Quillyn

Hi I have just stepped into a mess of a school to help out an over whelmed teacher. The site has a load of chromebooks that have not worked in a while. Upon investigation they are all set to use a proxy system that has not been in place for over a year! I can see that the wireless proxy (devices settings/wireless) has been set to the old system. Someone has also set the network (devicesettings/chrome/usersettings) to the new proxy system. So to get things straight I have changed the wireless settings to the new system and cleared the old network(devicesettings/chrome/usersettings). The problem of course is that the chromebooks are not picking up the changes. I assume this is due to trying to use the old settings to access the cloud and failing to pick up the new settings. Is there anyway around this? I also considered just powerwashing all the chromebooks but it does not appear as a option while logged in as either of the Sysadmin accounts I have access to. Have they removed, hidden or changed powerwash. Am I just missing something?

We recently migrated our desktop/ documents redirected folders off our windows server onto our Synology NAS. All appeared to be working fine apart from syncing. When attempting to sync "the process cannot access the file because it is being used by another process" error occurs for every file. Having spent some time with Synology 3rd line support they have told me that the sync will not work as sync attempts to use the machine name account rather than the domain account to sync. With the NAS linked to the domain sync will not work with out removing all security. To which end they have suggested - Changing the account sync works with to a domain account, I can do this for SQL but not a clue about sync services any ideas? - Using a different product to sync, any suggestions for a department with no or very little budget? Is anyone else having issues between a domain Synology NAS and windows sync, I thought it should be possible with out issues but have been proved wrong.

For testing purposes we are testing / trying to fix using the same domain admin logon. We have a fair few new windows 10 laptops that are all pulling down only the same 2 GPOs. We have some windows 7 machines most of which work, some which only pull down two or three GPOs all based on images that have been in place about 18 months. Some of the GPOs that are not being pulled down are all authenticated users on the entire domain.

Been trying a number of things again no luck as yet... Cheers for the suggestion, we tried it with a couple of windows 10 laptops but they are still only pulling down 2 GPOs. We have noticed that the GPOs go out fine to our 2016 servers in full every time so it does not seem to be compatibility.

Hmm seems my first reply went awry. Cleared the database, the GPO history folder was not created (windows 10) but did clear system32/grouppolicy. Sadly on two test machines I am left with the same 2 GPOS. We have also tried Rejoining the domain Re imaging of one machines

We have a issue with a few stubborn machines with GPOs and we are really struggling to pin it down. On the majority of machines new to the network all GPOs are seen and apply successfully, yet on some only 2-3 GPOs are seen and applied. All the machines that were on the network before the summer are fine as well. gpresult /r or /h on such machines just does not list the GPOs as applied Policy objects or denied GPOs or even recognise they should be applied. The main issues with machines seem to be windows 10 laptops all getting 2/10 GPOs. One of the techs here is sure that one of the windows 7 desktops was getting 10/10 GPOs but now its at 3/10. - At this stage we have only been testing with domain admin logins to keep this consistent. - There are no errors in the group policy event viewer on machines short on GPOs - We have checked GPO replication and both servers are identical and the issue appears no matter which of the server the GPOs are pulled from. - Applied GPOs are always internet settings/ printers / security missing GPOs tend to be drive maps/ redirections Any ideas what else we should be looking at?

The workmen installing the ducting will be putting through all our cable so pre terminated is a option but three 20mm ducts will not fit any of our kids in even if we train up some of the tykes in the Nursery. I suspect 100MB connection will be less than ideal for hosting all the other schools servers (their server room is being remade into a classroom). Single mode fibre, whats involved any recommendations?

Two school sites on opposite sides of the road are wanting to link their networks (pipeline being installed). Server room to server room is about 800m. My school has a Cisco sg300 series with 2unused sfp ports, the other side known little about other than they are using netgear switches and their tech has told be he has at least one SPF port available. What cable should we install? (I suspect cost saving will occur along the lines of just one internet connection across the road, 120 seats my end 200 his end) To begin with the network will not be joined but I have server room space for his new server which next year will become our VMware host as well, what hardware would people recommend for the fibre? Some draft company quoted £2.5k for the job, single line (with us laying the cable) what sort of ball park would people expect? Thankyou

10.***.***.1 is counties router which they will not change in anyway under any circumstances after 2 weeks of me nagging, frustrating.

Tracert from a 10 client to a 192 client goes off 10.***.***.1 (default gateway admin) the off the schools network to county. Subnet mask for 10 and 192 machines is set to 255.255.255.0 IP of client tested from is : 10.*.*.184 Interface List 11...a4 1f 72 7a 40 0c ......Realtek PCIe GBE Family Controller 1...........................Software Loopback Interface 1 12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 10.***.***.1 10.***.***.184 276 10.***.***.0 255.255.255.0 On-link 10.***.***.184 276 10.*.*.184 255.255.255.255 On-link 10.*.*.184 276 10.*.*.255 255.255.255.255 On-link 10.*.*.184 276 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 10.*.*.184 276 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 10.*.*.184 276 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 0.0.0.0 0.0.0.0 10.*.*.1 Default ===========================================================================

I can traceroute from 192.168.0.* to 10.*** It routes via 192.168.0.2 (the DHCP and printer server, and default gateway for the classroom network) None of the servers are running routing or remote access

Background I have just inherited a bit of a mess, a small but IT heavy school. The admin systems are on manual IP's in a range specified by county 10.***.***. The Classroom systems are on a 192.168.0 range DHCP which I cannot change until we can replace the wireless system (long story) There are 2 servers with double network ports with one on each IP range one the domain the other DHCP The NAS and sims server are both on the 10.***.*** range The school has 3 cisco managed switches that are on default settings sg300-52 I am currently trying to get the Sophos antivirus server running it seems its only ever worked for the 10.*** network Question The 192.168.0 network can ping the 10.*** network yet the 10.*** network cannot get a reply from any machine on the 192.168.0 network. Firewalls are of course disabled. Does anyone have any idea why? I believe this might be the tip of the iceberg and most probably the origin of the Sophos issue.

It's a small rural primary about 120 seats and not so great internet, so the solution needs to be cheap and cheerful.

That's a possibility there any easy prebuild out there or software you would recommend? I do not make a huge us of linux in the school.

I would really prefer to stay away from cloud solutions, our head had significant problems with google at her last school and will not consider their services. The main issue is that five year olds would take to long to type out our full domain (some 20 characters) and our previous solution worked well with minimalist domains one per class so even the 5 years olds could learn the basics with limited keyboard skills. On the ownership of the domain we applied and picked up our domain some years ago and have kept tight control over it despite county and now our academy trust wanting it fully signed over to them. We may have been lucky that Suffolk was slacking though.

We are needing to replace our primary students email solution. It's strictly intranet only but needs to be for all intentions full adult email. What are other people using, what would you recommend? Presently thinking about hmailserver with a web mail client, any advice?

After some research, the licenses are nothing to do with the LEA seems they were £4+ more expensive, so some of the licenses where purchased from one company and some from another. Some of the MAK licenses are listed as us having used 5/500 so there must be a wider agreement. The only active agreements are in the schools name or another local school that I believe she also covers. I thought VLSC would make it easy to see what the school has and has not. Am I really going to have to get the Bursar the drag up all the software orders in the last 5 years and trawl through them?

I have recently been asked to cover maternity on another site, all well and good. Until I was asked to roll out some new laptops. I looked into the schools licensing for Office to find just a VLSC login. Now I can see there are products assigned to the school but I cannot tell how many licenses have been purchased, VLSC is also listing a load of products that the school has not purchased with licence keys the works. Any idea how I can work out from VLSC how many licenses the school actually has?

Okay I think I have a solution I set up a internal ntp server and pointed the VMware hosts to it, yet their times where still jumping to 2005. So I have removed the VMware host from the domain, and set the virtual machines to pick up time from the VMhosts, the VWware host pick up time from my local ntp server. Not a great solution but seems to be working presently

Darn.. I checked the BIOS of one of our VMware hosts and the time was spot on. I can confirm that time sync between the virtual servers and the ESX server is presently unticked. In noted behavior since I left yesterday.. All virtual servers and hosts had changed to 17.12.2005 The physical server had the right time. 1 hour later Both hosts were using 23.02.2022 2/4 servers were using 23.02.2022 including the domain server The other two servers were displaying the correct time. Physical server had the correct date/ time

That could well be it, a odd feedback time loop, thanks allot gives me something to look in to.

I will have to check when back on site (just been kicked out). I believe they are not set to Synchronize guest time. The VMware hosts and both joined to the domain and were taking their time from the domain controller. They are no longer set to pick up time the ntp client is stopped, yet they still change at the same rate as the 2008r2 servers. All the servers and hosts are set to London time zones (was one of my early thoughts too).

I have been considering building my own time server, but I am concerned that this unknown time changing issue may still occur. Any advice on the quickest/ easiest build to go for?

The domain controller is virtual. The host time also changes but not always the same as the domain server. Example Domain server +3 hours, host server still retaining the correct time, physical server lost 4 hours.

The problem: My only domain controller time keeps jumping either forwards or backwards a amount between 2 hours and 24 hours. Background I run 4 virtual 2008r2 servers and one physical, all connected to the domain. The virtual servers run on VMware across two machines. The setup has been pretty static for the last 6 months. The time across the domain started jumping a few days ago. Currently I have no access to a ntp server (a separate issue with over zealous county blocking, that is taking them months to fix) Attempted fixes Played around with w32tm, all domain machines were resyncing to domain. Domain had no w32tm host/ source listed to resync from. Disabled w32tm on the domain server- this caused all the network machines other than 2008r2 to retain the correct time. Now though each of 2008r2 servers will be running at different times. Over night one server gained 7 hours another gained 2 days while the antivirus server lost a month. At first I thought this might be to do with only the virtualised machines but the lone physical server had the same issue. Questions Any ideas what is setting the time for the 2008r2 machines? Can anyone suggest a tool to pinpoint whats setting the time seemingly randomly. I tried a tool called ntplookup but it could not identify any rogue ntp servers. Am I missing something obvious?