Jamo

Have you checked the iis logs? https://portal.smartertools.com/kb/a2487/where-are-my-iis-log-files-stored.aspx

Really quick and dirty way is to find the root dn where the Moodle search begins, looking at the moodle docs this is user lookup settings/contexts, go to ad users and computers and right click that ou then just press search. It will list the total returned objects under that ou at the bottom of the aduc search box

you can have more than 1000 in Moodle, just not more than 1000 results returned at once from AD. How many ad accounts are returned? That needs to include expired and disabled ones

You have to run ntdsutil. Its a command line utility http://support2.microsoft.com/default.aspx?scid=kb;en-us;315071&sd=tech There is a section on how to do this in the url above. Maxpagesize is the var you need to change

The other thing to do is start removing disabled users to get under 1000? Or increase the max page size, that's what I did back in the day when i was looking after a Moodle installation. Set mine to 3000 in the end

It will still happen if you haven't updated php to 5.5 as well as the Moodle version. https://docs.moodle.org/25/en/LDAP_authentication#Setting_up_regular_automatic_synchronisation_using_cron

I seem to remember something a while back that Moodle can have an 'auto remove' feature where if an account no longer exists in the LDAP source it will either expire, or completely remove the account. This is obviously good behaviour, but..... If you AD returns over 1000 objects (by default) when doing the LDAP search the Moodle import process will only import the first 1000 leaving the remaining accounts locked as they have, in Moodles eyes, been removed from the LDAP source. I think the setting is removed ext user (https://docs.moodle.org/23/en/LDAP_authentication#User_lookup_settings) To change you have to dive into NTDSUtil.exe, see the section "Setting up regular automatic synchronisation using cron" which gives a link to How to view and set LDAP policy in Active Directory by using Ntdsutil.exe and a way of fixing the issue (assuming its that) Note that disabled and expired users are still counted in the 1000 objects which moodle imports.

Take a screenshot of your default domain policy password requirements. Guessing you have already followed websites like this: Using Windows Server 2008 as a Workstation Just ensure that you run gpupdate /force on the workstation afterwards to pick up the settings, then check on the local workstations if the policy is applied. Run gpresult /h output.html in an admin command prompt and open the resulting HTML file. Find the password policy entries in the file if they exist it will tell you which policy is enforcing them.

I quite like offline files! Seriously useful feature imho

Usually this is a problem with the offline file cache. Click start and view the Manage Offline Files control panel page and see if the files are listed there. From there you should be able to sync them up. Not sure why it wouldn't do it normally though, I have only seen that once before where a machine was refusing to sync correctly and showed an out of date version of a folder. In that case a reboot of the affected machine fixed it.

That literally means that it cannot communicate with the domain controller to validate the user credentials you have supplied. Get some cached credentials on the client and the logon and do some tests ie can you ping the domain controller over the wire, does it resolve through DNS. Can you ping the domain name (it should resolve to the list of domain controllers on your network)

Are you using a managed wireless with radius? PEAP with user and computer auth set up wrong can give odd results like the above.

Have you checked that you can correctly image a machine in the same subnet? There isn't a reason for IP related issues with authentication unless a firewall or ACL is in place on the switches or Windows MDT server that I know of.

Yeah only at home I'm afraid, inthe same league as Plex though

Personally I found plex to be really buggy, especially on mobile devices, at home I use Mediabrowser as it does everything XBMC does but with a client server model. Also Mediabrowser is free, plex tries to be free but then charges a plex pass subscription for 'early access' (in other words timely) bug fixes and features.

When I did this I did the following as described in this Cisco tech article Catalyst Layer 3 Switch for Wake-On-LAN Support Across VLANs Configuration Example - Cisco Basically add a ip helper address to the directed broadcast address of each of the vlans you wanted to be involved in the WOL packet broadcast. I believe this only will work if the WOL packet is UDP not ICMP you also need to add (on a cisco anyway) ip forward-protocol udp 7 (where the 7 is replaced with the port of the UDP packet) and ip directed-broadcast to enable the use of network broadcast addresses like this. The guide also goes through setting up an ACL to ensure that the WOL packet can only be delivered by certain IPs this is to stop someone flooding your network with traffic, as most of the time you have just VLAN-ed to stop broadcast storms (don't want to re-enable them do we!!)

Lol 256 bit Windows for those who need 2^256-1 RAM I would honestly hope that MS have dropped 32bit support by then! Where I work we are entirely x64, no ill effects, although I no longer work in a school so don't have to see the 16bit wonders from SEN anymore!

Doesn't need to be express, its a low use instance so won't add any load really. Def the way to go with vol licencing, however if not, its completely possible to go down the MDT and SQL route although you might find management of the entries rather defeats the object of not going VL

You can yes, you have to connect MDT to a SQL database (SQL Exoress is fine) then use the advanced menu in the Deployment workbench. Deploying Windows 7 - Part 16: Using the MDT Database :: Windows 7 :: Articles & Tutorials :: WindowsNetworking.com PT 15 and 16 are the ones you want. There is also a section on pre populating the DB with Powershell if needs be. To be honest though its a bit of a ball ache to do that I usually prefer the KMS route for OS activation and just use a single task sequence with driver separation through make and model. RS MDT Downloads | RS Applications

Thanks you, its driving me nuts! Fingers crossed :-)

How did you do this?! Its literally driving me nuts! No idea why they decided to add this in the 2012 MDT, I can't reset the settings to 'Not Configured' as half of them don't have a setting for that in local policy! Thanks MS for that! Don't suppose you still have the list of settings anywhere?

I've only just noticed there were replies to this post sorry mate, did you have any luck with the moves?

Doesn't that all totally depend on the local routing and the clients default gateway though? Networks can get really confusing without knowing the fundamentals.

Have they had a background in networking at all? A company has two sites, Angus is from site A and Bob is from site B. Angus visits Bob, he needs to access his documents on site A. He has a choice. A REALLY long cable (forget the 100m limit for now, this is poetic licence...) going back to site A OR a VPN which will make a secured tunnel for his communications to head over the internet on site B to the VPN entry point on site A. Angus now has connectivity into site A as if he was sitting at his desk! Bob on the other hand doesn't have access into site A as they were too lazy to buy a WAN and the VPN is private to Angus' station. And now for EVERYONEs favourite networking video: internet tcp/ip in work, networking, data transfer - YouTube Computers receiving TCP and UDP traffic have around 65000 ports available to them, firewalls, at a simple layer, sit in between network segments and dictate which IP addresses are allowed to talk and over which port they are able to talk on.

Surprised noone has mentioned cacti yet. Simple and most importantly fast. I despise some of the other products for just being too 'fancy' giving silly animations or detail on pages which just takes too long to load. I have always liked cacti due to its speed and simplicity Also can now monitor websites (albeit with the mURLin plugin) (Yes a shameless plug! )