Jump to content

mrbios

Members
  • Posts

    4,317
  • Joined

  • Last visited

Everything posted by mrbios

  1. Printer mappings is basically my sole windows 10 issue right now. First off have you set the registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows LegacyDefaultPrinterMode to be on? (1) Secondly if you go into event viewer > security and look through there should be a moment where group policy starts its refresh, then right after that you should see one regarding the spooler service and a reference to your printer driver. This appears to be where mine fails. Regardless of how many times the printer has been used successfully in the past, the printer still randomly disappears and it always seems to be when group policies do a background refresh and attempts to reapply the driver or something to that affect. I've even tried turning off background refresh of group policy for logged on users but that didn't resolve it.
  2. I just had an odd problem removing SMB1 off one server. Workstation service wouldn't start, complaining of a missing dependency. I had to manually remove mrxsmb10 from the lanmanworkstation dependson key and add in mrxsmb20 and restart. It didn't seem to complete the removal properly. This was on a 2012R2 server, all appears fine now though. Anyone else had that happen yet?
  3. Why won't BT change any settings on the Cisco? My FreePBX box uses its built in firewall and has a direct connection from VM > ISP router with a public IP on the PBX external interface. No NAT to traverse and less components between phone system and external world in the event of any issues.
  4. 2 years on from last posting in this thread and i've moved to veeam. Arcserve renewal prices went up, and having 3 hosts (6 cpus) meant a cheap easy switch to the enterprise essentials kit. I like veeams design that you only have to license what you're backing up, not where you want to restore to. Now backing up VMs from Server room in building A to an old SAN in building B. Also have DFS-R setup in read only mode in building B set to only sync on the weekends, so the data is physically live in two buildings, then veeam also does a tape job every friday (takes until early morning sunday to finish the full 4.7TB) which then get stored in building C in a fireproof safe. Additionally i've got a lab environment in building B made up of 2 physical servers that runs on a separate network that only my backup server can see. I can do restores directly to it and test changes without touching my main network at all. (I know veeam can do this to some extent with its sandbox mode, but this is for a bit more than just restore tests) Feel like i've got a nicely refined backup system now that didn't cost the earth.
  5. Back in 2007 when we first noticed the issue on SWGfL the first thing we did was put an ISA firewall between us and the ISP, stopped using the 10.x network provided by SWGfL and made our internal network a 172.x. You would think the ISP would have something between you and their other customers to protect you all but if it's still going on today i imagine they're leaving it down to the individual schools to protect themselves.
  6. Wasn't there a windows update (albeit windows 7) that required the servers to be defined in that list late last year? I think i assumed that change would have carried across to windows 10 and added that in. I'll try my policy with the the top tick box removed.
  7. Personally mine don't have spaces in the name or the share, so i doubt it's that.
  8. Printing in 1607 is literally the only windows 10 problem i have right now, been ongoing since deployment. Luckily I'm only deployed to 10 in the library and 6thform, but periodically i get machines where the printer hasn't mapped. All my drivers are "true" for packaged same as @FN-GM, I've set the registry key for "LegacyDefaultPrinterMode" and i've got the full FQDN set in my approved point and print servers list. I also notice in security on the event viewer you can see the point the driver tries to install and fails. Adding the printer manually then works fine! Such a frustrating problem.
  9. I've got 6 text documents, each one has been generated by doing dir /B > output.txt listing just the folder names I need to use these by doing \\server\share\*folder name from text document*\filename.txt so i want to take the folder name from that text document and insert it into a UNC path by script, then run a command against that generated path. Suggestions on best way of achieving this? EDIT: SCRATCH THAT, I'm an idiot and should have googled first, surprisingly simple.
  10. Some staff trying to use block lists to block websites, we have the chrome extension for impero deployed and it appears to block internet access ok on chrome, however it doesn't block their access on internet explorer. I'm sure i used to have the complete reverse of this issue! Any ideas how to get IE11 internet access blocked using impero block lists?
  11. Where are you guys buying your ubiquiti switches from? I've requested quotes from a bunch of the suppliers on their UK distributors list but all the ones i've contacted are so unhelpful that i don't want to use any of them (Except comms-express, who i like....however they never got back to me when i asked for a quote on items they didn't have listed on their site)
  12. Using a phone that has NFC, is there any apps that can be given an 8 character hex key of my choosing, and present that to a mifare card reader over NFC? Basically we get some kids whos finger prints don't work with our cashless catering system for some reason, and at the moment we issue them student meal cards, we print off a label, stick it on the card and assign the card to them. However it's both time consuming to do and the kids keep breaking or losing their cards. So I was hoping that in some scenarios the kids could use their mobile phones, swipe that on the till and have it recognise them. As they're far less likely to lose their phones (one would hope) and saves us getting cards made. Any alternative recommendations would be appreciated, I've suggested keyfobs instead but they (being the higher ups) don't like the idea of those for some reason...
  13. I've just finished migrating all my mailboxes from my on site exchange (2013) into Office 365. I'm using ADFS + Azure AD Connect and my domain is configured as a federated domain. Is there a supported way of running now without the need for an exchange server? Can i decommission it? The reason for this question is this post https://blogs.msdn.microsoft.com/vilath/2015/05/25/office-365-and-dirsync-why-should-you-have-at-least-one-exchange-server-on-premises/ which suggests i need to leave it in place. However that post is two years old and as we know quite well with Azure AD Connect, things change a lot. So is it still the case that my onsite exchange should remain purely for changing settings on prem through it which then get migrated? If i do need to keep it, should i upgrade exchange to 2016 to support any new functionality? Thanks
  14. Ok screw it i've gone back to ADFS, passthrough authentication just isn't quite true SSO yet it seems (or I'm doing something wrong and the internet has no answers....) Using a shortcut i can now direct people at https://outlook.office365.com/OWA/?realm=domain.net and that sends them straight into their mailbox with no logon screen at all, as i had before, is there an equivalent path i can use to go direct to the office 365 portal rather than the mailbox?
  15. Ok interesting one, the above fixes it, as does this: Deleting the following HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\15.0\User Settings\{6D3459CC-E1CC-4A5A-B8CF-6A674411302F} as that contains the importprf setting which is global to the machine, i think this is cleaner than the above as it forces the removal of prf settings for the machine, so i'll stick with that. However I'm still getting office 365 login prompt (not a windows style login prompt, more of an mini internet window prompt) with the username predefined that just requires me to click sign in or click on the password box and it continues....my gut instinct is modern authentication not working correctly?
  16. Ok this is frustrating, it appears there was an outlook.prf file in C:\Program Files (x86)\Microsoft Office and it was using that for the default profile. Deleting that file still doesn't resolve the problem though until i delete the profile manually from the mail settings and add in a new one again. So...any idea where i go from here? EDIT: From the looks of these, this office install was made with the customisation tool and the outlook settings were made within that....the only reason it has worked until now is due to the prf file that was replacing them. Ok, possible workaround: I've deployed a registry delete policy to delete the HKCU key under outlook for the default outlook profile. Upon loading up outlook for the first time it creates the correct profile, however it pops up with an office 365 login box with the email pre-populated, i just have to click in the password box and it proceeds as normal (as we have SSO enabled on the passthrough authentication method) ... any way of stopping that box from coming up? Or possibly a cleaner method of getting rid of that default profile that's being created?
  17. If i force outlook to open in safe mode and create a new profile it takes forever, then when searching for the user it fails to find the settings. AD does indeed sync to 365, and that's working correctly. The user account in question is working correctly too, as displayed by outlook 2016 working nicely. I wish i could just replace outlook 2013 everywhere with 2016 but unfortunately i can't do that right now EDIT: I lied in the OP, it's not a mandatory profile, it's a local profile...not that i think that matters. EDIT: Microsoft Outlook Outlook cannot log on. Verify you are connected to the network and are using the proper server and mailbox name. The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete this action. P1: 350569 P2: 15.0.4903.1000 P3: P4: That's my only event related to it, I'm going to try enabling outlook logging to get a better idea as to what it's doing though.
  18. I've just migrated all my users into office 365 and I'm trying to setup outlook so that staff just click outlook and away it goes. I've got this GP enabled: Automatically configure profile based on Active Directory Primary SMTP address If i logon to a windows 10/office 2016 PC, it works fine, open outlook and your in within seconds In office 2013 though i just get the error message "Cannot start microsoft outlook. Cannot open the outlook window. The set of folders cannot be opened. Your profile is not configured" Prior to moving staff i just had an outlook shortcut pointing to a prf file, which worked fine, however as i understand it prf files + office 365 = no go. I've got everything in place, registry keys and office updates, for modern authentication to work too. Lastly these staff are logging on with mandatory profiles, there are no office/outlook settings within the profile itself. The only other GP enabled for outlook is "Do not allow an OST file to be created" this is the same for Office 2013 and 2016 though. Any suggestions? I'm tearing my hair out!
  19. Nope no FMS on this one, just SIMS.Net and Discover client, which are both on the new one too. I'll try giving that a go though.
  20. SIMS Options module appears to work fine for everyone except one user we've just given a new PC to....it's not pulling in the list of stuff and says warning cannot read from 30 implmentations, if we click retrieve it says that it can't find C:\Users\%username%\appdata\local\temp\control.dbf, however that file doesn't exist on their old hard drive either. It also says "An error occurred while attempting to initialize the borland database engine (error $2108)" We've never had to do any custom changes to this before, we just deploy sims with SOLUS and send them on their merry way, any ideas as to what's causing this?
  21. Depends on the firmware if they've changed it in any newer revisions but 3109 and 3112 firmwares the password was foes-bent-pile-atom-ship and i think the command was something like xtd-cli-mode.
  22. Something like this is a better option than putting in a physical line: https://www.controlfreqgsm.com/products/gsm-lift-phone-pstn-interface-to-retrofit-lift-phone-systems Separate cost for the sim contract, but still cheaper and easier than a physical landline.
  23. Sorry i completely missed your previous message, we got it sorted in the end by shifting things around a bit and removing a UPS where it wasn't needed, I should have updated this thread but forgot it was here! Thank you though
  24. Ok so on the individual folder i can do "takeown /F "J:\Home\folder\folder\saved games" /A /R /D" and that works, I literally need to just do that but with a wildcard where it says "folder" any scripts that can do that? I could do with scripting it to also enable inherit permissions as soon as ownership has been taken too.
  25. Basically, long story short, a long time ago I messed up a folder redirection and now all my home folders have one folder in (The "Saved Games" folder) that only the user has access to. I need a script that can take ownership and reset the permissions on that specific folder in all the users folders. Some people appear to have very kindly moved that folder elsewhere so i need to literally search for the folder name, rahter than giving it a specific path of \\server\share\%username%\Saved Games for example. Anyone got any suggestions on that front?
×
×
  • Create New...