bezzoh

Is this tool still available by any chance? Could've really done with this today 😊 Thank you

Shares may not appear for a couple reasons. 1) I think there's a policy about them appearing on the desktop... check out /Volumes to see if they're actually mapped. If its permissions its because all users need read on the 'parent' folder thats being shared so on \\servername\share not just the permissions on \\servername\share\myfolder As for the Mac behaviour adding/changing permissions, you want to make sure they don't have 'full access' just give users 'change'. You don't want user action being able to change NTFS permissions on network file shares.

Indeed a rollback works. I have found the underlying cause and implemented a temporary fix not requiring a rollback which just wasn’t feasible in my estate. I’ve provided the info to ESS and discussed with one of their engineers who is looking at the problem. He is going to liaise with Microsoft directly as in short though I’ve ‘fixed’ it neither I nor ESS understand what other impact my change might have (though none has been observed yet.) As such, ESS have asked I do not propagate my fix to other customers as there may be unforeseen adverse effects. Bear in mind the next update is due out Tuesday.. which may well fix the issue also but MS have documented nothing about this problem yet that we can find.

Since the latest Jan Office 365 update, I'm getting a raft of notifications that when trying to generate a MS Word based report it kicks up a SIMS .net message "ERROR: word has encountered a problem" Nothing more, not a bean to the event log. This occurs for pre-existing user profiles. You wipe the profile, log in for the first time and try again it's just fine.. next log out/back in, broken again. This is happening across multiple sites, completely different domains. Seeing as I'm getting it at multiple sites, I can't be the only one??

Groupcall stores every message including attachments inside the SIMS db. It’s the reason ours are so slow too. One Db is over 60GB. ESS have a cleanup routine for it. It “significantly improves performance” but is destructive in that it wipes out your attachments and can also delete the majority of messages that are 12 months+ old.

Am I right in guessing you might use Groupcall?

Asking for trouble.. I use Duo for Admins to log into Servers and thats about it. Also Duo isn't infallible... you either have 'offline access' enabled making it really complex for users to set offline codes, have it never prompt but then no one can login if your internet goes down / anything remotely interrupts connectivity from site to Cisco's online services... or have bypass enabled which means all someone has to do is pull out the network cable to log in without Duo prompting for MFA... (Just saying...) I am interested in your experiences with it for RDP though.. are you successfully using it on the old web site, new web client and Mac/IOS apps? I heard there were limitations to it but haven't tested myself.

Just wanted to say thanks. This post just helped me with nearly 800x 1909 clients failing to upgrade to 21H2. Absolutely spot on with the cause of the upgrade failure. Thanks for this info!

All the lights coming on solid to me sounds like a reboot..

To clarify then, the whole lock-up situation only occurs when your 2nd site's core is connected to your 1st? or are these two completely separate issues that are unlrelated? To me it sounds like your routing, or Spanning Tree not working as you expect because you have a conflict between your two L3 switches and their subsequent networks. They might even think they're part of the same spanning tree for example and be recalculating constantly and fighting over who is the CST root. Do you have IP addressing conflicts/overlaps between the two sites also which would mean for instance if site 2x has the same subnet(s) your traffic might be heading that way when looking for your server...

Which then brings its own difficulties, in kids inviting their mates in from private email addresses who start abusing your staff... because they've let them in without monitoring the lobby properly. - So before doing that, make sure lobby policies are setup properly and even look at applying a school avatar to all your students for ease of identification. That way anyone even with the name of someone legitimately in the meeting without the school avatar can be ignored.

You need to enable unauthenticated access to meetings, not just guest access. I've been through that pain before.

Its all 'shell folders' in the registry hive which will be both local and on the file server. Changing group policy doesn't update these (or not all of them) once they are generated, so you can completely wipe the profile... try and script changing these registry keys (which would actually be a bit of a ridiculous thing to do, but I did once actually try that,) or just go for giving your file server multiple names. 5 mins... everyone's fixed.

Easiest solution for me is you add the Alias of your old server name to your new server. You will need to make sure your old Server is completely removed from the domain to do this however (including removing DNS records entirely for it) or you will just get errors when trying. Again, delete the old DNS records and make sure that has replicated around your DC's before doing this. Just changing the IP to your new server name won't necessarily work. When you go through this process you'll end up with a dynamic DNS entry for the new IP anyway.. at that point if you feel it necessary to make it static again you can do. Anyway, this will mean you can then connect to profile paths (and any other path so long as they have the same share names) on your new server, using the old server name. No issues. I do this every time I create a new file server so I don't have to faff around. A quick google brought me to this, looks like a reasonable guide to follow.. its how I do it. https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/using-computer-name-aliases-in-place-of-dns-cname-records/ba-p/259064

Appreciated thank you. I think its a pretty regular occurrence at some of our schools. I'm guilty of it myself sometimes if something looks a bit like junkmail. The trick is to include a chocolate bar, that usually gets my attention 😊