Bankesy

Hi all, I have made what appears to be a very silly mistake when configuring Office deployment as part of the Windows 11 rollout, and selected the user option for licensing when configuring the XML instead of the shared computer option and now it has been deployed across the majority of devices and users are getting the licensing error about the device needing a license even though our licensing is user based. Thought it was worth asking on here about any potential quick fix before I resign myself to the fact that I will need to reconfigure and redeploy Office to devices. Thanks

@mavhc @Davit2005 Thanks for your responses, I will investigate whether or not DNS replication via AD is enabled or not.

@Davit2005 In DHCP on the 2019 DC that I want to keep, I see a whole list of scopes, and each scope has a 'Scope Options' folder. This 'Scope Options' folder has an Option Name called DNS Servers, the values for which are the IP address of the 2019 DC itself and the 2012 DC, which I am trying to remove. My simplistic thinking is that I will simply remove the IP address of the old 2012 DC from each scope option and replace it with the IP address of the other 2019 DC. However, I have doubts that this other 2019 DC is properly configured for DHCP, given that I do not see the DHCP scopes on it.

@mavhc @Chris_Cook 1. Server 1 (which I want to retire) has DHCP client service running, Server 3 (which I want to keep) has DHCP server and client service running, Server 2 (the one I want to use in place of Server 1) has DHCP server and client running 2. A normal client shows servers 3 and 2 but I guess that is because I have put those IP addresses in the scope options. Thanks

Good afternoon all, I have posted about this before, but now I am revisiting it and trying to achieve clarity on what I might break or the best way to not break anything. The goal is to remove an old 2012 DC (Server 1) from the domain, and I was fairly sure that this DC was vital to DHCP, because the newer 2019 DC (Server 2) has the IP for itself and the 2012 DC (Server 1) in DHCP (in both the main 'Server Options' folder and some of the 'Scope Options' folders under the individual scopes). However, looking at the 2012 DC (Server 1), it would appear that the DHCP role isn't even installed, so does this mean that the DHCP settings on the 2019 DC (Server 2) have never been correct, and in reality, clients have only ever received DHCP from the 2019 DC despite IP config showing both? I guess IP config just shows whatever you configure, regardless of whether or not it works when needed? Presumably, if Server 2 has never gone down, there has never been that reliance on Server 1, and we have never noticed it breaks. There is a third DC (Server 3), which has the DHCP role installed but no scopes. I was thinking I might be able to remove the 2012 DC (Server 1) from DHCP options on the 2019 DC (Server 2) and replace it with the IP for Server 3, but I basically just don't know if this will work or if it is correct given that Server 3 shows no scopes despite having the DHCP role installed. All thoughts and suggestions welcome on this one. Regards

@ITGuyNW I don't think we have a redirected desktop and start menu set by group policy, I would need to double check in case I am missing something I inherited.

@MisterTechMan would you mind sharing the command you use, please? I tried this method, but couldn't even get it to install.

Good morning, Has anybody any experience with deploying Senso, particularly via Intune, please? I'm following their guidance to deploy as a LoB app and using their command line for licensing, and, although the app installs, when students log in to Windows desktop, they are presented with a Senso pop-up requesting the license details. Almost like that part of the install or command isn't working via Intune. Regards

@buzzard @DavR No, they are going into the same OU as the Windows 10 devices that are syncing, and the last sync times in 365 are up to date. I'll look into a bit further. Thank you

Hi all, I'm noticing that when I reimage devices to Windows 11, they don't appear to sync with Entra ID or register to Intune as they did on Windows 10. I didn't have anything to do with the existing Windows 10 MDT task sequence, but I know it pointed at a golden image ISO for the 'Install operating system' step, which I've removed and replaced with the Windows 11 Education ISO. I wonder if there was something in that Windows 10 golden image ISO which registered the devices with Entra and Intune. The main issue here is freshly imaged Windows 11 devices are not pulling the Intune Management Extension. Is there something I am missing? Is there a way I can load the old Windows 10 ISO, upgrade it to Windows 11 and then put it back in the task sequence? Thanks

Good afternoon, Maybe it is just me, but I can't see how to expand disk volumes on Azure Arc (HCI) managed VMs in the Azure Portal. Still having to use Failover Cluster Manager which is causing a headache because the unallocated space won't appear immediately to the right of the C:\ drive. Regards

Good evening, Really struggling with how to expand the C:\ drive of a VM to the unallocated space because the unallocated space is not immediately to the right of the C:\ drive (some sort of health recovery partition in the way). I incorrectly assumed that because the VM is on Azure Arc (HCI) I would be able to do it there somehow but can't even see the disk using that method so resorted to failover cluster manager but getting nowhere. Thanks

Good morning, Hoping somebody has seen this sort of issue before: Deployed a line of business app (Senso) using Intune but forgot to include the command line arguments to license it. The app has been installed successfully on all devices, but it launches a pop-up at login due to not being licensed. So I added the command line arguments to Intune, but I think this doesn't do anything because the app is already registered as installed, so clients are not looking for or detecting any changes. Does this sound about right? Does anybody know how I can re-register the app or update it to run the command line arguments without uninstalling? Thanks

Update: VIrtual VPN server had lost some of its routes because they had not been added as persistent. Still can't manage it through Azure Arc though.

Update: connected to the VM in question through HyperV Manager, but options to start or stop the NPS service in NPS snap-in are greyed out. For context, VM is Always-On VPN.

Good afternoon, Hoping somebody has seen this issue before, as I'm pretty new to managing VMs through Azure Arc. Essentially, everything was fine with this one particular VM until I applied Windows updates, and it has not come back online. I don't even have the option to switch it on. Does anybody know what I can do in this situation, please? Thanks

Good morning all, Reviving this thread in the hope that somebody has experience with using LCVAP\SCA for cybersecurity platforms to protect infrastructure, and whether or not the SCA fund covers any annual costs associated with these licenses? Thank you

Thanks @Tester2000 I think my user was trying to upload from OneDrive, maybe they were selecting the wrong option as you suggested. Will check after the break. Thanks again

Good morning all, I'm not sure if it was just a temporary glitch at one point last week, but I had at least one user who was unable to post multiple PowerPoints to a Google class and had to upload one at a time. We have never had this problem before, and there was no error; just nothing happened after selecting the files and clicking 'upload'. I thought it was the number of PowerPoints but it didn't even work with two so maybe a file size limit but with no error to explain? Thanks

@ZoeT Thanks for the feedback, I haven't had any feedback from our Admissions team since my last post so don't really have anything to add. When we had our demo it was confirmed that support is not UK based, I they said Vietnam but don't quote me on that.

@ZoeT I've just seen your other thread regarding this, we had the CEO of Admicity come in and give us a demo but it lacked some of the key functionality that our Admissions teams required around mail merge of entrance test results to parents and it does a whole lot more than admissions that we don't really need. We have gone with Applicaa, speaking to another local school it seems like IT don't really need to get involved other than permissions and their Data Manager did most of the setup. We are due to get started with them on Monday. Thanks

@3s-gtech @Imrogers Might be onto something here, I've found the cert exactly where you described in certlm on the AOVPN server (it expired a few days ago) but regardless of which renew option I choose I get an error telling me that an enrollment policy server cannot be located. Thanks

@Imrogers I've had a look on the client and can see the cert, looks fine but you have just reminded me that I think my predecessor did have some Intune policies for the VPN so I'm going to look there. I can see the name of the CA but I don't exactly know where that is if that makes sense. Thanks

Good afternoon, I have no experience with AlwaysOn VPN, I just know we have always had the one I inherited and largely it has always worked as expected until now. I cannot think of any recent changes but now when we connect to the user tunnel from client devices we get the following error: IKE failed to find valid machine certificate. I don't really know where to begin with troubleshooting this so if anybody has any ideas please throw them at me. Thanks

@discoveranother I second the advice from @Sylv3r regarding Tablet Academy