BKGarry

OK hopefully the screenshots make sense to you here: Windows NPS Server Sophos XG

Do you have RADIUS Accounting passing through from your Windows Network Policy Server to the SophosXG box? I am just going to check my settings and will screenshot them in a moment to you

I am sure I had this the other day too, but going through focus > person > contact is fine

1 secondary school here, moved from Meru to Unifi throughout 3 years ago, as the maintenance cost and cost to replace the Meru Controller was more than replacing all the Access Points and Switches with Unifi kit. I have been thoroughly impressed and have even deployed a few of the HD Pros now too, in the high high use areas, and it works, it works very very well. My favourite feature on the controller is the ability to go into a switch, go to the port and just click reset on the POE and it stops the power for about 5 seconds and puts it back on, works a dream for some of those POE devices around the place that can be a little fickle.

Hmmm Sir Philip Green again me sees! TBH, I haven't found anything I liked in any of those shops for years, and with BooHoo being such a presence in the market, it has kinda replaced them.

Just thought I would check, as I thought I was going crazy and missing a trick there.

Do you have 2 USB ports on your projectors then @MGSTech ? one for the Wireless Adapter and one for the Speakers?

Exactly what we do Katy, audio output from the projector to the classroom speakers. It also means I can be slightly sneaky and set the volume on the projector to not be max so they don't blow the speakers lol

hmmmmm, wonder what port that one is using (hopefully it isn't the standard RDP Port) as it could be MiM proxy certs kicking in, or it could be the port being blocked most of the time by a firewall rule, which although you are using the same proxy, you may have a different rule which allows the port (sorry plucking at straws here)

What version of RDP Gateway server are you running, if it is 2019 you could enable the HTML5 client and direct them to https:///RDWeb/webclient/ Be warned though, this only works is the gateway has a secondary NIC with a direct DMZ on port on 443 and will not work through Web application proxy.

and for extra security in our place, I made a second policy for SSID policies in group policy for student machines which stops them being able to connect to the WiFi apaters from student laptops in school.

Do you have any network sockets near the projectors in question, as you can get POE to ethernet adapters, I use it on some of our bigger ones, as it allows me to remotely restart them as well?

No problems, glad it worked for you in the end :-)

could you delete that group and remake it?

I think you need to clear the allow list in the group in question. I am afraid you are going to have to check each group, but it is where someone has put something in the allow list and it is blocking everything else.

Glad to be of service and help you with it. Stupid things that are not easy to see when you are in the thick of it at times. Your next step is to follow these, once you have some "Strong and Stable" DCs https://techcommunity.microsoft.com/t5/storage-at-microsoft/streamlined-migration-of-frs-to-dfsr-sysvol/ba-p/425405

It's confusing, don't worry :-)

I am sure we are on about the console here, not the hardware (I think anyways)

Mine seems to be working just fine :-)

We moved (the Wednesday before lockdown was our changeover date) to Wave 9, better service !,# support, more bandwidth (1gps fttp and a 80mbps fttc backup lins), our own onsite filtering and firewall (a sophos XG) for less than what we would have been paying the LEA for 200mbps.

yup, I use them across the school, occasional reboot is needed, but they work pretty well for us

Some questions to try and help: Are there any VLANS? Are you using RADIUS/NPS at all? Are all the client devices the same type of network card? Has there been any firmware updates to the switches?

We have unifi with a separate VLAN, but we use the Guest Voucher System built in too. We print out a stock of the vouchers for reception and they give them out when visitors come and request WiFi access

Do you have salamander sync already? If you do, once there is a Google G Suite domain they can sync your timetable straight to it and create all the classrooms automatically for you. The other one thing you may still be able to tap into is the government funding available through The Key website for setting up G Suite or Office 365 if you don't already have it. Thay may be very useful for you.

I use MDT. It sits over the top of WDS (and is free) and it deploys the OS and then all your apps afterwards, in it's default configuration