2FA

Nah, they'll just start double NATing everyone and everything possible whilst pretending they fixed the issue.

It's not employees buying O365 for personal use or whatever, it's employees buying Office licenses for tools, without approval, to add to their company provided suite. It's called shadow IT and it's a pain in the ass when users circumvent official policy.
 
 

It's not employees buying O365 for personal use or whatever, it's employees buying Office licenses for tools, without approval, to add to their company provided suite. It's called shadow IT and it's a pain in the ass when users circumvent official policy.
 
 

Nah, they'll just start double NATing everyone and everything possible whilst pretending they fixed the issue.

Nah, they'll just start double NATing everyone and everything possible whilst pretending they fixed the issue.

I don't think isps are the big issue here, they mostly wan to use ipv6, and most are running dual stack. Many ISP's for home users also have to use cgnat aswell. Its mostly bigger companies that have large blocks of ipv4 addresses. Companies like apply have their own /8, so they have plenty of addresses to use, and use public address for all their systems. Same with many schools and businesses and governments. 

You're not running all cores at 4.6GHz unless you put some serious voltage through it and drawing over twice the power of the AMD chip. And it was running 3GHz because that's how Turbo Boost works, 4.6GHz on a one thread load, 4.5GHz on a two thread load and so on and so forth.

It doesn't matter the feature set of the printer, they all suck. Sincerely, IT everywhere.

For small to medium deployments LibreNMS is perfect. It begins to choke even with beefy resources after you have 3-4000+ nodes. Plus it support many plugins for IPAM and netflow.
 
Client/IP/Hostname is pretty trivial with next to all monitoring solutions, so no matter what you go, with proper setup it should get you all the info you need. 
 
Go free to start because you better know exactly what features you are needing when you begin getting into the paid solutions. 

It's only obvious if you use the stock config, and that's mainly due to it using ports other than 443 (there are a couple well known ports specific to Tor). That and it only hides the data en route. The destination can still identify you if you aren't careful (for example with browser finger printing).

I'm pretty sure anything below 8TB externals are Blue drives but the 8TB would still be cheaper than a regular 6TB.

Disable UPNP.
 
It's a security hole and really is not needed anymore

I don't think that unRAID is a good fit for this unless you have a decent sized SSD cache. You'll have good write speeds to the server but once your data moves off the SSD cache to the array, then you're limited by the speed of an individual mechanical drive.

In Windows, select restart while holding shift. You will get some options and somewhere in the advanced options, you should see something like UEFI boot or along those lines.

It's called cache but it's more like tiered storage. It keeps the data on the SSD until the mover runs, then it gets put on the array so you have to be mindful of the scheduled run time for the mover.

It's really hard to say based off the info you've provided, it could be your ISP, it could be ISPs peered with your ISP, it could be bad routes.
Like I said, DNS-over-HTTPS (DoH) would work if you want to use Cloudflare. For Windows, the easiest method for system wide DoH configuration currently is
https://simplednscrypt.org/
 

As @Jarno. said, create a VM. Steamcache is now called Lancache and only runs in Docker containers so your VM will be the Docker host. This is a nice guide to setting up the Docker containers: https://lurkingforgames.com/lancache

hi @Kendiggity
 
You can create a VM on FreeNAS install a Linux distro within it and make that a cache proxy. The server will also act as a DNS server for the host on the network. Maybe you can create it also within FreeNAS self but personally I do not use FreeNAS.

What did you map your plex share to in the config? For example, these are my directories mapped:

 
The directory on the left is what the Plex container sees and the directories on the right are the actual paths on the unRAID box.

That's like a 2 degree difference, and it's still really hot and loud.

Well to be clear, the channel isn't necessarily being used by those systems, DFS just means that those 5GHz channels can be used by those systems as well as WiFi. It's designated by whatever your government agency is regulating spectrum usage. You can read more here if you want https://wifinigel.blogspot.com/2018/05/the-5ghz-problem-for-wi-fi-networks-dfs.html

If it lists a channel as DFS, that means some other wireless system is making use of that channel, typically radar systems. I would avoid those channels.

I'm not familiar with prices there for externals but shucked 8 or 10TB WD drives have the best price/capacity. Sales here have had 10TB down to $160 each and 8TB $120 each.

So I have a single guide that I've made on the forum in 2016, which at this point is slightly out of date but wouldn't take much to update content wise and fix images that are broken. Since making it, it has been locked twice due to "necro" replies which doesn't make sense to me when it comes the concept of guides. The first time, it was unlocked at my request as I pointed out locking guides is not helpful if someone replies after a period of inactivity of the thread. I was at least notified by the mod who locked the thread that they were locking it through a PM. The second time being locked, I was not notified and didn't even realize it was locked until a user that had recently joined PM'd me asking about the guide because they couldn't in the thread. I still don't know when that locking occurred either.
 
TL;DR I don't think Guides/Tutorials should be locked due to "necro."  I had suggested this to the original mod and they agreed..

Preface
 
To start off what is a system image? Simply put a system image, from now on I will only refer to it as an image, is a snapshot of your system. By default it only includes the volumes/partitions needed for the operating system to run. Everyone who has ever had to do a clean install of Windows understands the pain of having to redownload and reinstall your programs, reconfigure your settings, have to redo any personalizations that you made to your OS. Hopefully by creating this guide, I will be able to save some headaches. Of course seeing as I like to get ahead of myself quite often, just point something out if it seems unclear.
 
 
This is going to be beginner guide and as such will not delve into the more advanced options of creating a custom image. Keep in mind that there are a few requirements going into this.
 
 
1. You will need a spare USB drive that is at least 4GB in size or use a DVD.
 
2. You will be required to do a clean slate install first, if you have knowledge you can do this all in VMs though I will not cover them nor will I give support about VMs.
 
3. You will need a regular Windows 10 .iso image from Microsoft to do the initial clean install.
 
4. You will need a second PC to perform some steps unless you prepare ahead of time. Having more than one USB or DVD makes this much easier but is not required.
 
 
 
Step One
 
This step is going to be completely about preparation. 
 
 
1. Go to this link and download the Windows 10 Media Creation tool.  https://www.microsoft.com/en-us/software-download/windows10/
 
2. Run the tool and select 'Create installation media for another PC.
 
3. Choose the edition you are going to use.
 
4. Continue following the prompts given in the tool to make a bootable USB or DVD.
 
Congratulations, you now have a bootbable media to continue on with the next step.
 
 
Step Two
 
Now comes the part where we make our first clean install of Windows. Follow my instructions exactly or you will go too far in the install process and have to start over.
 
 
1. Restart your PC and enter the boot menu. This is typically done by pressing a specific key during post, usually F2, F12, Delete, or Esc.
 
2. Select the USB or DVD you just made to boot from. 
 
3. Your PC will now boot from the media, once prompt appears click 'Install Windows.'
 
4. You may need to enter your licence key again unless you have already activated Windows 10 on your PC.
 
5. Accept the licence terms.
 
6. Now you will want to make a custom install. I suggest deleting all existing partitions. Then select the unallocated space and press 'Next.' This will create the default partitions which is fine for our needs.
 
7. Here is where the files will be copied over and installed. Wait for it to finish and then it will reboot automatically.
 
8. Now that your system has rebooted, you will need to select a network or you can just skip this step.
 
9. **STOP** Do NOT click anything here. Instead press Ctrl+Shift+F3. This will boot you into the built-in administrator, also known as the default profile or audit mode.
 

 
 
 
Step Three
 
Once you are to the desktop, you will see a box that says System Preparation Tool. You can just click the X or cancel to close it as we will not be using this.
 
Now you can customize Windows to your heart's content. Any application, personalization, or setting you select will carry over to your custom image. The only cannot be carried over are items pinned to the Taskbar and Start Menu as well as changes made to the Start Menu and Start Screen.
 
As I've said, set everything up as you would normally. This includes Windows Update, drivers, applications, wallpapers, really everything. Keep in mind that Windows MUST be activated for personalizations to be made. Another important detail is that Edge does not work in Audit Mode, you will have to use Internet Explorer. Another thing to note that every user you create on your system once you are finished with this guide will have these personalizations so if you share your PC, I would suggest not going over the top with customizations.
 
 
Step Four
 
Here is where the fun starts, or at least the more advanced part that most users will not know much about. You will need to create what is known as an Answer File. Typically these files can get a bit complex since this guide technically is about an enterprise feature. However, I already have a simple file content for you prepared.
 
1. Make sure your USB or disc is still inserted and recognized by the system.
 
2. Open Notepad and copy paste this code into Notepad.
 
 
 
<?xml version="1.0" encoding="utf-8"?><unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<CopyProfile>true</CopyProfile>
</component>
</settings>
<cpi:offlineImage cpi:source="wim:X:/sources/install.wim#Windows 10 Pro" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>
 
 
 
3. If your OS is 64-bit, keep the highlighted "amd64" as it is. If your OS is 32-bit, change "amd64" to "x86".
 
4. In this part ---> wim:X:/sources/install.wim#Windows 10 Pro 
 
Change the location of the Windows 10 install media. In this example the media is on drive X:
 
Depending on your edition of Windows 10, you will need to change "Pro" to the appropriate edition that your license is for. It will either be Home, Pro, Education, or Enterprise.
 
5. Save your .xml file like so on your spare drive (really any drive as long as it's not the C drive): 

 
 
Part Five
 
One issue, or rather an inconvenience, this method has that your "last used folder" and "recent files" will carry over to every new profile that is created. To get around this we need to make a batch file.
 
1. Go to this exact location, you can just copy and paste into explorer, and create a batch file. You can name it something like RunOneTime.bat. 
 
%appdata%\Microsoft\Windows\Start Menu\Programs\Startup
 
 
2. The contents of the batch file should be this: 
echo Y | del %appdata%\microsoft\windows\recent\automaticdestinations\* del %0 3. This batch file is saved the default profile's automatic start folder and will be ran as soon as any new profiles are created.
 
 
 
Part Six
 
Now we will use the Sysprep tool built into Windows to get our image ready. 
 
1. Make sure ALL open programs are closed.
 
2. Open a command prompt with admin privileges.
 
3. Enter the command to get to correct directory.
cd sysprep 4. There is a specific Windows Media Player service that can cause the sysprep tool to fail. Let's stop that now. Enter the command: 
net stop wmpnetworksvc 5. Now we will enter the command to run the sysprep tool.
sysprep.exe /generalize /oobe /shutdown /unattend:E:\customize.xml sysprep.exe is the tool. /generalize gets rid of hardware information associated with system. /oobe will make the Windows setup start the next you boot the PC to finish installation. /shutdown will make the PC shutdown after the tool is done running. You can also use /reboot and /quit (/quit won't shut the PC down and will keep you in Audit Mode). /unattend:E:customize.xml You will need to change "E" to the appropate driver letter of your USB (or other drive). If you named your answer file something other than customize.xml, you will also need to change that. 6. Let the tool run and don't open anything.
 
7. DO NOT BOOT THE PC INTO THE WINDOWS INSTALLER!
 
 
Part Seven
 
Now comes the step where we actually make the image of the system so that we can store it for later use. We will make use of a WinPE .iso image that comes preinstalled with Macrium Reflect, a free imaging software. This is also where your second PC will come in handy.
 
1. Download the .iso here https://onedrive.live.com/?id=475A0A48CA6D4035!1812&cid=475A0A48CA6D4035
 
2. Make a bootable USB using the download .iso with a program such as Rufus or Universal USB Installer.
 
3. Follow these images (note I didn't make these myself and will include the appropriate source). Open the spoilers.
4. Remove the USB from your PC.
 
 
Part Eight
 
Finally we are on the last step which also happens to be easiest. Turn on your PC and complete the Windows Installation. Once finished you will notice that everything you customized beforehand will still be there. Enjoy!
 
 
Notes
 
I'm a Network Administrator for a school and we have been working on deploying Windows 10 Education to every machine in the building. It kind of inspired me to make this guide, which also happens to be my first guide on LTT. Yay!
 
Another thing to keep in mind is that I didn't do this on my personal machine as I was making the guide as that would have taken me a lot more time to create this as well as the fact that I need to it up and running 24/7. Due to this,  I made this off of memory as well as using online guides as a reference as well as some of the methods such as the actual imaging. At work we use WDS for imaging directly to and from a server but I had to use something much simpler for this. Hence the Macrium. I also apologize for some of the bad formatting when it comes to the numbered steps, I looked worse before but this is what we are going with.
 
Sources of info and pictures:
http://www.tenforums.com/tutorials/3020-windows-10-image-customize-audit-mode-sysprep.html
http://www.tenforums.com/tutorials/2110-default-user-profile-customize-windows-10-a.html
http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html