Steve21

You tried using testdisk (photorec etc) generally find it works most the time unless it’s serious damage etc Steve

To be frank, and I'll apologise in advance as it will sound frank, this entire plan sounds like a terrible idea... As others have said, the first point of call here is to get someone in to have a proper look at the setup and what you currently have. It really sounds like no-one has that information currently, whether in-house "or" the new SP. When phrases are being thrown around about gigabit internet, VDI farms etc, and yet no-one can even seem to work out what's licensed it's not going to end well at all... First have a proper discussion in-house about what the school actually wants, most of these "fancy" licenses being talked about aren't needed at all if you're not going to use them for what they're designed for (intunes/A3 etc etc). Does anyone actually have a reason for cloud MIS? You don't need VDI or horizon to do any kind of remote access that's just wasting money left right and centre. Despite your background and your personal thoughts, this is not needed at all for a school, especially one without their own IT to manage any of it... Get three companies in (if the school reallllllly won't hire someone to run it) and get three comparisons to quote for the project. Ensure all stakeholders agree with what they want, and one person isn't trying to design a network that won't give people anything they want at a huge cost. Steve

Just had a check back at my purchase stuff and guessing it would have been this one I got in there KVR1333D3E9S (As I wanted ECC wise), but there's a whole load that work if you check online. If I remember right the only thing you had to do was tweak the parity for it to be recognised originally, but then can reset it back and it works fine. This was running esxi on top of I though, so guessing might have changed with updates etc. Can open it up and double check it over New Years if you need, but not where it's situated for few days Steve

Not sure which model you got, but it's deffo more than 8GB as I'm running 16GB in my one that's years old (2012~). It might be 8GB per slot if that's what you mean. Which gen did you have? Steve

Aye you may but you said how were others running it I mean either you’re blocking exes or you’re allowing them. The alternative but it starts getting messy is getting involved with giving each user a virtual disk that they can attach to the VM when they load it and getting them to save their projects into that rather than their normal home drive but really it will confuse them more thans needed Steve

You don’t block exes being saved normally, you just block execution from home drives So saving it isn’t a problem that way Steve

We did use WAMP on one before, but in the end decided there was little point. As it's not programming wise etc it's just as easy to let them run it locally. For anything big project wise, we had a separate server that ran proper PHP/SQL off-domain and just gave them logins to that so it could be backed up etc, but wouldn't cause any harm if somethings run on it Steve

GroupMemberQueryLimit is the one you're referring to I guess. But in regards to the dead link: Steve

Haven’t used virtualbox recently in this setup but if I remember right it’s due to the bios that stores the numlock setup, as it’s not passed its effectively always off at boot and thus inverted in Windows vm You “can” bodge it by setting numlock forced on within the Windows VM using InitialKeyboardIndicators (regkey), but again in that case you’ll find the opposite issue if the keyboard has it turned off first, then you turn it on for pc and it’s turn off in vm etc Steve

There’s a hotfix for that, July rollup broke it a few months back You need to manually install the update again that broke it and should start working again It’s normallt either 4340558 or 4340557 you need Steve

Assuming your command is all correct, it's properly the old bug from years ago (Bearing in mind this was a long time ago I wrote it ) If you got a test machine, set SDL_VIDEODRIVER to windib (Windows Environment Variable style) and restart it and try again. (I think it was demoted from a valid extension a little back so obviously test machine it out first) - Edit - Didn't notice arthurs reply, that's the bug! Steve

Nope password hash works for both too As long as you’ve added in the GPOs to setup trusted zones etc chrome should be working (The only thing that used to break it was if you have setup a custom gpo for chrome that override the authlist for Kerberos etc then you needed to readd the trustee zones into that policy as well). Any chance you might have done that for another product? In regards to office that’s slightly different as you need to enable the modern authentication on your tenant and the GPOs within office to allow for SSO, just doing the trusted zones etc won’t enable it to work For the tenant part if you run Get-OrganizationConfig | Format-Table -Auto Name,OAuth* what’s it return? GPO wise will have to dig them out as not at site Steve

It’s a two year thing yes, but normally occurs if you’ve used something like a work account to create a personal onedrive (auto setup after linking outlook or Xbox or Skype etc) and thus aren’t using it Steve

OpenContainingFolderMenu Is what you're looking for, but there's a few different locations in the registry depending on which screen/program they do it from e.g. Start menu or explorer etc Steve

Nope, you can set certain zones (like trusted sites etc) to be disabled and then just add said URLs to that zone. Did you try to delete their local webcache though? As it might be the case it works fine in protected mode (normally as per other users) but if the broken user cache is full it's causing the problem just for them (Thus the test just to see if this might be the issue) Steve

Yep still under the transport rules etc so you'd add one that says something like (paraphrasing as not on pc) For members of "security group" If "mail send to external recipient" Reject with reason "external mail disabled" Etc Steve

Assuming you have a year group option setup it'd be easier to do a transport rule under admin in 365, and basically make it reject any sent to external users from year group 7-8 etc, then it'll auto apply to anyone in those groups) (Wasn't sure if you meant by OU than security groups that it's one then the other, or like rather than) But it'd be quicker and easier to add a new group to those users in the OU even if it's just for this purpose like "block external email" and still apply a rule to that Steve

That's using the standard list right? If you expand the advanced bit there's pattern matching in the options too. Maybe someone at Smoothwall could turn it into their own way as I think they do slightly different to regex but like this as an example in normal regex: https:\/\/client\d.google\.\w{1,3}(?:\.\w{1,3})? Steve

It's normally when protected mode within IE is on and either the webcache is full (the protected area), or an addon is failing as it's in protected area. Option 1 is disable any additional addons they might have enabled, option 2 is disable protected mode and see if it goes away (at least temp to test issue) Steve

The error for me is different Looks like someone forgot to pay some bills: Steve

I don't know if this is still the case or not, but this was occurring with KM machines when you were using the universal drivers rather than the "standard" ones for "Apps". There was a workaround too, again not tried it recently as drivers fixed it for us, but might be worth a shot if you get a minute: Change the driver isolation on the printer server to none, and then deselect render jobs on client, close UI blahblah, reopen it and select render jobs on client again (don't change driver isolation back). (Might need to ensure the printers get remapped on clients too to pick up the new isolation modes, so manual delete one and try it etc) Steve

Not sure about Xerox specifically but as you seem to be on the guest page, most have an option to disable guest/unauthenticated access etc. It used to be under properties, login/accounting, user permissions, non-logged in etc but might want to test it as not used Xerox in a long time. Steve

Depending how you're first syncing them I mean, for example we sync from AD with Salamander. If you're manually setting them you can do that still you just need to ensure the admin accounts aren't in the mailbox policy that's being applied (e.g. not to "all staff" or whatever your mailbox policies are) Steve

Aye but I mean just to test whether it's a script issue or bigger thing like the account not working permissions wise. But if you are using the encrypted file method are you using the same user and computer you encrypted it on to run the script? DAPI wouldn't work if you had for example the password encrypted as yourself and a script run by techie1 as he couldn't decrypt it Steve

You have a lowercase vs uppercase mix in your variables vs the credential line. Might want to fix one and retry it before digging too much into it -Edit to clarify $adminName vs $adminname Does it work if you just do it like this for a test (not that it should make much difference but it's from a script we had): $adminName = "[email protected]" $Password = ConvertTo-SecureString "Password" -AsPlainText -Force $Credential = New-Object -TypeName PSCredential -Argumentlist $adminName, $Password Import-Module MSOnline Connect-MsolService -Credential $Credential Steve