mikkydoos

Thanks @tom_newton Any further info on how I actually set this up.

Don't hold your breath

Hi all, I have a user with a Mac that I need to configure a Smoothwall policy to allow/not filter certain URL's. The MAC is not AD joined and the user account is local. URL's I need to whitelist are specific social media sites. I have exception policies for Windows users, but these are user applied, not device. Has anyone done this and can point me in the right direction??? Cheers in advance

Correct. I'm syncing with security groups. The groups don't sync but the users within do.

@armadillo I think its a case of just go and set it up. Its pretty easy.

You can sync back to the main tenant. @Boredguy might be able to tell you about syncing between 'client' schools. I'm only syncing 2 at the moment. I'm pretty certain you can though.

Thanks @lparry They are there I've just discovered what it is.. I haven't set up an enrolment profile for Macs or phones. I think this is all I need to do ...?

Hi all, I have Ipads syncing into Intune from ASM just fine for a long while now. I've come to sync in our first Mac and iPhone and they're not appearing. They're set to the same enrolment program token in ASM but are not syncing across. Ipads are appearing as soon as I sync. Do I need a different enrolment token for MACs and iPhones or should they just appear ? Cheers in advance

I have a two way sync between two of my tenants. The rest just syn into the master tenant. I only sync users that need access to Sharepoint sites hosted in another tenant or that require sending to a limited distribution list for example. It all depend which users a) you want appearing in the global address list in each tenant or b) what resources you want them to access. I would personally just sync necessary users.

Thanks @Boredguy Everything seems to be fine. I have other users configured in here that are syncing fine. I don't know whats going on with these two users ??????????

I have a couple of users who are located in the master tenant who I'm trying to sync back to a member tenant. These users just will not sync. They were guest users n the member tenant, I deleted them, removed them from the Entra 'bin', and they still won't sync. This was two weeks ago. They still appear in the member tenant address list but I think they are left overs from the guest users... they appear without the applied attributes in the display name. Has anyone come across this... and how did you solve it ?

Hi all, Stumbled upon AutoPatch yesterday. Had never noticed it before. Intune --> Tenant Administration / Windows Autopatch Is anyone using this as a replacement of the usual update rings setup in Intune. Would like to hear some feedback on experiences of this... pro's / cons. How does it work for you. Is the granularity worth it ? Is the deployable client required for it to work? Cheers in advance

Is 'Okaaay' at best. We get a periodic server deaths ending up in reinstalling the whole lot. I'm looking for a slicker alternative.

Hi all, Our Impero is up for renewal. Are any of you guys using a better alternative? Impero is so buggy and takes up so much technician time there must be a better solution. I've had a quick look at Net Support School. Is anyone out there using it and how does it fare ? Cheers in advance

Yes you can see users from other tenants. This is set in the master tenant if I remember correctly and you can pick and choose groups of users to display, and where. You can also crreate attributes to amend the display name when searching the directory from other tenants. E.g. school1 - Fred Smith Best thing you could to is set up a test group and create MTO between two tenants and see if it does what you need. EDIT: I think I followed this guide for quick reference... plus a bit of reading.... EDIT 2: After you set the basic sync, there are a lot of settings in Entra Admin to fine tune how you want it to operate.

MTO sync works perfectly for me. Set up the sync profile between the two (or 5 in your case). Sync in your desired security groups... We're getting seamless access to Teams, Sharepoint, address lists, OneDrive shares, permissions etc. Works a charm. Not sure how this would work with 2+ tenants. One tenant needs to be the master so not sure how (if tenant 1 is your master) how users would sync out to 2,3,4,5, if this can be done at all. You might need to set up lots of sync profiles for all tenants to sync out to each other.

Hi all, I'm in the processes of moving AD to Entra and demoting my local AD. In addition to this, new Wi-Fi is going in soon - This will either be Ruckus or Aruba. I'm looking for solutions to authenticate WPA2/WPA3 with Entra users/devices. How do you guys do it? (Without paying a bomb ) Cheers in advance :)

Think I got to the bottom of this one. This post hopefully will help someone in the future. It seems that this was the issue... its worked so far.... So I had three external interfaces configured on SW: eth 2 - New ISP eth 3 - Backup connection eth 4 - Old ISP (disconnected - cable pulled) (LLB pool is set to eth2 and eth3 in failover) Smoothwall have built an eth interfaces table they call Conntrack. I've been told this hasn't been updated in years and was developed by SW to record interface information - this might be a bit like a MAC address table ? Basically, VOIP and handset registration traffic was being routed through eth 2 that I'd reconfigured the IP address and gateway on. 194.x.x.x was changed to 62.x.x.x Smoothwall did a TCP dump and packet capture of the traffic from a failed Yealink handset. The Conntrack table does/did not update the interface information correctly when I changed the IP and gateway, hence this traffic (and only this traffic for some weird reason) was being told to route through interface 2 to 194.x.x.x and the old gateway when in fact interface 2 had been reconfigured with 62.x.x.x, hence the traffic wasn't going anywhere. Outbound traffic when in a fault state: >>> 13:10:39.944124 IP 194.168.x.x.2723 > 18.169.38.9.5060: UDP, length 618 This is after the interface had been reconfigured with 62.x.x.x.x Changing the LLB pool did force the traffic via eth 2 & 3 but the Conntrack table still held the wrong IP and gateway data. Support flushed the table and bingo. The phones stay registered, and all the traffic is now routing via eth 2 to 62.x.x.x Moral of the story is... any change to interfaces, internal or external, require a reboot of the box to flush the Conntrack table to ensure the old interface records are removed. Simply deleting the IP/gateway and/or changing the interface from external to internal doesn't update the table. SW say they will raise this internally. 3 months and my nervous system this has taken to resolve!!! ********

Thanks all. I had another demo of Locker yesterday and it does everything I need it to do and at a decent price.

Hey all, I'm looking for some advice/experiences/woes of MIS sync tools. Will be syncing from BromCom to M365/Azure. Tool needs to: Create / delete staff / student M365/Azure accounts Create / delete AD accounts Allow parameters for dynamic Azure group membership Create Class Teams What are you using and how do you find it ? I've had a demo of Locker Connect and it looks a bit clunky. I hear good things about Salamander. What is BromComs offering like ? Any thoughts / advice on a good set and forget product? Cheers in advance

Thank for the info @jthompson . I assume the exceptions you refer to are HTTPS (dont inspect) exceptions ?.. I'd set with a Location in Smoothwall.

When you say your VOIP providers IP range... are these the IP's they would have sent to configure your firewall ? or your LAN IP addresses ?

That's helpful... thanks @jthompson

You've got air in the system then. Do what @3s-gtech suggests. Or drop all the coolant out and start again.

I had a Mk6 that was overheating.. 2 water pumps later.. stumpted garage, I came across a thread that suggested bypassing the matrix by joining the coolant pipes together. That did the trick so new matrix went in. Dash out etc etc. A blocked or partially blocked matrix will cause you engine to overheat. On the Mk6 the bypass in inside the matrix so if it blocks the coolant can't circulate. Its a poor design. Is your engine temp normal ?