RJohnson91

Hi all, I'm attempting to set up IPSec Remote Access VPN through our Checkpoint 3000 (running R80.10). Before I go into detail of which steps have been completed I wanted to see if anyone had done this, because I'm a little stuck! Cheers

When we were using Ghost at my previous place of work, we utilised the build in 'image check' before we proceeded, this would highlight corrupt images, so we could re-capture. Has your solution got something similar you could use? Ryan

Hi guys & girls, I'm facing a rather strange problem. We had two Office365 subscriptions and recently consolidated them all into one account, this meant the currently licensed Office installs are under the old email. I thought we would be able to click on accounts and 'manage license', then log in using the new email, and Office seems to throw an error ''We couldn't find other office licenses associated with [email protected]''. The strange thing is, if we uninstall office entirely, and reinstall it then licenses with the previously denied email address, odd right? So I'm thinking there must be something natively to Windows that is still tieing that account to the old email, maybe a reg entry or similar? Anyone else had this problem? Cheers

Hi, You could, capture an image of your machine (Ghost or similar), take the hard drive out when you've verified the image is good. Place the new, bigger SSD in the machine, and restore the image to the new drive. Cheers,

Are the updates in the mailbox of the account you're using to send them through to Spiceworks?

Cheers guys, That sounds like the way to go. I've been blessed with only dealing with 2003 + DFL in the past so a little hesitant! Thanks for your help guys.

Hiya, That was my option three, just with virtualising the 2003 server first because I can't roll back the changes. I've never raised such a low FFL/DFL before, so a little concerned about the impact it'll have.

Hi everyone, I am in the middle of conducting an infrastructure upgrade, we currently run one Domain Controller on Windows 2003 with 2000 Native FFL. I would like to eventually get to a stage where we have a virtual 2016 Windows Domain controller, with a secondary 2016 BDC. Hardware is sorted, I just wanted to voice my plan and see if anyone else had a better one? Option 1 - Introduce a BDC alongside the current infrastructure then promote/retire. Because the FFL is 2000, that rules out introducing a 2016 Windows servers as a BDC along side the current DC, it is to my knowledge the best I can do is a Windows 2008? This plan would mean me introducing a 2008 as BDC, then promoting it to DC and upgrading the FFL ... then introducing a 2012/2016 server to the mix, making that another BDC and retiring the 2003 server, this process I think is the safest, but the longest (and most confusing to read ) Option 2 - Build a brand new 2016 Domain controller - retire the 2003. The big bang approach. The big bang approach, remove the current infrastructure and build a new one! I have done this before, however with a FFL so low, and with lack of previous IT to tell me any fancy VPN, Reverse DNS etc configs on the current server, I am a little hesitant to do this. But could be the only way? Option 3 - P2V Current 2003 server then upgrade FFL Final option, virtualise the current Domain controller, then upgrade the FFL. If successful I would be able to introduce a much higher Windows server as a BDC making the process so much easier. Why P2V first you say? Because when you raise the FFL you can't undo your change, so with a virtual machine I could snapshot it prior. (If I had to restore an old snapshot of a DC, what would be the potential issues for connected machines, when they've learnt the new server and suddenly have to connect to an older backup?) I hope that makes sense, I am open to all ideas, please let me know if you have a better one than mine above! Cheers,

Hi all, I need to open ports on our TP-Link TL-ER6120, this is a new device to me and google is proving to be fruitless. I have narrowed it down to either Port Triggering or Virtual Server . Has anyone has experience of this device and can point me in the right direction? Thanks! Ryan

Have you tried RoboMirror? Robocopy with a GUI, there may be a tick box that sorts long file names, makes it easier than command line RoboMirror

Yeah, this is normally long file names, I use Path Scanner Homepage - www.pathscanner.com I have an older free version , looks like they are charging now... maybe grab a trial?

24 cores I imagined I'd have to license it by core!

Hiya, Yep Citrix, Xenserver 7.0 or above. I want to put a few windows server 2016 virtual machines, but not sure on licensing needs. Can I just purchase a physical license ? Is there another, better, cheaper way of licensing these machines? Ryan

Morning all, I am going to be upgrading the infrastructure in my current workplace. I am going to run a Citrix Xen Hypervisor and host a handful of different Windows virtual machines, for example;4 x Windows Server 20162 x Windows 7 With the plan for future expansion. We don't have any Enterprise Agreement and purchase most licenses 'off shelf'. What would be the best way of approaching this? Thanks

Back for us too, DDOS on LGFL apparently

We have daily backups of our critical virtual servers that get put into Azure for offsite / DR backups. And then a weekend backup of all servers for Azure DR . We also have Daily backups for all file shares on our SAN and into Azure. Can never be too careful!

Could it have been that they have saved the picture from the internet, for example, if I saved your attachment for later use? Alternatively, it could be your local anti-virus caught it after it had injected it's files but not encrypted anything, very much how Sophos InterceptX works with wannacry. If you're wiping the HDD anyway, I wouldn't worry. Ryan

No worries! That's a good idea with the DFS name spaces!

That's what I was getting at earlier, it's the easiest way.

Sounds like a pain in the backside! I would do this for permissions: Parent folder (Year 7) - Just have Domain Admin and System at the modify level. Then when you create your user put \\StudentServer\Year7\%Username% in the Home Folder 'connect' area. This should create the folder with full access to only the authorised user, which is the Username of that user. By doing it this way you can create bulk users, or amend bulk users and it will change each Username to their AD username, simples. Hope that made sense too

Hi all, We have over 90 Chromebooks thrown about our partnership trust, and a handful of them are getting the following error: your profile can not be used because it is from a newer version of google chrome... I have done some research and all of the solutions require a flush of the internet cache on the local machine or a rebuild, does anyone know if there is anything I can push through Guite to rectify the issue? As you can imagine it would be a logistical nightmare to try and recall all of the Chromebooks to remove this problem, Ryan

We have done something similar to make out Windows 7 machines into 'ThinClients', the below applies to our machines, but may apply to Windows 10 too! This is what we do, on the local machines under the Reg key; HKLM > SOFTWARE > MICROSOFT > WINDOWS NT > CURRENT VERSION > WIN LOGON. Under the 'Shell' entry you can put C:\Program Files\Internet Explorer\iexplore.exe -k which will launch windows into IE kiosk mode, which removes windows shell, gets around program problem e.t.c Also you can enter a username in DefaultUsername and a (visible however) password into the DefaultPassword field, change 'forceautologon' Dword to 0x0000000 (we may have added this key I cant remember) and the machine will log in with the credentials you have provided and open IE in kiosk mode .... Then either use your local filtering to only push the user to that page... or edit the Host file locally and push all traffic to the page desired

Hi all, I have recently installed a handful of new copiers and printers in one of our Primary schools. I use Con2Prt to map them at logon via a logon script for example : \\10.0.0.0\netlogon\con2prt.exe /c "\\Print-Server\KS1-Copier" Now I know I can place a /d to make a copier or printer default, however what if I want to make the default around the school a 'nothing' printer, like a PDF reader. The reason behind this is that some teachers are printing ''accidentally'' to another printer because they have ''accidentally'' made a printer default, so I would like to revert all printers to default PDF reader e.t.c upon login. Ryan

This sounds interesting, I'm always partial to looking at a script regardless, so if you could post it / send it over that would be great! Ryan

Yep, totally agree. In our main school we have virtualised everything from servers to all curriculum machines, all Citrix XenDesktop ! This primary school has all servers virtualised bar the SIMS server, we have plans to do it, however it isn't right now. So a non virtual DR backup is what I need All the above ideas are great, I'm going to look into a few !