bezzoh

Is this tool still available by any chance? Could've really done with this today 😊 Thank you

Shares may not appear for a couple reasons. 1) I think there's a policy about them appearing on the desktop... check out /Volumes to see if they're actually mapped. If its permissions its because all users need read on the 'parent' folder thats being shared so on \\servername\share not just the permissions on \\servername\share\myfolder As for the Mac behaviour adding/changing permissions, you want to make sure they don't have 'full access' just give users 'change'. You don't want user action being able to change NTFS permissions on network file shares.

Indeed a rollback works. I have found the underlying cause and implemented a temporary fix not requiring a rollback which just wasn’t feasible in my estate. I’ve provided the info to ESS and discussed with one of their engineers who is looking at the problem. He is going to liaise with Microsoft directly as in short though I’ve ‘fixed’ it neither I nor ESS understand what other impact my change might have (though none has been observed yet.) As such, ESS have asked I do not propagate my fix to other customers as there may be unforeseen adverse effects. Bear in mind the next update is due out Tuesday.. which may well fix the issue also but MS have documented nothing about this problem yet that we can find.

Since the latest Jan Office 365 update, I'm getting a raft of notifications that when trying to generate a MS Word based report it kicks up a SIMS .net message "ERROR: word has encountered a problem" Nothing more, not a bean to the event log. This occurs for pre-existing user profiles. You wipe the profile, log in for the first time and try again it's just fine.. next log out/back in, broken again. This is happening across multiple sites, completely different domains. Seeing as I'm getting it at multiple sites, I can't be the only one??

Groupcall stores every message including attachments inside the SIMS db. It’s the reason ours are so slow too. One Db is over 60GB. ESS have a cleanup routine for it. It “significantly improves performance” but is destructive in that it wipes out your attachments and can also delete the majority of messages that are 12 months+ old.

Am I right in guessing you might use Groupcall?

Asking for trouble.. I use Duo for Admins to log into Servers and thats about it. Also Duo isn't infallible... you either have 'offline access' enabled making it really complex for users to set offline codes, have it never prompt but then no one can login if your internet goes down / anything remotely interrupts connectivity from site to Cisco's online services... or have bypass enabled which means all someone has to do is pull out the network cable to log in without Duo prompting for MFA... (Just saying...) I am interested in your experiences with it for RDP though.. are you successfully using it on the old web site, new web client and Mac/IOS apps? I heard there were limitations to it but haven't tested myself.

Just wanted to say thanks. This post just helped me with nearly 800x 1909 clients failing to upgrade to 21H2. Absolutely spot on with the cause of the upgrade failure. Thanks for this info!

All the lights coming on solid to me sounds like a reboot..

To clarify then, the whole lock-up situation only occurs when your 2nd site's core is connected to your 1st? or are these two completely separate issues that are unlrelated? To me it sounds like your routing, or Spanning Tree not working as you expect because you have a conflict between your two L3 switches and their subsequent networks. They might even think they're part of the same spanning tree for example and be recalculating constantly and fighting over who is the CST root. Do you have IP addressing conflicts/overlaps between the two sites also which would mean for instance if site 2x has the same subnet(s) your traffic might be heading that way when looking for your server...

Which then brings its own difficulties, in kids inviting their mates in from private email addresses who start abusing your staff... because they've let them in without monitoring the lobby properly. - So before doing that, make sure lobby policies are setup properly and even look at applying a school avatar to all your students for ease of identification. That way anyone even with the name of someone legitimately in the meeting without the school avatar can be ignored.

You need to enable unauthenticated access to meetings, not just guest access. I've been through that pain before.

Its all 'shell folders' in the registry hive which will be both local and on the file server. Changing group policy doesn't update these (or not all of them) once they are generated, so you can completely wipe the profile... try and script changing these registry keys (which would actually be a bit of a ridiculous thing to do, but I did once actually try that,) or just go for giving your file server multiple names. 5 mins... everyone's fixed.

Easiest solution for me is you add the Alias of your old server name to your new server. You will need to make sure your old Server is completely removed from the domain to do this however (including removing DNS records entirely for it) or you will just get errors when trying. Again, delete the old DNS records and make sure that has replicated around your DC's before doing this. Just changing the IP to your new server name won't necessarily work. When you go through this process you'll end up with a dynamic DNS entry for the new IP anyway.. at that point if you feel it necessary to make it static again you can do. Anyway, this will mean you can then connect to profile paths (and any other path so long as they have the same share names) on your new server, using the old server name. No issues. I do this every time I create a new file server so I don't have to faff around. A quick google brought me to this, looks like a reasonable guide to follow.. its how I do it. https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/using-computer-name-aliases-in-place-of-dns-cname-records/ba-p/259064

Appreciated thank you. I think its a pretty regular occurrence at some of our schools. I'm guilty of it myself sometimes if something looks a bit like junkmail. The trick is to include a chocolate bar, that usually gets my attention 😊

Is there a way to check eligibility? I'm concerned if the DfE have written to any of my schools then they might have just been ignored as spam... which is often the case.

Are you using client side processing? Its likely you are so even though its not being deployed reg keys are holding on to it. You can remove in a couple of ways.... Logon/Logoff script for each user (suitable example below,) and wipe out the entire 'client side processing reg key' ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider") so it doesn't come back for previous users of the system where profiles might have been 'cleaned up'. This reg key holds on to old UIDS, so if users come back even after profile deletion, it takes the printers back as well. This is from a larger script, hence more Dim's than needed for this action but you'll get the point.. .This 'VBS' will remove network printers from a user profile; Option Explicit On Error Resume Next Dim objShell : Set objShell = WScript.CreateObject("WScript.Shell") Dim objNetwork : Set objNetwork = WScript.CreateObject("WScript.Network") Dim objGroupList Dim enumPrinters : Set enumPrinters = objNetwork.EnumPrinterConnections Dim strWorkDir : strWorkDir = ObjShell.ExpandEnvironmentStrings("%temp%") Dim strUser : strUser = objNetwork.UserName Dim strDomain : strDomain = objNetwork.UserDomain Dim strGroup Dim objUser : Set objUser = GetObject("WinNT://" & strDomain & "/" & strUser & ",user") Dim intCounter Dim localPrinter : Set localPrinter = False 'Remove all current network printers For intCounter = 1 to enumPrinters.Count -1 step 2 objNetwork.RemovePrinterConnection enumPrinters.Item(intCounter), true Next

Check the applications log in event viewer, also run a RSOP from Group Policy Management Console to see if that gives indications as to whether a particular policy is causing the delays. From my experience the main culprits for slow logins in the past have been roaming profiles (if the user has a big one, theres your winner right there!,) or its login scripts, or bad configuration with folder redirection trying to map to a location that's potentially unavailable. Start Menu redirection in general knocks login times significantly, I removed this and just kept desktop redirection (to a local shared folder on the C: drive.) All my users now share the default user start menu folder and I have a script that removes anything from there I dont want them to see.

Theres a space in your source path

Wasn't that difficult if memory serves. The Mac Server isn't particularly up to date though, I've had it sat there for years just as a deploystudio server, I have a 2nd more up to date one that deals with Profile Manager, etc. This one is only running 10.11.x but it does the job. I think the fact that I've got Sibelius on there is the reason I've not bothered upgrading it.

You got any Mac OS 'servers'? I have Sibelius Licence Server running on a Mac Mini.

Where's that exactly? I thought it would be by selecting one of these again from the top of the Team, but neither made any difference. This thing is the library is still actually there in Sharepoint... I actually think a site owner has been screwing with permissions which made it disappear, they were definitely not standard when I briefly investigated last night.

Did anyone figure out how to resolve this? I'm seeing this in a Team now. There in Sharepoint, but not in the Files tab of the Team.

Weird. I have it running daily on all my machines and it seems to be doing a decent job of handling Teams and OneDrive caches. OneNote used to be my biggest pain, but I've had a logout script just deleting all of that for a while now... I might not even need it anymore, but don't fix what aint broke...

Does Storage Sense not handle clearing this data out?