Jonah

Hi all, We're in the initial stages of looking at moving from Internet leased lines at each of our schools to two individual schools with a leased line each from separate ISPs, and then the remainder of schools having private Point-to-Point links to each of them. Interested in hearing from anyone who has done similar before, and - specifically for the Point-to-Point - also looking for recommendations for potential suppliers aside from the big few (BT, Virgin, etc.). Cheers.

Still haven’t got ours. For those who have - what address does it come from? Want to check we’ve definitely not missed anything!

I could be wrong, but I'm fairly sure even with the Hybrid stuff configured, our staff didn't get the Calendar tab until we assigned an EOL license. If you have Hybrid set up and your Azure AD Connect configured for Hybrid Exchange (so the various exchange GUIDs get sync'd), when you assign an EOL license it will only pre-provision a mailbox, etc. in preparation for any future migration. All our staff are currently still on-prem, but have an EOL license assigned - in the Admin portal it'll show "This user's on-premises mailbox hasn't been migrated to ‎Exchange Online‎. The ‎Exchange Online‎ mailbox will be available after migration is completed.", and if they open Outlook on the web, they'll be presented with a link to your on-prem OWA: EDIT: I've had a brief scan online - you could be right, the EOL may not be necessary for the calendar function in teams - we assigned them anyway as we'll be migrating to EOL in the future.

We've recently done this (after resolving a bizarre issue that wouldn't let the Hybrid Configuration Wizard identify the logged in user!). You'll need Hybrid configured (via the HCW), and "Exchange Hybrid Deployment" set in your Azure AD Connect. Users will also need an EOL license assigned. You may need to update your Exchange servers to a more recent CU, as from the HCW log file, the minimum supported versions of Exchange are: Supported Releases: Exchange Server 2019 "E19" RTM Version 15.2 (Build 221.12) Exchange Server 2016 "E16" CU11 Version 15.1 (Build 1591.1) Exchange Server 2016 "E16" CU10 Version 15.1 (Build 1531.3) Exchange Server 2013 "E15" CU21 Version 15.0 (Build 1395.4) Exchange Server 2013 "E15" CU20 Version 15.0 (Build 1367.3) Exchange Server 2010 "E14" SP3/RU25 Version 14.3 (Build 435.0) Exchange Server 2010 "E14" SP3/RU24 Version 14.3 (Build 419.0)

They do, we’ve moved from LastPass to on-premises BitWarden for our IT team and the mobile apps work without issue.

Hi all, Desperately hoping someone can help as I'm tearing my hear out with this! We have a seemingly very odd issue when trying to run the Office 365 Hybrid Configuration Wizard... It fires up fine, finds the appropriate Exchange server and then gets to the credential page for the Exchange box and Office 365, and this is where the fun starts. Office 365 credentials work and connect fine, no problem. But regardless of what we put in for the "on-premises Exchange administrator" account, it throws an "Invalid Username or Password" error. This is regardless of using the current Windows identity checkbox, or typing the credentials in manually. What's interesting, is that no errors are logged in the log file, and check of the security log on the Exchange box shows a successful logon from the .exe: An account was successfully logged on. Subject: Security ID: Account Name: Account Domain: Logon ID: 0x4C41A02 Logon Information: Logon Type: 2 Restricted Admin Mode: - Virtual Account: No Elevated Token: Yes Impersonation Level: Impersonation New Logon: Security ID: Account Name: Account Domain: Logon ID: 0x4E548FB Linked Logon ID: 0x4E549B7 Network Account Name: - Network Account Domain: - Process Information: Process ID: 0x3190 Process Name: C:\Users\\AppData\Local\Apps\2.0\P740GNBT.DPA\JK4MHM40.9KB\micr..tion_5329ec537c0b4b5c_0011.0000_72ec5a2eed6c5911\Microsoft.Online.CSE.Hybrid.App.exe If I then *purposefully* put a wrong username/password combo in then I get the expected audit failure in the security log AND also an expected entry in the HCW log file: 10393 [Client=UX, Page=Credentials, Thread=1] Windows Auth Failure: [ErrorCode=0x80004005] [NativeErrorCode=0x52E] I've also ran TCPView to see what the HCW is doing when I hit OK at the credential prompt, and it's (unsurprisingly) opening an LDAP connection to one of our DCs. So I checked the security log on said DC, and it's showing a successful logon - so what the hell is the HCW complaining about?! So this indicates it's not a credential error, but I have absolutely no idea what it could be!!! The account we're using is a member of Domain Admins, Enterprise Admins and Exchange Organization Management. We're running Exchange 2016 Standard, CU 15 on Server 2016 LTSC. Any assistance would be unimaginably appreciated as this is now driving me mad! Cheers

Depending on which version of RDS you’re running, the best option would probably be to enable the HTML5 client which works across a number of OS’s/browsers.

Education Secretary to make statement at 5pm...

You may need to set this - https://getadmx.com/?Category=Windows_10_2016&Policy=Microsoft.Policies.Appx::AllowDeploymentInSpecialProfiles

We’ve historically had trouble with the reverse proxy, so reverted to standard port forwards to 443 for OWA and RDWEB

Google will do this if you contact them - we went through the same process when a school joined our Trust

Doesn’t even need to be a secondary site server, a distribution point should do the trick. We use this across 5 schools connected via IPSec VPN with a single site server at one site, and DPs at the others

Hi all, Hopefully someone can help with this as it's been driving me mad all day! Our users are unable to access Microsoft Teams when using IE 11 or Edge - on Chrome, it all works fine. PCs are all Windows 10. They are automatically signed in to Office 365 via ADFS, and all other apps such as One Drive open no problem, but when trying to access Teams it sits there for a couple of minutes on the "Loading Microsoft Teams..." screen then returns the "Doh! Something went wrong" message. The URLs https://login.microsoftonline.com and https://*.teams.microsoft.com are assigned to the Trusted Sites zone, and 1st party, 3rd party, and session cookie have all been set to allowed. Any assistance appreciated. Cheers.

Nominet should be able to do this - last time we had something similar I’m sure there was an online portal to sort it. As for providers who can host school domains, we’ve used Vidahost/TSOHost without issues.

We've about 80, across four secondaries. We generally have some for standardised settings across the MAT (~20) which are applied everywhere (both user and computer), and then each school will have further "localised" GPOs applied for school specific setups. We don't deploy software via GPO.

We have a similar set up at two of the schools in our MAT, where some staff are shared across two sites so need access to both SIMS instances regardless of where they are. We had trouble with the single connect.ini with multiple DB entries, so the best solution we found was to copy separate connect.ini files to all machines in a folder for each school on the C:\ drive, then use separate shortcuts for the two different schools (as you can specify the connect.ini location using a parameter). So at each school we have a C:\SIMSConnectFiles\ folder on each machine, with a folder for SchoolA with their connect.ini in, and a folder for SchoolB with their connect.ini in. The SIMS shortcuts are then: SchoolA - "C:\Program Files (x86)\SIMS\SIMS .net\Pulsar.exe" /CONNECT:"C:\SIMSConnectFiles\SchoolA" SchoolB - "C:\Program Files (x86)\SIMS\SIMS .net\Pulsar.exe" /CONNECT:"C:\SIMSConnectFiles\SchoolB" This has been a flawless solution for us so far (aside from the odd member of staff using the wrong shortcut then telling us SIMS is down as their password doesn't work!)

Are you using roaming or mandatory profiles for your domain users? If so you may need to enable the following group policy setting: Computer Configuration > Administrative Templates > Windows Components > App Package Deployment > Allow deployment operations in special profiles

MAT of 4 schools (currently, six by next year), ~3,800 users, ~1,600 devices, ~120 servers. 1 x IT Director, 2 x Infrastructure Engineers, 3 x Onsite Engineers

Intake - Initials - Incremental Number Joe Bloggs 18JB01, Jane Bloggs 18JB02, etc.

We use Salamander, they will pretty much sort it all out for you if needs be, they're very good and very flexible and the software works perfectly EDIT: To clarify, the above is in reference to their paid product (which is well worth the money!), not necessarily the free SDS stuff

We've used Gamma across two schools the past few years and have had no issues whatsoever

We used them previously for our leased line for three years, no issues during the time whatsoever.

As above, across four schools we have a single primary site, and DPs etc. at each school in seperate boundaries

I had to check online afterwards if I actually saw what I thought I saw in the last scene, it was subtle.

We had this - to get around it we had to use psexec to run cmd as the system account (PSEXEC -i -s -d CMD) before trying to mount the volume and copy the file