Sheridan

Odd question, but does anyone know of a way to generate a report of all the devices being used for MFA - just a list of the user and the phone model they have registered. I can see this in their details individually (i.e iPhone 15, Samsung S22 and so on) but I'd like to drop this in the form of a summary report?

Thanks, I'll have a look into that instead

I'm trying to use the Exchange 365 Advanced Hunting to trace (and delete) a phishing email. In true MS form this doesn't seem to work but offers little help! If I select an email and use the 'Go Hunt' option, it opens the Advanced Hunting window but with an error 'Failed to decode shared query text' and I can see the query shows an error status - but it looks like the schema it needs (EmailEvents) is missing from the list of schemas I have - how do I add missing schemas, or is this some licensing issue? (we're on A3 for Faculty)

I've recently moved to a 365 environment from a Google one, and trying to sign up for the Shape the Future - but when I try to sign in with a work 365 email account, it simply says "Your IT department has turned off signup for Microsoft Store for Business. Contact them to complete signup" and offers 'learn about other ways to get office' Am I missing something, what the heck as Store for Business got to do with eligibility for Windows 11 devices discounts? Surely the fact we're school is all thats relevant?

That might be, our clients all have a cert issued by SCCM for the domain, so they already have a cert

That's the odd thing, its a completely random selection as far as I can see - they're all on the same plan, and the ones that appear in the search are scattered across the tenancy groups! I'm not sure how engage works but I would have thought all users could be invited to join

I had to disable CG for W11 whilst testing moving to cert based authentication - so that would work but probably not a long term fix. Are your client PCs getting a cert from your PKI/CA ok?

We've got some staff looking at using viva engage in 365 (was Yammer I believe) and when they create a community they can Add members - odd thing is that when searching for a member they get some staff and students but not all - i.e we can see some Year 9's but not all and some Year 8's but not all, all are on the plan A1 Plus plan as well When I look at the All Company community it shows about 500 members, well short of our 1600 or so tenancy users I'm not very familiar with yammer/engage so is there anyone who has set this up who can make sense of this? All I've done initially is enforce using 365 indentity as all of users have a 365 account

Finally found the solution - although not sure why the problem occurred I had to add SYSTEM permissions to the folder C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys, and then after restarting the RDS service it worked fine!

Thanks, I've sort of done this before, but way back then we had an old 'school' based domain so I created a new shiny 'academy' one and we eventually had a switchover - but here they want to keep the domain if and when Google becomes the new cloud - but you know when you start to doubt yourself that you've missed something!

Daft question time! We're 100% O365 at the moment on our domain 'school.com' - however there is a lot of interest in migrating to Google Workspace - so I was thinking I could setup Google using our current domain and simply add/synch a few users manually (or even a whole group using Google directory synch) so they can play with Drive/Docs/Chromebooks etc I understand mail can only flow to one domain and that would stay as 365 - at least until some point in the future, but are there any risks or downsides of using our existing domain just to open a Workspace for a trial? I was hoping to avoid purchasing another domain/subdomain effectively for a test

Hmm doesn't work using IP or the web account login -and its just this one server. Its a VM but based on the same hosting platform as many others that work. I'm just wary of why it suddenly stopped when no changes were made to it or the hosts!

Yes - not a daft suggestion at all, but 3389 is open for the domain, and it was there previously. Its also the same on other servers which are still working! Oddly, I can RDP out from this server to desktops, and also to other servers in the same environment

On one of our 2022 servers RDP has suddenly stopped working with the clients now seeing the 'an internal error has occurred 0x4' immediately when we try to connect, not even getting as far as the user/password section - and its immediate as if the server doesn't exist or the port is blocked Nothing changed on the server, and its working as normal in all ways (it hosts SQL and some file shares and they're working) I can ping it, traceroute is correct and port 3389 is open and tested using powershell (tnc server -port 3389) and I've tried to RDP using the IP as well Its been restarted several times, and I've tried disabling NLA temporarily but nothing has worked! All the other servers in the hosted environment are working normally - the only thing that I can think of that changed is we had a power outage and our core switch stack restarted (and using the saved/correct config so we haven't lost anything), but we have full connectivity for everything - just not RDP on this one server! Anyone seen this before? Its got me going around in circles!

Cheers, trying to untangle the guest ssid is the tricky part, as the vlan routing is bit complicated here!

I've inherited a system at a new school and one thing I've noticed is they have a 'guest' wifi (Meraki) using PSK - works fine, but it also allows ALL traffic as it bypasses the smoothwall entirely What seems to have been put in place is the 'normal' SSID is used by all school owned wireless devices (all Windows) so the WPAD discovery automatically drops them onto the smoothwall as a proxy, but these devices on the guest wifi don't have this control - so if the 'automatic proxy' is disabled (or even exists for android/IOS devices/screens etc) then they hit the default static route on the core switch, which passes them straight out of the main firewall, which is a concern as it means no filtering is in place So I've spent a while thinking about this, and changing the default static route to be the smoothwall seems to be the best option, and then added a transparent proxy etc - this also means I'll have put add firewall rules to the smoothie for phone systems, fire alarm etc which currently use the default static route to exit in the same way as the guest ssid Am I overthinking this, or is there a better way to do this? I've previously only ever had a smoothwall as the only UTM so it was dead simple - it handled all outbound traffic therefore it was the default route on the core but this is making me think I've missed something!?

Yes, they're standard apps across the board, odd that they work maybe 50% of the time though!

Bit of a weird issue with SCCM - using a Task Sequence to image a bunch of laptops - it always works deploying the image etc, but only works occasionally installing the small number (5) of applications The laptops are all identical - and running the reimage several times might result in the software install working - with no changes being made I've checked and the task sequence has a 6 hour timeout so its not that, and the fact that a few attempts will result in it working means the packages are OK in the smsts.log in the client I can see the parsing section but it seems to go through in seconds and not do anything: Parsing step node: Adobe Reader]LOG]!> All of the software installation tasks are set to continue on error, but when it fails, none of the are installed - when it works, all of them are installed! I can see the packages are downloaded to the client in the \_SMSTaskSequence\Packages folder as well Its doing my head in, as I'm having to reimage multiple times on the same device, for no reason that I can see!?

Thanks for the advice folks, in the end I had to run the relevant SQL scripts via SSMS directly - which worked ok! None the wiser why solus couldn't cope with it though!

Its applicable and we've been advised to apply it by the LEA and it doesn't show the error that its not valid (its a generic patch that you can run multiple times)

Good call, but the backup seems to complete ok (and the DB is 38gb and we have 400gb free on the drive) Edit: I had to run a different patch last night - and that worked fine, so it seems specific to this one

It seems to install ok (either for user or as admin) but the import always fails: File "", line 1, in File "C:\Program Files (x86)\Python\Lib\site-packages\pygame\__init__.py", line 92, in from pygame.base import * # pylint: disable=wildcard-import; lgtm[py/polluting-import] ^^^^^^^^^^^^^^^^^^^^^^^^^ImportError: DLL load failed while importing base: Access is denied Problem is, I can't work out where its trying to copy/edit a file, as I get that error as an admin as well

It only takes about 5 minutes to get that error - our database is about 38gb so large, but not massively so

We've been advised we need to run a patch by our LEA support (19098) to address a seperate issue - however I've tried about a dozen times and the deployment bombs out with this logged in the agent deployment log: Failure - One or more errors occurred. - Package: fefc839d-0d84-45d6-bb32-2732e11a7cca - More Info: System.AggregateException: One or more errors occurred. ---> Sims.Solus3.Agent.PackageDeployer.PackageException: Package failed. Rollback was executed. ---> Sims.Solus3.Agent.PackageDeployer.TaskException: Execution of task 05e6797e-b370-41cc-a4b7-da32d4668746 failed. ---> System.Data.SqlClient.SqlException: No one was accessing SIMS at the time, I've made sure all the relevant services like Groupcall were stopped but I cannot get around this error! Does anyone know what the above error actually means, as it doesn't seem to specify much about why it fails

I just ran the 'pip install pygame' command - that seemed to work OK