Warwick_Tech

Hi all, Raising this from the dead as I'm getting closer to this project - So far I have decided: * x1 Physical DC (Old DC will remain in place) * x2 S2D nodes covering the other HyperV servers with a link cable between them The old DC becomes the 'witness' and I'm going to build a second DC on the S2D cluster. My only issue with this setup is no one can give me a definitive answer that when you do remote desktop or physical connections to the two S2D nodes, whether you need two RDP sessions and two IP addresses, or do they essentially act as a singular unit.

Hi Gareth, Off topic but did you use InTune licences for this? I've tried several times to seek clarification from MS but I get a different answer each time....

Hi All, I'm hoping to host some Ubiquiti training (depending on cost) Given a minimum of 6 users, anyone fancy coming to around Gatwick so we can get this organised? We can either host at a venue, or where we are and then you get a free network tour! https://www.4gon.co.uk/ubiquiti-enterprise-wireless-admin-uewa-unifi-training-course-onsite-p-7623.html

Hey All, Sorry, forgot to mention these would be collection only due to size and weight - We are based down near Gatwick Airport I think the screens are 22-24" , Dell OEM - so again, good bargain....

Does anyone also know of any charities that might want this kit? Happy to give them a shout too

so It seems Synology boxes support this - but only through the CLI, not GUI https://techoverflow.net/2021/08/29/how-to-add-multiple-vlans-over-single-network-interface-to-synology-dsm/ https://baihuqian.github.io/2021-01-16-secure-home-network-how-to-connect-synology-nas-to-multiple-vlans/ But they make no mention of the same DHCP range - and I can't seem to get it to communicate with the DC as again, there's only an option for one VLAN ID per physical port https://www.virtualizationhowto.com/2021/05/windows-server-dhcp-vlan-configuration-detailed-guide/

That's what I thought - If I take a physical new cable to a new port on the DHCP server, that becomes tagged and allows communication... but then you're adding pysical cables to a virtual solution, why can't you just tell a port to accept all traffic regardless of VLAN ID.... Edit, and then technically wouldn't it be on the wrong IP address for the DHCP server so fail anyway :S

Ok, so clarification with crappy diagram time! so PC A is untagged and can access everything, PC B is VLAN tagged 10 and can only access DC and the Fileserver (PC A and B cannot communicate)

I was having a discussion with a colleague about VLANS and we came to a contested point - He was taught by his professor that any and all VLANS must have a dedicated DHCP scope, ie regular traffic is (0) on 192.168..... VLAN (1) has to be on a different scope, ie (10.18.....) Now, I was under the impression you can seperate VLAN traffic from other nodes, but still retain the same DHCP scope (Ie they all have a 192 address) This allows you to isolate devices (CCTV, Wireless, Admin, Students etc.) without having to build a new DHCP everytime, and it allows cross communication for servers - Otherwise how would you share for example a file server between two VLANS, while keeping the nodes from communicating with each other... Maybe I'm thinking of firewalls.....

Great - at the moment I'm still working on logistics, but It's seeming likely I'll need to shift these in a hurry!

Hi All, This is just a precursory to see if there's any interest, or if anyone knows any charity organisations that would like these; I still have to offer them to staff and students - I may have coming up after Summer around 140 Dell Optiplex 7010 units, complete with monitors and stands, making them AIO units - They are * i5 (4th gen I think?) Quad Core * 8GB RAM (mostly 4GB sticks) * 240GB SSD (2.5" will be nuked) * No KB/Mouse but all other cables (Kettle, DP etc.) these are the 4 port USB versions with 4 RAM slots Really sad to see these go TBH, they are fantastic machines - you can bitlocker them with a BIOS update https://www.dell.com/support/home/en-uk/product-support/product/optiplex-7010/drivers O7010A29.exe I've also seen they do not officially support W11, but that seems to be a growing trend Reluctant to see these go as they are amazingly robust for workshop environments, especially with a 1M long cable tie....

We weren't invited unfortunately, I'm just doing an upgrade while using the framework as a base!

Very late to the party here, But I've just been tasked with wholeschool WiFi (hooray) and wondered if anyone had a DfE contact email? Not nessasariliy for funding, but for copies of the project brief and suppliers so I can reach out to a few. Regards,

The backbone is all 10GBS but the internet is 1GB up/down I also checked and forgot to throttle the student WiFi (whoops) My BM is asking to cost up a whole system replacement (which seems extreme in my opinion) so anyone have any companies they can reccomend?

Interesting, see we put it in place to prevent torrents initially, but then that changed to watching 4K movies on Disney+.... I don't think we will find a definitive answer, but all opinions welcome of course

Hi All, Do any of you use bandwidth throttling on your WIFI networks? My BM is asking if 10mbps throttle is sufficient, but not had any complaints before...

Hi All, as part of this big project we have I've got some apps to trial - One being the set up School Pc's App and one being Windows Configuarion Designer App from the store. anyone have experience with either? Ideally I want to just plug the USB in during the OOBE and away it goes, joining to azureAD and from there, Intune so we can deploy devices easily for shared devices. Also not sure how these work for devices that are past the OOBE, I assume they need a factory reset, but who knows at this point.... all our InTune licences are also user based, so how do shared devices work?

This has been a bane of many of us for a while - there are several threads about this and no one has a definitive answer, as the games are so linked to google services; even bing now offer chess and tic-tac-toe. My 'all-round' solution was to block javascript using a GPO on Google, but they just go to google.ie, or google.au or google.mars (you get the idea) a lot of people will tell you it's a classroom/supervision/dicipline issue, but that's simply not true, if they can be distracted or waste time, they will find some way (Famous birthdays has been a favourite for some bizzare reason) These days I personally leave the google games open, I'd much prefer they waste time safely than google 'unblocked games' which can lead to FPS games or worse, malware.

Hi Steve, We are in west Sussex and this looks perfect for us, is it still avaliable? Regards,

We're looking at S2D for a new project, either that or Clustering (Haven't decided yet) but these will all likely be on S2022 If it helps I would personally wait as it took S2019 around 6 months of release to support my RAID controllers natively...

No, not sure what the new requirements are - I'm just talking general device management, as Ms are doing everything in their power to 'merge' home and work devices, despite not understanding the end user may not understand or want their device having policies forced to it. The argument of course is 'admin knows best' but realistically I don't see how you can make an entire device 'compliant' - the idea of cloud access via portals etc. is great, conditional access works perfectly for this; it's just the concept of the windows account itself being linked to Azure...

When it comes to AzureAd and InTune, do you let your users join their own devices? or do you lock it down so only admins can do this? I can see arguments for both, but feel we have no 'right' to enforce things like bitlocker on personal devices; The problem comes from when Jimmy buys a laptop from argos and enters his AD credentials and there's no way to remove them without some powershell work which you may not even have access to if we disable his account... Lots of people muttering about bricked devices!

Happy to reduce these in price - Any offers? We honestly just need the space now!

Can they not use O365 via the web?

So without going into too much detail someone dropped the concept of 1:1 devices on my lap and wants a report ASAP; These would all be devices for use outside the classroom (home) and ideally they would take them with them when they go elsewhere. If you have a similar situation, can I grab some pitfalls? I know you can now link Azure with Google Services, Apple etc. and I was tempted to go down this route. How do you do it? ---- Edit, I would also be keen on hearing MDM solutions, I know there are several but it's a minefield out there!