Jump to content

3s-gtech

Members
  • Posts

    12,309
  • Joined

  • Last visited

Everything posted by 3s-gtech

  1. “Windows 11 is designed to bring you closer to what you love” What, retirement?
  2. Server OSs don’t need project planning and management to update (at least, not unless you micro-plan). Check backups Mount ISO Run setup.exe Spin on chair for a while Job done.
  3. We do it with a policy linked to a user OU - it was really unreliable on a computer OU. Then GPP with item level targeting picking out the printer depending on the name of the PC.
  4. I think that’s one of the situations where MS recommends you still have Hybrid, to manage these rules. Pretty ridiculous to go back, of course. I suspect if you have a DC on Azure that ECP online can write to, it’d work fine.
  5. https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/g-suite-provisioning-tutorial I have two provisioning apps to overcome limitations with what will sync. Otherwise, you will find that some user attributes don’t cross over, and user provisioning may not work. The first app syncs global options, the second does users.
  6. I had to get a particular Exchange cert when I last renewed. A wildcard *should* work but I followed advice to get certs which covered the autodiscover and mail delivery, as well as the IIS part. What a faff it all is!
  7. I’ve been an Exchange hold-out for years, but even I migrated to Exchange Online this summer. Keeping a server on-site for Hybrid is one thing, but I wouldn’t put a fresh install in.
  8. Any reason for not using 2016?
  9. Have you set the bindings on the server, so it knows where to direct the client with that address? IIS needs more than just the DNS entry. So, you’d set your internal address to point to a ‘Site’ via a particular port (usually 80, but up to you and you can use https too). https://www.ssl.com/how-to/binding-in-iis-10/
  10. Haven’t done it for ages. You could install it on an ancient XP box to extract the exe and dlls (everyone has an old laptop hanging around with XP on don’t they?!) See if it’ll extract with 7-Zip (a better option) See if someone can send you the extracted files as a zip (I’m not at work currently so don’t have it to hand).
  11. Yes, NTFSFix still works. I use it every year to modify the default permissions given to newly created home areas (removing Full Control etc). Can’t remember if the installer runs in .NET 1.1, if so you’ll need to extract the exe another way (which uses .NET 2.0 which runs if you have the 3.5 feature installed).
  12. Perhaps something spoofing DNS may also do it.
  13. Yes, but it's about managing that risk if it can't be removed entirely. Considering the implications of the spate of ransomware attacks recently, it's the approach we have to apply to all systems - ideally make them watertight, but if that's not possible then only allow water through in a controlled manner...
  14. That's a cunning little idea. It's a bit like the film Independence Day - a disguised object can get through a gap in the defences only through a very specific window. Much less Goldblum though, sadly.
  15. We already used the P&P restrictions from years back, so just deployed the reg key at present. It's a bodge, but that'll nestle in nicely with the other bodges. Spooler disabled on all servers at least.
  16. 3s-gtech

    Cricket

    That may be its greatest strength 🤡
  17. FreeNAS/TrueNAS? Few years since I last installed it - I put it on as an iSCSI backup destination for Exchange. It was very powerful, but took a bit of setting up. It died when the crappy disks I used threw a fit, but I stuck laptop 2.5” disks in an old HP G5 server so not the software’s fault.
  18. Any other roles that DC performed? If not, you’re pretty good to go with what you have planned. Get your new DC OS nicely patched up before promoting it (some Server 2019 updates are quite big). Prepare the directory by updating the schema with adprep, if you haven’t had a 2019 DC before, first.
  19. Split scope rather than failover? If so, I'd modify the scope changing your secondary DC/DHCP host as the only server and changing the server/scope options to reflect that. The, when you have another DHCP host built, set up failover instead and change the DHCP options back.
  20. 3s-gtech

    MAc Image

    How odd! Even opened it on an old 10.6 Snow Leopard install recently. Try Googling for ‘Mac OS 10.13’ which should give you the same link. The Mac will need the App Store app installed.
  21. 3s-gtech

    MAc Image

    I’ve used that link several times in the last couple of weeks, on Macs, to get hold of 10.13. Open it in Safari, and scroll down to the link for 10.13. That should open in App Store. You then need to use the terminal to create a USB bootable version of the dmg.
  22. Mail Flow rules, you can block or manage delivery by attachment extension.
  23. The B140i really isn’t much of a thing - it’s only a software solution after all. Worth bolting a P420i in?
  24. I find that I still need to specify the domain ahead of the user, or it fails. You'd notice that with your administrator account too though. Have a look at: http://www.edugeek.net/forums/mis-systems/120823-solus3-management-console.html
  25. Are you specifying the domain name (pre-Windows 2000 style) before the username, e.g. domain\sysaccount?
×
×
  • Create New...