2097

Any one able to help me on this ?

Hi trying to get this ready , We dont use Online exchange and we also are not going to be using Teams. I noticed on my login portal for every one there is a search bar, if i start typing in any members name it will up staff members details ? I have just disabled the "Microsoft Bing Search Bar" in Office365 Admin, is this correct ? Many thanks 2097

Thanks for the reply I did have a look at salamander, i looked at the output CSV it creates .. Looks like You need to edit the CSV to link a username/email to an Sims account . I ideally wanted all this automated ( which for us doesn't look like this can do this if you dont store students emails in Sims ? ) We actually dont even have emails for students which ideally i want to keep that way atm My powershells atm will pull AD accounts from the last couples of days into a CSV, Move them to the correct " teams Group " and assign the policys at the same time.

We currently have A1 Plus licencing, and have Azure connect to sync our AD groups and users to O365, Which works fine. I noticed that no AD synced groups show up in MS Teams , you need to Create a "Office O365" group and add the AD synced users to these groups . No problem , made a couple of PS scripts to pull users from AD into the MS Teams groups . Is this the correct way of doing it ? Does any one have their AD Synced groups show up in Teams ? I'm now onto assigning Policy's to the users which seems like its yet another power shell script ! is this also correct way of doing it...? This office 365 malarkey seems all over the place with some GUI's being able to do certain stuff and the rest requiring power shell automation.

Ok found a fix, seems if you limit to a single session for each user this now reconnects disconnected sessions. Strangely this also allows them a separate session for Remote App ( which is the whole reason i had multiple session's enabled in the first place !! ).

Any one else using "Reconnect to disconected sessions" Doesnt seem to work on Server 2019 , It creates a whole new session on the same server . Seems its been an issue since the preview days, one way around it is to Lock the session first then disconect . It will then rejoin the disconnected session ! very weird.. Any one else manage to fix this ? or have it working from the start.. The server 2019 installer i used is from March 2020.

Any one else using "Reconnect to disconected sessions" Doesnt seem to work on Server 2019 , It creates a whole new session on the same server . Seems its been an issue since the preview days, one way around it is to Lock the session first then disconect . It will then rejoin the disconnected session ! very weird.. Any one else manage to fix this ? or have it working from the start.. The server 2019 installer i used is from March 2020.

I have actually experienced this myself on a second session on the same server . So same user , 2nd session . aslong as only 1 session is active for a user on a server then its ok..

I did read through this thread before getting mine activated and i used a reference number some one had posted here I was asked for domain proof of ownership ( .org.uk address not a SCH.uk ) I was then asked to do the following Goto https://www.microsoft.com/en-us/educ...roducts/office Enter my Admin email Click Im a teacher , and go through the setup Then do the same and select im a student while also using the admin email ( may use a different browser because of cookies) I also had to deselect the " New admin interface" toggle in the O365 Admin panel , seems it may have been caching something. Unsure if they had to do anything on their end .. Possibly ! but worth giving it a shot before any one contacts them again.

6 days later and MS set me up ! Unsure if they changed anything on their end . But what i had to do was the following ( Under their guidence). Goto https://www.microsoft.com/en-us/education/products/office Enter my Admin email Click Im a teacher , and go through the setup Then do the same and select im a student while also using the admin email ( may use a different browser because of cookies) I also had to deselect the " New admin interface" toggle in the O365 Admin panel , seems it may have been caching something.

Thank you , In the end i customized the PasswordExpired.aspx from OWA ( well made a copy and renamed it to "ResetPassword.aspx" and removed all the outlook goodness to make it look like just a HAP+ reset page . I linked it to the login page. Couldnt justify paying for azure just for password expiry reset.

I have just setup the following Connection Broker Gateway 3 session hosts Gateway and Session broker are on the same server Problem being if you host anything on port 443 in school with external access ( e.g. OWA, Exchange Proxy ) and you only have a single IP address then you need to change the port for RDS gateway . You can change this setting some where in the gateway settings. Remote Gateway Manager > Right click server and goto Properties > Goto Transport Settings > Change HTTPS port You also need to do this with a power shell command so it also updates the RDP files in RDWEB. Set-RDSessionCollectionConfiguration -CollectionName "COLLECTIONNAME" -CustomRdpProperty "gatewayhostname:s:gateway.domain.com:4343" Another thing i also noticed was i couldn't add the username RDP property to specify the domain name ( Stops people typing in DOMAIN\ externally) . Tried a few power shell commands to add it to the RDP via a CustomRDPProperty, never worked.Also with 2019 there are no RDP's to edit. Add this to the bottom line of your RDP files [b]username:s:domain\[/b] ( Replace domain with internal domain name) For macs add the following instead on the bottom line [b]domain:s:DOMAIN[/b] I noticed that you can add it manually after the Certificate part of the RDP file ( it still apply's it without having to be signed) RD WEB wouldn't work for us , because of the reasons above. I now use HAP+ to host the files which is a LOT easier and much more customizable.

I do a few RemoveApps.ps1 which has a XML document in which you list what you want removed see http://blogs.technet.com/mniehaus I remove the following I also import the start menu to the default profile Also the following Copy shortcuts for the start layout / Copy the layout modification / Replace the images for the login screen / Remove some directorys not needed

I thought password write back required a higher subscription on Azure.

Hi , Just setting up O365 Noticed when assigning licenses to users we have the following Office 365 A1 for students/faculty And Office 365 ProPlus for Staff and Students The ProPlus licences are limited to 1000 for students despite us have around 1300 pupils and 140 licences are correct for staff . I noticed in a previous thread some one mentioned we should have "o365 A1 Proplus" licenses ? or are the proplus ones mentioned above correct ? and we just have the wrong amount of licences for the pupils. many thanks 2097

Sadly we don't pay for that for the password write back feature , but do have inhouse exchange.. so gonna setup a link to that to reset passwords Many thanks

Hi Nick , Great program and been using it for a while ! but we are about to rely on the interface a little more so would like to ask you a few questions ? Currently when i click "Me" and goto change Password, it says it doesnt meet the complexity requirements. As far as im aware it meets our AD requirements, is this set somewhere different on HAP ? Also, i noticed when a user logs in with an account where the password expires it doesnt ask to change it. I noticed in a previous thread you was speaking about redirecting to OWA on exchange.. Is this possible ? as i dont seem to be able to see the setting . Many thanks Luke

Ok looks like you cant add the setting username:s:DOMAIN\ via the method explained above , unsure why .. From reading up, if you add any setting after the signed part of the RDP it still applys . If you add it before the signed part of the RDP it corrupts . I made all my remote apps , Signed them , downloaded them ... Added username:s:DOMAIN\ to the bottom of each one. I then ditched RDWEB and we already have Home Access Plus Setup , so just using that to allow people to run the apps. I noticed rdweb works flawlessly in IE , Firefox,chrome and even edge required "username:s:domain" . I assume its because none of them run the ActiveX addon . So i have it setup like the following 2 session hosts 1 connection broker 1 gateway SSL assigned to all All RDP's signed with the domain inserted ALL RDP's ( Remote apps and remote desktop ) added to HAP+ , so a user clicks them they can run the RDP , Prompts for username and password once ( doesnt require a domain name to be inserted ) and it logs them onto a session host. Looks like my work is now done .

https://social.technet.microsoft.com/wiki/contents/articles/15719.adding-custom-rdp-properties-in-windows-server-2012-vdi-rds-environments.aspx this link shows howto do it , it shows my custom setting in the registry but does not show in any of the rdp files

Setting up a new remote access server with server 2019 and having the following problem I have setup RDWEB to automatically add DOMAIN\ when a user logins... which is fine. My problem is when a user from a non domain computer try to run a RemoteAPP such as WORD , it prompts for credentials . They have to put DOMAIN\USERNAME in the box With my previous server i was able to edit the RDP for Remote desktop and add a few things which automatically assigned this . With server 2019, Looks like the RDP's for each Remoteapp are stored in the registry on the server . Tried to edit one but it brakes the RDP Any one done this for external access ?

Had this before , Old RD app on MAC OSX

Must be something in the Local Appdata , possibly something we can redirect with the profiles. Not at work atm , but will do more testing when in. Possibly this dir C:\Users\USERNAME\AppData\Local\Microsoft\Windows\Shell

Does any one here use OPENVPN ? I currently have installed PFSENSE used only for an openVPN server , i have both certificate and LDAP authentication . Once they remote in , they can use remote desktop straight into their machines . We only have this available for Management . For every one else its currently an aging terminal server , My plan is to build 3 Physical Remote desktop servers ( 2019 ) and use the broker,gateway on a VM etc to increase capacity.

Ok i have been able to reproduce this. This only occurs if the user has no profile on the machine . For e.g. if a user logs off and does not reboot the machine , i then reset the password , user re-log's in on the same machine . its fine. If a user has not logged onto the machine ( or the profile has been deleted at reboot) and a password change is required, the start menu is no longer there ( but reappears at next logon) This is something to do with roaming profiles and deleting local profiles. I shall investigate ! - - - Updated - - - Take a look above , does yours experience the same issue as that ? are you using roaming profiles etc.

I did consider it , but it was part of the insurance policy we have so had to be enforced . I have done it now any way, But was very very stange.. We are using roaming profiles and the latest 1909. I have to check if it stopped all Group policys or just the start menu.