netadmin

I have recently used Mover.io to move all user data from Google Drive to OneDrive and our school leadership has asked that we disable all prior file sharing (via public links) from Google. I have blocked Google Drive access and external sharing, but it seems like that is only blocking future access to Google Drive - files shared previously are still available to anyone with the link. Does anyone know of a way to globally delete all previous file sharing permissions within Google Apps?

I don't run Veeam, but I send an encrypted backup from a Synology NAS to Backblaze B2 and it's worked well so far. Their pricing seems to be the best by far.

I would strongly recommend a separate VLAN as well, for increased security. I blocked my security camera VLAN from being able to access the internet - this avoids any risk from potential security vulnerabilities on the cameras themselves. Separate switches would be optimal from bandwidth perspective, but it may be more cost effective to upgrade your backbone to a higher speed and re-use your current switches. For cameras, try to select models that use H.265 encoding rather than the H.264 encoding when possible - this uses a fraction of the bandwidth that H.264 cameras did, and also reduces storage needs on the NVR as well.

I have several new Server 2016 VMs running on SSD flash storage. It seems that they startup so quickly that the network has not fully connected by the time they try to start Remote Desktop Services, which causes the following error to be logged on each boot. TerminalServices-RemoteConnectionManager, error 1064: The RD Session Host cannot install a new template-based certificate to be used for Transport Layer Security (TLS 1.0\Secure Sockets Layer (SSL) authentication and encryption. The following error occurred: The specified domain either does not exist or could not be contacted. I have a GPO that pushes a remote desktop certificate out and I have adjusted group policy to "always wait for network" but continue to encounter this error. Does anyone know of a way of delaying Remote Desktop startup or otherwise resolving this error? The remote desktop services are all set to manual/trigger start and changing them to automatic (delayed) startup did not help.

We're a fairly small campus - we used Juniper EX3300 switches in our edge closets and an EX4300 as our core switch. We're looking at some building additions in the near future, so I'm thinking I'll add a Juniper EX4600 fiber switch when that time comes, as it can connect to the EX4300 as a single virtual chassis. The Juniper switches have been very reliable for us, and Juniper support has been top notch when issues came up with firmware upgrades a couple of times.

I have setup a new Server 2016 Hyper-V Failover Cluster on a Dell VRTX. Both hosts are running Server 2016, passed all cluster validation tests, and seem to be working properly. However, on each boot of either host, they log a Kernel-EventTracing error, event id 2: Session "{598c599e-80ee-4b3a-81fc-59f151341b28}" failed to start with the following error: 0xc0000035. This error also occurs if I manually restart the Cluster Service service. From my initial research, it seems this error code sometimes indicates some type of name collision in the performance monitor event trace sessions. I located an event trace session called {598c599e-80ee-4b3a-81fc-59f151341b28}. If I delete this event trace session and restart the Cluster Service, the error does not get logged, but it does recreate the event trace session which will cause the error to occur next time. Any ideas on how to resolve this? It logs as an error, which clutters up the event logs. Thanks!

We used to use the free version of Meraki, but after Cisco started limiting feature updates on the free version, we migrated to Miradore. Miradore is simple, but very reliable and a great price point given we only have a small number of iPads.

Yes, I disable off-campus network access on all of my servers except for WSUS and DNS servers. It does make the server a bit slower when using Internet Explorer, but has created no major issues that I've noticed in the last few years.

I am currently looking into implementing Alertus Desktop Notification - have not started the install process yet though. https://www.alertus.com/alertusproducts/desktop

Thanks Arthur, this is exactly what I was needing.

I have several Macs that have Garageband, iPhoto, and iMovie installed from the App Store on OS X Sierra. I have discovered that when updates come out, the App Store cannot automatically update because it is prompting for the App Store account password. What approaches are your using to keep your Macs updated without having to go to each Mac desktop individually to sign in to the App Store each time an update comes out? I use Munki for app deployment, but that does not look like it could help in this case. I also tried the command line interface to App Store (MAS) but it fails to authenticate successfully and looks like support is ending. I use Meraki for management of our iPads and would be open to adding our Mac desktops to Meraki if it could assist with this challenge somehow. Thanks for any recommendations!

We are looking at purchasing a "site" license for Adobe Creative Cloud (which really amounts to 100 device licenses). Does anyone currently use Adobe CC device licenses on machines that run Deep Freeze? It sounds like Adobe CC activates the first time it is launched and then again must reactivate every 99 days. I can script launching one of the Adobe apps after machine imaging to force the initial activation while Deep Freeze is in thawed mode but was unsure if issues would occur if the reactivation occurs when the machine is in Frozen mode. For machines that use device licenses, if they get reimaged, will they automatically use the same license or will it consume a second license and require manual action to delete the initial license? Thanks for any input you may have!

I purchased a Juniper EX3300-24P earlier this year and it's been working great so far.

I have had a few isolated Windows 7 machines that have started freezing after April 2016 Windows Updates when Word 2013 or PowerPoint 2013 are launched. Has anyone else seen this issue (and hopefully have identified which patch may be causing the issue)? I have tried uninstalling a few of the patches from this month from an affected machine but this has not helped yet. This is similar to an issue that occurred in February after KB3114717 was installed, but I have verified that the affected machines do not have this older KB currently installed. Thanks for any guidance you may be able to provide!

Another option would be to create a collection for the machines you want to have the scheduled reimage for and deploy the mandatory TS to this collection as "always rerun". Then run a scheduled task every 6 weeks to run a PowerShell script to add the necessary PCs to the collection (such as How to add computers listed in a text file to a collection | Mike's Tech Blog). Add a final step in your task sequence to remove the PCs from the collection and it should not keep reimaging at that point (such as Remove computer association from collection after SCCM task sequence | - danovich.com.au).

I had the exact same issue on a Smart UPS 2200VA XL - runtime was unacceptably low after replacing the battery. I got with APC tech support and they had me try doing a complete manual "calibration" - basically turning off the power to the UPS and waiting for it to run itself down. The runtime then got even worse and they said there was unfortunately nothing else that could be done except for purchasing a new UPS. The issue for me seemed to be that the UPS had calibrated itself for the reduced charging capacity of the old battery pack and there was no way to reset this to factory defaults after a battery is replaced (the older units had a "recalibration key" that would do this). My UPS was out of warranty but I had just purchased several new APC UPSes for several other closets, so they agreed to replace the non-working UPS at no cost. This is a very frustrating issue. If they had not replaced my non-working UPS at no cost I would have looked elsewhere for the replacement model.

Are you advertising your reimage task sequence to only the "Unknown Computers" collection? If so, if SCCM has an agent that has previously connected from the computer, it will give you an error message about no task sequences available when you start OSD. If you advertise your task sequence ("Available" deployment type - never "required") to a collection that contains the computer, you should be able to reimage it without having to delete the computer from the SCCM database each time. You can then either leave the PC in the collection after imaging or use a script to programmatically delete it from the collection once imaging is complete.

Work: Home:

One option for deleting the email from student/staff mailboxes hosted on Office365 would be for you as the Office365 tenant admin to run the Search-Mailbox command in Powershell to locate and delete the email from all mailboxes. I'd recommend using the log only option initially to test your search query. Houston we have a problem... Search-Mailbox | Marcin Milewski LetsExchange.in: Delete a specific email from all Users Mailboxes in O365.

I've copied my unattend.xml below. As for IE, the old image did run IE9 and I upgraded it to IE11 for the new image. I captured the image using the capture media wizard from SCCM like I have in the past. I do not run the capture media wizard with any special options or perform any other modifications to the captured wim using imagex/dism. This is a 64 bit Windows 7 Enterprise image, if that makes a difference as well. Unattend.xml true

I recently built a new Windows 7 image for our workstations. I am re-using the SCCM task sequence (TS) I used in past years, which has always worked with minimal issues. For some reason, when I change the TS to use the latest image, it fails at the "Apply Operating System Image" step with an error code of 8022000B (this error code does not come up in any Google searches). Looking at the logs (relevant section copied below) it seems like it might be an issue with the unattend.xml file. Strangely, if I change the TS to use the old image, this error does not occur. The only differences in the new image are the latest Windows updates were applied, larger disk space consumption (due to addition of AutoCAD and Autodesk Inventor) and that the base WIM went from 2 partitions (Sys Reserved + OS) to 3 (Sys Reserved + OS + Temporary Storage from captured system). I am only deploying the single OS partition through my TS (like previously) and looking at the PC after the error occurs, the files from the OS image seem to be present on the disk properly. Any ideas? smsts-part2.txt

It appears that because I was trying to push the Meraki profile at the same time I was trying to supervise the iPads, supervision failed due to Meraki profile installation failing. My workaround (which seems to support silent app pushing now) was: 1) Supervise the iPads with a basic non-Meraki profile that contains only the Wifi connection settings. This allows the iPad to be supervised successfully. 2) On the iPads, go into settings and login as the App Store user, making sure to enable automatic installation of apps. 3) Use Apple Configurator to push the Meraki profile to the iPad, and then press Install on the iPad when prompted 4) Meraki apps have to be deployed through both VPP to the users and through the App section to the device to trigger fully silently. I'm not really sure why the Meraki profile was failing to install during supervision but at least silent app deployment seems to work now.

I am testing Cisco Meraki MDM with several iPads currently. I completed the following general setup process: 1. Registered for VPP and linked our Apple VPP to Meraki account 2. Created a Meraki device profile and downloaded to Mac Mini server running Mavericks Server with Apple Configurator 3. Imported Meraki profile to Apple Configurator 4. Used Apple Configurator to push wireless configuration and Meraki profiles to iPad and supervise device At that point, Apple Configurator applies the wireless configuration but Meraki fails. (I think this is because the wireless is not connected quickly enough). I then repush the Meraki profile and hit install on the iPad prompt and Meraki installs properly. After Meraki installs, iTunes prompts for username/password on the iPad. I can enter the credentials, but it does not save the password - it prompts again after the iPad is restarted. I'd really like to have the iPads never prompt for password so that apps can be pushed fully automatically. I thought supervising the devices would allow this to work as expected, but it does not seem to. Any ideas?

I am trying to locate a router that can handle two WAN connections from the same ISP (so both WANs would have the same gateway and be on the same subnet). The dual WANs are not for redundancy, but to split out VOIP and Data traffic. Currently, I am using a Sonicwall NSA 240 router (which cannot handle two WANs on the same subnet), so I had to place a low cost home router in between the second cable modem and WAN port 2 to convert to a private IP range. Unfortunately, there are no other ISPs available at this campus. Any recommendations of a business-grade hardware router that can support two WANS on the same subnet/gateway? I've looked at Juniper SRX series a bit, but have not found any documentation yet on whether the dual WANs would present a problem. Thanks.

I've used Adobe Photoshop Elements in the past for photo slideshows.