Blue_Cookeh

Hi All, Setting up a shiny new Squid install on Debian to (finally...) replace our basic TMG filtering and am going down the SSL intercept (or so called SSL bump) route. I've managed to get an Intermediate CA out of our Microsoft CA server and Squid is successfully using that, but the problem is it doesn't seem to be passing the entire SSL chain through to the client on SSL'd websites, so it's not trusted. As soon as I import the Intermediate CA into my clients they accept the generated SSL certificate on the website and everything is green, it recognises that our Root CA has signed the Intermediate CA that has signed the website CA. Any ideas how to get Squid to pass the chain to the client? I'd rather not have to import the Intermediate CA on every device if possible. Many thanks

Hi All, Is there anyone out there that would mind exporting/screenshotting their OSD task sequences for a lite touch install of Windows 7 or 8/8.1? I'm looking to properly implement PXE OSD with SCCM12R2 soon but I'm quite new to it and keep getting hung up on things... I know it might be a little tedious but it would be greatly appreciated!

I assume you have to specifically choose that one... All I can find is "MSSC169 Microsoft Desktop EES - Level E" on our quotes, or "Windows"/"OVS Desktop Platform E" on the VLSC. Will talk to our licensing reseller

Hey guys, Does anyone know if we're entitled to use the Microsoft Desktop Optimisation Pack as part of our MS EES subscription through SA? Thanks

I wouldn't look at repeaters for this, the density (assuming a small area) with the thick walls would probably warrant standard access points and running some cables. I'd probably look at x2 packs of x3 Ubiquiti UniFi access points with a Toughswitch to provide the switch and PoE without injectors. Then just hook the Toughswitch up to the ADSL router.

We've only got about 35 iPads in our small school at the moment and both I (and the teachers) love them and will probably continue purchasing more. They're truly set and forget from my point of view, using Meraki MDM. I have them on their own SSID and VLAN to use a transparent proxy and let the teachers manage the applications on them (I just manage the credit on the account etc). These aren't on a 1:1 basis, they're just handed out willy nilly to classes. They understand that work is stored on the device and is only accessible from that one device, so I think they tend to get the kids to pick up the same number (on the asset tag) each time. If they want to get work off the device I've set generic email addresses up for each iPad with transport rules to only allow emails sent internally. From an educational standpoint, they're taking them outside into our pond areas and all sorts to capture/edit photos and videos using storyboard apps and probably more I don't know about. We're using Griffin Survivor cases on iPad Minis which have stood up to even the reception class! I'm looking into a couple of Apple TVs for our projectors now for easy presenting, which (surprisingly) was an idea the teachers came up with.

I use roaming profiles with folder redirection for our staff laptops and never get this. Users are able to login even if they don't come in during the summer hols... I'd check your GPOs.

What was the 10.6 script? We may be able to adapt it to work on 10.9. EDIT: Just realised you're probably finished on this job...

Yes. I made a new folder and told it to create it there. Weirdly it worked, although not sure why since both new and old folders are empty and have exactly the same Sharing and Security settings.

You'd normally leave vlan1 well alone as the default one, move management etc onto other random numbers.

What do you mean? Adding a normal image is fine, it's specifically an MDT/SCCM issue

Hi Guys, Anyone got any ideas on this one? I'm trying to create an MDT boot image in SCCM 2012 but it's failing every time. I've tried removing/reinstalling MDT and it's SCCM integration, I've fully removed WADK 8.1 and reinstalled it, still no go. Every time I try to create an MDT boot image I get this error: Started processing. Creating boot image. Copying WIM file. Mounting WIM file. WIM file mounted. Setting Windows PE system root. Set Windows PE system root. Set Windows PE scratch space. Adding standard components. Adding component: winpe-dismcmdlets Error while importing Microsoft Deployment Toolkit Task Sequence. System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it is in the Faulted state. Server stack trace: at System.ServiceModel.Channels.CommunicationObject.ThrowIfFaulted() at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at INewBootImage.Create(String platform, String scratchSpace, String[] components, String[] extraContent, String wimFile) at NewBootImageClient.Create(String platform, String scratchSpace, String[] components, String[] extraContent, String wimFile) at Microsoft.BDD.Wizards.SCCM_ImportTaskSequenceTask.DoWork(SmsPageData smspageData, Dictionary`2 data)

With our servers I do the reboots manually. I usually log in to all of them at least once a month and I'll get the usual SCCM updates popup asking me to reboot so I usually do it then since most of them have redundancy. If it's a sole server, I'll just schedule a reboot manually using the shutdown /s /t time-in-seconds command for that evening. I trust SCCM to reboot our workstations, which aren't necessarily critical... I wouldn't trust it to do our servers, all it would take is for it to bring down both DCs at the same time or something and a lot of services would suddenly break.

We use SCCM here with maintenance windows. It means that all desktop/server machines wake up (using WOL), do their thing with updates etc, then shutdown at random times during 2am and 5am. With our staff/student laptops I simply set the same maintenance windows but if they're missed updates will still install and then keep prompting the users to reboot every few hours, up to a maximum of one week. If they have to wait 10 minutes for updates to finish installing (which is rare now, since people can choose to install them or not) then tough poop!

Brilliant, you got me on the right track! - Firstly I had to stop the link between on premises and Office365 AD accounts using the Forefront Identity Mgmt client to enable deletion - Then I had to force a full export into Office365 from the FIM client - The account changed to 'In cloud' - I could then use Powershell to delete the account and remove it from the Recycle Bin on Office365 (otherwise the account still exists and you get immutableID non-unique errors later) - I then changed the "real" 'In cloud' user's immutableID to be the same as our on premises user - I forced a full synchronisation with Powershell and start-onlinecoexistencesync That's the two affected accounts now working perfectly and sync'd back to AD, thanks!

Hi All, Wondering if anyone could shed some light on this for us? All of a sudden our SCCM server won't connect to O365 and in the logs I'm getting: Any ideas?

Nevermind, I totally read it wrong!

I had an unofficial quote on brand new Lenovo T440s from our usual all-other-bits-and-bobs-supplier @Millgate; and it seems like they're within our budget for the specs we're after. Going to be trying to get one or two to trial soon

Hi Guys, I made some changes to our proxyAddress attribute in AD a week or so ago to make sure every user had their jbloggs and joe.bloggs e-mail addresses for Office365 and now I'm receiving this error for two of our users. Has anyone got any ideas as to how I can track the cause down? The user's accounts are now 'In cloud' on the Office365 admin panel, too. I can't see any conflicting settings in our AD... Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses SMTP:[email protected];]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values. The idFix tool on the Microsoft support page showed nothing wrong Thanks!

This is exactly it. Thank you! I will be showing this to our account manager now, who's trying to get me to go through Dell support to have this fixed. I'm rejecting the laptops and will probably be going with Lenovo T440s once I've had a couple of quotes back.

I wouldn't usually recommend it... but... *sheepishly* Teamviewer? You can install an agent, login to your account in the agent, then it appears on your Teamviewer account online.

Don't get me wrong, laptops always show the price difference... I wouldn't touch the consumer grade laptops Dell sell, but up until now I always thought the Latitude line was pretty reliable. The problems we had have been with the Latitude 3330, if anyone wants to know.

Will be in touch shortly You're tempting also! I use a T420 for my primary (non-edu) job! Thanks guys

How do you deal with Apple support? The one thing that was nice about Dell was the fact they'd come on site the next day with parts and fix the problem. I've got a few staff on MacBook Pros from a year or two back (but we just ended up sticking Windows on them for software compatibility...) Thanks for the recommendations guys, I don't know how keen I am on the lesser known brands, but I'll give a couple of them a shout Lenovo could be a good one, my full time workplace uses T410/420/430/440 and they're rock solid... but might be a bit pricey. We had a Toshiba tester from our LA a couple of years ago... I think it was the cheapest feeling laptop I've ever used!

Hi, What do you guys get for your staff laptops? Out of my recent Dell orders I've now had 3 arrive faulty... x1 physical with a broken hinge (and thus eventually bezel), x1 bricked after enabling the TPM and x1 faulty TPM that I couldn't take ownership of, reset, enable/disable etc. I'll be returning all the Dells I've ordered for this summer because of these. I'm getting a bit fed up of them to say the least and am looking for alternatives around the £400 - £500 mark ex VAT. Thanks!