ehartley7

I've started setting up Remote Desktop Services for staff to use from home. To begin with I am quite happy for staff to connect via VPN and then connect to the service. Everything is working OK except for getting certificate errors when connecting as I have set it up with self signed certs as proof of concept. Our internal domain is a .local and as I understand I can't buy a trusted certificate for a .local domain any longer. Can anyone explain: Is there a secure way to get clients to trust these self signed certs? Is there a way to get a trusted root signed cert to cover connections to a .local domain? I've seen some info on resolving an external domain name such as rds.schoolname.sheffield.sch.uk to an internal address rds.schoolname.local and applying a purchased cert to it? Can anyone provide a step by step on this? Many thanks in advance.

The solution to this was to reinstall the "filtering.crt" which was provided by yhgfl. This allows the the ipads to trust proxy.yhgfl.net when accessing https sites via the proxy. If this cert was missing on the ios 9 it would produce an certificate error. On IOS 10 the page just fails to load with no error. Why the cert was lost doing the IOS upgrade is unknown.

Hi, Having just updated one of our iPads to IOS 10 as a bit of a test I've discovered that Safari won't connect to Google or Yahoo, has any one had this problem and more importantly got a solution please? Here's a bit of detail: We are part of YHGFL Network and filtering is via their proxy.yhgfl.net:3128 which is configured manually on the devices. IOS 9.3.5 device works as normal IOS 10.0.2 Device will connect to bing and a number of other sites including some https: sites ok , but not Google.com. There are no errors seen, safari just goes straight back to the page you have come from. When the device is taken to an unfiltered/normal/home Wi-Fi network everything works as it should. I'm thinking it must be something to do with the YHGFL proxy certificate, but as it's just started following the upgrade and I'm getting no error message it's not very helpful. Many thanks, Eddy

Is there currently a way to install the Serial Driver as well as USB as part of the MSI install being pushed out by GPO? Thanks

The big issue with this is that if all your staff are in the SIMSUSER group then they all have full rights to the S:\SIMS\simsroot folder (mapped as M:\ on their workstation in order for SIMS to work). Surely there's a great risk of someone clumsily deleting something from within here? The permissions on this folder seem to be far too open just to get sims to work for the users, I would question why this share needs to be mapped at all and why SIMS can't just write back to the simsroot$ share on the server. I know I'll get replies saying hiding it does not make it secure, but I'm not talking about security here, I'm talking about accidental changes/deletions by staff who need to use SIMS. Thanks,

Given the choice I would have had it on a separate VM yes, but our MIS team did the install and didn't give my a lot of choice. At the time we had: 1 x Server 2003 DC (Physical Due to be retired) 1 x Server 2003 R2 File server (Virtual) 1 x Server 2012 DC (Virtual) They insisted it needed to go on the 2012 Server (despite the fact that the guy doing the install appeared to have NOT used 2012 before) and did not question the fact that it was a DC or mention anything about disaster recovery. In hindsight I shouldn't have let them do it, but when they have been out and "upgraded" hundreds of schools in the area you would think they knew what they were doing (as the day went on it became apparent that they didn't). I know with a single DC I can recover the whole thing with Veeam, but I'm planning to add a second 2012 VM DC on a second host, which then raises my current question. If I don't, I have no redundancy, if I do then I might have problems recovering SIMS if that server fails. I guess I'm looking for options to get out of the situation I now have? Many thanks,

Assuming you have 2 DC's and one of them is running SIMS what's the process for recovering SIMS without recovering the whole DC? Standard DC recovers being to rebuild and allow replication from live DC's. Thanks

Thanks Kearton, I have attempted to configure this several times in the last 6 months, but continued to have errors in the event log indicating that it was unable to contact the NTP server. YHGFL even did a remote support session and couldn't get it working for me saying it was a DNS issue at my end. However I have now done this again using the server you recommend and following instructions on the following page and have not seen an error for the last two days. The reason for the problem remains a mystery but thanks for prompting me to try again. NTP time service in Windows 2003 - Windows Server 2003 - Windows 2000/NT

Apparently the YHGFL NTP servers are up and running again, but they will not work for me using the settings that did work before they were taken out. Is anyone else using YHGFL NTP servers and can confirm how you have configured your DC for it to work? Many thanks

This solved it for me. I only wanted to show the things I selected on the start menu...

Update is as follows. YHGFL plan to restore the NTP servers but there is no timescale on this at the moment. pool.ntp.org has been suggested in the meantime, but does require a firewall change by YHGFL for it to work for each school. Hope that's some help....

I'm on YHGFL and yes, the time servers disappeared a few weeks ago without warning. I have just been in touch with them and was told "I have asked about the office and it seems that the ntp servers have been turned off. I have inquired as to if this is being restored, and I have been told there are no plans to bring the servers back up." I'm waiting to see what they recommend from here, I seem to think that last time I asked about accessing a external time source I was told I should be using theirs, which now doesn't exist...

I was referring to the one called technical_guide_-_command_line_use_of_sims_installers_2004_5967.pdf which was the third post in the thread, but I fond a copy somewhere else so don't worry about it. Thanks for your reply.

Is there any chance you could try reattaching this PDF please? it says it's corrupt every time I download it? Thanks a lot