coreykeeling
-
Posts
67 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by coreykeeling
-
We contacted them as the instructions state but they wouldn't provide the password as we are not the key contact but the funny thing is neither is our headteacher. The LEA are now in talks with the DFE and the company to get these passwords. If anyone has the password for the HP model I would appropriate it as the laptops are currently collecting dust at both our schools.
-
Morning, I have recently gained access to our Aruba wireless network after it was managed by a MSP who didn't keep it up to date. We have a mixture of IAP 105 and 205 with a virtual controller on one of the 205 models. Yesterday I updated both models to via the virtual controller but using the manually way with a tftp server due to the firmware being old it had a expired certificate so wouldn't talk to Aruba for updates. The 205 updated to 6.4.4.8-4.2.4.6 fine but for some reason the 105 didn't update and now they are not communicating with the VC due to a mismatch in versions. I have tried updating them individually via the CLI using upgrade-image tftp://X.X.X.X/ArubaInstant_Orion_6.4.4.8-4.2.4.6_58505 it then says it will automatically update the swarm and reboot but doesn't work. Has anyone had the same issue that can help?
-
I have now found a script that will mark OneDrive files as online only. I have not tested it yet. https://techcommunity.microsoft.com/t5/Microsoft-OneDrive-Blog/OneDrive-Files-On-Demand-For-The-Enterprise/ba-p/117234 https://gshaw0.wordpress.com/2017/11/08/onedrive-files-on-demand-first-steps/
-
It seems if you use Windows 10 1903 you can use Storage Sense with GPOS to automatically clear the files in OneDrive if they haven't been used in X amount of time. https://www.windowscentral.com/how-manage-storage-sense-settings-using-group-policy-windows-10-may-2019-update I have been unable to find a script yet that will automatically clear the files.
-
I mean the taskbar icon. If you click it and it brings up OneDrive there is a button you can click that takes you to your folder but it opens O:\%Username%\OneDrive which then allows a user to go back and browse the rest of the drive. If you click on OneDrive from File Explorer it doesn't let you do this.
-
I liked your idea about creating an extra partiton to get around the issue of the C: drive being restricted. I tested this idea out today but using a 8GB partiton instead and I can say it worked. We used the OneDrive GPOs to force the location of the OneDrive location to O:\%username% I have found that if they right click on the OneDrive icon in the taskbar tray and click open folder then it will go to O:\jsmith\OneDrive - Tenant and they can traverse back and see everyone else's OneDrive folder.
-
The issue with OneDrive Mapper is that it uses the webdev protocol which can be slow. I have another thread about single sign on with OneDrive and people there have recommended I don’t use mapper due to its performance.
-
Sorry I have just seen some of the threads about it. What permissions and other restrictions would you suggest? We pretty much do the standard locking down of users. No CMD, no Run, Software Restrictions. C drive permissions I suppose will be whatever are default for Windows.
-
We are currently testing out OneDrive and I have it working with single sign on but our users can’t access the OneDrive folder due to the C drive being restricted on our network. I was wondering how other schools have managed to get around this when deploying OneDrive?
-
For schools that are using OneDrive how do users access the OneDrive folder? We block the C: drive so during my testing they couldn't access OneDrive folder on the machine.
-
This is the Microsoft article I used. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies Wherever you install the Azure AD Connect tool it must be accessible to all forests you want to sync. I didn't need to add any trusts between forests. The client will ask for your domain credentials for each forest and will then create a sync account. The only issue I am currently having is that if some users are in multiple forests then SSO will only work in one of the forests. If anyone can help with the issue I would appropriate it. Sorry Sted, I also followed this article https://www.itprotoday.com/iaaspaas/syncing-multiple-forests-azure-ad
-
It is possible now as the AD sync tool supports multiple forests but with a single sync server so you do have to have a connection between your forests.
-
I have found a Microsoft article which answers my own question about preparing Active Directory for Azure AD Connect. https://docs.microsoft.com/en-us/office365/enterprise/prepare-for-directory-synchronization I have one more question which might be too complicated. We have one Office 365 tenant which is shared between two schools on there own AD domain. 5 users will be in both ADs is there anyway we can link both of them to the same email address so both can benefit from SSO on either site?
-
That is great! Did you have to edit anything in Active Directory so that Azure AD Connect knows how to match AD Users with Office 365 users? Our AD usernames are [firstinital][surname] and our Office 365 is [firstname].[surname]? I am thinking I have to add there email addresses to the mail attribute in AD. Have you migrated there home drives and if you did how did you do it? Thanks for advice @jmak and @oapscarface
-
Morning, Our school is looking to migrate a network share over the summer holidays with the possibility of migrating most of our file storage to Office 365. I am looking for some advise after doing some research. I know that I can use Azure AD Connect to sync my local AD to Office365 and have seamless sign on but our internal domain uses a .internal address so I know I need to link them. I have read the following article from MS https://docs.microsoft.com/en-us/office365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization that says I need to change the suffix to my routable domain e.g example.com if I do that will it affect how users login to there computers? Second how would I go about creating a mapped drive? I have read that there is a script by Jos Lieben but it can be slow as it uses WebDev. Some people on here have recommended the OneDrive client with Files on Demand but how do you turn this into a network drive so that our users don't notice anything different? I have also been told that MS Teams can be better used for a network drive over SharePoint which is harder to manage. Appropriate any help. Corey
-
No mouse and keyboard when trying to install Windows 7
coreykeeling replied to mattwilkinson7's topic in Windows 7
I don't know if you have done this or not but you could inject the USB3 drivers into your Windows 7 installation disc. We had to do something similar with a our HP models as Microsoft no longer supports usb3 with windows 7 with the newer processors. -
RM does not use group policy to deploy Network Drives but uses a RM component instead to deliver the drives and also printers. I would say the RM component isn't loaded with RemoteApp and so the users drives are not mapped. There home drive will be as that is done by AD,
-
Your public certificate has the IP Security IKE Intermediate EKU but I don't seem to be able to add that on mine. The rest seem the same. I'll most likely start again on Friday.
-
Sorry the photos were from my NPS and RRAS Server. Here is a photo of a user cert on the client machine which is the same as yours.
-
I have the same setup as you but still no luck. Do you have two internal certificates one for NPS and another for the VPN Server? Photo of mine:
-
Unfortunately not but thank you. I have the user certificate deployed to the machine ok and have the options ticked as recommended in the comments.
-
Afternoon, I have been following the following guide to setup Always on VPN with IKE but I am having issues with IKE not finding a valid machine certificate and I don't know why. Part 1 https://www.petenetlive.com/KB/Article/0001399 ​Part 2 https://www.petenetlive.com/KB/Article/0001403 I am using a Windows Server 2016 with RRAS and NPS. I have a public certificate which is installed under Local Computer > Personal > Certificates and two internal certificates stored under the same location. The one private cert just has the following EKU Client and Server Authentication where as the other cert has Client & Server Authentication as well as IP Security IKE Intermediate. The client machine has a user certificate with client authentication and a machine certificate with client & server authentication. Can anyone help me to see where I am going wrong? I know Microsoft does not have a lot of documentation on the Always On VPN feature but it is something I would like to implement with the new staff laptops. Regards I
-
Thanks all. The problems have now resolved them selves by reinstalling the configuration. The mysteries of IT.
-
Afternoon, I was wondering if anyone has any guides on setting up DirectAccess? I am currently having issues with the Network Location Services being non accessible when I add it into the DirectAccess wizard even though I have created a internal cert and setup a IIS page for it. The internet seems to have fragments of guides all over the place but mostly focus on the two adaptor solution but I am using only one. Regards
-
Evening, I am looking to do my Microsoft Certified Solutions Associate qualification and was wondering if anyone had any recommendations for providers? I am looking to do it long distance as work is unlikely to give me the time off to go to a class and hoping they will fund it but have to get some quotes to them. Cheers Corey
