-
Posts
12,309 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by 3s-gtech
-
Microsoft will release Windows 11 on 5th October 2021
3s-gtech replied to Arthur's topic in Windows 11
“Windows 11 is designed to bring you closer to what you love” What, retirement?- 6 replies
-
- 14
-
-
Mapped drives slow to appear (Windows 10 20H2)
3s-gtech replied to gerardsweeney's topic in How do you do....it?
Server OSs don’t need project planning and management to update (at least, not unless you micro-plan). Check backups Mount ISO Run setup.exe Spin on chair for a while Job done. -
We do it with a policy linked to a user OU - it was really unreliable on a computer OU. Then GPP with item level targeting picking out the printer depending on the name of the PC.
-
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/g-suite-provisioning-tutorial I have two provisioning apps to overcome limitations with what will sync. Otherwise, you will find that some user attributes don’t cross over, and user provisioning may not work. The first app syncs global options, the second does users.
- 1 reply
-
- 1
-
-
Exchange 2013 and Cloudflare Wildcard ssl
3s-gtech replied to ZFarnworth_geek's topic in Windows Server 2012
I had to get a particular Exchange cert when I last renewed. A wildcard *should* work but I followed advice to get certs which covered the autodiscover and mail delivery, as well as the IIS part. What a faff it all is! -
Exchange 2013 and Cloudflare Wildcard ssl
3s-gtech replied to ZFarnworth_geek's topic in Windows Server 2012
I’ve been an Exchange hold-out for years, but even I migrated to Exchange Online this summer. Keeping a server on-site for Hybrid is one thing, but I wouldn’t put a fresh install in. -
Exchange 2013 and Cloudflare Wildcard ssl
3s-gtech replied to ZFarnworth_geek's topic in Windows Server 2012
Any reason for not using 2016? -
Have you set the bindings on the server, so it knows where to direct the client with that address? IIS needs more than just the DNS entry. So, you’d set your internal address to point to a ‘Site’ via a particular port (usually 80, but up to you and you can use https too). https://www.ssl.com/how-to/binding-in-iis-10/
-
Fix folder permissions on home areas - NTFSFIX or equivalent?
3s-gtech replied to IT_Man_Dan's topic in Windows Server 2019
Haven’t done it for ages. You could install it on an ancient XP box to extract the exe and dlls (everyone has an old laptop hanging around with XP on don’t they?!) See if it’ll extract with 7-Zip (a better option) See if someone can send you the extracted files as a zip (I’m not at work currently so don’t have it to hand). -
Fix folder permissions on home areas - NTFSFIX or equivalent?
3s-gtech replied to IT_Man_Dan's topic in Windows Server 2019
Yes, NTFSFix still works. I use it every year to modify the default permissions given to newly created home areas (removing Full Control etc). Can’t remember if the installer runs in .NET 1.1, if so you’ll need to extract the exe another way (which uses .NET 2.0 which runs if you have the 3.5 feature installed). -
Perhaps something spoofing DNS may also do it.
-
Yes, but it's about managing that risk if it can't be removed entirely. Considering the implications of the spate of ransomware attacks recently, it's the approach we have to apply to all systems - ideally make them watertight, but if that's not possible then only allow water through in a controlled manner...
-
That's a cunning little idea. It's a bit like the film Independence Day - a disguised object can get through a gap in the defences only through a very specific window. Much less Goldblum though, sadly.
-
We already used the P&P restrictions from years back, so just deployed the reg key at present. It's a bodge, but that'll nestle in nicely with the other bodges. Spooler disabled on all servers at least.
-
That may be its greatest strength 🤡
-
FreeNAS/TrueNAS? Few years since I last installed it - I put it on as an iSCSI backup destination for Exchange. It was very powerful, but took a bit of setting up. It died when the crappy disks I used threw a fit, but I stuck laptop 2.5” disks in an old HP G5 server so not the software’s fault.
-
Any other roles that DC performed? If not, you’re pretty good to go with what you have planned. Get your new DC OS nicely patched up before promoting it (some Server 2019 updates are quite big). Prepare the directory by updating the schema with adprep, if you haven’t had a 2019 DC before, first.
-
Split scope rather than failover? If so, I'd modify the scope changing your secondary DC/DHCP host as the only server and changing the server/scope options to reflect that. The, when you have another DHCP host built, set up failover instead and change the DHCP options back.
-
I’ve used that link several times in the last couple of weeks, on Macs, to get hold of 10.13. Open it in Safari, and scroll down to the link for 10.13. That should open in App Store. You then need to use the terminal to create a USB bootable version of the dmg.
-
Mail Flow rules, you can block or manage delivery by attachment extension.
-
The B140i really isn’t much of a thing - it’s only a software solution after all. Worth bolting a P420i in?
-
I find that I still need to specify the domain ahead of the user, or it fails. You'd notice that with your administrator account too though. Have a look at: http://www.edugeek.net/forums/mis-systems/120823-solus3-management-console.html
-
Are you specifying the domain name (pre-Windows 2000 style) before the username, e.g. domain\sysaccount?
