Davit2005

One thing it seems with Ubiquiti, they seem very lax when it comes to implementing features of benefit that are not part of the Unifi family. They want to keep you in the family of products. For instance, I use Unifi access points at home but because of specific needs I will not use Unifi/Ubiquitti firewalls or switches. With the Unifi access points there is no way to have lldp start up when the AP starts up. It is very handy to be able to see what switch ports have Unifi access points in.

We do use Aruba but then again we do have over 2000 access points across sites. Nothing wrong with Ubiquiti WiFi but it depends on the organisational needs and features required. I have deployed Ruckus, managed HP MSM and now look after Aruba, I use Ubiquiti at home. It was about 10 years ago I deployed Ruckus but I'd seriously consider Ubiquiti if I had the choice now.

Terminating the Guest WiFi at the firewall should be straight enough to do. In basic form just create a layer 2 vlan for the SSID back to the firewall and ether set as side an interface or use the vlan. I used a separate interface when I done this about 10 years ago with SonicWall firewall and Ruckus WiFi. Then just make sure that vlan/interface is in its own zone or interface depending on how the firewall works to get the isolation. Then create the rules to permit the traffic needed/required.

I must admit it was about 7 years since I set this up and it was only for students and they had the same shared desktop. Never done it on a user by user basis.

Can you share the Settings page

Autonomous vehicles may well be the answer eventually, judging by yesterdays morning fog and the driving standards/behaviour observed it will prob be an improvement as it is. For the most part humans should still be able to make the better decision and judgement but are often swayed by pressures, mood, attitude and distractions.

Judging by the attitude of drivers this should work well

First I'd keep any third party software off Domain controllers from a security point of view and as @jthompson said as lean as possible Keep Backup separate because of possible needed restarts WSUS, WDS and AntiVirus on the same VM Print Management on its own VM due to possible necessary restarts File shares on their own VM

Depends what you are using it for. If it is a Hyper-visor host and the raid 1 is just for the Local OS then I cannot see a problem. Back in the day I seem to remember different RAIDs on MS Exchange servers like Raid 5 for database files and RAID 1 for database log files but not sure that is relevant with SSDs as was just for performance

Some cheap couplers only have 2 pairs connected. But make sure you do not go over 100m length

I've actually been on the phone to Southern Rail telling them that there train had not ran, guess what, they did not believe me. My only option if that train did not run was either a double time journey or a double cost journey. Look at the fiasco caused by the timetable changes, there need to seriously ask questions and fine companies for that sort of thing as well as compensate all the users whether they had season tickets or not.

That would be ideal

So what happens if you want to sell a device, you cannot give it a default password so you end up giving it a password which then you need to communicate to the new owner and hope they change the password ,

Much the same at a previous employment for me, leave home at 5:30am get to work 7:15am. Leave work 5pm and very (, very) lucky to get home by 7pm. Did that for 3 years till I got a car due to the anxiety caused partly by the transport situation. My train routes were on what was then known as Southern Rail or South West Trains

In the morning I had the choice to get there early which I took (and I would of done anyway even if I wasn't spending an hour in the gym) but when you finish work you want to get home, I'm sure that is the same as everybody else, not sure I would want to wait at work an extra 2 hours to get a cheaper travel. Unfortunately my job role depended on me being there between 9am and 4-5pm, it is as simple as that. People need to understand that there are different needs/requirements by different people for various reasons, one rule does not work with all, but I'm sure there are a lot of pointless short journeys that practically do not need the use of a car that being an EV or whatever. I would not own a car if I did not need one for work but then I am lucky to be in that scenario a lot of people are not for one reason or another.

If you have 2 domain controllers and the DNS is an Active Directory Intergrated Zone and desktop clients have both AD servers listed as DNS servers in their IP config there should be no impact from DNS point of view. If the AD server has one DHCP server, file shares or applications running on the server it may cause issues .

I cannot understand the view point to double the cost of public transport in peak times, my journey into work was £2.80 the journey home was £6.90. Its like I had a choice to travel in a packed train for 2.5 hours with barely standing space or room to breathe

The last 2 laptops I have bought have been secondhand (£200 tops) off ebay, all Dell Latitudes about 5ish years old. All I do is put a SSD in and put my own version of Windows 10. As I use the laptop only for a few Windows only apps, MS Office, VPN, RDP and browsing that spec i5 upwards is fine for me. YouTube on a TV with a banging 5.1 sound system is awesome.

Shouldn't organisations be at a standard that it should not matter when an inspector turns up? The following sprang to mind on reading this thread though

Users can be taught how to restore their own versions too. We deployed in a secondary school and users Staff/Students welcomed the ability.

Lol, was once called to a classroom because the Radio sync'd clock was not working, yeah the battery had failed. The member of staff seemed surprised that it did not get its power over the airwaves too

When I first started in IT was told to re-install windows on a customers PC. So yes re-installed windows as requested, they missed out the bit about replacing the HDD first. GetDataBack for NTFS got us out of that one but had mixed success with it since. In hindsight another way you prevent this is by having the Group Policy ADMX for MS Office (if that is what you use) and set the save locations to at least the users home drive for each of the MS products.

Personally I would always terminate BYOD on a firewall. It is much easier to keep separation there without the need for complex hard to manage ACLs on a layer 3 switch.

Well done. I had a whole lot of pain getting IPv6 to route from an internal Layer 3 stack switch (2930f). I tried static routes for hours, link locals and globals addresses. In the end I setup OSPFv3 just for IPv6 and that worked without an issue was a steep learning curve of trial and error.

I've so many times being called to exam locations on the past and it always is something that the users are doing wrong and the invigilators/teachers have not picked up on. Personally I would not want to put a reliance on any form of IT more than necessary KISS.