HPlum78

look back through my posts, use PowerShell.

Seems it cannot find the TESTSTUDENT mailbox should it not be export-mailbox -identity teststudent@.......

Attacks are also spreading to GÉANT now. So not just the UK!

Yeah if you look at it like that but no different to being connected to any other ISP educational or not.

Its the research and educational network in short and yeah the old MANS (now gone and merged into JA) and local grids that schools use are connected to it.

https://netsight.ja.net/Public/NetworkSummary.aspx?AspxAutoDetectCookieSupport=1

Skype 4 Business with SIP Trunk is what I would say, loads of options for phones when using Skype including turning your smart phone into your extension and your laptops..... you get the drift. Also if you integrate it into Exchange you have a whole host of very good call routing options and out of hours services and the like. Its all based on products from MS so the learning curve is not so bad (although VoIP is a little complex!)

All kinds of tax implications paying for home BB, also Telcos get a bit jumpy when you ask them to install services to buildings that you don't have any association with in my experience things may have changed on that front mind. 3G router with VPN, or direct access if you have it set up is a good way to get this working.

I have been through this process more than once moving from 2003 > 2012R2 and it may seem scary but its not all that bad, and strictly speaking you are correct in large enterprises you would in normal practice separate the roles out and be able to stop the CA running. But like you say its not always that clear cut and having the lics to do this is a cost that is sometimes just not available. As for not having a CA I don't think some of the services that run on networks would be so easy to deploy without an internal PKI/ CA infrastructure. It all comes down to risk, you clearly don't have your DC's in the DMZ and how likely is it that someone on your internal network is going to sit and find exploits on your internal DC's only you have the answers to I suppose. Hate not having a definitive answer but stuff like this has a lot of drivers and when IT need more resource that conversation more often ends up with you can take a 5% cut!

Hi Chris, Direct comparisons between hyper-v host and VM env is not always as it may seem and needs to be thought about in context. Also raw R/W info is only part of the story need to have a look at queue length also is there a lot of hard faults and the like? perfmon screen dumps would be goo including the above in fact you may find the answer in the above. H

Use PowerShell no cost and you can 1. connect it to any MIS database that uses an SQL (or indeed any other DB) server or 2. if you do not want to spend the time working out the connection strings and the like .csv file will do the job for you. Plenty of code kicking about to do this and is an opportunity to start getting to grips with PowerShell. I say this all the time PowerShell is your Friend here, I am a big advocate of it and has help me secure a good job off the back of learning it, if you need help I will give you pointer my first one is when asked about how I learnt PS I say get-help and still use this today! H

remove-printer depends on O/S I think its native in 2012/ 8 and don't know if it is part of the latest WMF.

Thing with PS it will unless you specify other wise it will use the credentials from the session and for good reason! you have the power to mange that. I need to have a think about how that works with the user as they would have the self ACL that includes the read on their AD object...... hmmm, I will try to take a look in my test env. I have got to dig out a password reset script on post while I am at it!

using chrome? I seem to remember an issue with this just put the error into Google and it will return a fix for you.

or thinking on a bit you could drop the module in a shared folder and use the import-module \\yourshare\Powershell\Modules\ you get the idea...

Don't install RSAT on all of your computers, just put the AD Modules in the powershell folder on the computers. c:\windows\system32\WindowsPowerShell\v1.0\Modules\ on your workstation and you will see the folder ActiveDirectory copy it to the same place on your other workstations via Group Pol would be the quickest. or if you want to flex you PS might use PS to do it for you!

So for those who need an insight (and to clear up for those who do not know who Jeff is. Referred to in my previous post) take a look at the following https://mva.microsoft.com/en-us/training-courses/getting-started-with-powershell-desired-state-configuration-dsc-8672?l=ZwHuclG1_2504984382 Forget its about DSC as that's not the important part! (first 30 mins will cover it) and if you are the click, click, click admin that they speak about think about changing that soon, take a look at the mass of stuff from C9 and MS VIT Academy that Jeff has put up. I am now involved in a lot of projects around automation, DSC and the like. If you are sure that the GUI will be around on your windows server in the future (Nano server!) search for Jeff Snover windows server 2016 nano as he is making it very clear that its the start of the end for the server GUI. Oh a tip for you guys 2x speed will get you through so much content! H

I will get this posted/ get back to those who are interested asap, I have a day of meetings today..... but if I can grab 10 mins I will get it to you.

You miss understand I am not saying put the script in the hands of the end user, the idea is to have your management server do the leg work and to the end user its as hard as using their mail client (don't even have to be outlook) we as Admins do the hard work and leave our users using tools that they have used since the year .DOT! no need for showing them MMC or some other third party tool, no need to go around installing that tool into your desktop image and if you do not want all staff to be able to change passwords then you set the security on the mail box and this can be as fine grained as you like.

I will dig it out and send it over to you.

The day of the click next admin is coming to an end along with the GUI on windows server listen to jeff and retool now, Powershell is your friend here why invest time and effort into third party tools for password and user management when its all in the box?

Setup a password reset mail box, have the teacher mail that account with the student/ students names that they need the password changing in the CC box and then have a powershell script check the mailbox and reset the accounts in the CC box with new passwords and mail the teacher back with the new passwords. No need to hand out custom MMC and throw in a load of fine grained permissions, keep stuff simple and secure.

I thought it looked that way but then looks like in the diagram its a second DC, but it would be good to get it right else I am barking up the wrong tree (in every sense!)

These are just quick checks/ guesses by the way.

Port 389