Sheridan

I was hoping to use our SCCM server to upgrade the remaining W11 23H2 machines to 24H2 using the feature updates part - however not matter what I try the download (either in sccm or wsus) always fails with the error: In WSUS: " This update cannot be approved for installation because its Microsoft Software License Terms failed to download" In SCCM: "InvalidOperationException: The Microsoft Software License Terms have not been completely downloaded" The only answers to this I've found seem to be permissions related and the Network Service and SCM accounts have full access to the WSUS folder. As soon as I remove Upgrades from the classifications in the Software Update Point the errors disappear. Anyone seen this before? I can't find a way around it at the moment

We keep seeing this warning for our Azure tenancy health: "Critical domain WebSocket connectivity failures detected in your tenant" The warning also says: "Current status: We've detected WebSocket Secure (WSS) failures to the following unified domains: *.cloud.microsoft and *.office.com" I don't understand this as we effectively have those domains whitelisted/bypassing https inspection etc and everything seems to be working as normal. Nothing has been changed as far I'm aware Anyone else seen this warning in their tenancy?

I'd prefer to keep the smoothwall on and use it as the all in one solution - however we currently use MFA (Microsoft Azure) on the ASA and I don't think the smoothwall has any way of 2 factoring a connection?

I’m planning to ditch the asa as part of our new build and mainly use the smootwall as the firewall, but we still need the vpn for remote sims access for now It’s too soon for sims cloud so we either stick with the asa or setup remote apps (which I’ve used successfully in the past) To be fair the Asa has been pretty reliable apart from this odd wobble!

I’m still testing this but after two more reboots it seems to be working again! Which is a relief but also worrying as I’ve no idea what went wrong….

We had a planned power outage and our cisco ASA 5508 now seems to have stopped working - or letting us login anyway. Prior to the power cut all that happened was that the domain servers were shutdown and then restarted Now, when I try to connect via ASDM I get the error 'Unable to launch device manager from <ip of asa>' and the java console shows the error 'java.net.ConnectException: Connection refused: connect' If I try to ssh in to the device I get the error 'Unable to negotiate with <ip> port 22: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1' I can ssh using this method I found online: ssh -oKexAlgorithms=+diffie-hellman-group14-sha1 -oHostkeyAlgorithms=+ssh-rsa user@<ip> and I can see the running config looks the same as before the reboot! So I'm baffled and a bit stressed as it seems to be blocking our vpn access as well now, even though the radius server shows granted access the users see the message 'User not authorised for AnyConnect Client access' after entering their details and adding their MS MFA code So what could have caused this just from a reboot? The config was saved before the reboot so its not like we're missing a change (its been working for years with pretty much the same config) I can't access the https://ip/admin page either now, the 'http server enable' command also doesn't seem to work anymore either

We don't have these open as far as I can see, our smoothwall goes out through our firewall which only allows ip traffic - and the smoothwall is only using port 80/443 (and a couple of other random ports such as 2053 for Sage etc)

Basically shows a block as far as I can see, yet the client laptop I'm testing on can open facebook/instagram - but some content is missing

Hmm, applied remove QUIC header to all traffic now and its still the same - no certificate installed but access still being allowed (albeit missing some page elements)

Our smoothie is set to use its internal DNS server

Ah no - not on this vlan coming in - and I was using chrome for testing so may well be it! Cheers!

I've set up a byod wifi which hits our smoothwall on a specific vlan - this has authentication set to 'No authentication' and 'Students for unauthenticated request'. The wifi splash page points to the 'getcert' page of the smoothwall In principle this seems to work, but in some cases the splash page doesn't appear, or the user simply clicks away from it and then they can still access some blocked sites - for example I connected a Mac, authenticated with the wifi as a student and didn't install the certificate and I could still access instagram as a student What I don't understand is that a) the smoothwall logs show the access going through as a Student account as '200 Success OK' - but in red for some reason and b) we have https inspection enforced on this subnet using a location so its should deliver an invalid certificate instead of letting access through? We don't have any rules that would overrule this (especially not for students and social media) so I can't see how the filter is recognising the client as a student, the site as social media and still allowing it through? Its in testing stages at the moment but this is a definite blocker in proceeding

Did you have to do this on every Sharepoint site? There doesn't appear to be a global setting that could override this anywhere

The sharepoint shows all as UK/UTC which is odd - whether you view the list in Lists or Sharepoint it always shows the US date format!

Just noticed an oddity with 365, when a form is used to populate a list (with dates) the dates are all showing in the US format - mm/dd/yyyy I can't see anywhere this is changed? Everything is set to UK everywhere I check, as MS pretty much do this for you depending on your tenancy location

Sounds like that might have been the issue - portal was working but any kind of filtering on any lists hung - seems to be normal again now!

Anyone else having issues with the Meraki Dashboard? Its turned into a hot pile of garbage for me today - if I try to list APs or clients and apply any kind of filter, the pages freezes and eventually you get the 'Oh snap' message from Chrome. Safari just freezes altogether Tried on work PC (Windows) home computer (Mac) and both the same - looks like its at their end but nothing in the status

I delegated permission on Monday - just started to actually use the mailbox today so that's a fair waiting period I would have thought? I know changing permissions can usually take 5 minutes to a couple of hours normally.

Odd how it only affects this combination of desktop and screen. We have loads of AMD PCs connected to Promethean, ViewSonic, CTouch screens all with the same features and they work ok with the freeze function It seems like either Philips or AMD regard HDMI content in this scenario as HDCP regardless of what is actually being displayed

We've setup a shared mailbox for a couple of users to use - both have full delegation/Send As rights and the mailbox appears OK in their Outlook However the Send As element seems to be broken. For starters when they click the arrow on the From button the shared mailbox doesn't appear. If they type the shared mailbox in manually in the From box they get an immediate rejection message : "This message could not be sent. You do not have the permission to send the message on behalf of the specified user" The ONLY way it seems to work is if they click From, then Other Email Address, then use the From button again to select the Online Global Address book and search for the mailbox - that works, but the next time they try to send if they use the shared mailbox address which does now appear in the From drop down list they get the rejection again - which makes the whole thing clunky and really hamfisted to use! Is this just an Outlook thing now, I seem to remember this used to work ok in the past?

Sorry I meant the display is working OK but no copyright content is being displayed - just powerpoints, chrome browser etc The fact it works with Intel chipset suggests a huffy situation between the philips and Amd systems

Hmm thats an idea - its odd that no content is even being displayed but if I can fool it!

My problem with Philips has got weirder. We only have a handful of these screens and all show the copyright error but only when connected to the desktops which are Asus/AMD/Radeon based. All of our desktops are based on Asus motherboards so are basically a mix of two generations so similar in specs. However I tested with a Lenovo laptop which has Intel Iris onboard graphics and it works fine. So I'm not sure now whether the boards don't like AMD or AMD doesn't like the boards! We've updated to the latest drivers as well, Philips haven't got a firmware update so short of replacing the desktops with Intel ones I'm a bit baffled what to do. You used to be able to disable hdcp (even if just to test) but this seems to have gone in W11 - at least on Asus/AMD chipsets anyway

Yeah I think this might be a summer job, as there's going to be a handful of these to convert!

I can see why cloud only accounts were created in some cases, but this is a distribution group and the other 90% of them are all AD based. I'd rather these sort of things were AD so a single source of truth!