugeek.net/forums/av-multimedia-related/202955-visualiser-webcam-recommendations-please.html

A redirected shared desktop (read-only) also gives possibilities to place shortcuts at very short notice on users desktops which has come in handy a few times to me.

It depends what switches you go for. Some MikroTik although having 10Gb ports cannot handle L3 tasks and even bridging. If you consider some of the more powerfull enterprise switches, Cisco, Juniper, HP, etc you should not have a problem. There is nothing wrong with vlans, we have over 1000 of them between about 750 switches. We use 4 chassis series switches as cores at the moment running OSPF in a mesh which host most vlans then more secure vlans are routed at the firewall. This system works, is fairly robust and is quite manageable with newer/refurb locations having stacked top of rack switches. May change model in a few years but not to sure what that will end up like. Planning and documentation is key with some management software which makes admin tasks easier when you have to roll out commands to all the switches which we have done a number of times. There are some security and best practice considerations to stop things like vlan hopping etc. Disabling auto mode ports on switches, not using vlan 1, not having client vlans untagged on trunk links, Disabling unused ports, etc. Not to mention physical security of switches in key areas.

Routing?

So how do accounts get created? Is it automated, what system/app do you use to create the AD accounts? Student claims no account is this verified by staff member that they are typing correct name? How does CSV run to create account when it is claimed it is missing? I created powershell scripts at a previous employment to create AD accounts and that could check if accounts existed at the end and email me a report. We never had duplicate AD names because the script was not set to append number on duplicate names.

Can you plug an AP directly into the switch port to negate any physical cable issues. Worth a try as you say you have tried the AP's off the network and they seem fine, just try and break it down to small steps. Do the APs that have issues all plug in Unifi switches or the Netgears or is it random.

It is one disadvantage with GoPro to not have a swivel camera, I'm not sure but you maybe able to use it like a WebCam, you can plug in a HDMI although with my GoPro it disables the onboard screen when I do that. The other thing you will need of course is an audio interface for the GoPro on top of the MIC if you want to go down the external MIC route.

None spring to mind. It may of just been an old thing with more support these days for formats, to be fair it has been a while since I went down this route but sure it was a thing at one time, the last CamCorder I owned was a Sony Hi8, lol. Been working mostly with DSLRs and lately GoPros and just copying direct from the SD to PC and editing within Premiere.

CamCorder may be easiset route out of the those 3 I listed, may be other options though :-) . Some CamCorder makers used to use a proprietary video format and normally force use of their own editing software, if possible I'd avoid those and use Premiere as you have access to it, but as you prob want as less admin or post involvement anyway :-)

How is he intending to distribute the recordings, are they going to be available by website links to YouTube. It also depends how far you want to go and avenue you want to go. Do you need to edit the messages afterwards or do you just want like a live recording just a file that you can distribute/link to? You could for instance use a GoPro with external Mic, CamCorder with external MIC or DSLR with external MIC. Don't go with a system that you need to use proprietary editing software though. Bear in mind with DLSRs you are normally limited to 30mins recording time.

Maybe a while before any developments. http://www.edugeek.net/forums/mis-systems/215916-capita-trying-sell-off-non-core-businesses-sims-sale.html

This made me think about the account used for Azure AD Connect. How does this effect the account used to Sync. Or is that account excluded? Found following article but it is a bit vague. https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-connect-sync-account-mfa-support/m-p/689153

Suggest switching STP off on Unifi if you have no loops and no redundant connections that would cause a loop. It does sound like a STP issue and I have seen some strange behaviour with the Unifi switches before that have STP enabled

Have you tried removing network drives as part of the script before recreating, we used to do that? But I'd seriously consider the Group Policy Preferences option.

Can you try and connect to the Azure admin portal with the account that is used in Azure AD connect?

Yes I've had my share with BT believe me but all with business customers none with personal users, strange that, lol.