HPlum78

Are both servers GC's?

powershell - Stop-Computer [[-ComputerName] ] [[-Credential] So something like $objWks = get-adcomputer -server [YourDC] -SearchBase "ou=[YourWorkStationOu],dc=le,dc=ac,dc=uk - Filter {IFYouWantOne} -Properties * $objWks.name | % {stop-computer} You could add in a test-connection so it only sends the stop-computer to computers that are really there, you should also make it output a log file so you can see what's going on. You could also add a wait and retest to make sure the computer is shutdown and if not add that to the log so you can check out why computers are not shutting down, you can test if it has an active user session before you get the boot for killing the heads machine! so on and......

Can we be absolutely sure with what's happening to the traffic when you start outlook up, something as simple as netstat maybe able to tell us if we are hitting a proxy. If you can wireshark or tcp view would give a deeper dive into what's happening to the traffic as it leaves your clients. I am almost certain that the issue is a proxy getting in the way, do your servers hit a proxy? Who is the isp? Do you maintain your own proxy box? Let me know your thoughts. H

This is one of my biggest problems with this as well. Clickview if you have used them have is one of the only providers out there that use AD federated services. Why is it that this set up is so few and far between, Surly the days of CSV files are gone now that we can use access tokens from just about anywhere! I don't teach so will pick my words carefully and say that in my mind some of this software should be far better than it is, so instead of these companies just taking the money it may be an idea if they used it to one update and two intergrate.

Both are good and have and do and will use them both, moving forward in education I would use hyper-v makes even more sense if you start thinking anything cloudy! (azure)

Can you put a workstation on your server vLAN and run the test from there? and yeah office on servers not what I would be doing!

That's how I would expect it to look so this is looking more and more like a proxy getting involved! Can you bypass your proxy?

I seem to think in a screen shot you posted a build number of 8 so exchange 2010? so something like get-autodiscovervirtualdirectory | select internalAuthenticationMethods I think! post the output back if you will H

yeah xml looking at xls files! :-P right so I think we have your problem you should not be prompted for a username and password if you are accessing the autodiscover from inside your network. Need to take a look at the Auth methods / do you proxy all your http/https traffic? if so have you got exclusions for your mail server?

That looks good, so from an internal workstation can you browse to https://mail.cartmelprioryschool.co.uk/autodiscover/autodiscover.xls do you get prompted for credentials or do you get the invalid request response? H

Right so the thing is outlook on domain joined workstations use the SRV method as the last option to find the auto discover service. The SCP is the first (LDAP to AD looking for the SCP) these will be sorted as in-site or out-of-site lists outlook then tries these in order. if that fails outlook then connects to some predefined URL's so you should also have in your DNS some A's that point to autodiscover.cartmelprioryschool.co.uk after that it's the SRV's.

What is the keywords attribute look like?

take it the serviceDNSName is set to the NetBIOS name of your mail server?

So outlook seems to be using the SRV DNS entry although not getting the mail sever!, while I think about that lets take a look at the SCP. The above is a screen shot of AD Sites and Services take a look at that on your network drill down to your mail server and look at the attribute editor and check that the serviceBindingInformation attribute is https://mail.cartmelprioryschool.co.uk/autodiscover/autodiscover.xml H

Should be in the cps.local zone. Let me know . H

did your SRV point to the AutoDiscoverServiceInternalUri so mail.cartmelprioryschool.co.uk on port 433?

sorry | fl at the end and could do with having a look at the output if possible, also what have you got as your _TCP autodiscover SRV dns?

get-clientaccessserver

Gateway/ Route issue would be my guess, what are the settings of the NICs? and a route print screen shot from the server. H

Like Cman we have two hall projectors and a mobile unit for the Gym to use, but like others I do not consider these "Spare" as in the most part they have bookings. Also like TechyKev we have two netbooks that the students who fall though the asbestos factory roof at the weekend can use (These netbooks seemingly have the same fate as his!). I am known for my ability to fit kitchens and fix cars of a certain Defender type and I have never turned up to do this sort of work and then started asking if I can borrow a Chop Saw or a 1/2" socket set from the customer (freind)! so why is it seemingly ok for third parties to turn up to our School without the tools they need? if students start to turn up without pens and the like should we as schools keep supplying these spare resources as well? maybe this has changed since I left school and this is now the norm, I ain't sure that this is a good thing mind. Anyhow with that said I am thinking about resurrecting some of this kit from our graveyard here and going with a take on the orange paint idea but using vandal grease instead I think the demand for "Spare" kit will tail off over the coming weeks! Thanks to all who have responded H

This maybe a strange question to ask! How many of you out there have spare laptops available? I ask this as I have a constant stream of requests for 2 or 3 spare laptops for this meeting and that meeting, now I have worked in Schools, Colleges and Unis over the past 20 years nearly and I have never seen the spare laptop or indeed spare ICT kit cupboard in any institution I have worked in. I am curious to see if this is now something that schools have as when I say to SLT we don't have such a resource as spare laptops I am looked at like my head has fallen off. And made to feel I should be keeping them along with the spare set of Encyclopaedia Britannica and spare Mini Bus! This is then followed by a visit to the technicians office for them to pick up random laptops off the desks and saying this one will do only to be disappointed when they find out that our office is actually a graveyard or a work in progress!

look at the switch! (log files/ run ter mon if its a cisco) would maybe help you to see what is going on.

Could this be an ACL some where? by default VLAN do you mean that you have got your servers on the management VLAN of your switches? or do you have a default server VLAN setup? anyhow that aside packet trace to see what's going on and where. Another solution is to post the config of your switches (Core as well as edge) so that one of us can have a quick look.

I have just replaced my HP SAN MSA1550 (I will add that this was a good SAN although come with its own interesting issues!) fibre setup with a HP Store Virtual Setup and I can say for the price I got it at its a very good system and now have a 3 tier 7k, 10k and 15k setup. Although if I had the money I would have gone for a 3PAR but hay we have to heat this place during the winter!

Just tweaking subnets on your Routers seems a risky business if your provider has not allocated them to you! If this is a truly managed network that they are providing for you I would also say that giving individual schools the keys to the realm seems an erroneous practice to me and if tech departments in and around Birmingham have just been allowed to participate in such activities then it must make for a very flaky network and I guess that this is really not the case. NAT would seem the way to go here as this then frees you from the shackles of this type of setup, you know where your network starts and the Brum network ends. Anything you do on your side of the NAT is irrelevant to anything past the NAT. This also gives you more scope for managing and securing your own internal network. If indeed external companies need access to internal resources then you have a whole host of available IP’s that you can direct NAT to etc etc. On the other hand I can see why this type of setup is installed as there is an extra layer of hardware needed in most cases by each school and someone in each school to be available to manage that, so as a cost approach the install is not the wrong way. Note that I am guessing a bit here as I do not know the ins and outs of your individual networks, and it’s a bit like plumbing what makes sense to one don’t always make sense to another! But that does not make any solution wrong or right.