PiqueABoo

Off-hand I think any domain account can validate whether another domain user exists unless default perms in AD have been modified. The AD permissions required to allow some group password changing (plus I hope simultaneous unlocking) are quite fiddly. I made my own code for this and it requires more than just standard Delegation i.e. I had to additionally set some specific perms for the password resetting group.

Guess it depends what you're doing, but all my EWS code deliberately uses ExchangeVersion.Exchange2007_SP1 and that happily works (lots of mailbox enumeration, reading and writing) with newer Exchange versions e.g. Exchange 2010 SP2.

Worth watching.. I didn't learn anything but if I did a best practices presentation it would be very, very similar.. perhaps I should be a consultant for fortune 500s.. The only things in there I do differently are: a) I ignore taskpads because I add things to the standard ADUC context menus i.e. right-click a computer and it's got stuff like psexec command prompts, b) I make pass phrase *based* passwords i.e. the're based on a phrase but are more inscrutable than concatenated dictionary words.

Unless they all had PDP 11s or something on their desks it's a complete nonsense to imply BYOD is a pre-req for hot-desking, office space etc. That can happen without BYOD (and BYOD doesn't automatically deliver it) e.g. county here has long had all that with staff mostly working on county issued laptops.

I'm beginning to think this little general purpose gotcha would make a good interview question: 2679653: The lastLogonTimestamp attribute in System Center 2012 Configuration Manager may not be accurate

MDT and WSUS are completely different.

Ticking/unticking a box is quicker than typing the question here surely? ;b I caught it following IE when firing up the laptop at work this morning (needs a proxy there). The tool tray icon "dims" when it can't connect, fix the IE proxy and it notices and brightens up within maybe 30 seconds. IE isn't my default browser so that's arguably broken, not that I really care to argue.

There are differences but that article is a bit misleading. The Google sentence preceeding their bible-quotes (T&C for personal Google account + GDrive) says: You retain ownership of any intellectual property rights that you hold in that content. In short, what belongs to you stays yours. There's this later in the MS terms: You understand that Microsoft may need, and you hereby grant Microsoft the right, to use, modify, adapt, reproduce, distribute, and display content posted on the service solely to the extent necessary to provide the service. Without studying it too closely, Microsoft's still feels better because of the "solely" part (eek.. their obvious anti-Google strategy has got me!)

For a while at least "average consumer" won't be paying for storage (you saw that graph re. the rationale for 7GB being free). They're so very similar, but Skydrive wins for me simply because the terms of service are very subtely 'nicer' and quicker to grok. Don't really find any of this especially compelling compared to the old 8GB penstick I've always got to hand though.

Haven't tried it, but send them this SKU to look up: 74H-00045 Just found that in an alleged MS 2012 EES Agreement price list and it's the only entry which doesn't have a price.

Is that stated authoritatively and clearly somewhere? Not saying it's wrong, but I thought existing WLIDs would persist independently after transition and keep their SkyDrives i.e. that it's just new users don't get WLIDs and hence skydrive etc once you're on office 365. Too optimistic?

My feeling, not based on facts, is that you're just not going to be able to integrate this into your shiny school system.. the issue is whether you can/do allow this and Google's which is allegedly along next week (note this Skydrive one is called a "preview copy" as opposed to RTM and one imagines this has been rushed out of the door)

::removes gladinet to try this one:: Post installation on Win7 is there any way to reconfig where it syncs i.e. move it from the default c:\users\\SkyDrive? Can't see it in the UI, but HKCU has a path I guess I could try pointing that elsewhere.. and oh look: HKCU implies it installed in and presumably runs out of C:\Users\\AppData\Local\Microsoft\SkyDrive.

It's also the 448th anniversary of Shakespeare's (alleged) birth.. and the 390-somethingth of his death.

They haven't moved anywhere for me.. I use a public folder (PF) where possible, but only yesterday made yet another Live@Edu calendar mailbox plus some reviewer, author & editor groups with respective accesss to it's calendar and told people how to open it. Not automatic, but grown ups generally can cope.

If folk do ignore the nannying and go looking with a smidgeon of common sense (e.g. the inclusion of the word "psychology" in any search about any Bad Stuff[tm] will generally get you sensible results), you'll find like pretty much all research on anything it's not clear cut and in this case I don't believe there's much research to go on (doubtless quite difficult). For instance there's a wikipedia page which mentions: A Swiss [Dept. of Justice -Ed.] study reviewing the criminal record of 231 men who were charged with viewing child pornography found that those without a prior sexual conviction are unlikely to sexually assault a child Whatever stuff CEOP feed you is probably right, but should the cause&effect ever be resolved with absolute certainty I wouldn't want to place a significant bet on the outcome. I think it's best to keep the justifications simple: Whether it causes it or not, it clearly does promote sex with minors and that's not good. Quite, although I suspect the contrary reasoning there is that it's better to have folk turning into couch-potatos playing their murderously violent vid-games than hanging about outside and violently mugging folk.

I don't see many HPs, but Dell has done that for ages they have CABs for WinPE (NICS, mass storage) and lots with all the relevant drivers for specific models. Saves on download link clicking I suppose..

Oooh.. was expecting this any day now this week (had to turn up soon given SCCM 2012 RTM) Hell will freeze over before I do anything like that... I think the point about MDT is that it isn't really a very shiny seriously tested in zillions of configurations app, it's mostly a lot of VBS scripts patching together all sorts of tech that's best done afresh every time. I love it for that in a kind of geek paradise sense because you can see how everything important works and if you have a need, then just go change/extend it.

Most I've been involved with have kept sch.uk, except for one. AFAIC changing from sch.uk is a vanity thing in every sense of the word.. a pointless waste of tax-payers money when we're all supposed to be saving it, and only serves to make it more difficult for external folk to establish whether they're dealing with a bona-fide school of whatever variety i.e. unlike sch.uk anyone can get an org.uk.

Academic question coz I've done EWS: How are you getting to the exchange service? Explicitly or via autodiscover? And is that with the users credentials or impersonation? [i'm essentially wondering about whether that Exchange could be Live@Edu/Office365 where autodiscover+impersonation via some admin account with access to mailboxes could work]

It's in a XPATH query.. I'm reasonably sure you can use double quotes in those to get around this e.g. [@username=o'heck]. Might not be that simple in practice though, so over to Nick...

If outlook can't get autodiscover info from AD it will ask DNS where to go. Does an autodiscover.example.net DNS entry exist (replace "example.net" with your full domain - the bit to the right of the @ in mail addresses) and what does it point to?

Would be interesting to know how many 0-days were sold for serious money and are reserved for [whatever folk who pay serious money want them for]

The 2008 updates to the Computer Misuse Act *already* covers making and distributing hacking tools "with intent".

At those published prices it would have to automatically migrate everything... and train the staff afterwards.