tubs

I've eventually found the main issue, but there are two different issues - I went back through my notes and found the command I originally used, so they were similar to this : new-addresslist -name "RMAL-SCHOOL-All Rooms" -DisplayName "SCHOOLNAME Rooms" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-RMAL-All Rooms,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC =COM'" Now the DC=GBRP000000 was working and as I set it, .. At some point, all of the address lists in Office365 had this key changed - I assume we might have been moved from one backend to another, and Microsoft movement updated all the address lists to the new one, lets say DC=GBRP1111111, so when I listed an address lits it shows this new number, and when i looked at the groups, this was the correct number. Because I had the old code still that I used, I could see that they were changed. I then ran a "set-addresslist" on an existing policy, using the new code even though the old code had the right GBRP code, retickled everyone and magically it started working. So whatever MS had done had broken those ALs. MS support were shocking, the final response via a call, was that we had over 500 users in our tenancy and Address Lists don't support that, and he closed the call on me. The second part I have not been able to "fix" yet, but I'm now guessing that Address Lists might have a maximum length of name, but I have further diagnosis to do with that. So final result is that most of the Address Lists (eg the ones I set up for each site) that I created before, after "re-setting" and tickling the users/groups are working. Some new address lists that should work, are not, but i think that is due to group/address lists name lengths and isn't related to the above issue ...

It's possible that I'll have to look at doing it differently as the way I have it set up now is not working (possibly writing scripts that copies data into extensionAttribute1 etc). But it was working, now it isn't ... I have found one document, https://microsoft.github.io/ComplianceCxE/resources/files/Building_Advanced_Queries.pdf, that has the following in "NOTE: As of now, MemberOfGroup and Members are not supported with Adaptive Policy Scopes"" but this is a document is about "AdaptiveScopes". The MS documentation for RecipientFilter still lists memberOfGroup as a valid query. The problem I find with "automatic" groups like this, is that I always get asked to make exceptions - part of the reason for having a controlled groups rather than having a automatic filter. (Indeed I was asked to take one perosn off the a previous address "All staff addressbook" as they were suspended but still employed, but not off their department address books as they still needed to be availabel to the department ...)

Hi Hi! I wonder if anyone can cast any insight to address book policies on office365. So, I've originally set up Custom Address Book polices for schools on 0365. The way I did this was using Groups in on PremAD, then setting those groups as "filters for the GAL / Address List policies. Up until October, this was working as expected. Around October, there were staring to be reports of people not appearing on the address lists, in Outlook or on o365 - it's eventually made it's way through to me after other have looked at it, and I've opened a call with MS, to put it bluntly have been uselss, even at turning up for arranged calls! Basically, the address lists that is shown in 0365/Outlook people have "disappeared" - it's now at the point that there are only 1 or two people in those lists, and I've had to start reverting users back to "no address book policy". 1) The users are still in the AD group. 2) The users are still in the Azure synced AD group 3) The address lists are set to with a recipient filter of "Azure AD Group" 4) When I query the address lists with PowerShell, it seems that the user are "there". 5) But the 0365 and the Outlook Address lists done't show (all) of the users/groups/mailboxes as expected. Annoyingly, I've extended out schema for usercreation/group creation, and although the attributes used are synced up to 0365, they can't be used as to filter users in address lists (all users have a custom attribute that give a school code, type of user, etc etc) Looking further and further into it, there is an attribute that users have called Name AddressListMembership, and where people are being displayed in the ALs, they have expected, but it seems something might be overwriting that AddressListMembership attribute, with other item. So for an example the two last working staff members i have {\Default Global Address List, \GAL-SCHOOL, \AL-SCHOOL-All Staff, \All Users…} Where as another user not being displayed has {\Default Global Address List, \All Users, \Offline Global Address List, \All Recipients(VLV)…} Example code I've used is below to create, I may just be unique with this set up, hopefully not :-) SCHOOL *** Create GAL *** new-GlobalAddresslist -name "GAL-SCHOOL" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-GAL-All Users and Groups,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" *** Create OLAB *** New-OfflineAddressBook -name "OAB-SCHOOL" -AddressLists "GAL-SCHOOL" *** Create room AL *** new-addresslist -name "RMAL-SCHOOL-All Rooms" -DisplayName "SCHOOLNAME Rooms" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-RMAL-All Rooms,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" new-addresslist -name "AL-SCHOOL-All Staff" -DisplayName "SCHOOLNAME All Staff" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-AL-All Staff,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" new-addresslist -name "AL-SCHOOL-All Groups" -DisplayName "SCHOOLNAME All Groups" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-AL-All Groups,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" new-addresslist -name "AL-SCHOOL-All Students" -DisplayName "SCHOOLNAME All Students" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-AL-All Students,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" new-addresslist -name "AL-SCHOOL-All Governors" -DisplayName "SCHOOLNAME All Governors" -RecipientFilter "MemberOfGroup -eq 'CN=UG-SCHOOL-AL-All Governors,OU=0365.onmicrosoft.com,OU=Microsoft Exchange Hosted Organizations,DC=GBRP0000000,DC=PROD,DC=OUTLOOK,DC=COM'" SCHOOLNAME Address Book Policy New-AddressBookPolicy -Name "ABP-SCHOOL-Staff" -AddressLists "AL-SCHOOL-All Staff","AL-SCHOOL-All Students","AL-SCHOOL-All Governors","AL-SCHOOL-All Groups" -OfflineAddressBook "\OAB-SCHOOL" -GlobalAddressList "\GAL-SCHOOL" -RoomList "\RMAL-SCHOOL-All Rooms"

Hi I was wondering is anyone had heard anything about the SIMS Connect / TPM issue - we use Edulink that connects via the TPC ... "18/03/2024 16:05 - Work will continue with a high priority this afternoon and into this evening to resolve the issues with 3rd party applications syncing with SIMS. We are exploring some potential avenues of resolution and will update tomorrow morning as to any findings or results of these. Again, we apologise for the inconvenience this may cause. " It didn't seem to be affecting us yesterday (or at least no reports) but has this morning ...

Yes, that right, if you hold down shift, and select shutdown the computer shuts down, which didn't make a difference. If you hold shift, and choose restart and carry on holding shift it brings up the "Choose an Action" menu which did work. The only other way we found, was that a reset of the network stack, but as that required local Administrator access, it required a technician to visit.

I've had similar happening now again, it's usually only on wireless I've seen it on. We ended up getting users to do a "Hold Shift/Power/Restart", then selecting the "Turn off your PC" from the "Choose an action" Menu. This seemed to "clear" IP address, and then got a correctly allocated one. We found when troubleshooting, the laptop may have had an ipipa, no DG, but DNS was set to the expected DNS servers. We always thought it might have been something to do with people taking the devices home, and it being "slept", but the wake up not resetting the IP address correctly - but we weren't able to actually replicate it. Pluging in to the NW, seemed to work for that connection, but when returning to Wireless the same thing happened.

It'd be interesting to know what the issue is that you managed to clear with the cluster? Clusters somtimes seem to be a law unto themselves ...

It's been a while since I used DPM, but I seem to recall that issues like this were usually because of SQL server permissions - I think the AD users has to be given rights to the DPM database - if it's been done individually, you might have to add yourself, if it's been done by an AD group, you'd probably need to add yourself to that group.

You might want to look at new VHDs for virtual memory - replicate and then remove them from replication - if they are on the C: then they get fully replicated every sync. I think you've done it the correct way - part of the domain, there used to be some serious justifications for having the underlying HyperVs off the domain, but I think most of them are not accepted anymore, unless you have specific security needs. Replication isn't clean or automatic - if server 1 goes down, you'll need to manually start servers2 VMs, but if you have enough space there shouldn't be an issue - but it has been a life save for me before!

Hi, my first thought of reading this is that you've not got the quorum but you've said you do have it set correctly and you've said that it passes all the cluster tests - if it is blue screening it may point to a hardware/driver issue somewhere. Some likely candidates may be 1) BASP/QASP/Vendor Teaming, 2) Some Network settings (VM queues etc?) 3) iSCSI connections to storage. 4) Shared Storage Drivers/SAS drivers. Could you drop the server from the cluster and do further diagnostics from there?

Salary: £28,672 -£31,346 per annum Location: Base to be determined Closing Date: May 3, 2021 FULL TIME POSITION 37 HOURS PER WEEK (All Year Round) SALARY: Grade 8 £28,672 – £31,346 per annum CLOSING DATE: 3rd May 2021 at 4pm REQUIRED AS SOON AS POSSIBLE We are looking to appoint a dedicated and enthusiastic Trust IT Technical Service Lead who will have experience and knowledge working in an ICT support environment as well as management and supervision of staff. The successful candidate will be an instrumental part of the Trust IT team. As a team leader the post will be expected to work and travel across all schools within the Trust and will be required to use their own initiative and be independent. Key duties will include: providing support for complex technical problems work closely with schools providing support for the technicians working with the schools to produce ICT Plans and support with procurement of new equipment, ensuring consistency across schools where possible and that we always adhere to the principles of best value provide a responsive and flexible ICT support service within all our schools, including networks, telecommunications and audio visual services cover for the Trust IT Manager as required in periods of absence All duties of this role are to provide an effective IT service to all schools in the Trust and the Trust Central Office. The ideal candidate will: have experience of the management of ICT networks including industry standards and protocols and experience working with ICT systems in a large, complex organisation have a degree level qualification or equivalent in a relevant discipline have advanced knowledge relating to ICT networks, software, hardware, security and related ICT infrastructure be able to complete tasks under pressure and to agreed deadlines have the ability to relate well to children and adults Further information (Job Description, Application Forms etc) on the Trust's website : https://www.bkcat.co.uk/trust-it-technical-team-leader/ **APPROVED**

TEMPORARY IT HELPDESK ASSISTANT (Maternity Cover) FULL TIME POSITION 37 HOURS PER WEEK (Term Time Only) TERM TIME SALARY: Grade 3 £15,070 - £15,371 (FTE £18,065 - £18,426) REQUIRED AS SOON AS POSSIBLE We are looking for a suitably qualified and enthusiastic person who will have a proven track record of good customer service, ideally with IT knowledge to provide first line support as part of the Trust IT Team. The post covers a number of areas, specifically: • Providing face to face and telephone assistance to staff across the BKCAT Trust schools regarding IT faults. Many faults are not expected to be resolved by first line support and therefore logged and assigned to a suitable technician. • Manage the IT Helpdesk, be aware of ticket system and their status ready to update staff and student as required. • Organise and arrange manufacturer repairs for IT equipment and facilitate the loaning of equipment ensuring that all is logged and documented correctly. • Keep an accurate record of IT equipment on our Asset Register. • Provide administrative support to the IT Team including logging tickets, managing user accounts, keeping records of policies and preparing documentation. All duties of this role are to provide an effective IT service to all schools in the Trust and the Trust Central Office. Further details, job description and an application form are available on the Trust website Careers | The Bishop Konstant Catholic Academy Trust Should you wish to discuss the post further, please contact: Craig Tubby, Trust IT Manager at Central Trust Office on 01924 802285. Closing date: Monday 29th April 2019 at 4pm Please email your completed application form to Craig Tubby [email protected] The Bishop Konstant Catholic Academy Trust is committed to promoting and safeguarding the welfare of children and expect all staff and volunteers to share this commitment. This post is subject to an enhanced Disclosure and Barring Service (DBS) check. **APPROVED**

ICT / AV TECHNICIAN FULL TIME POSITION 37 HOURS PER WEEK (All Year Round) SALARY: Grade 5 £19,554 - £21,166 REQUIRED AS SOON AS POSSIBLE We are looking to appoint a dedicated and enthusiastic ICT technician who will have experience and knowledge working in an ICT support environment. The successful candidate will be an instrumental part of the Trust IT team. They will be expected to work and travel across all schools within the Trust and will be required to use their own initiative and be independent at times. The overall purpose of the post: • Identify, diagnose and resolve ICT / AV related problems; • Provide advice and support to ICT users; • Install and maintain large scale hardware and software deployments; • Provide server maintenance and support. All duties of this role are to provide an effective IT service to all schools in the Trust and the Trust Central Office. Further details, job description and an application form are available on the Trust website Careers | The Bishop Konstant Catholic Academy Trust Should you wish to discuss the post further, please contact: Craig Tubby, Trust IT Manager at Central Trust Office on 01924 802285. Closing date: Monday 29th April 2019 at 4pm Please email your completed application form to Craig Tubby [email protected] The Bishop Konstant Catholic Academy Trust is committed to promoting and safeguarding the welfare of children and expect all staff and volunteers to share this commitment. This post is subject to an enhanced Disclosure and Barring Service (DBS) check. **APPROVED**

"> huh? I've never ever heard that - I don't see how that's best practice... (There's zero advantages)" Its to do with user security - only a domain administrator can be an administrator on a Domain Controller. If the DHCP is on a member server, a user can be added to the local "administrators" group, which would then mean they can admin the server, and DHCP without being a domain admin. You'd do this to separate out admin roles - maybe you want the "apprentice" or the "primary school admin" to be able to reserve IP addresses without being a full domain admin. Maybe you want to restrict Domain Admins to only a few user IDs, so that they aren't being used all over the place so the less it is needed the less it is used. Indeed if you get permissions right, the only thing a Domain Administrator is needed for is DC works and DNS changes - GPOs, AD Joining, NTFS, Server Admin etc can all be done by delegation & permission to userIDs.

I'm a member of ANME and would be interested in attending if within a decent range - Castelford/Pontefract/Doncaster area.