joseph707

Hi Icangoogle We usually give them Remote Desktop Services aka Terminal services using Windows Server 2008R2. Various reasons a. Our Staff is given school laptop and they would access normally all the drives as it is b. Our Students also access Student Drive and home folders from domain joined computers c. The beauty about Remote Desktop Services is for our senior grades i.e 10-12. They have BYOD Macs, Laptop, Tablets. We give them RDS and they can access all the programs. The benefit, we don't need to buy additional computers etc d. These Staff/Students can access from home as well even on iPads using Remote Desktop APP from Microsoft f. You can also give access via WebDAV. It is free within IIS and staff/students access them from iPad within school network, thereby cutting down on costs and additional softwares. But you need license for RDS which is way less...from Microsoft for Edu. Hope it helps. Regards Joseph

Hi DrCheese Windows 10 is in its infant stages and with all things new, there would be problems. Following are my suggestions. a. Wait for a year before rolling it out. b. Have you checked whether roaming policies/profiles works seamlessly ? c. Does it work well with a domain Environment i.e Windows Server 2008R2 and Windows Server 2012R2? d. Did you come across any wireless issues when roaming with Windows 10 e. Which version of Windows 10 are you rolling out Windows 10 for Education, Windows 10 Pro or Windows 10 Enterprise f. Check compatibility of all the school owned applications either 32bit or 64 bit and legacy ones g. Edge Browser and/or Internet explorer on a domain environment. Whether policies gets reflected or not? h. Does login scripts, Desktops icons works well after you join in a domain environment I. Drivers both on the Wireless card, Motherboard j. Printer drives compatibility including any policies that you have set k. Group policy to deploy applications, does this work? l. Whether Laptop close lid action would sleep the computer or cause a BSOD issue m. Windows 10 comes with a forced updates. Have you plan to put a windows update server to stop windows 10 updates simply installing on all your machines without you first testing it. n. Windows 10 activation mechanics i.e whether KMS or MAK using Volume license key and if the computers have the qualifying license to upgrade to a new version o. Windows BIOS marker i.e activation would fail if there is no qualified OS but you have to manually activate Windows 10 p. Office 2013/2016 32/64bit. I would advise 32bit q. Orientation to staff/Students about this new move r. Does your security i.e Antivirus have no issues. Did you look at the event viewer for possible issues s. Windows 10 firewall, whether to enable it or not t. Ghosting or other posts said, SCCM etc... Hope the above helps. Cheers Joseph

Hi Chuckster My suggestions to have a proper IP range a. Create VLANs for every bit i.e Staff, Student (separate it by Grade level, if possible), Guest, Events, IP Phones, Server, Management, CCTV, Access Control. Your printers can be on the same VLAN as the Students computers, staff computers. This would help to create Access Policies for every VLAN i.e Staff at the Primary School with the IP range 10.5.16.x will be able to get facebook access between 10AM-11AM during recess. This won't be the case if a staff in the Senior school is present as ACL (access control lists) is separated. b. Start with a range that is sustainable with /23 per subnet c. See how many devices would be connecting at a given time and also try to simulate the number of devices connecting in 5 years time. Always remember students or staff will have a minimum of 2 devices. Multiple that to the staff/student having access d. Don't go for super scope e. Don't go for anything below /23, a worst case scenario maximum /22. Anything about this is going to create a massive broadcast storm on the network f. Don't go with separating IP scopes. Make them under one scope i.e don't put 172.x.x.x with another range of 10.x.x.x. Keep it constant, less headaches g. When going with /23, first 25 IP should be reserved for various static IP assignments i.e a separate Static IP Printers, Principal etc h. Make sure and this is the most important, Bonjour addressing if using iPads. Because they don't cross over VLANs/subnets, you need to either put a Bonjour Gateway in between to pass traffic so Students on a particular VLAN can see Airplay devices of Staff on another VLAN. I. Like another posts says, have 2 DHCP servers and mention them on the Core, Distribution switches, so if 1 DHCP server, other still addresses it. I hope the above has been useful. Let me know if you would require detailed info. Cheers Joseph