ITGuyWestMidlands

As a quick fix you could try adding your users to the donain guests group as these should get deleted off at log off. I holding back on windows 10 for another 6 months at least, can be doing with out these headaches atm.

Could be sticky keys hack?

The task is stored in sql. You can see sceduled jobs using the sql server managernt studio. Id start there along with the event logs

Zip tied or velcroed in loop then bunged in a draw. We tend to only buy what we need and repair what we can

Hooks?

Thanks for this. Is it just applied via gp to laptops that go off the network?

What about redirected desktops?

What type of profiles are you using? Local, roaming, mandatory?

This. But, go for the pro AC models if you can

They are not a requirement. Chexh what certs are currently issued to what servers. Then check those servers for services that could be using them. Perhaps radius?

Id like to see this plwase as well as how you have your shares configured for offline files. Ive only lookedc briefly but it seems like an all or nothing situation?

What is your CA used for? Do you need it?

I dont think they are made for hanging cables on though...

We are on a flat network and looking at dropping in some VLANs. We have two dcs with one also running adcs (I know, I know). Had anybody had any issues changing dcs to a new ip and subnet? Anything to watch out for? Thanks

Anybody fancy sharing their mac vlan acl?

Netlogon

Open it up on your ad server but only allow access from smhw ips

You give each vlan an ip address. That becomes the default gateway you set for all clients on that vlan.

Voip Your default route should allow packets to access the Internet. Vlan1 should be untagged and vlan 10 should be tagged. Vlan 10 should be setup as a voice vlan. Wifi You will need to apply an acl to the guest wifi vlan that denies access to the other networks but allows access to the portal CCTV Default route of 0.0.0.0 0.0.0.0 192.168.40.1 UPIINKS You need to tag all VLANs on the uplink ports

Works well has a bridge between your network and a managed router if you want that bit of extra control. We used one when we had no access to our router configuration to block 80 and 443 unless it was from certain ipsec (servers) or our proxy. Nice to redirect NAT rules also.

Fancy saving me trouble? 🙄

No sorry

Just block exes from running from them

Actually, looking back it may have not been needed. It should expand automatically to the username. Give it a go

You can use %username% alin a trusted location entry but there is a regedit required for it to render it to the users username. We push out the reg entry bu gpp. \\server\share\%username%\My Documents\tempSimsRpt\ is the temporary path for reports