Blue_Cookeh

Hey guys, I've got a problem where a batch of new netbooks isn't getting a DHCP IP when I try to PXE boot them. I haven't had this problem with any of our previous Samsung netbooks or any of our other machines (all Dells) but these 5 aren't working (other than this, WDS is great by the way!) I turned on Monitor mode on one of our switchports, listened with Wireshark and could see the DHCP request going out and the offer coming back with all our DHCP options for boot server etc, but the netbook just says "DHCP..........." until it times out and reboots. I've also tried moving the netbook to a different switchport on a different switch all together and using a different ethernet cable. Any ideas? EDIT: herp derp, been a bit of an idiot! Got it now

They're the same thing, but those steps walk you through it in it's entirety. So long as you know what server is holding the PDC role you can just do steps 3 -> 6. Most LEAs block outbound NTP (I don't understand why, but there we go) so you might need to substitute x.pool.ntp.org for your LEA's time server.

Haha, I had this problem a few days ago when I was looking to make staff have more complex passwords, what with using Bitlocker etc and it actually prompted me to get rid of our last 2003R2 DC. Your domain needs to be at Windows Server 2008 functional level for what Duke5A said above.

I'd just stick a Linux box on the LAN side, move SSH to a port like 2233 and NAT it. So long as the SSH password is strong, you shouldn't even have a problem on default port 22, but I like to move it just in case.

I didn't bother P2Ving it so I didn't risk the USN rollback, I just built a new virtual DC, transferred all the roles and made a VHD of our data partitions as backups and did a clean 2008R2 install on our physical server, transferring all the roles back and setting up printers/shares again... in fact, the hardest part was getting the damned x86 printer drivers to cooperate under 2008R2. Microsoft's technet articles are very helpful in this kinda situation and everything is replicating just fine etc.

OK, because this DC is a file server too, anyone got any ideas how I can go about migrating the shares information easily? All the shared data is on a separate partition to the 2003R2 OS, so (of course, I'll still have backups!) I'm hoping to just leave those partitions as is and recreate the shares and permissions after 2008R2 is installed. So far all the FSMO roles have been migrated (along with DHCP) and the server is now just a member server.

I know it passed the chec, but just thought I'd say... the PDC emulator in your domain has to be the network time server, if you move the FSMO role to a new server, you should run something like below to sync the time up. w32tm /config /manualpeerlist:"" /reliable:yes /update

Just as a side question, do you get a balloon popup on login about this in the lower right hand corner?

Sounds like your setup is quite to our's. We have a virtual 2008R2 DC, which isn't included in our Hyper-V backups, the only thing we'd lose with it is our WSUS updates, which isn't worth a lot. I was going to P2V it to try and minimise the risk of Offline Files screwing up on our client machines, hopefully there won't be a problem if they can't sync for a while though. I don't like using a DC as a file server by any means, but we're a primary with a limited budget and it was here before I arrived!

Hey, Finally getting around to updating our primary domain controller running 2003R2 up to 2008R2. I was going to P2V it over to our Hyper-V setup, then wipe and install 2008R2 on the physical server and gradually migrate roles across but I'm just wondering about doing a hot P2V of a domain controller? If I do this, am I likely to come across issues with replication and USN rollbacks? How would others do this? The machine in question is our first domain controller that serves primary DNS, DHCP and our main file server. I guess the other, more reliable, option is to setup a new third DC on our Hyper-V setup, migrate everything to that and then migrate everything from that to the new 2008R2 physical server. Thanks

Is the profile's server location being cached with offline files?

Tried the IP, can ping everything just fine. The time and date is exactly the same as the DCs too.

Hey, I just got a couple of MacBook Pros in for some of our staff and am having trouble connecting it to our Windows AD domain... all I'm getting is "Unable to connect to the server" when I hit the Bind button. I'm using the following settings: AD Domain: abc-def.co.uk Computer ID: Office-MacBook Create mobile account at login - ticked Use UNC path from AD to derive location - ticked Network protocol to be used: SMB: Default user shell: /bin/bash All Mappings unticked Prefer this domain server: server1.abc-def.co.uk Allow administration by: abc\domain admins, abc\enterprise admins Allot authentication from any forest in this domain - ticked. For the administrative user, I tried using the domain's administrator user. Computer OU is specified as "CN=Computers,DC=abc-def,DC=co,DC=uk". Our domain has both 2003R2 and 2008R2 DCs, the Macs are running 10.7.4. Weirdly, one of the two MacBooks we have worked just fine... Anyone got any ideas?

Remove write rights to the Desktop, a bit of a nasty way to do it seeing as they'll get Access Denied when they try to save, but it works for our student's mandatory profiles here.

ohai guys. To be fair I think Forefront TMG's Malware scanning messes with it.

We installed some Casio XJ-A130s in 4 of our classrooms a little over a year ago and we're extremely happy with them... not ultra short throw, but I'd highly recommend Casio from what I've seen so far.

Ah ok, that's pretty much how we were going to provision pupil accounts anyway... we're looking forward to being upgraded from Live@Edu to Office365.

I was wondering why I was seeing this when logging in online... we haven't deployed Live@Edu to pupils yet, and the staff don't use any of the web-based services, so they haven't seen it. Before it becomes an issue, is there any way to stop this? I understand it's because the Live profiles are becoming self managed, but in a school I can't really expect our staff and (soon) primary pupils to put data like this in, particularly with the huge push for eSafety lately.

There's a local install option, which is what we're running... (it backs up it's data to our Backups share each time it's opened/closed). I've just looked at our customer portal on the MicroLib website and the documentation has instructions for a network install and upgrade.

We've used the local version of Junior Librarian for a good few years now... we use the barcode system with the books, and the kids have a card they scan with a unique name/id on. Not had any problems with it and it seems to work just fine under a standard domain user account for us. Recently took it from XP to Win7 without a hitch.

How are you taking registers on iPads?

I moved our school from our county's aging mail system to Live@Edu last Easter and it's been great for us, use of email and shared calendars has risen greatly in our school. I set staff up to use Outlook on their laptops rather than the web interface and everyone seems to get along with it. I'm looking forward to migrating to the new Office 365. One thing I did do before moving everyone to Live@Edu was make my own default retention policies so that mail wasn't moved around or deleted automatically, which might have confused some staff.

I totally agree with you. We've given our users, both staff and students, right click on every version of Windows we've deployed that I've seen at our school (i.e. Win 2000+). I always look at features as if I'd be the user. Would I be annoyed it was disabled? Is the feature a nice to have, or is it pretty much core functionality? If I can do something to keep a feature in place whilst also maintaining security I will. Heck the only reason I don't give every user their own profile and let them customise Windows to their heart's content is because I know some of them would abuse it and set the wallpapers etc to inappropriate images for a school environment.

Been running mine as my new NAS/Web dev server at home for the past month or so, not exactly it's intended purpose but it's chugging along nicely! Had a play with the BETA Fedora image, but it wasn't really stable so I switched over to the Debian image.

Our EES agreement was ~£100 more expensive than our old agreement... saying that, every machine in the school is now licensed for the latest Office/Windows, our Servers are all licensed for the latest Server and we have MS FF TMG + Filtering and our A/V on there. EES was worth it in our school, even with the price increase. Our FTE count is less than a third of our machine count.