Roberto

We've had no problems with sharing a 'home' share and creating a folder for each user. Much less bother to manage than the old, traditional method.

Yeah, the smarthost/relay is denying your connection. This is configuration at their end - if IP or hostname of your server has changed and the smarthost is configured to only accept email from 'known' mail servers, which I'd expect, then they need to update that info on the smarthost.

Capita thinks the problem is in our Exchange box Given that the problem is with this mx01.inthehive.net box, which is presumably a LEA or ISP smarthost or something like that(?) then unless that's actually the name of your exchange server and I've misunderstood you, or they can explain precisely what the problem is locally and exactly how to fix it, I'd strongly suggest telling whoever is giving you that advice to sod off and let someone competent look at the case.

There is fundamentally nothing in ipconfig to tell you the IP address of the switch you are connected to, assuming the switch even has one, as this isn't relevant to the operation of the PC on the network. Having said that, as a practical matter it might possibly be the same as the PC's gateway.

Have a look at this - Journaling: Exchange 2013 Help Sums up the differences very nicely.

NTFS is a journaled file system, and this is a feature that's unrelated to fragmentation, etc. HFS+ and NTFS both have their own strengths and weaknesses but this isn't part of it.

In a co-existence scenario with 2007 or 2010 and 2013, there needs to be a connector on the 2010/07 Hub/CAS that is listening on the "correct" internal IP address for the server (e.g. if DNS shows that 'my.internal.cas.local' is at 10.10.1.10 then the connector should be listening to that IP address). It should be configured to allow 'Exchange Server authentication' and, I think, TLS.

Just be aware that this "solves" backups failing being a problem in the same way that closing your eyes and thinking about something else "solves" having one of your major arteries servered. It might be a sensible approach during the mailbox moves, but I'd turn it off straight away afterwards. And I'd still say that a more sensible move would be to stop worrying about mailbox moves until backups were sorted. As for the problems with mail going between the two sets of servers, is there a receive connector on the e2010 box that's (a) listening to the correct internal IP address for the internal FQDN of the e2010 box, and is that set to allow exchange servers to auth?

I seriously don't get what's so exciting about this. I've already got something that lets me view youtube and get stiffed on special offers for things like netflix and it's called every other device in the living room that's already plugged into my TV

I would ask them two things at this point 1) can they show you where this permissions error is occurring (I suspect this is someone just reading from a script that says "this error = permissions issue" and possibly ignoring your point about other users with the same rights working. 2) when are they going to fix their faulty software. "Modern" windows application software simply shouldn't be writing to the root of the c:\ drive during use.

I would not let the magazine shop loose in my son's bedroom without me being there to supervise in the first place. No, but the parents should know how to exercise parental supervision and responsibility (say by opting into this kind of blocking on an opt in basis). The idea that parents don't know what they're doing isn't an argument in favour of blocking: The only people who think web content blocking is the answer are those who do not understand how it works, and in that scenario I'd suggest that a false sense of security is worse than none at all.

Intrusions happen. I've seen microsoft.com sites go down due to hackers (not Microsoft Deutschland | Geräte und Dienste but still some pretty big sites.) I've seen large parts of chat.microsoft.com go down, back in the day when IRC chat was a thing and everyone had a chat server, because someone kicked a plug out of a wall-socket in someone's office. I've seen the apache website homepage get hacked - the hackers uploaded one of those "designed in Microsoft Frontpage" buttons which made me laugh. Intrusions happen. I wouldn't especially penalise the vendors for that. It's how they deal with it next that matters.

You can't entirely blame them for that, though you can choose to do business with someone else if they're being idiots about it. They're trying to solve their problem which is to earn their employer enough money to keep them all employed and what have you, so it's good that you've got a healthy dose of 'experience' on your side to ensure that the discussion remains focussed on your employer solving it's problems, not just their employer solving theirs. Sorry I know you're well aware of that but it's easy to let that 'slip' from your thoughts and it's good to keep it in the front of your mind, what both sides want from a discussion, so that you can reach a path that's fair to both 'sides'. When we did the capital bids for our new college campus there were several places where compromises were called for and sometimes we were the ones that had to bend our necks just as much as it was the vendors that had to bend on other items on the list. If you want to do business with someone or they with you, then it has to be worth everyone's while, right?

I don't want to make things worse but I suspect some of the tension here is that the OP keeps saying thank you for the feedback to people then proceeding as if the feedback was never given. This looks less and less a genuine search for knowledge and help and more of someone wanting blessings for their already solidified plans to buy shiny stuff because it's shiny. Take the comment about sending letters to parents home as emails being used as a justification to buy ipads. That's evidence right there of either an agenda that's already been decided upon that is in search of a justification or of some very wooly-headed thinking.

Rather than the "I hate iPads/Apple" stance taken by some of the other regulars above, I'd like to say that I *love* Apple gear for home use and I think the iPad is a fantastic bit of kit. But that doesn't mean it's automatically the best solution for lesson delivery. The superb post by m25man makes some good points - before you get too far bogged down in the client end of things you need to ensure the infrastructure can support whatever you choose. Equally you have to make sure there's enough money in the budget to buy the clients if you buy top of the line infrastructure... And without wishing to sound offensive, if your organisation was previously spending so much time on managing antivirus issues then it's likely that you either had the wrong product or it wasn't deployed optimally. This is an infrastrucure problem of a sort, and is the kindof bad practice needs to be resolved wherever you go next. For example If you issue one device to a student then making sure they all have the apps they need for their classes is far from trivial, and if you choose a poor MDM platform or no MDM platform at all then you'll find managing classroom sets of iPads equally as frustrating. I don't see how tablet provision has anything to do with sending emails home to parents rather than paper letters. Give me the email addresses of all the students and I could do that perfectly easily from my desktop computer without even having to remember where I left 'my' work iPad. Course work should already be on your VLE, rendering that a moot point whatever choice you make (oh, does the VLE work with mobile safari?). As for "one device per child", keep in mind that you'll need spares, etc. and you'll need to ensure that classroom sets remain working all day and don't run out of battery halfway through the last lesson - that's an issue with issuing any mobile device, laptop, tablet, whatever to classes of course, but it still needs to be addressed; those claims for long battery life made by all high end tablet manufactures aren't reached by testing the devices in the typical classroom free-for-all. Someone has presumably verified that your curriculum requirements can fully be met by iBooks then? I know my reply probably seems quite harsh and to the point, and that's somewhat intentional. Not to give offence but to try and get sharper thinking around what sounds like a rather wooly and vague idea right now.

I work at a college rather than a primary school and I realise that things are going to work very differently there but it sounds like the need of you and your pupils are not being met very well at the moment. Rather than trying to work around these flaws, can you see if you can get things addressed properly to meet your needs. I doubt you're alone at your school in struggling with what seems an overly-restrictive system, and this has to be impacting the education of your pupils and that's why we all bother flinging the doors open in the mornings, after all!

Let's start with a different approach. Blue sky ideas about tech are all well and good but you're being asked to provide this 'ideal vision' in order to solve a problem. So what problems, precisely, is the school hoping to solve with this ideal network setup? How do they see classroom IT requirements, and how do they perceive the support structure for the school? Do staff even have fixed office space or all they all expected to "roam" and find a free bit of desk space wherever they can? And if they don't know the answer to that. then you're unable to answer the ideal spec question.

We've been delighted with them @KevinB. Piece of cake to set up though keep in mind I'm saying that as someone who's already used to Dell blades & Equallogic SANs (though I never thought they were difficult to set up back when we encountered our first one). The integration into the blade chassis is working well for us and makes a lot of sense if you also pick the option to integrate switch fabric, rather than simple pass-thru connections, into the blade chassis too as it makes the wiring a lot more sensible than on our other virtualisation farm where we used the same blade chassis with external equallogic SANs. I'm happy with the SAN HQ software, etc. too. All in all it's been a pleasent experience so far.

What does your scope of work say with Virgin? Presumably you've specced this system to work how you wish, so if they've suddenly said that isn't how it's going to work then I'd tell them to do one, personally. Can a knowledgeable person comment on any negatives in going to a single subnets That very much depends on what problem you're solving by having more than one subnet in the first place. You're essentially maintaining two LANs, one for admin and one for curriculum right? That's not the way I'd do it these days, and you imply that you've only got one domain controller in each of the two domains and *that* would worry me a lot more than any possible security issues from a 'combined' LAN. It's difficult to say for sure what work would be required to make this work the way you want, At the very least you're going to want switches on both ends that can route traffic onto the appropriate VLAN, and how much extra is needed on top of that is going to depend very much on the network config you have now.

Why not just put it in whatever call logging system you have already under a category for facilities/site management, and give the site staff the ability to action calls in this queue?

We've had good experience of Dell's Equallogic boxes. I will say though that all the 'reputable' manufacturers will charge a fortune to extend the warranty on their SANs past a certain point, like as not that just seems to be a fact of life. You can get "3rd party" support up to the same standard for a lot less though, if you look around.

I rather suspect the point is that you don't

Not sure if either of them will come in and do training, but Toucan Computers and Solutions-inc have done very well with us over the years.

So what do the full headers say? Something is giving them a hard reject (firewall? Upstream provider/smarthost?). The question is what.

Microsoft don't see it as an "issue". It's an intentional design choice. You can manage them via InTune + SCCM I believe, in terms of locking them down, loading apps, etc (in much the same way as you can with MDM modules for iOS, for example) but if you need proper domain management then you need to be looking at something running Windows 8 Pro.