k-strider

About 5 years ago we got a wireless network professionally installed and it was quite a large slice of budget... now i'm getting to the point where i need to start to think about replacing the APs and the Controllers. My ZD is a 1100 we have 32 access points we will get more as we build new buildings but i don't envisage it will be huge number more. so naturally i was just looking at the ZD 1200 but i wanted to know if anyway has done this and is it easy to move the config.. or has anyone gone from ZD to smart Zone or ruckus cloud wifi? i was considering trying to replace the controllers first then the access points rather than doing everything all at once.. and doing it myself instead of getting a wifi company in as i will just replace the APs one for one as the coverage was mapped out when we got them installed 5 years ago.. i have AP wise mostly zf7982 but a handful of R700s in our newest building... i was thinking of replacing them over 2 years rather than in 1 budget year cycle...

That is what ive done since 2003 all the way up to 2016... Prepare new Virtual DC.... remove any FSMO roles from old one... dememote old one... remove old one from Domain.... rename new one to the same name as the one its replacing.. set ip settings to the same... add to domain... promote..... all in all it takes about an hour max

you might be able to automate that have a look at this issue... its similar but not quite the same https://support.microsoft.com/en-sg/help/3119083/outlook-2016-crashes-when-creating-a-new-profile

that is exactly how i have always done it in the past all the way from 2003 to 2008r2 to 2012 to 2016! Prepare the new DC windows and updates... Demote the old one... remove from the domain... change ip of new one to the old one... Rename the new one to the DCs name... add to domain... Promote.. i just moved DHCP and FSMO roles around the other DCs before i demoted the one that had those roles..

https://www.phoenixs.co.uk/swgfl-sophos/ 3.45 Per computer for a 3year License

if your using FOG 1.3 and the new client did you follow this? if you plan to use Sysprep before image capture and are also planning to use the FOG Client, You must disable the FOGService service from running at boot before you Sysprep to take your image, and then re-enable it within your SetupComplete.cmd file so that it is re-enabled after the image deployment is complete. Failing to do so will break the Sysprep post-deployment process with an error message that says "Windows Setup could not configure Windows to run on this computer’s hardware.” Disable FOGService: Windows Control Pannel -> View by Small Icons -> Administrative Tools -> Services -> Right click FOGService -> Properties -> Startup Type -> Disabled Re-enable FOGService post-imaging: Add these lines to SetupComplete.cmd sc config FOGService start= auto shutdown -t 0 -r

has anyone written any progresso reports for pulling students into Apple School Manager? and fancies sharing the ssrs reports before i spend a few hours on the job

did you fix this in the end?

i keep a un-syspreped image and a syspreped one on my fog server, i deploy the syspreped image and when i update my image i do that via the un-syspreped one first then re upload it and then resysprep it and up load that. Syspreped image automates the end of the setup and we rearm office too just before we sysprep for KMS as well... and with FOG 1.3 new client you need to disable it and then add some enable commands to the setupcomplete file to re-enable it.

Love Fog been using it for years using 1.3 now, we do have SCCM but i dont use it for deployment. FOG handles windows 7 through to 10 reall nice though we are almost entierly windows 10 now. Use clonezilla for our student laptop scheme becuase they are dual VHD boot laptops and clonezilla handles this nicely.

my certificate was due to expire soon so i wanted to use LetsEncrypt certificate going forwards i used to use StartCom but now they have been distrusted by Mozilla Apple and Google i need a new cert supplier. i needed it to work with Postfix and ideally webmin too, given the short life of the certificates i really needed it all to be automated... i basically followed this https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-14-04 this sorted out my websites i have about 5 domains running on Apache. to get Postfix to use the certificate i basically followed this: https://ubuntu101.co.za/ssl/postfix-and-dovecot-on-ubuntu-with-a-lets-encrypt-ssl-certificate/ its good that certbot always puts the certificate in the same place so you can just point Postfix and Webmin to it... /etc/letsencrypt/live/my.domain.name/fullchain.pem /etc/letsencrypt/live/my.domain.name/privkey.pem and for SAN certificates they just all go in the first domain specified which is good the only thing i did ontop of the two guides was to change the cron job so that all three services got restarted not just Apache on certificate renewal... this is the line i put in my cron job 30 2 * * 1 /usr/local/sbin/certbot-auto renew >> /var/log/certbot-renew.log && sudo service apache2 reload && sudo service postfix reload && sudo service webmin stop && sudo service webmin start

next time i see it i'll have a look

We see this across our estate too, either either Pro or Edu and either 1511 or 1607 we do use impero

I can't comment on Ruckus controller less setup. but we have had Ruckus in here coming up for 3 years its been flawless and fast.. mix of older ZF7982s (dull band N) and some R700s in the new block around 31 APs.. we have lots of laptops (300) and plenty of BYOD phones and tablets floating around the school

here it is in total for our staff... just have to remember to provision the o365 for education license first. $AccountSkuId = "SchoolName:OFFICESUBSCRIPTION_FACULTY" $UsageLocation = "GB" $AdminUsername = "SyncUser@SchoolName" $AdminPassword = "SyncPassword" $SecurePassword = ConvertTo-SecureString $AdminPassword -AsPlainText -Force $cred = New-Object -TypeName System.Management.Automation.PSCredential -argumentlist $AdminUsername,$SecurePassword Connect-MSOLService -Credential $cred $LicenseOptions = New-MsolLicenseOptions -AccountSkuId $AccountSkuId $AdGrp = "UsersInThisGroupGetOfficeProPlus" # Get the AD Group in Azure $AzAdGrp = Get-MsolGroup -All | Where-Object { $_.DisplayName -eq $AdGrp } $AzAdGrp_members = Get-MsolGroupMember -All -GroupObjectId $AzAdGrp.ObjectId write-host "Total members of group: " $AzAdGrp_members.Count # Create array of users to change # Command to run for all users in the group: $users = Get-MsolGroupMember -All -GroupObjectId $AzAdGrp.ObjectId | Get-MsolUser|Where {$_.isLicensed -eq $True -and $_.licenses [0].accountskuid.tostring() -ne $AccountSkuId} Write-Output "Total unlicensed users in group: " $users.Count $LicenseOptions = New-MsolLicenseOptions -AccountSkuId $AccountSkuId $users | ForEach-Object { Set-MsolUserLicense -UserPrincipalName $_.UserPrincipalName -AddLicenses $AccountSkuId -LicenseOptions $LicenseOptions }

Well i had to fiddle a bit this still isn't perfect but its getting there: $users = Get-MsolGroupMember -All -GroupObjectId $AzAdGrp.ObjectId | Get-MsolUser|Where {$_.isLicensed -eq $True -and $_.licenses[0].accountskuid.tostring() -ne $AccountSkuId} Write-Output "Total unlicensed users in group: " $users.Count i have one staff license for OFFICESUBSCRIPTION_FACULTY all staff are licensed for o356 for education so $_.isLicensed -eq $False would always return 0 so i swapped it around and had to add the bit about the specific license i'm interested in. and i got 126 for total members in group then 125 for unlicensed so this will work now as long as i allocate o365 license separately using a different script first which i probably will do...

Thanks Guys i will give it a try

I currently have been using the code below to assign Office Pro Plus for Students based on a group membership. which is great because i can allocate them quickly. I was wondering if anyone would know how to change it so that if they have the license already then it ignores them (the last bit) so i could leave the script to run automatically therefore licensing up the users automatically once they are provisioned in o365. I built this script using two separate scripts i found online, one that assigned licences and the other that made a bulk change to a user attribute based on group. $AccountSkuId = "OurSchool:OFFICESUBSCRIPTION_STUDENT" $UsageLocation = "GB" $AdminUsername = "syncAccount@ourschooldomain" $AdminPassword = "ThePassword" $SecurePassword = ConvertTo-SecureString $AdminPassword -AsPlainText -Force $cred = New-Object -TypeName System.Management.Automation.PSCredential -argumentlist $AdminUsername,$SecurePassword Connect-MSOLService -Credential $cred $LicenseOptions = New-MsolLicenseOptions -AccountSkuId $AccountSkuId $AdGrp = "y10" # Get the AD Group in Azure $AzAdGrp = Get-MsolGroup -All | Where-Object { $_.DisplayName -eq $AdGrp } $AzAdGrp_members = Get-MsolGroupMember -All -GroupObjectId $AzAdGrp.ObjectId write-host "Total members of group: " $AzAdGrp_members.Count # Create array of users to change $users = Get-MsolGroupMember -All -GroupObjectId $AzAdGrp.ObjectId | Get-MsolUser write-host "Total members of group: " $users.Count $LicenseOptions = New-MsolLicenseOptions -AccountSkuId $AccountSkuId $users | ForEach-Object { Set-MsolUserLicense -UserPrincipalName $_.UserPrincipalName -AddLicenses $AccountSkuId -LicenseOptions $LicenseOptions }

just a quick question on idFix for Office 365 Migration I've changed all the Primary UPNs now to our real school.localarea.sch.uk ready so all the proxyAddress SMTP:[email protected] have gone as they are now SMTP:[email protected] from id fix but they still listing the other proxyAddress with the lower case smtp:[email protected] am i ok to ignore these given I've changed the main one? I'm slightly confused from reading a lot just looking for an ok or its not ok from someone who has already done the migration.. i want to get on and set-up Azure AD connect thanks Gordon.

like this this would remove the path key: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\7-Zip] "Path"=- https://support.microsoft.com/en-gb/kb/310516#bookmark-delete

i had to do much more to get mine to work.. 1) close Chrome and Make IE the Default Browser. 2) clear the key from the Users portion of the Registry. 3) Rename the folder called Chrome to Chrome_ in C:\Users\%username%\AppData\Local\Google 4) Load Chrome by either running the exe or right clicking it (if pinned to task bar) and choose New Window. 5) Chrome runs through first time setup - Make chrome the default again and close chrome. 6) go back to C:\Users\%username%\AppData\Local\Google remove the new Chrome folder and rename back Chrome_ to Chrome.

i had this on my old file server 2008 R2 i think it was counting the shadow copies... that were on the same volume... when i upgraded to a new server i used separate disks to store the shadow copies

this morning I've had reports from about 5 people that there chrome browser stomped working and came up with this error message: Class not registered I've removed and reinstalled it on mine (one of the affected users) but it doesn't resolve it.. i did googled it and found some threads from a few years ago but i cant get it to fix it either.... interestingly if they have admin rights right clicking on the icon and using run as administrator runs chrome.... not a great workaround though! I've checked mine with someone who dosen't have the problem and the versions are the same so its not affecting everyone whose had say updated.. just wondered if any one else had this happen today.

I would like to implement MFA/2FA with eportal for remote access as at present it is just a username and password over SSL which given the amount of data that is available I would feel more comfortable if this was 2FA for staff. has anyone done this yet, and more specifically has anyone done it with MS Azure MFA? as i am considering using this for our 2012 R2 RDS Farm access as it looks fairly easy to integrate into this. any info on what anyone has done would be nice to hear about Thanks

still no sign of RSAT for 8.1 proper