speakercon

I've been trying out the free Open DNS offering and it seems pretty good if you just need a generic DNS filtering service. Did you pursue costing for Cisco Umbrella?

Are the AP's on the same subnet/vlan as the controller?

Can you ping the server IP & hostname?

File and printer sharing for domain access in allow apps?

You are supposed to have one if you watch any live TV regardless of provider or any BBC content, should it be through an aerial, sky or iplayer ect. The sooner its got rid of the better in my opinion. If only I could start a business and make it the law that everyone in the country has to buy my product or feel the mighty wrath of the capita bullies.

Hi, where is collection from?

Thanks for this! I've been having the same issue and came across this, however it was 'api.aadrm.com' that was being blocked for me, incase useful to anyone else in the future.

Our finance dep are happy (ish) with me using our school ebay account to buy things on, I don't get involved any further than that. However I mostly buy from IT recycling companies on there so I sometimes contact them directly and arrange for them to be added to our suppliers (which I know eBay rather frowns on). There are huge savings to be had if you are careful what you choose, I recently replaced an aging IT suite with 30 X W11 ready PC's I got for £800.

eBay! Got some absolute bargains over the years for all sorts of hardware.

I'd leave it with external DNS, that's what I do. Is there much to be gained with the devices using your DNS servers?

Are you using SIP or multicast from BC? If SIP, a SIP softphone app with auto answer enabled should work okay. Would the TV's always be using the android box though, or sometimes the HDMI in? I'm not sure the input would switch if a broadcast came through?

I asked them at one of their webinars a couple of weeks ago as a few suppliers no longer include it now in their cost matrix, and while they wouldn't directly say cat5e won't be replaced they did say if the current cabling supported multi-gig, which cat5e does within the correct parameters it would be rejected if new cabling was included and it would need to be proved during the half day site survey that the current cabling won't provide the 2.5g. Whether in practice they just approve it I don't know but that's what they said to me.

Absolutely no need to replace the cabling. Red flag's would be blowing around for me if they are saying you need it. How old are your switches? Cat5e can even do multi-gig. From what I understand the DfE won't pay for cat6a anymore if you have cat5e because of this. "With the inclusion of the IEEE 802.3bz standard you can even get more performance with your existing Cat5e cables. Under the standard of IEEE 802.3bz you can achieve up to 2.5GBase-T and 5GBase-T up to 328 Feet (100 meters)."

I have used FortiGate's for a long time, I personally think they are great firewalls. The filtering does leave a little to be desired IMO but it does the job.

Don't forget once you have gone server-less those pesky server and comms rooms will no longer be required so they can be used for more offices

I have an OU with a GPO that prevents staff/students from logging in and has a logon image saying 'Contact IT Support'. Any machines that are unknown get put in there, if they are in use we are quickly made aware of it. Also a look in the attribute editor 'lastlogon' for the machine shows the last login time/date which is a pretty good indication if it no longer exists.

I can also recommend OneDirect, we use the xtreme mitex ones - Mitex General Xtreme Two-way radios | Onedirect.co.uk

Okay after further investigate it looks like it is only machines running LTSB 2016 that are having the SSO issue even before re-imaging, CDM authenticates okay but Teams & Edge do not. I'm not very bothered by this as these machines need updating anyway. Machines running newer OS's always seem to join azure instantly if they have never joined before but there does seem to be a delay if the machine has been re-imaged and is already in Azure. I've tested this and it seems to vary from hours to minutes. If I check the device-join task after the task sequence has run it shows as 0x1 - privilege issue. I've tried to run this after varying amounts of time and at some point the task runs (or letting it run by logging out and in). I guess it is what it is you just have to wait.

I enabled MS SSO by ticking it in AD connect and syncing the computer OU's and it worked brilliantly, all windows devices showed as hybrid domain joined in Azure. However my happiness was short lived as I've found after re-imaging a machine it doesn't seem to update in Azure, the 'old' machine just shows as no activity since it was re-imaged. If I delete the 'old' machine and then reboot it, it then re-appears in Azure but SSO doesn't work - Cloud Drive Mapper does authenticate on its own but Teams and Edge still prompt for email/password whereas before the re-image all 3 apps signed in automictically. Is it normal to have to delete hybrid domain joined devices from Azure before re-imaging? Even if I do this Edge and Teams no longer work with SSO. What am I doing wrong!?

+1 for Icecast. Its free and I've had it working successfully doing this.

For Sale We have 16 X 'Fanvil X4U' IP Phones & 1 x 'Fanvil X210' IP Phone. Used in good condition and will be factory reset. Collection from Middleton, Greater Manchester or we can post them at cost or you can arrange a courier. Looking for £600 for the X4U's and £100 for the X210 and payment would need to be made to the school via bacs. They will be available from around the beginning of May.

I'd disconnect the smoothwall and connect a laptop directly to the virgin router (just set a static IP the same as configured in the smoothwall). Then do a ping-t to 8.8.8.8 maybe over the weekend and see if there are any drop outs on monday (assuming the wan connection is not needed over the weekend for a vpn or something.

Thanks for the ideas all. I quite like the idea of a bitlocker encrypted partition on a hyperv server host, and exporting the VM there, with the drive only being unlocked while the server is in use and then locked again after.

It is mostly shutdown, same as most here it is turned back on when requested. We have migrated as much information as possible I believe there were a few things that would not come across. My thought are on the security side of things, in the event the network is compromised it could be turned back on and nics re-enabled which is why I'm thinking of a more completely offline solution.

Sorry If I've missed it in the thread but what is your firewall at the main site?