Blue_Cookeh

They're all policies unfortunately... if the other "supported" way is to deploy custom MOFs I think I'll just go the Preferences route, it's only for staff users anyway and no one has regedit access as it is.

Hi All, I'm trying to get a GPO to apply user settings only when my users are logged into a computer with certain software installed. Now, I've never used Loopback processing before but I assume this is what I need? I'm thinking if I create an OU with groups in (one of the groups is computers with the software installed) and enable merged loopback processing this would work? Obviously I would use security filtering to ensure it is only applied to the particular software group. Or am I totally overthinking this? Thanks!

Our LA put in Netgear FS726TPs and Netgear WAG102s about 8 years ago before I had properly taken over... the switches ran like champs but I wouldn't touch them with a bargepole. Their APs had all died and been replaced at least once in our school, and any more advanced config on the switches was hell because of the bad admin GUI and terminology. I'm on Netgear's BETA programme so we've had a fair few preproduction switches come through us, which seem to be addressing the GUI issues but I still don't really like them. Ripped them out and put HP 2530-24Gs in last summer.

Give them admin rights and then lock down as appropriate using group policy. You can easily limit the Control Panel items they're allowed to etc. Might be worth creating a custom MMC for them also...

Our LEA are the only people who can provide a decent connection to our school for general use... so yes, I have an extra ADSL line coming in from the brilliant guys over at Eclipse with 8 IPs assigned to us. I use it as a backup VPN into the school and to send various connections out via (such as Meraki MDM for our iPads, and SMTP connections from my Nagios install)... basically because our LEA's support is absolutely atrocious. It takes me roughly three weeks of constant reminders to get them to open any ports. Just going to plug Sophos UTM too, their multipath rules let me direct specific traffic out via whichever WAN connections I like

None Our oldest boxes are our Hyper-V hosts on 2008R2, all our VMs are on 2012R2!

I store user's documents on Amazon S3, and then archive those up to Amazon Glacier. Virtual machine images go directly to Glacier. It's extremely cheap to back up to, a little bit more pricey when you need to pull stuff back down. On site, I have an external drive for our 'master' server (running DFS) in case we need anything quick and easy from one server and then all the rest go to our NAS on the other side of the school.

Bingo. We did this using our domain GPOs for our Win8.1 staff laptops.

Does the junk have any attachments you could use as a rule to block with? I have a lot of zipped exe files forwarded to me that were destined to users...

Sorry! Sunday night isn't the best time to be doing stuff! It's literally just the Exchange mailboxes and calendars for each user we need to keep at the moment, I was thinking I could just reset the Azure AD password for the affected users, export their data as PSTs and then reimport on the new user... but if you know an easier way that would be great

If you could show us that would be great, the only bit of Office365 we use right now is Exchange.

They're definitely not, it's just I've recreated some on premise AD accounts and now DirSync is totally confused!

Trying to set the ImmutableID to $null doesn't seem to actually empty the attribute, and when I try to set it to the same as the on-prem ID I just get an exception as below... any ideas anyone? set-msoluser : Unable to update parameter. Parameter name: SourceAnchor. At line:1 char:1 + set-msoluser -UserPrincipalName "[email protected]" -ImmutableI ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OperationStopped: ( [set-MsolUser], MicrosoftOnlineException + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.PropertyNotSettableException,Microsoft.Online .Administration.Automation.SetUser

How can you use DirSync and ADFS? I'm tempted to move to ADFS in our environment but I can't imagine the headache in terms of making it redundant... lose ADFS, lose Office365 logins.

Boot into a WinPE or Linux live disk, rename c:\windows\system32\utilman.exe to utilman.exe.bak then copy cmd.exe to a file called utilman.exe and reboot as normal, this will give you a command prompt with SYSTEM privileges so you can use "net use" to add an admin account and fix trust issue. Then just reboot into WinPE/Linux, delete utilman.exe, rename utilman.exe.bak to utilman.exe and reboot, jobs done Took me about 5-10 mins this way.

It's only around 5 users at the moment so will do it by hand... will let you guys know how I get on. Thanks for that, I'm not hugely clued up on how Azure AD works in comparison to on-premise AD so learn something new every day!

Any other ideas anyone?

Thanks all ... shameless plug for me to Google in future...

We had 5 of these laptops delivered a while back and 3 out of the 5 went back as dead on arrival. One of them had the exact problem you're describing but it was after I'd spent time imaging it, so had just started encrypting the thing. I rebooted the laptop and the BIOS would just get stuck at 3/4 of the way across. It took me two months to get Dell to take them back and refund our school.

Hi All, How do you guys go about configuring and ordering HP servers in Education? With Dell we have a Premier account I can just log into, configure a server and ship it across to our account manager but I'm not finding anything like this in the horrible mess of HP's website... Unfortunately Dell left a very sour taste in our mouths after the last batch of laptops we ordered. I'd go to our usual IT suppliers straight away but I like the whole "done configuring? here's your price" bit! Thanks

Hi Guys, I've got 3 collections (well... more, but this is a great example) that should all add up to the same number of devices but put simply... don't. Any ideas why this might be? I've included collections and queries below... x86 shows 29 computers, x64 shows 18, and All Workstations shows 57 (ignoring the fact not all our workstations are listed) 29 and 18 don't equal 57 in my books! The limiting collections on all are 'All Systems'. x86 School Workstations: select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System INNER JOIN SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.SystemOUName = "ad.SCHOOL.co.uk/SCHOOL/Devices" and SMS_G_System_SYSTEM.SystemType = "X86-based PC" x64 School Workstations: SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System INNER JOIN SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.SystemOUName = "ad.SCHOOL.co.uk/SCHOOL/Devices" and SMS_G_System_SYSTEM.SystemType = "X64-based PC" All School Workstations: SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System INNER JOIN SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.SystemOUName = "ad.SCHOOL.co.uk/SCHOOL/Devices"

IANAL but... Update your School's IT/AUP Policies and you should be fine. Plenty of businesses and schools do this in the UK already.

I'm very fond of our Sophos UTM... VERY powerful and not nearly as pricey as some of its competitors.

Hi All, Just setting up our Office365 sync again on our DC and getting some conflict reports into my inbox. Basically because of some local problems I had to delete and recreate users within our on premise AD and in doing so I used the same proxyAddresses as the users' old accounts. Now, the old accounts no longer exist (nor in the AD Recycle Bin), but Office365 is still giving me sync errors for the accounts I had to recreate. Any ideas how I can fix this?

If you have EES licensing it's part of the CAL suites.