notalot

Personally based on what I have heard over the weekend, I downloaded the on-prem software but I'm not stressing about setting it up (bigger fish to fry in September). Worst case the cloud goes down and the AP's will continue to function but wont get any config changes (I have Cambium at 18 sites both secondary and primary). We also only use PSK and epsk rather than Radius. I'm sure Cambium will make a statement soon.

We laid them out on the floor plan (we have scale drawings) then very unscientifically went through and best guessed 50% of them with local site knowledge of the building structure. Along with this we set the auto power settings for all aps to Max Power : 19 Min Transmit Power : 8 Minimum Neighbour : 2 Cell overlap : 50 We had a long call a while ago about the settings and these are a starting point. Without a spectrum analyser its all best guess.

Hi, I use cambium across the trust. The AP's are solid, the only thing that we have found is that if you go for an AP in every room you need to plan to turn off the 2.4 band on 50% of the AP's due to channel utilization and interference from other AP's. We have had a couple of issues and cambium support have been good. We have the full CnMaestro licence currently but we can change that down after our 5 years so that we can continue to manage it. I haven't used Ruckus before but I've previously used Unifi, Meraki and Aruba for the big names and I would say they give the Aruba and Meraki a run for their money without the licence issues you face with them.

We do a very similar process but after we export the data we use a bit of cloud software called Nalytics made by Nalanda Technology. Once imported the software does an additional search with better tooling then allows staff to redact emails and files without too much work. Nalytics has a large bank of names, job roles and other identifying info and does an initial redaction pass, we reduced the amount of work by about 2/3. Its still a decent task but at least it gave some support to our staff. The software doesn't cost the earth either but its not an insignificant price but its well worth it in our eyes.

My understanding is its the number of agents on the system rather than the staff logging tickets.

I'm in the process of settings up OSTicket (used before), same issue not staying with Spiceworks.

Hi, I haven't done it using PowerShell but I know that Schools Data Sync does this as part of the sync so I would assume there is a mechanism.

Hi, below is the config of one of my sites, not much difference in a 3 node cluster between direct attached or via a switch we just set them all up the same but in a 4 node cluster you would need quite a few additional NIC [ATTACH=CONFIG]72995[/ATTACH] My normal config across the sites is Dell Poweredge R650xs 2x Intel® Xeon® Silver 4314 CPU @ 2.40GHz 128gb Ram 6x 2.4TB 15k SAS Drives 2x 980GB SSDs' 4x 10tb SFP Ports (normally needs 2 network cards but can get away with 1) If your building this up your self make sure you get a HBA Card and not a Raid card as S2D needs direct access to the drives to work. Assuming that your not using these for Azure Stack HCI then there is also no actual requirement for the certified hardware. The difference between this cost wise was mad, we got it quoted last year £7.2k per server that we got and it was £36k per server (Dell-AX-640) One small difference that I would do now is to have an internal NVMe for the OS drive rather than using one of the 2.4tb drives. The actual setup of this is very straight forward at a high level Install OS Team Nics Set IP address Join Domain Enable Remote Desktop (if you permit this) Run below Powershell (I'm sure the PS can be improved to do more just didn't get round to it in the deployment schedule) Create Virtual Switch in Hyper-V # Fill in these variables with your values $ServerList = "Server1", "Server2", "Server3" $FeatureList = "Hyper-V", "Failover-Clustering", "Data-Center-Bridging", "RSAT-Clustering-PowerShell", "Hyper-V-PowerShell", "FS-FileServer", "RSAT-Clustering-Mgmt", "rsat-hyper-v-tools" $Clustername = "Clustername" ## Set line 33 for the IP of the cluster (the command never liked setting the ip via a variable) # This part runs the Install-WindowsFeature cmdlet on all servers in $ServerList, passing the list of features into the scriptblock with the "Using" scope modifier so you don't have to hard-code them here. Invoke-Command ($ServerList) { Install-WindowsFeature -Name $Using:Featurelist } #This tests all disks and resets them if something has been written to them or a partition has been created, this doesn't effect boot drives Invoke-Command ($ServerList) { Update-StorageProviderCache Get-StoragePool | ? IsPrimordial -eq $false | Set-StoragePool -IsReadOnly:$false -ErrorAction SilentlyContinue Get-StoragePool | ? IsPrimordial -eq $false | Get-VirtualDisk | Remove-VirtualDisk -Confirm:$false -ErrorAction SilentlyContinue Get-StoragePool | ? IsPrimordial -eq $false | Remove-StoragePool -Confirm:$false -ErrorAction SilentlyContinue Get-PhysicalDisk | Reset-PhysicalDisk -ErrorAction SilentlyContinue Get-Disk | ? Number -ne $null | ? IsBoot -ne $true | ? IsSystem -ne $true | ? PartitionStyle -ne RAW | % { $_ | Set-Disk -isoffline:$false $_ | Set-Disk -isreadonly:$false $_ | Clear-Disk -RemoveData -RemoveOEM -Confirm:$false $_ | Set-Disk -isreadonly:$true $_ | Set-Disk -isoffline:$true } Get-Disk | Where Number -Ne $Null | Where IsBoot -Ne $True | Where IsSystem -Ne $True | Where PartitionStyle -Eq RAW | Group -NoElement -Property FriendlyName } | Sort -Property PsComputerName, Count #Lets test the cluster, warnings are generally ok especially if you are segerating the networks Test-Cluster -Node $ServerList -Include "Storage Spaces Direct", "Inventory", "Network", "System Configuration" # Pause to let you check the results. Pause New-Cluster -Name $Clustername -Node $ServerList -NoStorage -StaticAddress 1.1.1.1 Enable-ClusterStorageSpacesDirect -CimSession $Clustername Add-ClusterScaleOutFileServerRole -Name SOFS -Cluster $Clustername #this creates a new virtual disk for the cluster to use, its had some issues for me so the GUI can do this stage as well so its commented out for now #New-Volume -FriendlyName "Volume1" -FileSystem CSVFS_ReFS -StoragePoolFriendlyName S2D* -StorageTierFriendlyNames capacity #This sets the cluster failure behaviour without this if a host dies the cluster wont fail it over for 120 seconds. (Get-Cluster).ResiliencyDefaultPeriod = 0 Once the PowerShell is done the cluster should be active as well as S2D, if you didn't have luck with the new-volume command then you need to create a Virtual Disk. I will say that I have installed 5 of these and all 5 have had different issues after install, most related to permissions in DNS or AD for the cluster and the hosts. Hope that lot helps a bit.

Hey, I have several Hyper V clusters with S2D setup (3 and 4 node clusters), from my experience it works both ways without too much issue, both ways pass the cluster validation tests. My current setup is to have 2 10gb NIC's teamed for Cluster Communications (and S2D server to server coms) and the rest of the NIC's teamed for Virtual Switches and management. I vlan off the Cluster communication then leave the rest tagged for all the other vlans that are needed.

We gave in this year and brought access to Nalytics it takes the export from a Content Search and will then automatically redact a large amount of the documents automatically, it still needs to be proofed and some bits redacted or unredacted manually within their web based GUI but it has saved about 60% of the time the redactors have been doing. Technically its regex and keyword searching and replacing with a GUI to proof it, it works quite well and does save time.

From memory (going back a few years) if you add a group from the Teams App (not Web) it will add the members of the group, but it doesn't update if the group is updated going forward. PowerShell would be my go to if I had to do this again https://learn.microsoft.com/en-us/powershell/module/teams/add-teamuser?view=teams-ps

Hi, I've done something similar recently to handle an issue with a cluster. If you "remove" the server from fail over cluster manager then the VM is now hosted on the server it was assigned to in failover cluster manager, so one of your 2 VH's (it doesn't delete the VM when you use remove in Failover cluster manager it just stops fail over cluster manager managing the VM), if it was running it will stay running You can then perform a storage move on the local Hyper-V server through Hyper-V manager to get the VM's files out of the Cluster Storage and to where you want them stored.

Hi, Yes this is technically possible but without some serious time to invest you'll regret accessing the database directly. The database for sims is expansive and poorly documented (from my experience). My previous trust did this extensively to create a data warehouse and as long as you don't write anything to the database it wont effect your support (we had it in writing from ESS before it moved). The question is why do you need live data rather than "Semi Live" data, Command reporter whilst also can be a pain is less of a problem than accessing the database as it will run Sims Reports and they can be outputted to local locations without issue. You can then run it as a scheduled task. Just take care when doing this as we get to this time of year the reports can cause Sims to lock up for a while whilst it runs especially when your working with Attendance or Behaviour data.

Hi all, so been working with Schools Broadband with this since the change and still no closer. As Mr.Ben pointed out the PSK is encrypted so cant be pushed out like the SSL VPN was. We looked in to certificate based Auth but this is a per user certificate so would require a certificate authority to be in place which for us currently doesn't exist as some of our sites are Azure joined and not domain joined, I haven't sunk much time in to identifying the requirements for a CA in an Azure Joined domain. Even if we did the VPN still wouldn't be automated and the certificate would change per device. Put bluntly if we ended up having to setup a CA for this we would practically be at a point for always on VPN (DirectAccess). Right now the only option we have is to deploy the tunnel with Reg for the settings then a tech is having to visit the device and add the PSK by hand which is far from ideal but preferred over staff having all the information needed to join their personal devices to our network.

The main issue I have is there is no way to deploy this VPN as its using Pre Shared Keys, most of our staff even with instructions would fail to set things up correctly not to mention the security implications of staff being able to add their personal devices to the VPN. So this requires my teams to go out to every staff device and set it up one by one and for some of my staff they need several VPN's as they access several sites and we don't permit inter-site communication (yet). Has any one had luck deploying this on mass via Intune, SCCM, script or GPO?