Search results

So there was no IP range for the affected subnet in AD so I have added one (along with the other new remote sites) however it doesnt appear to have fixed the issue. Do i need to do something in sccm to tie it together? I would have though that was what the boundaries themselves are for? Do...

This seems to have worked. I ran the command remotely on a handful of machines, and they all updated immediately without any user interaction, so i have created an SCCM script tor un it on the rest of the affected machines and hopefully they should all update when they login tomorrow.

Excellent. I will test that tomorrow.

In theory, Yes, all the sites are on unique ranges, so PXE wont work without extra configuration, but all the existing remote sites just use USB build instead, so I don't think that's the issue. I will check into the AD S&S idea tomorrow though.

AD S&S is a good shout, i hadnt thought about that. As for setting up vlans/routes, I am pretty sure all that is working as normal traffic to/from the site is working fine (i can plug a working domain laptop into the network and see servers and ping things) it just wont build a new machine.

Ah yes, I was. That seems to tie up with what it says on the slmgr output. So basically I just need to push the gvlk from that link you posted for the version of windows i want it to use (Win 10 Enterprise starting with NPPR9- in our case), and it should just connect to the KMS via AD and sort...

We recently discovered that a handful of our machines have been setup using windows 10 Pro, not enterprise. A quick google around says I can just use slmgr /ipk to replace the key with the enterprise key however this doesnt seem to work as expected. When i run this, the key changes as you...

We have a multi site network across various wan networks. Currently the 4 main sites work fine. We can use the SCCM OS deployment process to build new machines on all the networks without issue with either PXE boot or the USB build media. We have recently brought online a few more sites via...

Mostly iperf as it "just works" and also meant we could test from the checkpoint firewalls too. But also ping and anecdotal evidence from users. We are doing some other transfer tests like windows file transfers, ftp, http/s uploads etc. trying to get a better handle on the exact nature of the...

Yeh packet fragmentation was something we had considered, but not investigated yet. Do you know of a good tool (other than ping with packet size parameter) for testing fragmentation ? Pretty sure we allow ICMP everywhere within our network (with a few specific exceptions) but something i will...

We run MS AlwaysOnVPN on our laptops. Currently in a round-robin configuration between two different VPN servers balancing about 800 users. The majority of their work is via O365 so doesnt cross the vpn, and a few internal services and files. Also most users only have ADSL or similar...

The exact model is the SMT2200RMI2U. It has space on the back for the battery expansion port, but its covered up in this model. We used to have a similar unit at work that DID have the expansion port although we never used it. That's not to say there wasn't some clever circuitry inside for it...

If this is your profession then fair enough, but no need to roll out the sarcastic emojis. Its not like you have suggested, at any point, you have any expertise in this field beyond personal experimentation. Also in terms of "hacking" things together, its not like I am intending to grab a pile...

The APC SmartUPS Pro isn't exactly "lower end". I mean sure its not like the industrial grade 3phase insane symmetra ones but its still pretty decent spec. Its also actively cooled, so I dont think discharge heat is as much of an issue as you might think. Maybe in a UPS that relies on passive...

I have an APC 2200ah rack mount UPS but also have a spare battery pack for the unit too. I also have a few of the right size Anderson connectors and high capacity cables. Technically if the batteries are connected in parallel they should present the same voltage to the UPS and give me ~double...

Thanks for this, that looks really interesting. We do already use universal printing at one of our drop in offices, so this might be exactly what we need. The only downside is they dont seem to have any distribution in the UK. But its a good place to start.

We are mostly trying to prevent malicious ingress (someone supplying you with a USB stick with a virus on it). But also accidental data-egress. People emailing things to the wrong person, or copying data to places they shouldn't without thinking. We allow people to deliberately override some...

Context: Our network is very tightly locked down. We dont currently allow users to plug in USB devices (other than KB/Mouse/Headset). We also dont currently allow them to access their local network (we have always on VPN, and all network access is blocked until the VPN is connected). And we have...

I mean, I personally don't think this particular segment of our LAN could be vulnerable to it, without compromising a whole host of other parts of our network, as the degree of access you would need to pull it off simply isn't possible any other way, but VLAN hopping is definitely still a thing...

From my reading on the dell site, that seems to be the case with the "isolated" vlan, but I thought the community vlan works like a regular one. I have just been tasked with trying to set this up so that LAN 3 is securely seperated from the other two vlans (so things like VLAN hopping attacks...