Steve Galloway | Comstat | Ruthin, North Wales

Index of articles

by Steve Galloway | Oct 23, 2026

Click open the Index headers below to browse FAQ

Our support articles address the most common issues we deal with "in the field" about Windows, Microsoft 365 Business, web server support, and web design. Click open the accordion sections below to look for self-serve help. Often, issues rely on a knowledge of IT concepts and language. Also, Microsoft, cPanel, and other software houses featured in these articles often update practice notes and procedures without notice. We review our pages regulalry, however you are advised to contact us for further help about these articles especially concerning issues around sovereign account identity and Multifactor Authentication (MFA).

Microsoft Windows 11

Microsoft 365 setup, licensing and user management

Microsoft 365, Exchange Online and Outlook

Microsoft 365 configuration and user tips and tricks

The following articles can be found using <Search> or scrolling through our list of articles. Procedures may have changed since and therefore this content is either being eidted or deprecated. So, although we are editing this content, you might still find useful information to help with issues.

- Exchange Online - room and equipment resources
- Reset Office 365 password expiration policy
- Exchange Email - EOP antivirus/spam
- Exchange Online Protection - EOP
- Microsoft 365 Exchange Email - data leakage & loss protection
- Microsoft ActiveSync

cPanel - web server | email |DNS

cPanel - Sitejet web design software

Metal2 server changelog and platform update

by Steve Galloway | Oct 23, 2026

Metal2 Hosting Platform Update

Following recent industry attention surrounding PHP security vulnerabilities, we have completed a review of the Metal2 hosting platform and taken the opportunity to verify both security and performance-related components across the server environment.

Server changelog - upgrades timestamped 23 October 2026:

PHP security patches verified and current for PHP 8.2 and 8.4
PHP 8.4 adopted as the platform default for new accounts
PHP 8.2 retained for compatibility requirements
OPcache enabled across supported PHP branches
PHP 8.5 available for evaluation and early adoption
HTTP/2 and HTTP/3 options under review as part of ongoing platform development

Current WHM release: WHM 138.0.18

Review WHM/cPanel upgrades/server changelog on our webserver platforms here.

Click open the headers below to find out more about upgrades made in this server changelog. Changes made apply to web server architecture and are apart from individual hosting accounts which remain the responsibility of end users unless support is contracted. Please contact us for general advice if you need to better understand how this affects your server.

PHP Security Patching and PHP versions

Our server estate is fully up to date with the latest supported PHP security releases. Our servers currently support:

PHP 8.2.35
PHP 8.4.27

While our libraries support other PHP versions, these are our recommended PHP versions because they include the latest security updates and protections currently available for their respective branches. Typically, PHP libraries are updated during WHM/cPanel releases. You can review the current server changelog here.

Our review, prompted by worldwide news commentary about PHP vulnerabilities during October 2026 (see this example), confirmed that these updates had already been applied through the cPanel/EasyApache update process before media coverage of PHP vulnerabilities became widespread. No emergency remediation was required.

We continue to maintain PHP 8.2 as a compatibility option for websites that depend on older applications, ionCube-encoded software, or other legacy components.

PHP 8.5 early adoption

PHP 8.5 is also installed and available for testing and early adoption purposes. While it is available for individual websites, we currently regard PHP 8.5 as an early-adopter platform rather than a recommended production standard until the wider WordPress ecosystem has had further time to mature around it.

PHP 8.4 Now the Default for New Hosting Accounts

Following our review, PHP 8.4 has been designated as the default PHP version for new hosting accounts and virtual hosts.

This decision reflects the maturity of the PHP 8.4 branch within:

cPanel, WHM, and Softaculous
EasyApache 4
WordPress
Mainstream plugin and theme ecosystems

Websites already operating correctly on PHP 8.2 will not be automatically migrated and can continue to use that branch where appropriate.

Our current PHP strategy is therefore:

PHP 8.2 – Compatibility and legacy application support
PHP 8.4 – Recommended default platform
PHP 8.5 – Optional early-adopter platform

OPcache Deployment

As part of the review withing this web server changelog, we identified an opportunity to improve PHP performance across the server environment. We have installed OPcache for PHP 8.2 and 8.4. OPcache operates a little differently under PHP 8.5 and this is also operational.

What is OPcache?

Every time a PHP page is requested, PHP normally has to:

Read the script from disk
Parse the code
Compile it into executable bytecode
Execute it

OPcache stores the compiled bytecode in memory so that these compilation steps do not need to be repeated for every request.

For WordPress websites this typically results in:

Faster page generation
Reduced CPU utilisation
Lower server load
Improved responsiveness during periods of higher traffic

Current Status

As of this web server changelog, the following OPcache deployments have now been confirmed:

PHP 8.2 – OPcache installed and enabled
PHP 8.4 – OPcache installed and enabled
PHP 8.5 – OPcache already present and enabled within the installed package set

This enhancement benefits all WordPress-based websites hosted on the platform without requiring any changes to individual sites. You can read more about OPcache here.

HTTP Protocol Review (Ongoing)

We have not amended HTTP processes within the upgrades covered in this web server changelog. However, as part of the wider audit, we also reviewed how web traffic is delivered by the server.

Modern websites can operate using several versions of the HTTP protocol:

HTTP/1.1 – Traditional protocol, widely supported
HTTP/2 – Improved efficiency and parallel asset delivery
HTTP/3 – Latest generation protocol using QUIC transport technology

The current server configuration is operating reliably under HTTP/1.1. We have also identified a possible pathway to enabling HTTP/2 support through Apache, however this requires changes to the underlying Apache processing model.

Unlike routine PHP updates, this is an architectural change that warrants careful evaluation and testing before deployment on a production hosting environment.

For that reason, no HTTP-related changes have been implemented at this time. We are continuing to assess:

Potential performance benefits
Compatibility implications
Recommended cPanel deployment practices
Migration requirements

Any future changes to the HTTP stack will be announced separately once testing has been completed.

Summary

Upgrades timestamped 23 October 2026 include:

PHP security patches verified and current for PHP 8.2 and 8.4
PHP 8.4 adopted as the platform default for new accounts
PHP 8.2 retained for compatibility requirements
OPcache enabled across supported PHP branches
PHP 8.5 available for evaluation and early adoption
HTTP/2 and HTTP/3 options under review as part of ongoing platform development

Current WHM release: WHM 138.0.18

About ComStat.uk: Internet Service Provider Comstat provides IT support, web hosting, and media services including website design, Microsoft 365 setup, and audio/video production, serving businesses across Denbighshire, North Wales and Wirral from Ruthin, and Lancashire and the Northwest from Bolton.

Windows Recovery Drive: How to Create a New Recovery Drive

by Steve Galloway | Oct 12, 2026

Windows Recovery Drive: Why You Should Create a New One

A Windows Recovery Drive helps you repair your computer if Windows fails to start normally. It contains recovery tools that may help fix startup issues, restore your system, or reinstall Windows when other options have failed.

When should you create a Windows Recovery Drive?

When Microsoft installs a major Windows 11 feature update, it is a good idea to create a new Windows Recovery Drive. This ensures the recovery tools and system files on the USB drive match the version of Windows currently installed on your computer. Aim to create a new Windows Recovery Drive not less than annually.

What do you need?

You can either re-use an existing recovery USB drive from a previous year or create a new one using a spare 64GB USB flash drive. In an ideal world, we recommend using a new USB stick. This is because your Windows Recovery Drive is a tool of last resort. In other words, when you need your recovery tools, you need to be certain that the Windows Recovery Drive itself is unimpaired.

How long does it take?

The process takes a little time, but it could save you hours of frustration and costly disaster recovery work if your computer develops a catastrophic problem in the future. Fortunately, the process is straightforward and is accomplished with minimal risk if you follow these instructions. So, be sure to read through this entire article first to understand the methodology. If you are not confident and you need help, please get in touch.

Click open the headers below to learn more about how to create your Windows Recovery Drive. Support options are available for professional assistance. You can return to our Index of Articles by clicking here.

Before You Start

Creating a Windows Recovery Drive will completely erase the contents of the USB drive you select.

Preparation

We recommend using a new or unused USB memory stick:
1. an existing USB memory stick used for Windows Recovery Drive is minimally acceptable.
If you are using a spare USB memory stick, check for any files and save files you need elsewhere.
Make sure you know which PC drive letter your computer will assign to your Windows Recovery Drive
Leave any other USB devices connected exactly as they are

Taking a few minutes to identify the correct drive can help prevent accidental data loss. Also, ensuring that your "target' drive is free of important files will save permanent loss of data you may need later. We will explain how to do this below.

Check Which USB Drives Are Already Connected

Before you insert the USB drive you plan to use for your Windows Recovery Drive, check which USB drives are already connected to your computer. Do not take a shortcut at this stage and skip this step.

Open File Explorer from your Windows taskbar.
Select This PC from the left-hand menu.
Look under Devices and drives.
Make a note of the drives currently displayed.

For example, you may see:

Local Disk (C:)
Data Drive (D:)
USB Drive (E:)

Making a note of the drive letters already in use will make it easier to identify the correct USB drive later when you insert your recovery drive USB drive. We call this the "target" drive.

Insert the USB Drive for your new Windows Recovery files

Insert the USB flash drive that will become your new Windows Recovery Drive.

Wait a few moments while Windows detects the device.

Return to This PC in File Explorer and look for a new drive letter that was not listed during your earlier check. For example:

Before insertion

Local Disk (C:)
Local Disk (D:)
USB Drive (E:)

After insertion

Local Disk (C:)
Local Disk (D:)
USB Drive (E:)
F:

In this example, F: is the newly detected drive. Windows has allocated it with "F". In this example, F: is the USB stick you have just connected. In this way, remember which letter File Explorer has designated for the memory stick you have inserted to create your Windows Recovery Drive.

This simple check helps ensure that you do not accidentally select and erase important files from the wrong USB drive. Here, only two drive letters are assigned, and when we insert a new USB stick (which is incidentally an existing Windows Recovery Drive), we see that the drive assigned for our target is G:

Create the Windows Recovery Drive

Now that you have inserted your USB drive and you have identified which drive letter you need to use, you can create your Windows Recovery Drive without risking unintended data loss. Close File Explorer and follow these steps:

Windows Recovery Drive: How-to

Click the Start button or click into the Search field, both on your Windows desktop taskbar.
Start typing Recovery Drive into either search box.
Click open Recovery from the search result
Select Create a recovery drive.
If Windows asks for permission, click Yes.

Windows will take a few moments to prepare the Recovery Drive wizard. Wait for the Recovery Drive wizard to open.

When the wizard appears:

Make sure Back up system files to the recovery drive is selected*.
Click Next.

* Including the system files makes the Windows Recovery Drive more useful because it can provide additional recovery and reinstall options if Windows becomes damaged.

You may notice a short pause while Windows prepares the required information. This is completely normal.

Select the Correct USB Drive

Windows will display the USB drives available for use.

Carefully select the drive letter you identified earlier. In the example we used above, we noticed that Windows designated our target drive as F:. The letter you are assigned depends on how many USB devices are already installed/engaged.

Check again!

Before continuing, Windows will display a warning explaining that all data on the selected drive will be deleted. Read the warning carefully. When Windows deletes the contents of your target USB drive, any data and files will be permanently lost. If in doubt, start again.

When you are certain you have selected the correct USB drive:

Click Create.
Allow Windows to begin creating the Windows Recovery Drive.

Wait for the Process to Complete

Creating a Windows Recovery Drive will take some minutes.

The duration of this kind of job depends on your computer's processing power and the USB drive's write (i.e. recording) speed.

The good news is that you can continue using your computer while the recovery drive is being created. You can browse the web, read email, or carry out most everyday tasks as normal.

Avoid removing your USB drive until Windows confirms that the process has completed successfully.

When the recovery process finishes, Windows will display a message confirming that the Windows Recovery Drive is ready.

Click Finish and safely remove the USB drive.

Store Your Recovery Drive Somewhere Safe

A Windows Recovery Drive is only useful if you can find it when you need it. Do not save other content on your Windows Recovery Drive

Consider:

Labelling the USB drive clearly.
Keeping it with important computer documents.
Storing it in a known drawer or filing location.
Attaching it to the computer's power cable using a small cable tie.
Recording its location with your IT support provider.

Computer problems have a habit of happening unexpectedly. Knowing exactly where your recovery drive is stored can make recovery much quicker and less stressful.

Final Thoughts

A Windows Recovery Drive is one of the simplest forms of protection available to Windows users. Creating a fresh recovery drive after a major Windows 11 update ensures that you have the latest recovery tools available if something goes wrong. This avoids having to re-install Windows upodates that were installed after a Windows Recovery Drive was created. Also, compared to costly third party intervention, this is a cheap solution.

The task only takes a few minutes to do its job and Windows can work on this in the background while you continue working. For many users, it is a small investment of time that could prove invaluable when a computer refuses to start. In a worst case scenario catastrophic failures could lead to hardware loss and expensive disaster recovery costs. So an inexpensive 64GB USB stick and a few minutes taken to create a Windows Recovery Drive is cheap at the price.

What Is a Shared Mailbox in Microsoft 365 and Why Your Business Should Use One

by Steve Galloway | Oct 4, 2026

What Is a Shared Mailbox in Microsoft 365?

A Microsoft 365 shared mailbox allows multiple users to read and send emails from a common email address, such as support@yourcompany.com or accounts@yourcompany.com. These mailboxes are ideal for teams that need to manage group communications efficiently.

Shared mailboxes do not require a separate Microsoft 365 license, but any user accessing them must have a paid Microsoft 365 license. This makes them a cost-effective solution for collaborative email management.

Click open the headers below to learn more about shared mailboxes. Please read through this entire article before you deal with email account management in Microsoft 365 and associated Exchange Admin Centre (EAC). Be sure to contact us for general advice if you are in doubt. Support options are available for professional assistance.

Why are Shared Mailboxes Useful?

Shared mailboxes offer several practical advantages for businesses:

Team Collaboration: Multiple users can access the same mailbox, making it perfect for departments like support, sales, or accounts.
Offboarding Employees: When an employee leaves, their mailbox can be converted into a shared mailbox to retain access to important communications.
Shared Calendars: Teams can use the shared mailbox calendar to coordinate meetings, deadlines, or events.
File and Folder Sharing: Shared mailboxes can also serve as a central location for storing and accessing shared documents.

Here are some common scenarios where shared mailboxes are great business solutions:

Customer Support Teams: Centralize incoming queries and allow multiple agents to respond.
Accounts Departments: Manage invoices and financial communications from a single address.
Project Teams: Share calendars and documents related to specific projects.
HR Departments: Handle job applications and internal communications securely.

Importantly, a shared email account means colleagues can access an entire email account for the shared email address without having to resort to emails that are forwarded to an individual's own email account using an email alias. Using an email alias, all incoming email is directed to one principal user's email account which makes it possible for another user to see all your email.

Creating a Shared Mailbox Without a License

To create a shared mailbox, you don’t need to assign a Microsoft 365 license to the mailbox itself. This is how to do it:

Create a New User in Microsoft 365 Admin Center
1. Go to Users > Active Users and click Add a user
2. Fill in detail field (e.g., name, email address)
  1. Do not assign a license
Convert the User to a Shared Mailbox
1. After creating the user, go to Mailboxes in Exchange Admin Center
2. Select the user and choose Convert to shared mailbox
Assign Permissions
1. Add users who need access by assigning Full Access and Send As permissions.

Using a shared mailbox in this way ideal for setting up departmental mailboxes like info@, sales@, or hr@

Converting an Existing User to a Shared Mailbox After Offboarding

When an employee leaves, their mailbox may contain valuable information. Instead of deleting the account, you can convert it to a shared mailbox:

Convert to a Shared Mailbox
1. Navigate to Exchange Admin Center, select the user’s mailbox, and click Convert to shared mailbox.
Remove the License
1. In the Microsoft 365 Admin Center, remove the user’s license to avoid ongoing costs.
Assign Access to Relevant Team Members
1. Add team members who need access to the mailbox for continuity.
  This approach preserves email history and ensures business continuity without incurring additional licensing fees.

Using a shared mailbox this way preserves email history and ensures business continuity when an employee leaves without incurring additional licensing fees.

Stroage Limits, Archiving, and Compliance

Storage Limits

A shared mailbox without a license has a 50 GB storage limit
If the mailbox exceeds 50 GB, you must assign an Exchange Online Plan 2 license (or equivalent) to increase the limit to 100 GB and enable archiving features

Archiving and Compliance

In-Place Hold or Litigation Hold: If you need to place the mailbox on hold for compliance or legal reasons, a license is required.
Archiving: A shared mailbox can have an archive mailbox, but this feature also requires a license. Without it, archiving isn’t available.
Retention Policies: These can still apply to a shared mailbox, but advanced compliance features often need licensing.

Best Practice

For most departmental or offboarding scenarios, the 50 GB limit is sufficient.
If you anticipate heavy email traffic or need compliance features, keep a license assigned even after conversion.

Summary

Shared mailboxes in Microsoft 365 are a powerful tool for improving team collaboration, managing transitions, and streamlining communication. They are easy to set up and configure, cost-effective, and versatile—making them a smart choice for businesses of all sizes.

How to deploy TP-Link Deco with BT Internet Router

by Steve Galloway | Sep 20, 2026

Improving Home Wi-Fi with BT Broadband and TP-Link Deco

If your home has a BT broadband router and two or more TP-Link Deco units, the recommended setup is to use the Deco system to provide all Wi-Fi coverage throughout the property, while the BT router continues to manage the internet connection. TP-Link recommends operating Deco in Access Point (AP) Mode when used alongside an existing router, and Ethernet backhaul is fully supported in this mode.

Click open the headers below to learn how to install a TP-Link Deco WiFi network using your BTInternet router. There are a few methods, one of which replaces the BT router altogether, however we recommend plugging your main Deco unit into your router or connecting via a switch which is plugged into the router. Use Ethernet backhaul in your Tp-Link phone app to interconnect devices using ethernet cabling, or WiFi backhaul if you do not have Ethernet cabling. Support options are available for professional assistance. You can return to our Index of Articles by clicking here.

Recommended Connection Layout for wired Ethernet networks

Where Ethernet cabling is available throughout the property. Firstly, inspect ethernet cabling making sure that plugs and connections are firmly seated. Connect the equipment as follows:

Internet

BT Router

Ethernet Switch (if required)

+------------+------------+-----

| | |

Deco 1 Deco 2 Deco 3 …etc

Alternatively, all Deco units may be connected directly to the BT router or to a network switch connected to the router.

Why Ethernet Backhaul?

Using Ethernet between Deco units is generally the best-performing option because:

Faster and more reliable than wireless backhau
Less affected by thick walls and interference
Provides better roaming between rooms
Leaves more wireless capacity available for phones, tablets, TVs and laptops

TP-Link specifically supports Ethernet backhaul while operating in Access Point Mode.

Checking That Deco Is Configured in Access Point Mode

Microsoft includes a built-in reset mechanism for the OneDrive client.

Using the TP-Link Deco app on your phone:

Open the Deco app
Select More
Select Advanced
Select Operation Mode (or Operating Mode on some versions)
Confirm that Access Point is selected
If not, select Access Point and save the change
Allow the Deco system to reboot

Finding Advanced settings on TP-Link Deco app

Finding Advanced settings on TP-Link Deco app

Once complete, the Deco system will provide the Wi-Fi service while the BT router continues to perform routing and DHCP functions.

Optional: Disable Wi-Fi on the BT Router

To avoid interference between the BT router and the Deco system, it is usually advisable to turn off the BT router's own Wi-Fi and use only the Deco Wi-Fi network. Partly, this is because the main Deco unit can be operated as your router instead of your telco supplied router. Also, bandwidth between two operational WiFi networks can cause interruption or disruption. TP-Link also recommends disabling the existing router's Wi-Fi when using Deco with an existing router.

For most BT Smart Hubs:

Open a web browser
Go to http://192.168.1.254 (this assumes default supplier settings)
Log in to the Hub Manager (you will need your router credentials)
Open Wireless settings
Turn Wi-Fi Off

BT provides these controls through the Hub Manager on supported Hub models.

Next Styeps/If Problems Continue

If your Wi-Fi remains slow, unreliable or does not function correctly after following the above guidance, problems are posible in damaged or improperly cabling pin-outs, misconfigured telco router, poor Deco placement, or possibly broadband connectivity.

Check broadband connectivcity by disengaing all equipment from your router and testing service with a PC or laptop. Introduce device sequentially to check for faulty hardware.

If wired Ethernet backhaul to the router is not providing good service, opt for WiFi backhaul by disconnect remote Decos from cabling, make sure units are in range of main Deco unit. Check settings in your mobile phone app. Then, check WiFi services by grdually moving remote Deco units towards target destinations. Some versions of your phone app include statistics for checking signal performance between Deco units.

If the network is still not operating, professional assistance may be required. On-site diagnosis and remediation can be arranged at my standard call out charge for 90 minutes, and either an hourlyor daily rate, whichever is the lesser.

Comstat provides independent advice on business IT choices that reduce risk, protect continuity, and support long‑term growth. If you need help managhing email, please get in touch, or use our contact page to organize an appointment which suits your timetable. You can return to our Index of Articles by clicking here.

« Older Entries