Boredguy

Depending on the issue, you might get lucky and the person is in the office/available. First line random question yea they are ok. More advanced, and I'd rather we'd have stuck with our previous support.

Tbh there is no reason not to use Solus. We created our own little wrapper for it years ago in VBS so that each client always gets the same GUID installed, and we now deploy that out via SCCM, but we then let Solus deal with installing SIMS/Discover/FMS from the server.

well it depends on what is meant to be assigning the IP address to the AP's. If your DHCP server is also not on your WirelessMgmt VLAN......

Is your zone director also set on a Trunk, along with any switch to switch connections?

Thought the tardis should have been able to get you that high up.

Our exams number is only generated by the exam staff when the students get into Y10, where as their roll or admission number is unique from their time of entry into SIMS.

Think you mean Admission number, which is under the registration section of the report tree

It's effectively the same. If you double check that the Username/Email field matches the new name, then you are fine. If the username does not match the new name, then you will need to run the powershell command that was posted previously to update the account so it knows to use the new e-mail address as the main login credential and not alias.

With the account rename, all the e-mails are still in the current account so as far as the user experience is concerned, all they are doing is using their "new" username to login to their account as per normal. All the previous mail, calendars etc are accessible just as they were before the account name change.

If you do not already have the User Based Filtering up and running @chazzy2501, give the help desk a call as they will need to arrange for the basic version of Unify to get setup, and for the RM AD Sync tool to be installed onto your primary DC and configured to your Unify details. You can install the client onto other DC's once the initial setup is done.

Doh I was trying to get them to make sure that feature was hidden from you for a bit longer

We did away with the staffproxy 2 years ago when the User based filtering came in. It's only in the last few months that the extra proxy servers appears that you can then assign different policies per proxy for those devices that are BYoD so can't use the user based filtering. Same with the IP range which we are going to use next term when our staff BYoD will be sent via a different IP so we can be a little bit more lax (same for our sixth form) There is also an option coming soon that you can signin via Unify to get UBF via the transparent proxy as long as you are not behind a NAT

The only thing with 365 is accounts always retain their original tenancy.onmicrosoft.com account address regardless of any changes you make to their alias, username etc which is why there is the additional powershell step to change the default login address across to the new one. Once you've done the change a few times (and saved the powershell script) it's a 30 second task to update the login credential.

Regarding the mailnickname, I wouldn't worry too much, but then again we don't have that value set for anyone as it's an on premises Exchange setting

This is my process once member of staff has confirmed they want to use their new name (or in 1 case revert to their previous name) - Rename Staff network folder to new name - Rename account in Active Directory - Update e-mail field for user in Active Directory, as well as Profile/home folder path - In Attribute Editor in User properties, add SMTP:newaddress and smtp: previousaddress to create alias - Wait for AD Sync to take effect for user changes to be updated to Office 365 (could take up 30 minutes) - Connect to Office 365 via Powershell - Run the Set-MsolUserPrincipalName command to update user. Make sure the old credential is the onmicrosoft domain one Once done, in the Office 365 Users, the member of staff should have the username/e-mail field as their new name. Their aliases will contain their old [email protected] (this never changes), as well as the alias set in AD for their old e-mail address. All e-mails, files, shortcuts etc remain exactly as they were before the name update

What we normally do is rename the active directory account and update the e-mail field to their new name. Using Attribute editor in AD, we add a proxyAddress value of SMTP:newname@ domain and smtp:oldname@ domain so they have an alias (and there is no need to move files) Then connect to Office 365 via powershell and run the following command to update the users login credentials Set-MsolUserPrincipalName -UserPrincipalName [email protected] -NewUserPrincipalName [email protected]

Yesterday Wasn't a bad film, good use of Beatles music for what is basically a Romcom at times, even if the main plot point that makes the film (the worldwide blackout) only gets a quick one liner

We hide C drive, but have turned off the Prevent access to C. So far users have not been able to browse to C: but onedrive will function (well it would if it would auto sign in for my test account silently but that's another matter)

You should not need to use -Recurse Just running Add-MailboxFolderPermission -Identity username:\Calendar -User "[email protected]" -AccessRights LimitedDetails will add the option for someone to see the times and the name provided for the session (but not information in the notes) The user can then just select to add a shared calendar and select it from the directory list

@Ditto for the SafetynetPlus UBF to work, you have the RM AD Sync tool installed onto your DC's, which picks up your users details based on OU's it is set to scan, and group membership of a RM Unify Users group (there is also an admin group) This information is synchronised with RM Unify, which in turn passes the username and credentials through to the Safetynet filtering, along with which group the user is assigned (be it student, teaching, non teaching, other etc) Within Safetynet you can then set the different filter lists for each category. Staff might be allowed to access Webmail and chat sites for their own e-mail, while students are not. We make use of the "Other" group to assign select students to a Walled Garden list where all sites other than the few on the allow list are blocked. We've been running it since it was launched for the SWGfL, and we're just going through the process with 2 other schools in the MAT in getting it setup as they have continued to use the old flat level filtering all this time. Also (coming soonish) is a module within Unify that will enable users via the transparent proxy to signin to the UBF as long as there is not a NAT in the way.

well we have UPN all set, but get users to type in their e-mail address to the 365 login page so that if anyone needs to access a shared mailbox/other account it will prompt for the password at that point. If e-mail address matches the AD one for the current user, it's seamless.

Yes it's possible as long as you don't mind typing your e-mail address in https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/how-to-connect-sso-quick-start

personally for just windows patches, WSUS would have been an easier option

Your FMS shortcut should call FMSLoad.exe then Finance.exe for it to automatically check if there is a newer version of FMS available to update the client to eg "C:\Program Files (x86)\SIMS\FMSSQL\FMSLoad.exe" "C:\Program Files (x86)\SIMS\FMSSQL\Finance.exe" is our old shortcut's target.

While keeping this thread completely off course from what the OP originally posted, who is expected to review the monitoring reports @Primus? It's certainly not the remit of IT Support, and even if you do review what sites have been accessed, as most searches are via https, they are virtually impossible to identify via the URL content.