chrisjako

To provide an effective specialist IT and AVA related service for the College to include the effective running of the College’s systems including hardware, software, server and client operating systems, databases, email services, website updates, virtual learning environment and the provision of advice and guidance to staff. The holder is responsible for the management of AV facilities including planning and development and smooth operation in all aspects. Working with the Network Manager the holder will assist in the planning of future developments to the College’s IT, AVA and VLE infrastructure. To oversee and manage the day to day work of ICT technicians and apprentices To deputise for the Network Manager if required. please contact [email protected]

Use the sharepoint migration tool for this https://docs.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool Do a csv so the you can use the JSON/CSV import option, column A wants to be your home area unc paths, B and C leave blank, D is your onedrive path, E is "Documents" example before you do the above you will have to give admin rights to the default admin tenant for O365 on everyone's onedrive account so that you (as admin) can upload files to their accounts, use the same login for the sharepoint tool as you do for the script below Just change lines 22/23/25/26 to your o365 credentials ######## #ODFB Rights Administration #Copyright: Free to use, please leave this header intact #Author: Jos Lieben (OGD) #Company: OGD (http://www.ogd.nl) #Script help: http://www.lieben.nu #Purpose: Give an administrator rights on all Onedrive for Business accounts ######## #Requirements: ######## <# Powershell 4 .NET 4.5 Sharepoint Online Management Shell (X64) http://www.microsoft.com/en-us/download/details.aspx?id=35588 Sharepoint Server 2013 Client Components http://www.microsoft.com/en-us/download/details.aspx?id=35585 run “Set-Executionpolicy Unrestricted” in an elevated powershell window Windows 7+ or Windows Server 2008+ #> $o365login = "[email protected]" #Username of O365 Admin $o365pw = "PASSWORD" #Password of O365 Admin $logfile = ($env:APPDATA + "\ODFB_BP.log") #Logfile in case of errors $spAdminURL = "https://TENANT-admin.sharepoint.com" #URL to your SP Admin site $spMyURL = "https://TENANT-my.sharepoint.com" #URL to your SP MySites #Start script ac $logfile "-----$(Get-Date) ODFB_RA v0.1 $($env:COMPUTERNAME) Session log-----`n" #build Credential Object $secpasswd = ConvertTo-SecureString $o365pw -AsPlainText -Force $Credentials = New-Object System.Management.Automation.PSCredential ($o365login, $secpasswd) #Load sharepoint module try{ [system.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint.Client") | Out-Null [system.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint.Client.Runtime") | Out-Null [system.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint.Client.UserProfiles") | Out-Null }catch{ $errorstring = "ERROR: Failed to load Sharepoint Libraries, exiting" ac $logfile $errorstring Write-Host $errorstring Pause Exit } #load SPOnline module $env:PSModulePath += ";C:\Program Files\SharePoint Online Management Shell\" try{ Import-Module Microsoft.Online.SharePoint.PowerShell }catch{ $errorstring = "ERROR: Failed to load Sharepoint Online module, exiting" ac $logfile $errorstring ac $logfile $error[0] Write-Host $errorstring Pause Exit } #Build sP credential object $creds = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($o365login,$secpasswd) #build proxy $proxyaddr = "$spAdminURL/_vti_bin/UserProfileService.asmx?wsdl" $UserProfileService= New-WebServiceProxy -Uri $proxyaddr -UseDefaultCredential False $UserProfileService.Credentials = $creds $strAuthCookie = $creds.GetAuthenticationCookie($spAdminURL) $uri = New-Object System.Uri($spAdminURL) $container = New-Object System.Net.CookieContainer $container.SetCookies($uri, $strAuthCookie) $UserProfileService.CookieContainer = $container try{ $UserProfileResult = $UserProfileService.GetUserProfileByIndex(-1) }catch{ $errorstring = "Critical error, unable to get profiles" ac $logfile $errorstring ac $logfile $error[0] Write-Host $errorstring $error[0] Pause Exit } $NumProfiles = $UserProfileService.GetUserProfileCount() $i = 1 $ProfileURLs = @() Write-Host "Begin discovery of $NumProfiles profiles" While ($UserProfileResult.NextValue -ne -1) { Write-Host "Checking profile $i of $NumProfiles" $Prop = $UserProfileResult.UserProfile | Where-Object { $_.Name -eq "PersonalSpace" } $Url= $Prop.Values[0].Value if ($Url) { Write-Host "Adding $Url to the list" $ProfileURLs += $Url } $UserProfileResult = $UserProfileService.GetUserProfileByIndex($UserProfileResult.NextValue) $i++ } Write-Host "Finished discovery of profiles" Write-Host "Connecting to Sharepoint Online" try{ Connect-SPOService -Url $spAdminURL -Credential $Credentials }catch{ $errorstring = "Critical error, unable to Connect to Sharepoint Online" ac $logfile $errorstring ac $logfile $error[0] Write-Host $errorstring $error[0] Pause Exit } Write-Host "Start processing profiles" foreach($profileURL in $ProfileURLs){ $fullPath = "$spMyURL$profileURL".TrimEnd("/") Write-Host "Processing $fullPath" try{ Set-SPOUser -Site $fullPath -LoginName $o365login -IsSiteCollectionAdmin $true Write-Host "$o365login permissions added to $fullPath" }catch{ $errorstring = "Failed adding $o365login permissions to $fullPath" ac $logfile $errorstring ac $logfile $error[0] Write-Host $errorstring $error[0] } } ac $logfile "Script finished" Write-Host "Job Finished" Pause Exit

Thanks it looks like it would solve my problem, I would rather try resolve it for free though since our licence for this would be £1500

So i was think of doing this for our network drives, can it be run similar to a robocopy script, where only files changed from the last migration are copied over?

Can anyone share the method they used to backup H drive folder to users onedrive I have everything else working, SSO via the web and onedrive app, Azure AD join etc - just kind of scratching my head as to how to proceed with getting a copy of users files and folders over to onedrive I would still like to use H Drive if possible, just using ondrive as a mirror so that users can access files at home, I am open to other suggestions and configurations though

Assuming you are synchronising devices in AD via the AD connect then go to portal.azure.com click on azure aD go to devices search for your machine - is it registered as pending? if so open up command prompt as admin and type dsregcmd /leave Delete the device from Azure AD (as in the above search) reboot this should fix your issue

Currently looking at doing this too, to my knowledge what you are trying to achieve is not advisable (totally get rid of file server home drives) Best you can do is have onedrive for office365 setup alongside you home area to sync so that students and staff can access a copy of their directory structure "offsite" Assuming you have office365 setup with SSO then a good place to start with this would be this article https://docs.microsoft.com/en-us/onedrive/use-group-policy in order to configure the above you will need your tenant ID: https://docs.microsoft.com/en-us/onedrive/find-your-office-365-tenant-id

looking at MFA service settings alternative email is not available: Methods available to users: Call to phone Text message to phone Notification through mobile app Verification code from mobile app or hardware token

Here is the issue with that 1) Some teachers refuse to use their personal device to authenticate their office365 account and therefore will not access office365 2) Some users do not have a mobile device or access to a phone to complete the request 3) I need to set this up for students, or SLT do not allow use of phones within class What's happening at the moment is our homepage is set to sharepoint online with SSO, students cannot access the homepage or their office365 experience just because they cannot setup MFA (for whatever reason, some have managed it but a majority haven't) It would by great if i could bypass the setup process from my trusted IP range, its useless anyway since it is bypassed - Surely asking the user to setup MFA when outside the trusted scope is a better method of forcing them to setup whilst in a trusted scope

Yes I have this setup already, what it doesn't do is skip the setup process entirely, its still mandatory to setup MFA and once its set it will not ask again - I don't want this to happen, I only want Azure to require MFA setup when the user it outside our trusted IP scope

Does anyone know if its possible to skip the MFA setup from within my trusted IP range? Basically I want all users to have MFA however I only want Office365 to prompt them to set this up when they are outside of my trusted IP range

One of my technicians installed VLC player on our deployment image and set it to default for everything I can't seem to find anywhere the correct detials for windows explorer for the DefaultApps.xml file under I have this set at a workstation level Computer Configuration->Administrative Templates->Windows Components/File Explorer->Default Associations Configuration File

Thanks for that info its now partially working, by partially i mean I can now use the PSF emailer remittance process to send out emails to external domains, just not any internal addresses I have a rule in place to block spoofing, added the "except if sender is" exception for both the IP ranges and the account we want to send out from but still no joy

From organisation server to office 365 based on IP whitelist?

do you not need an onpremise server to setup a connector?

Ever since enabling MFA our PSF software is unable to send remittance emails PSF as expected have been completely useless for support on this issue, when I run a test under the SMTP settings i get a sucessfull check returned however the software is still unable to send emails and comes back with an SMTP response error Had anyone had a likewise issue?

We operate a helpdesk window where students come and buy £1 printer credits in exchange for a papercut sticker with the code on to top up their accounts It can be quite frustrating at times to deal with the onslaught of kids coming for these, I would like to automate it if possible by using some sort of coin op vending machine which would take this job off our hands, the librarian used to do this but the school recently made him redundant Does anyone have this sort of solution in place or could recommend a machine for this use?

I am after some advice and best practises for mapping printers Currently we use a print server and deploy printers using the right click and deploy to group policy method under print management, this maps the printer at computer GPO configuration level Often it works fine but sometimes it doesn't, usually when a member of staff or student comes to us saying they don't have any printers available a simple reboot can fix the issue When I map the printers via GPP however it seems to work every time - the issue here is that it then does not register via PaperCut, even though I have set the port IP type to a PaperCut port Arena, our PaperCut support company themselves say that this method of GPP is not supported with PaperCut It's getting to be an annoying problem I would like to fix once and for all, we are running windows 10 1709 for client desktops and server 2016 for the print server

Can anyone recommend a system for this? All our sixth form have ID cards that are mifare compatible we want something to keep track of them going in and out of site

Yeah we try telling them that but staff like to use the desktop version, so do I, so do not enforce it Think we are going to go try the route of cached to a network store

So yeah, this would still not happen with some of our staff even if I tattooed the instructions to the inside of their eyelids What would be the consequence if/when they don't adhere to it? 2nd OST file creating, corrupt ost altogether or just not able to open outlook? If its the latter option i can live with that as it'll force them to eventually learn the good practises we try to preach

thanks for your replies - We had initially disabled cached mode but have witnessed staff waiting 5 minutes for some files to load on in subfolders before so that would introduce a new problem

i've noticed a handful of our 250+ staff have these multiple instances of OST files in their %APPDATA%\Roaming\Microsoft\Outlook folders Can anyone spread some light onto what would be causing this as it's eating into my data storage

I had this same problem, however it was because I configured booking system and helpdesk but yet I didn't actually installed those plugins - once I extracted the final file the looping/updating stopped

Had an issue with google classroom where as students could not download resources from the teacher narrowed it down to https://client6.google.com being blocked by smoothwall once i whitelisted it, it worked so looking at googles g suite white list recommendations it gives *.clients[N].google.com however I don't think smoothwall will allow this [N] variable under GUARDIAN->CATEGORIES->(Created a new category)->Domain/URL Filtering It doesn't accept *.clients.google.com either although I found out simply inputting clients.google.com is the same as subdomain wildcarding it So my question is other then using a bit of excel wizardry to get up to 100 domain whitelisted how are you getting past the [N] wildcard entry for whitelisting?