Firefox

Crete a replica OU structure in your existing domain and spend some time working out what policies are required and linking them into this structure. Then gradually migrate users\computers over For the hardcoded profile paths....going forwards you are problably going to need to tackle this with DFS. A script can be run across AD to change paths easy enough Slow logons - Possibly caused by the incorrect GPO config

From memory you add this key via the toolkit, but it never actually appears in the VAMT gui. On our estate it does still license correctly, and from the gui when we do an update license status it does report correct

Hello, Hopefully a quick question for anyone running a multi domain forest. In your parent domain do you have a stub zone for the child domain? (as I'm guessing you should) is this zone set to replicate to just DNS servers in that domain or to all DNS servers in the forest? Also if you have multiple child domains, how do they also replicate stub zones? domain or Forest wide?

I assume like the OP you're using Windows 10? and that you are also using MBAM 2.5 with the new MBAM 2.5 client on the device?

What version of Outlook and what OS are you running on? We had something similar when our mailbox was in the cloud, running on Windows 10 and Outlook 2016. The problem for us was an IE issue with the proxy.pac file. IE 11 has deprecated the use of a proxy.pac file://C:\Windows\proxy.pac location, instead replacing this with HTTP or HTTPS https://blogs.msdn.microsoft.com/ieinternals/2013/10/11/understanding-web-proxy-configuration/ There is a reg "workaround" on Windows 7 to allow the deprecated feature to still function, but this doesn't work for Windows 10. The symptoms were experienced as a result were much like yours, and were resolved when changing th file to being hosted on a HTTP site

No, they remain exactly where they were

That's what we're looking at having to do, but I hate leaving inactive accounts still enabled This is how we'd like it to work. But If I disable the account in AD, after the next Dirsync, the account disappears from shared mailboxes, and when I look under deleted mailboxes, there it is :-/

Hello, Wondering if anyone else has a different way of getting round the disabled accounts and mailbox issue in O365? Scenario: Create Account in AD with Mailbox Dirsync runs to sync the user to O365 Migrate Mailbox to the cloud User leaves, account is disabled, mailbox automatically deletes What if once a user has left you want this mailbox to be available to other users for a period of time? I see an article about converting the mailbox to a shared mailbox first, but disabling the account still deletes this. This seems to leave me with the options of A) leaving users that have left the organisation enabled in AD (Not great for security) B) (Guessing as have not tried) Altering the filtering of the Dirsync AD MA to also sync disabled accounts C) Dumping all the mail of of the mailbox to another location (Not ideal) This also presents the issue for shared mailboxes, previously on a prem, we could disable the AD account for a shared mailbox, and it could be accessed without issue. We are now having to enable all out shared mailbox accounts (Again not great from a security point of view)

I have downloaded the GPO templates, but the objects that can be changed are fairly high level. I'm looking to control settings within the Skype Client itself. For instance: Under Tools and Options Personal - Save IM Conversations in my email Conversation History folder Personal - Save call logs in my email Conversation History folder File Saving - Default location I'd like to be able to set something then prevent the setting being changed......anyone done something similar yet?

Have you clicked on each user to confirm they don't have a license? as unselecting the license on this page then refreshing normally makes them disappear

Looks like something has gone a bit screwy with the promotion, you might have to demote and try again. On DC 2 I would also set the primary DNS to be DC 1 (at least initially, but ideally the DC won't point at itself for primary.)

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum] Create a Dword of {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} with a value of 1 (Obviously try this in a test environment\target a test device first)

Consolidation where possible is always good practice. Although from a practical point of view I wouldn't expect to see a great jump in performance unless you were applying hundreds previously. If you suspect GPO maybe causing issues, then the eventviewer might be the best place to start, to see if any of the GPO's are "getting stuck" trying to apply. You could even see some services failing, which could be disabled, improving speed.

Well I'm pleased to hear it's not just me it's not working for lol At least it appears to be working, just means I'll have to alter my documentation for other people to follow

This is where I'm trying to add the key

It does indeed (although the screen looks very different to normal, I only normally get a small box to enter the key) I fill out the relevant details and it all appears to work. However I still cannot see\add the key into the VAMT gui

I believe I ran the correct kms_host script file. It did say it was successful, the eula from the download does say MICROSOFT OFFICE 2016 VOLUME LICENSE PACK

Turns out the error was a little misleading. It was indeed a Certificate error. Someone hadn't registered out new Comodo Certificate with our internal ADFS servers and the old one had expired Thanks for the help @gshaw if you are an admin of your tenant and you have the relevant licenses you can download Skype for Business 2016 as a Click to run install direct from the tenant.

Anyone using the GUI of VAMT and managed to key the office 2016 key added? I keep being told that the Key isn't valid and that I may need to upgrade VAMT - this is despite running on version 10.0.10240.0 (which I believe to be the latest) I have run the Office 2016 Volume license pack, but unlike previous installs this never asked for the key to be added. So I ran the slmgr /ipk (office 2016 KMS key) and this came back as successful. I have KB3058168 installed already, and I did find an article about moving a pkconfig file from this article to C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\VAMT3\pkconfig which I have also tried to no avail.

Has anyone started using this? we downloaded it about 2 weeks ago and all seemed to be working fine. Now all of a sudden we can't sign in and get the following recording in the event log The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is sip.internaldoamin.com The SSL connection request has failed. The attached data contains the server certificate. The sign in process doesn't error, it just keeps trying. This is connecting into the cloud service as opposed to an internal Lync server.

Operations Manager with Audit Collection Services. Could be an expensive setup, depending on what MS products you are already licensed to use. OpsMgr comes under the System Center stack.

Yeah the count went back up pretty quickly.....I think I have it all working except Office 2010 now. From memory even on 2008 R2 I have to run a separate update to get office working, I'll see if I can find one for 2012 R2 EDIT: right I found the Office Pack for 2012 R2 and it all installed successfully....now I only get a count error when activating, so I'm happy that'll sort itself out Thanks guys

Yep I will want to activate Windows 10 so will certainly need that - thanks I'm struggling to find the 2012 Host key (My VLC is a mess) what's the Product Name listed as? EDIT: After applying the above update it now lets me install the Windows Srv 2012R2 DataCtr/Std KMS for Windows 10 key still won't activate however

OK so I've finally bitten the bullet and upgraded my KMS server from 2008 R2 to Windows 2012 R2. Following the upgrade nothing will now license and I am being told that the Key is invalid I am aware of a patch that is needed for Windows 2012 (KB2885698), but I'm told "The update is not applicable to your computer". I'm assuming there is a different patch required for the R2 version of 2012? and wondered if anyone knew what that was? thanks

Odd I have one listed as Office 2016 Suites and Apps KMS This article https://social.technet.microsoft.com/Forums/exchange/en-US/09e4fd95-5dde-4081-bfb3-9b10bef2ffed/adding-office-2016-kms-key-to-ws2012r2-kms-host?forum=Office2016setupdeploy does talk about mounting the .iso file though