k-strider

Ok I've just used Azure AD Connect to change my soon to expire SSL cert for my ADFS server and ADFS WAP server all really easy. (2012 R2 Servers) I'm now just trying to sort out google sso which is still working but im concious that come middle of feb when the old cert expires it will stop working. some one else came and set the google stuff for me so im just muddling through. using this doc which is really about setting it up https://icutsman.wordpress.com/2016/08/06/googleappsandadfs/ i get that i probably have to replace the cert in Relay Party Trust so i exported the cert as per the instruction in the above blog so i could import it into the google admin center at the end of the post. i have added it under signature in the Relay Party Trusts but when i upload the cert to google it breaks if i re upload the old one it works again... am i missing something on the ADFS server? i cant find any docs on just updating the certificate only about setting up ADFS SSO from scratch. any help would be greatly appreciated.

sorry i meant ZD1100 my bad... I had to migrate to virtual smartzone get my R710 and R610s onto the network... but yes that's my intention replace a few at a time, probably with R610s and just use R710s in large halls / sports halls where there is a potential to get a lot (100s) of clients hanging on one AP

i do need to start replacing some of mine (next financial year and the one after) we mostly have ZF7982 (29) but some R700s (3) R710 (1) and R610 (1) so a mix... I hope to change the ZF7982 over 2 years to ease the cost I got rid of my ZD 1200s and moved to cloud ruckus already in preparation. I appreciate they aren't the cheapest solution but they have been rock solid for 5 odd years... and still are even the ageing ZF7982 seem to be happy with our kids and their ipads we have over 400 clients connected most days

Will you be able to do a 1 for 1 replacement with Aruba if you previously had Ruckus? only they seem to need less APs than other solutions on the market.. or will you do a full on site survey again

and thats what we did too just a route to the network from the main network switch.... so we can interact with the cameras but keep them on separate switches and vlan... we use Axis Camera Station and a mix of Axis cameras... originally (probably 8 ish years ago) we bought a BNC module that allowed 8 old style cameras to appear as axis ip cameras but if i was doing it now i would just replace the lot. we are now upto about 45 cameras.

i've seen monitors blink on computers in our finance office when i hear the Fridge pump kick in

i have one server SCCM that has an SQL instance on it and it randomly creates check points i just delete them and Hyper-V just merges them back together.

i'm a city councillor as well as my day job in a school and our council is o365

Firefox has also now finally got GPO support and you can use the Windows Certificate store at last so our students mostly use chrome but firefox is now on all our builds too.

I tend to recover file shares and important workloads like DCs to a 6TB external encrypted Disk every 1/2 term or so to take off site.. for longer term backups that works.. i've probably got disks going back about 4 years in the archive cupboard.

i had this issue show up on a couple of mine where they change from Volume to Retail! http://www.edugeek.net/forums/licensing-questions/201112-microsoft-s-windows-10-activation-system-broken-fix-coming.html#post1721021

We push sign-ins and outs to a SQL Express Database the database time stamps one of the columns but the script populates the username and computer name where the user signs in... you could put a message box up first with your AUP message then its all neatly in a database.. i wrote a small C# program to interrogate the database so we can search who signed in where.... something similar could be done to see who accepted the AUP this is the vb script that runs as a login script.

i have mixed views about EXA I've always found them helpful when calling or emailing them... not so sure about the Stormshield firewall I'm sure even when we aren't maxing out our pipe the net can still feel sluggish and im convinced its the firewall struggling with the decryption and inspection. I'd like to go to a bare line and in-rack filtering solution but to scared at the Mo... i use Zen at home who are first rate, with a Sophos UTM (as its free for personal use)...

I have 3 Rooms with 32~34 a room with 25 Generic Use, library with 20ish mostly 6th Form, DT with 25, Art 14, Music has 9 and there are a couple of small work areas... for context we have around 1000 on role. I've never like laptop trolleys they get damaged much quicker than Rooms (and our kids are really well behaved) more expensive to repair than fixed workstations, they never seem to last as long. we have in the past had some but no one took ownership and the weren't checked when they went back so were often flat - then the charges get pulled out all a mess the IT support team is way to small to look after them, it just didn't work. we currently have 30 laptops in lockers that are issued and returned to the library whilst there is some management, there are a lot with keys missing all over the place and its just not simple or cheap to replace them like a keyboard on a workstation is. our year 7 and 8s have 1:1 iPads so that is rolling up through the school but at the moment the generic rooms i have are well used a lot of the time.

yes we experiance this too.. first run its un-licensed then close it and open it and it signs the students / staff in and gets a SCL Token... http://www.edugeek.net/forums/office-software/201533-office-365-shared-computer-sso-issue.html Edit: i am going to try and roam the token so it happens less as students move around.

I've used it for years too we present \\ourschool.domain\DFS\StudentShare as J: and \\ourschool.domain\DFS\StaffShare as K: and \\ourschool.domain\DFS\Programs as G: for very similar reasons as you i have two file servers but we only allow referrals to one, so there is a live replicated copy of the data just encase a server goes down i can swap the referral over.. and when replacing servers i simply remove the old server target add the new one without referrals until the data has replicated - no one is any the wiser I'm surprised it has issues we have a product based on centos i think called foldr and it doesn't seem to have issues with the DFS structure.

yes that thought did cross my mind with licensing.... yeah my VM does all the three roles so at some point i will have to rebuild the farm but maybe that can now wait till next version.

oh that's good I think I will commission a 2019 server this week

I tried to in-place upgrade my VM that did Connection broker, Gateway and Licensing on Friday but it failed and rolled back (twice) i managed to do this no probs from 2012R2 to 2016... Are you building a whole new farm i guess like in the past your connection broker needs to be 2019 to allow 2019 session hosts into the farm?

i don't know if its related but yesterday i had 2 windows 10 Edu 1803 PCs decide that they needed activating and looking at them they had magically changed channel from Volume to retail!!! weird above shows before and after with slmgr /dlv i had to put the GVLK key back in via Slmgr /ipk NW6C2-QMPVW-D7KKK-3GKT6-VCFB2

I had to add a 2019 VM server add the Activation tools and insert the 2019 Datacenter Key using ADBA and my Win10 LTSC clients do seem to activate. the key shows up as WS16 Channel though

yes that is how it was set-up i put that line in the config used to deploy it like i said it does get a shared computer token just not on first run - on second run... which is mildly annoying

We have ADFS federated school domain and all our students and teachers are assigned Office 365 ProPlus for faculty/Students license. when a user opens word for the first time it comes up with Sign in to set up office see photo if the user clicks the cross to get rid of the box this happens if the user closes and then reopens word excel etc then it works as normal and gets a shared computer token if the user clicks the sign in it actually asks for there email address and then takes them to our ADFS servers sign in page is there a way to stop this behaviour as clearly from the top right (username) office knows who the user is from the get go - we don't use roaming profiles so if its something that has to just been done once any advice on roaming the tokens with UE-V perhaps? our ADFS server seems to work fine for SSO on other things like signing in to say sharepoint online it just asks for your email address then it knows you are you and signs you straight in.

we already have to MAK windows 7 as our number is around 5 and fell below the 25 required for KMS.... i'm just a bit confused about the name of my new 2019 KMS keys compared to my 2016 names.

right the bottom one is my new 2019 DC key and the top is 2019 LTSC KMS key the middle ones are 2016 and office 2016... do i need to remove the older ones reading the doc in theory i just need the 2019 DC key... but weirdly it shows up as WS12_R2_channel anyone else see it like this? my KMS is AD based running on 2012R2