kennysarmy

Extracts from my printer script run at logon time. Just needs to have con2prt copied to each workstation. @echo OFF c:\windows\con2prt /f c:\windows\con2prt /c \\chester\FindMe_Colour c:\windows\con2prt /cd \\chester\FindMe_Mono @set str=%computername% @set pos123=%str:~0,3% @echo %pos123% if %pos123%==STA goto STA if %pos123%==SPA goto SPA if %pos123%==ELC goto ELC if %pos123%==8A1 goto 8A1 etc :7A2 @echo Setup 7A2 printers here c:\windows\con2prt /cd \\chester\mfl_c8030 goto END :7A3 @echo Setup 7A3 printers here c:\windows\con2prt /cd \\chester\mfl_c8030 goto END :7B1 @echo Setup 7B1 printers here c:\windows\con2prt /cd \\chester\mfl_c8030 goto END

For all my student folders such as : D:\users\PupilDrives\2018\7333 Should the permissions be set specifically on the folder or should it inherit everything PLUS the users:Full permission?

Test user now has the H:\ drive mapping as follows:

Connected to another DC and it worked

On my test user I get the following: The folder location definitely exists!

If that way is the "standard" I'll move towards it, just need to get my head around how I move from one method to another seamlessly without affecting the users and if it can be done during term-time or if it's best done over a holiday period.

I'll investigate...

Looking to move from our "it's always been done like that" method of creating/sharing home drives to something more standard. The current system is: Student accounts are created in AD, with the logon name being their 4 digit SIMS admissions number. eg: 7333 7334 In the Profile tab, Home folder section we set: Connect H: To: \\FS\7333$ On the file server FS a folder is created for each year group, by year of entry. eg: D:\users\PupilDrives\2019 (current year 7) D:\users\PupilDrives\2018 (current year 8) these are then populated with the user's folders. eg: D:\users\PupilDrives\2018\7333 D:\users\PupilDrives\2018\7334 D:\users\PupilDrives\2018\7333 will be shared as 7333$ The share 7333$ will have a limit of 5 simultaneous users The share 7333$ will have permissions set of Everyone : Full Control The folder D:\users\PupilDrives\2018\7333 will have the following security set: Creator Owner : Full Staff : Read 7333 : Modify Domain Admins : Full FS\Administrators : Full A Documents folder is created in the user's folder: D:\users\PupilDrives\2018\7333\Documents A Group Policy Object applied at the Pupils branch in AD and has the following settings: User Configuration -> Policies -> Windows Settings -> Folder Redirection Documents : Setting: Basic (Redirect everyone's folder to the same location) Path: %HOMESHARE%%HOMEPATH%\Documents Downloads : Setting: Basic (Redirect everyone's folder to the same location) Path: \\fp5\%username%$ Music : Setting: Follow the Documents folder Pictures : Setting: Follow the Documents folder Videos : Setting: Follow the Documents folder I'm looking for best practice, everything works well using the setup above APART from having to educate teachers to add the "Filename" column in to Explorer as the pupils folders can all show up as "Downloads" with a blue downward arrow. I do run a script to remove the desktop.ini file every hour !

Haha - it did indeed

I've just had a weird DHCP issue which prompted me to break my failover between my two DC's and re-create it. On Server 1 I created all the Failover rules for each scope and can confirm everything seems to be working fine. On Server 1 however I have an orange arrow over IPv4 where I don't on Server 2. Is this expected behaviour?

Was at a Smoothwall User Conference yesterday, struck me how many schools were using "Monitoring", we only have "Filtering" in place. Wondered if this was now common to have some kind of monitoring in place on the internet enabled devices?

These were all the rage several (maybe 10) years ago - do school's still maintain and refresh information screens around their schools or were they just a fad?

I'm getting frequent Windows Update error 82044022 on "some" of my Windows 2019 servers. At other times they report OK as being up to date or have updates. Seems very random. Running an internal WSUS. Anyone seen or fixed anything similar?

Very similar to our experience. But we're : DS-9664NI-I8 x 1 Firmware : V4.1.63 build 190111 iVMS is 2.8.2.2 Build 20190128

Off topic, but can I ask what you moved from and why and if you considered Bromcom?

Why am I not shocked!

Currently we have 250 licences for CS6 and our Head of ICT wants us to put a proposal together for SMT to move to Adobe CC. I'm still a bit confused as to what is the most efficient licence route to take and how the implementation would work in practice. From a worst case scenario, I'd like to cover 1380 students and 150 members of staff with the ability to use the full CC suite on any of our 800 PC's and laptops. What would be the most efficient way to licence this use and would it require each person to be setup with an Adobe ID? If that was too expensive, could we make savings by a) reducing the number of users accessing the software or b) reducing the number of devices which the software is accessible from? Again I presume each user needs to be setup with an adobe ID? Is there anyway to licence CC 2019 that does not require each user to either manually or by single sign on use an adobe logon? Thanks.

We don't have any global exclusions on Sophos Central for PaperCut

Note to self. Add descriptions in to non-obvious AD group names !

Now I can't add attachments to some emails... Seems strange things going on with O365 today

And now it's OK.

All was fine last night...but came in this morning and I can't access one of my shared mailboxes on Office 365! Your mailbox isn't currently available. Please wait 30 seconds and then try to access it again. cId: 7E760A08966F46A4A2BAC1E811B3A236 app: Mail st: 500 reqid: null wsver: null efe: CWLP265CA0114, CWLP265CA0114, CWLP265CA0114 ebe: CWLP265MB0339 et: ServerError esrc: SessionData err: Microsoft.Exchange.Data.Storage.WrongServerException estack: Error: 500:

When I migrated from Windows 7 to Windows 10 (1607 LTSB) about 3 years ago I created a new WMI filter for Windows 10 : select Version,ProductType from Win32_OperatingSystem where Version like "10.%" and ProductType = "1" This filter was used primarily to distinguish between User based desktop redirection and lock-down policies for Win7 and Win10. All the new Windows 10 PC's were kept in separate OU's to the Windows 7 devices so new Windows 10 computer policies did not require a WMI filter. Now I'm starting to test Windows 10 1903 would it make sense to create two new WMI filters for the two versions of Windows 10 that may co-exist on the network: 1607 WMI filter would be : select * from Win32_OperatingSystem WHERE Version like "10.0.14393%" AND ProductType="1" AND OSArchitecture = "64-bit" 1093 WMI filter would be : select * from Win32_OperatingSystem WHERE Version like "10.0.18362%" AND ProductType="1" AND OSArchitecture = "64-bit" I can then work through each Group Policy object and determine if it is applicable to both OS's and leave it without a WMI filter or create new GPO's where necessary, editing the old one to use the 1607 filter and set any new GPO's to use the new 1093 WMI filter. Does that make sense?

So partly a success... I've downloaded the updates using the WSUS Offline Update tool and can call the Update.cmd file which attempts to apply the updates at the end of my MDT task sequence. The process begins and it installs kb4515383 which is "Servicing stack update for Windows 10 version 1903" The command prompt then says "Installation Successful. Please reboot your system now and recall update afterwards" I also get the Deployment Success screen, so as far as the deployment process goes, everything in the task sequence has finished. Is it possible to reboot the PC automatically and then call the Update.cmd file again to install the main batch of updates?

I don't have SCCM - just using MDT / WDS Think I'll give the WSUS Offline Updater option a go... If it's good enough for Bernardo !