sparkeh

I know right! Its a fairly common thing. Got support looking at it but it doesn't seem straightforward.

So, to use office 365 we changed our users UPN from domain.local to school.county.sch.uk and our Sophos UTM can't seem to authenticate users against AD with the new UPN (using kerberos) and so AD SSO doesn't work. Users who have their UPN set to domain.local authenticate fine. All our other SSO services work fine. Anyone else seen this?

Yeah I followed the migration steps here: https://www.systemcenterdudes.com/sccm-1511-migration/ In truth, I would seriously consider the backup and restore option. I discovered a bit of legwork to be done after the migration and not everything is done automatically.

Another cracker made up by my little girl: "Daddy, what klnd of car does Paddington drive?" "Dunno" "A Lima-sine" A congratulatory high five was delivered.

I don't believe so. I had the same issue and IIRC and after a bit of research concluded that it wasn't possible. In the end I migrated sccm to a 2012r2 server. Hopefully someone can prove me wrong.

Yes we ditched our AV for SCEP. As shown above, it's very good at the moment.

Well don't I look rather silly right about now. :S But still, why wrestle another solution into shape to do what you want when there is a solution (that you are already using) designed to do the exact job you want?

That article discusses balancing strong consistency and eventual consistency. For my money, an MIS should have immediate consistency.

Yep, there is sustainable palm oil. Sustainable palm oil | RSPO - Roundtable on Sustainable Palm Oil

Now, have you ever seen them in the same room together... just saying... Happy birthday for yesterday @Dos_Box

Yeah, just do this.

I'm very prowd of you guys. Ahull loads of good puns there, delivered quick and without belay. No bilge.

Oh they definitely looked, it was remarked upon. They just didn't use an Ofsted connection.

Experiment completed. Ofsted last week, no sign of them from Google Analytics beforehand.

I would recommend, like a lot of people on here do, deploying Classic Start. It's miles easier to control than the awful native menu. It will save you a lot of heartache in the long run.

With 2012r2 a cluster doesn't need to contact a dc to boot. It's the host version that is important, not the dc.

Personally I would always run at least two DCs but a few as you can manage with. Sounds like you could reduce to two or three. There's no need to have sims or the backup on a DC. With regards to a physical DC, it used to be critical to run a physical DC with a cluster pre Server 2012 but its no longer needed.

You're all wrong, its name is Kitty Longstockings.

You if want to use groups, then you could retrieve the group members then apply the command to each member: $membersInGroup = Get-ADGroupMember "[i][/i]" foreach ($member in $membersInGroup) { Set-ADUser $member.samaccountname -add @{extensionattribute15="test"} } As always, use at own risk and test test test beforehand

Solus 3 console suggests this is true.

I am not sure about the differences between the import and the sync profiles in AD Connect. However, I have never use the GUI to run any kind of import or sync. If I want to run a sync then I just use PS To check scheduler Get-ADSyncScheduler To run a Delta cycle (just updates from last sync) Start-ADSyncSyncCycle -PolicyType Delta To run a full cycle and resync everything Start-ADSyncSyncCycle -PolicyType Initial

You guys need a good lashing.

Here's why: https://history.wiltshire.gov.uk/community/getfaq.php?id=1

I think a lot of us made this kind of point during the initial discussions. Being on LTSB is going to cause issues if you aren't using it for what it was intended for.

PES - really good, we all love it. It took us a couple of evenings to get things ironed out with the sims data (really highlighted some issues with data entry accuracy!) but no issues after that.