HPlum78

Ah that will slow you up... :-p

First thought would be to get to the latest cu/ ru whatever we are calling them these days for 2010 before you do anything more. I think it 23 maybe... (26 at first glance). Then you should be able to get a 2016 box in making sure you get the latest installer, from memory having the hybrid configuration should not stop you installing a later version of exchange with the roles that you require, although you should probably make sure you rerun the HCW again as this is updated all the time. Don't think that it tied to cu/ ru/ version....

So to sum up the link provided enable additional NTDS logging via the Reg key, then it's a case of looking at the logs to determine whats going on.

Any event ids?

But with either way you create or devolve the permissions either up front via a local user account, or scripted its down to the end user clicking a button. You should have a process for requesting local admin/ more priveledged access. If you script it then it can be logged and the you can audit and then you know when your workstations are empire'd!

What's the underlying protocol being used by this and Salamander soft? Also is RULER an iCal calendar?

I am sure that the Power Users group in Windows 10 has no more permission than any standard user these days? (if you are using win 10) Also you should really try not to add domain accounts to workstation local groups if you can. Can you not just create a local user with the required permissions and have them elevate when required? If you use Laps then with a bit of PowerShell you can expose that to the user when they request it and then at the next gp refresh the permissions are removed. No need for a restart as the permissions are injected in to user token. (that's all from memory so I could be wrong on the group bit of win 10, no access to any win client....) https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models

Take it that its found an issue? If so post it and we maybe able to be able to help.

No it's not a tool that can repair any issues more for exposing an issues to hell you focus on any errors and use other tools to fix them.

@TomHD I was not having a dig at you there (you had a smilely face) just used that figure as you already had.

https://www.microsoft.com/en-us/download/details.aspx?id=30005 Dcdiag and repadmin but in all honesty use the tool above.... Oh and first guess dirty shut down?

That's an interesting question, 5% is a lot! And what is "acceptable" depends on what the traffic is. 5% while streaming audio/ video would be i suppose acceptable but not the best experience, where <1% is what you would be looking for. Could do with narrowing down where the packets are being dropped, so is it at the switch/ ap or at the server so on and....

So yeah try your up most not to use IaaS as that's not where you are going to realise any cost benifits really. As already noted above stuff for a school would be PaaS in the most part I guess so web apps rather than standing up an IIS server, SQL is offered as PaaS now so you could start to leverage that potentially instead of on prem SQL boxes. Each use case is individual and you need to take what is most appropriate as unless you are a greenfield it's unlikely that you are just going to take a cloud only approach in any flavour. Also you should try to build solutions that don't have a mass of cross dependencies between on prem and cloud services. We use a multitude of Azure offerings, Web apps, data factory, functions and function apps the list is never ending. But we develope our own solutions. Like the creation of team sites is based on an Azure function using Flow and our IT Ticketing system. We have a function that populates our students/ staff Outlook calendars with data that is sent from our timetableing solution using the graph API (10000 calls a min as apposed to EWS 50!) So if I am trying to say anything it's that it's hard to say you should do this or that more of what do you want to ultimately achieve....

Huh, ask someone with a horse and carriage what would make you more effective "Another horse" is the answer that's because they don't know that the car exists. SaaS is exactly what you should be thinking about using it for if not PaaS. I have posted about this more than once and its late.... And having just spent yesterday taking with Jeff Snover mayby you should listen to some of his channel 9 stuff and then decide what Azure can/ should be used for.

i think you need to create a meeting policy and config the "private Meeting" setting to disallow. then apply that to your students. PS is something like Grant-CsTeamsMeetingPolicy in fact this is what i was thinking of:- https://docs.microsoft.com/en-us/powershell/module/skype/new-csteamsmeetingpolicy?view=skype-ps see here https://docs.microsoft.com/en-us/powershell/module/skype/grant-csteamsmeetingpolicy?view=skype-ps

Ah it all comes flooding back to me.... yeah we automate our user uploads to Uniware and send over our own card CSN numbers so that our users can use the mifare cards that they use for everything else. Is SIMS your golden source for all your identities? and if so do you store all the required details in SIMS? if so then the above from @Jona is the simplest way, anything else you would need to shoehorn the data together from the various systems in a staging table or PowerShell to build the data for the integration. Happy to delve into this deeper if needs be.

Adding more cores is an interesting one in a VM environment as it can work against you. The service bus has to be able to allocate the resource on the host so the more cores on each VM the harder it is for the service bus to find time for allocating the required resources..... There are a lot of factors involved in sizing hosts and the VMs running on that host, contention ratio's and all that.

Nice one @ThomL good to see. And agree loads of options for more automation as you have suggested.

Magic packets need the mac/ ip to work, if I remember rightly. https://gallery.technet.microsoft.com/scriptcenter/Wake-on-LAN-via-Host-Name-a2d00b67

Yeah expensive when you are in the realms of 50 pb, should have been clear around the sizing in my initial post!

In place was my stance for a long time, but now it's makes no sense to do a rebuild. MS's position is in place is fully supported and is also their recommendation. As already noted if its tin that is being replaced then its a fresh install and even the its in with the new out with the old! Again the process employed by MS for win10 and server 19 is in place upgrades essentially.

Sorry more expensive than the US data centre prices.

@djrscally I had discounted backblaze as they don't have an operational EU/ UK (you should really consider what you are storing outside of the EU) data centre so are at the moment discounted for being a target to backup to, also they have not firmed up what the pricing will be as they have openly stated its going to more expensive.

Broadband connectivity in any school (or business) is a sunk cost these days you can no longer identify this as something that can be sacrificed just like your water and gas (speed of connectivity is a different matter) This risk that your all talking about of the supplier putting the price up really, MS could put their on prem licensing costs up in fact when they got hit by the EU fine for IE they put the price up to the exact cost of that fine. VMWare they are not known for price hikes are they! So don't tell me that on prem solutions are any more reselient to price increases than the cloud. I am not saying that the cloud is THE defacto solution either its somewhere in between. Stop running on prem hardware and start being transformational in the cloud or on prem.

Backing up your on prem data to the cloud is an interesting one and its not as straightforward as a direct comparison. You have to have a good reason for considering architecting a solution like that and in the most part it's not cost effective the ingress and egress costs alone make it too expensive for most. The statement about cloud not being able to save you money is something I don't agree with. If you compare a web server on prem with a direct copy (infrastructure and all) to the cloud then you are not taking the right parts of a cloud service. If you set the same Web site up in a SaaS offering on the correct consumption plan and scaling there is no way that you are able to deliver it for the pence a day that you would pay in Azure. I have covered this in many posts just like this one, if you have an on prem depenancy on a service then keep it on prem prem. If not look towards the cloud but the right parts of the cloud. If you as standing up a VM then you are are not going to save money that's not where the savings are realised. Look at PaaS and SaaS as that's where the savings are.