mdrabble

@sparkeh are your devices purely AzureAD joined? What type of VPN tunnel are you using? Cheers.

Spent today installing a new VM and installed NDES and installed then proxy app on the same VM - that is as far as I got today. @SPArkh thank for you offer and if I get stuck or not sure of anything I will take you up on you very kind offer.

After some Googling, looking at NDES and Azure Application Proxy app. The really annoying thing is that I am only looking into this for Sims.net access.

@Katy have you done anything about Intune and Always on VPN? I'm currently struggling sorting out Certificates for devices etc - especially as they are not domain joined.

Were these non-domain machines? Looking at user based Tunnels as I'm looking at Intune Laptops which are only Azure Joing - and not On-Prem AD Joined - so this rules out Device tunnels. Using a Combo of the MS Documentation and Richard Hicks info.

Just reinstalling and configuring Always ON VPN (this time making notes!) Anyone deployed profiles via Intune? Cheers

I have intune setup and working for student laptops and works well. If and then the time comes to look at staff laptops, I would like to use Intune for them and also a VPN connection for SIMS.net What is the best method of setting up VPN access for SIMS.net for when laptops outside of school? I have a Smoothwall S8 box, plus I did start to look at Always on VPN as a test - which I got working and then left on a back burner - so cannot remember how I configured it (and didn't document it as it as only for testing) Also, what is the best method of updating SIMS.net via VPN? Cheers

I setup azure self password reset - emailed out details to all staff and students on how to set up and use. Have they taken any notice?? NO! What gets me is that they been logging into office 365/SHMW since lockdown and we still get emails for resets! Normally it comes from parents - so I check email against one held on sims.net and reply with a randomly set password which forces change on logon.

Turns out WDS service wasn’t starting - once started manually all works!

I exported 2 VMs from school - a Domain Controller with (DHCP and DNS) & my SCCM server so I can work on testing new image/ update deployments while working form home - and also so I don’t break anything in school!! I imported them on to my home lab and set the VM switch to internal (they don’t need internet access and prefer to keep them isolated) and booted them up. Normally we use VLANs in school but since cannot replicate that bit I removed the VLAN details from the NICs Did an in place upgrade in the DC from 2012r2 to 2019 (to test for when I do this in school - which I have since done and worked fine) - removed all DHCP scopes except the server VLAN DHCP as I figured as this was the only active one, they would default to that DHCP. Anyway DHCP working fine and I can get DHCP addresses. Open up SCCM and remove boundaries which are no longer needed and keep just the server IP Boundary. I create a test VM to pxe boot and nothing! Nothing showing in smspxe logs so I am assuming sccm not even seeing pxe requests - but dhcp is working. Anyone any suggestions where to look next? Cheers

I opted to clean install using A USB stick - when gets to the OOBE screen, I do Shift+F10 while laptop connected to network and run a script i precooked on the USB which install the licence key and installs all updates. It then also then adds laptop to our intune which prompts for Office 365 details to add the device via the online method. As we use SCCM, there is probably an easier and better way of doing it but the USB method works a treat and requires very little interaction.

Turns out I had the wrong stream licence assigned! There is Stream (Trial) as a licence And as part of student facility there is Streams E3 - or there is for us. Not sure if this because our staff have E3 licenses. One I applied the Steams E3 app licence everything started working for students.

We have a similar setup to @fraglePete with usernames Our display names are Title initial Surname eg. Mr M Drabble Student display names are (Student) first name last name eg.(Student) Mark Drabble It makes it obvious who are students and who are staff.

I’ve removed and re-added the stream licence. I’ve tried on Edge and Chrome on a desktop using the student details still gives a permissions error. I’ve even tried sharing to named student without success. Think might log it with Office 365 support.

Staff are recording lessons and then sharing them via Streams. All students have Stream Licenses assigned to them. Staff add the relevant group to the video permissions or change to allow company wide - depending on the video. I have a small number of students that have permission denied issues. They can sign into Office 365 - nothing blocked. Streams can see they have a license assigned but they still getting permission denied. Anyone else come across this? Cheers

This one has be slightly stumped! Only happening for a single user no matter what machine they connect to - working fine for other staff ( and they all have same settings etc) Remove the Outlook Profile and recreate it and keep getting name.ost is not an Outlook Data file (.ost) User profile is locally stored - have removed user profile and still same issues. Anyone any other suggestions? Cheers

Yep already did that once the issues was resolved. If they haven’t already closed it I will PM you the details Cheers

@ibpalle - as a suggestion, for Smoothwall support tickets, could there be an option for end users to close their own tickets? I had logged my ticket as Low - but I'm thinking would save having unnecessary open tickets for support to be looking through. Cheers

ISP missed off the second block set of IP addresses from our Router config - so smoothwall couldn't see or use them. All now working and Smoothwall box showing as all OK.

I have raised this as a smoothwall support ticket but thought would ask on here as well. Replaced our router this evening as we have moved from a 300mb connection to a 1gb connection. Since then Smoothwall is saying our Gateway is offline - even though everything is working fine. We have internet connectivity - so I am a little puzzled. I have rebooted the Smoothwall box to make sure any arp caches are cleared. Anyone any other suggestions. Cheers

Cheers All - will have a gander at Ryzen CPUs

Looking to refresh PC and with all the new CPU's out there I admit I've havent a clue as to which would be the best one to choose. Mainly going to be running Hyper-V VMs, Photoshop, some video editting and the now and again gaming. So...... AMD Ryzen or Intel 10th Gen? Cheers

Must admit didn’t even cross my mind to use a start up script to clear the teams cache. May have a look at that when I come to roll out 20H2

I ended up redirecting the AppData folder back to the local drive as it was getting silly with logon times and also the amount of storage it was taking up.

Need to look at the portal - any pointer on best practices etc?