FishCustard

I sometimes make a point of not doing that just to annoy Apple obsessives (and I say this as someone who uses an iPhone - albeit a slightly-out-of-date 6S).

So they're doing another 5S/5C type thing. Interesting.

If they're regular users and permissions on things are set appropriately, they can't do much with the command prompt that they wouldn't be able to do otherwise. It looks like a security hole, but it's not as big a deal as you may first think.

Do you still have this?

No need to split DC and DHCP. Physical DC not required but I'd still recommend it if you can spare the physical box. I'd combine file & print - print uses few resources. Don't use dynamic memory for anything that uses SQL. Wouldn't recommend it for SCCM. I'd strongly recommend your two hosts have the same config - as in same CPUs, same amount of RAM, etc.

Story time?

This Nova-T6? When you say 'swap', what exactly do you mean? Put lunch before/after P4?

Ideally I'd save them for winter, then have a nice big bonfire in the grounds (with marshmallows and everything!), but the Facilities Manager won't let me. Something about 'smoke control zones' and 'approach path to Heathrow Airport'. So we just recycle them.

I think I remember what you mean, but I can't remember the file either. I remember having to hack our Smart Client process apart as it started to refuse to recognise the domain's existence. I managed to keep it working for the extra couple of months needed before it all went away in glorious atomic fire. I also remember that when I started at that school we had to clone 'master' HDDs and then set them up from there! Still, I guess it beats booting from floppy.

"I need to run RM Smart Client to join this machine to the domain properly" For some reason I was thinking about RM CC3 earlier. I do not miss it.

Hmm interesting! Our LA support insisted that we needed to use the installable release for a migration, despite me questioning that! I'm not surprised that they don't know what they're talking about.

Good riddance to bad rubbish. It served a purpose 10-15 years ago, but it's long overdue a burial.

Chromecasts are brilliant for this - you don't in fact need GAFE, you can work around that.

Interesting! Perhaps our 2930s have the same issue.

Another vote for 'build a new server'. It's really not hard to do, the annoying thing is that the last installable release is from 2013 so you'll have to sit through a bunch of database upgrades. Also has the massive advantage of keeping the old server working until you're sure the migration has gone okay.

I've just today finished tracking down one of the oddest Layer 1 issues I've ever seen - our shiny new HP Aruba switches don't like 5m DACs. Using them causes a massive flood of CRC alignment errors on the uplink ports, causing the ports to vacillate on and off. The upshot is that network throughput on said switch understandably drops from the gigabit range to ~10 Mbps. Use 3m cables and everything is fine. This has to be a bad batch of 5m cables right? (I've not managed to find any compatible 5m ones other than the original batch) Has anyone else ever seen anything like this? Do 'DAC testers' exist, so that I can prove once and for all WTF is going on here? Our installers are replacing the cables with 3m ones, so there's no urgency, I just like to understand exactly what is going on.

Like Rob_D we have a script that copies the Start Menu shortcuts to the local drive on boot to prevent this exact issue. We also have it hide any shortcuts for which the target doesn't exist on the local PC. Happy to post the script if you want. We redirect the Desktop to a folder in users' home drives, so they can save whatever they want to it without bloating profiles.

Cantenna? https://www.techradar.com/uk/news/computing-components/peripherals/build-the-ultimate-wi-fi-boosting-cantenna-684073

Just FYI: if you set this up with self-signed certs for testing, and then swap them for proper SSL certificates later you'll need to re-run the Import-RDWebClientBrokerCert <.cer file path> command again, pointing to the new certificate. Otherwise you'll get "unexpected server certificate" errors when you try to connect.

Mount the WIM and inject it that way. Its ACL is limited to only TrustedInstaller I believe, so even GPOs applied under the SYSTEM account can't touch it.

credprovhost.dll.mui, sorry!

I've replaced the file (credprovhost.dll.mui) in our base image with one that says "Please log in" - works just fine in 1803.

Solved! Interrogating the NPS Event log (which it seems you can only view through Server Manager, there doesn't seem to be a way to view it through Event Viewer) pointed to mismatched shared secrets between the NPS and VPN servers. Regenerated these and it seems to work okay. Meaningful error messages please MS! An invalid authenticator != a policy misconfiguration!

Trying to set up Always On VPN and just about ready to scream. I've followed the MS white paper, but I get the below error when I try to connect, and Error 812 in the event log of the client. Can anyone suggest something to try before I blow up the entire infrastructure and start again in the vain hope that whatever I screwed up I won't screw up a second time.

This - do this. Makes your life so much easier.