houlta

Responsibility? The other workers you listed at least have some.

Well if its Ireland I'm not surprised he's not getting round bends very fast, last time I was there I spent most of my time trying not to disappear down potholes

I don't get the fretting over gas really. at 35.7p per Kwh plus 55p a day just for having the leccy meter it's bonkers...I've literally just had a gas cooker put in as it's paid for itself in just a few months.

Yep, not what I meant really, you can of course use any internet connection with it as such but they prefer to sell fortinet at exa for their filtering and wan solutions etc.

Nice one, I'm surprised they support a linux firewall. Its usually fortinet that exa work with.

Right you are, orange/aqua is multimode, my bad, need specsavers, I was looking at the yellow cat.

Looks like SC single mode

Can you ping out? Eg 8.8.8.8 ?

RM, Exa, local council eg NYNET, schoolsbroadband, wave9, internet4schools. Those are all the ones that come to mind immediately as supplying broadband with filtering bundled in thats suitable. They are usually via proxy server for web filtering, either transparent or set proxy address, your choice and perhaps active directory linked too, again thats a choice of either at least with RM and Exa as far as I'm aware.- eg AD groups for staff and students with separate filtering rules or different rules by using a different proxy server address. You'll probably want to draw a tender up and send it out to all of them, just be very specific about what you're after.

You can use UrBackup - Client/Server Open Source Network Backup for Windows and Linux which is free open source and run it on a standalone non domain joined box and have the agent on the machine you want to backup. Job done. It even runs on linux if you want. Then just use a rented license of veeam via a cloud immutable backup, it's much cheaper. That way you have on-site and you have cloud and it costs the least as you're not paying veeam for a full license.

Its not that detailed. The idea is you apply the policy to the users/computers you want and just disable it when you need to and amend it if need be. Theres a tool for setting it all here- https://www.microsoft.com/en-us/download/details.aspx?id=101056 You won't see who has managed to install what, you'd need something separate for that. Its more like automated updates with a few caveats is all. Do you have O365 there?

Its group policy set- https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb Just looking at your original post though, if budget is that tight then I would use Urbackup to make an image backup of the server. Its free, makes a vhdx and can also do file level, incremental etc. https://www.urbackup.org/ The intent is of course to have more than 1 machine to run it with It will also backup databases separately if you like and vm's with the client installed. Until they pay then it's not your job to put too much effort in really, I would put everything in writing though and copy in several people with clear text stating the risk. This is basically how these small single school setups fail, sod all investment in IT and an impression that it runs forever with no need to spend anything. Next thing they know, their desktops are locked up with a request for bitcoin and their entire fileserver is just gone, along with SIMS and anything else they bundled on it then they panic and blame everyone else. They left the backup connected with a single USB drive and ofc the hackers encrypted that too. As a minimum really you need a vmhost and a backup server on site- a synology NAS is usually most cost effective, then a cloud backup (veeam licensed through the cloud backup company not veeam direct). Ideally you'd have some old servers you would re-purpose as you purchase new kit and use them for backup redundancy.

A typed up reference is always useful, in case you move on etc.

Just done an Aruba Campus 802.11ax rollout myself with cloud management. I have to say the AP-515's are the bees knees, however they cost an arm and a leg and thats assuming you can get hold of them. Glad to see the back of the old meru setup though! I'm looking at TP-Link Omada WiFi6 range for primaries as a 'cheap' solution EAP-660 perhaps. Even the PoE switches are affordable imho.

Veeam cloud connect licensed version from a cloud storage provider like ct.co.uk for example is probably the most cost effective way of using veeam rather than purchasing off veeam direct as theres a requirement to have cloud backups nowadays and you'll just end up paying twice. You'll need an outgoing fwall rule on port 6180 for it to whatever cloud provider you end up choosing. If you are really stuck for cash then something like vsquare is fairly cheap and can manage free versions of vmware too. Urbackup is nice for local file level backup, perhaps extra redundancy on some old servers you might have, its free open source, has a linux+windows agent for it and is very quick and easy to config. It also does full image backups.

Hmm it only mentions the default one there. Can you run Get-RemoteDomain to show if tnef is enabled? Never had to do this myself tbh.

Ahh right so its definitely this then- https://social.technet.microsoft.com/Forums/en-US/56319212-8880-4182-8b3d-f10a447f5c93/voting-buttons-missing-for-on-prem-mailboxes-when-sending-from-an-exchange-online-mailbox-to-an-on?forum=exchangesvrgeneral I thought it was related to the usual AD sync with no on prem exchange for a moment there.

Is it related to this?- https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-message-approval-scenarios

Is it an ISP filtering/proxy issue? I'd expect so with the 502 error.

Cloud file and app permissions are possible I guess. Theres this here but you might already have seen it I'm guessing? https://docs.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin Local file/print and things like smoothwall AD integration or other such firewall AD auth will need local AD bind, I don't know of any software that gets around that, sorry :/

Yes, imho it does look like an open ldap in the cloud. If these are student devices though..do you 'have' to have them on AD at all?

Have you looked at jumpcloud? They'll do you 10 devices for free...naturally it gets expensive but really thinking about this, I don't see any way of binding to AD other than some kind of SDWAN/MPLS style solution to provide on prem AD coverage at each site.

It takes 5 minutes of looking at whats on offer for new entrants into IT. Even some jobs going I've seen for single responsibilities eg backup admin, database admin and so on are all around 30k or so. 20yr+ experienced sys admins who can do vmware, linux, windows, veeam, sql and the works are getting headhunted for 60k+ now easily. If you can do some coding and devops then double that...

I would use a smtp relay if you are on a static ip. https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#option-3-configure-a-connector-to-send-mail-using-microsoft-365-or-office-365-smtp-relay Thats for O365. If you have an isp that provides an internal mail relay it is of course easier to use that and then set up a connector in O365 for the isp relay.

!?!? Sounds like a bug or issue they're having with the load presently perhaps? I'd normally expect to see it in the recycle bin if deleted, nowhere else for it to go as far as I know.