fredbayker

The closing date is 31st Jan?

Have you checked to see if those machines have dns records?

Cheers bud, that’s a better idea than walking around lol! I’m going try that over half term although I’ll have to mark each port:patch point so I can put it back together!

Does GPresult on the client machine give you any information? Have you added the dns suffix of the other domain?

Thanks for the replies folks. Still haven’t gotten to the bottom of it, as chr1sM has said, I’ll be taking a walk around to see if I can spot anything plugged in

You should check the OneDrive threads on here - also look into known folder move.

I’ll check if debugging is enabled, thanks

The firmware is up to date, they’re fairly new switches purchased within the last year but I checked anyway. I’ve read it could be something to do with a loop somewhere. I was also wondering if it could be excess traffic from broadcasts/bonjour etc

Hi, I’m hoping some network gurus can point me in the right direction. How would I go about figuring out what is causing this, are their some logs I can view or diagnostics I can run? Any help is much appreciated.

Eth1 doesn’t seem to have an IP address, are they teamed or something?

If somebody gained unauthorised access to the laptop, do they have access to the domain?

What I took from that article is that using separate GPOs would provide speed as well as administration advantages in most cases. Making a change in a monolithic GPO means the version number will change and the whole GPO will have to be processed even though only one small change is made. From an administrative perspective, I find it easier to locate and troubleshoot/test GPOs that are more modular. I used to prefer the modular approach but it became a real pain to locate settings eventually and I separated it all out.

I would try the following two methods, not sure if you have tried it this way already but I use a similar method to achieve our setup and works 99% of the time, very rarely failing but remedies with a forced gpupdate. Method one 1. Enable loop back - merge 2. Deploy the ‘shared’ printer via GPP (user config) Apply to OUs containing Computers (One GPO per OU) Method two 1. No need for loop back for printers 2. Deploy ‘shared’ printers via GPP under user config on the root of the users OU 3. Use Item level targeting by creating machine based security groups or using OUs. (ie only deploy this printer if the PC belongs to machine-groupX or the PC is located in OU-X You could add a ‘delete all printers’ preference item first in both methods to delete existing printers OR (I’m not sure on this but..) set each item to ‘replace’ and tick the ‘remove when no longer required’ checkbox. The replace and delete do affect login times so near that in mind.

If you are using adconnect, there is some sort of configuration tool (I forget what’s it’s called) where you can set things like this

How did you get on with this? I’m curious to know how you got this working in the first place, I could never get it to work properly and gave up.

Make sure the authenticated users group has read and apply on the GPO otherwise your machines will not have the rights

Thanks guys for all your help. Turns out your recommendations were spot on. I/we carried out the following: 1. The sophos firewall rules were indeed allowing any internal clients to send externally on the any of the usual email ports so we locked it down to just allowing the relay. 2. We locked down the relay to accept messages only from specified IPs (photocopiers etc) 3. Our traffic used to route through the LAs network and so the IPs addresses in the SPF record belonged to them but that’s no longer the case so we have asked them to change the dns record to reflect the change in IP.

Cheers for the response. I’ll certainly take a look at point A. Can you expand on point B please?

I’m unsure, tbh - I’ll have to check the Sophos box. What I can tell you is it’s mainly scanned docs from photocopiers with the odd notification from other bits of software. I would’ve thought that with the office365 connector configured with an accepted domain and IP address for security that it would accept any type of mail protocol traffic from that IP.

Has anyone figured out how to avoid getting their IP constantly blacklisted by O365? It seems to have taken a dislike to our SMTP relay even though the configuration is correct

I had this for the first time today on a Cunningham till, what a coincidence! Took me ages faffing about, in the end I left it as it was ‘ready’ in print management and the end user could print to it from within applications. I’ll try that reghack tomorrow, cheers Mark!

Clear appdata/user profile?

I thought print audit was just to audit ink levels but it could have more functionality. Have you checked what kind of ports your printers are using?

Hmm..I’ll read into that, cheers!!

We have created several security groups which contain either PCs, users or both. We have a GPO which attaches to the root of the users OU. Within we use GPP to deploy printers using user configuration to users but setting the item level targeting to check which security groups the PCs or users are in. No loop back involved.