oapscarface

Digging up an old thread, sorry. In case anybody else stumbles across this thread in relation to the error 'Unknown Server Error', you can find what the error is by doing a little bit of digging in ASM, as of 2023 you can access the error by: Logging into ASM Clicking on your login name in the bottom left Selecting Preferences Clicking on Directory Sync You should see in the right hand pain, SFTP Error Click on Edit This should show in RED what the error is In our case it was Primary keys contain Dupe values

You're correct, you need to be on 1709 or above. You're right though, the sync before that isn't great and while there are other solutions we tried prior to upgrading, none really worked all that well. We just put in place an upgrade program (2000) devices. Took about a year but worth the effort.

Hi Corey We're still on the road to migrating our main server shares, I won't bore you with our process but to help you with your main question I created a blog a while back in which I;ve tried to put everything you need to get going - https://middletonhome.wordpress.com/2018/11/28/onedrive-ondemand-sso/ For the domain question, SSO works by matching the users username in AD with that in o365, you are correct, changing the domain suffix in AD 'should' have no affect on users logging into Windows but it depeneds on whether you other systems that use the whole UPN from AD rather than just the username, I can't think of any systems off the top of my head that would. Adding an additional suffix and changing it in AD to start with should be fine. Your second question, it sounds like you might be getting confussed between OneDrive and Sharepoint, but I might be missreading, for a server share you'd really be wanting to use Sharepoint and not OneDrive, that said, OneDrive can show a SharePoint library in File Explorer BUT it wouldn't be mapped. Personally we've tried both Jos' solution and I Am Clouds solutions, both of which essentially use WebDav but it's REALLY cluncky, it may mean you have a mapped drive letter but in use, working on files larger than 10MB (trust me in a school you'll have more than you think) can be painful. OneDrive On Demand is your best bet. We've moved most of our 6000 users over to it now, most are now used to seeing files in OneDrive and we're just starting to move our SHarePoint document libraries over to the OneDrive app and having them show in there, although I am currently working on how to get that to automatically show these sites on login, at the moment people have to show the document library in a web browser and select Sync to have it show in File Explorer. Hope that helps.

Wow, that's a long list but also very thorough. I can't answer all of these with total correct answers but I can try and answer based on my experience (we're a trust of 9 schools and every one that joins we migrate internally to the trust tenant). If you want simple, keep your existing tenant, do you mean A3 rather than E3? I suspect you can move your A3 licenses but it'll be painful! from memory you get A3 for free if you have an EES agreement but I might be wrong there, it's been 4 years since we set this up. Personally when we started the trust we had 3 secondary schools, one of which was already in o365 but rather than use their forest and tenant we started from scratch, new tenant and new forest, you can still setup trusts between the two in the same way you can with 2 domains in a forest, I think if you continue with 1 forest and 2 domains you'll end up wishing you had just one, just my opinion. I don;t know what the forest is called but if it's the old org name you can pretty much hide it but it will always be there. for cross forest to work and to simplify things you might want to look into ADMT this website Plan and Execute an Active Directory Merger, Part 1 | IT Pro helped me get started. You are correct on the AzureADConnect part, note that when you remove somebody from one domain or set a filter, it will automatically delete that user from Office 365. If I read this correctly you thing a new forest/domain would be harder to manage/administer, I think starting from scratch and getting it right will make it easier to manage than a single forest with 2 domains personally. Can't really comment on MFA but I wouldn't use it for students for sure. ADFS.... Has it's benefits, not least password write back, we've choosen not to use it as it requires on premise servers which removes the resiliency benefits of Office 365, have you looked into Seamless Sign/Passthrough https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso we're now using that as if it can't contact your DC it reverts to normal o365 auth, it also removes the complexity of ADFS. Look into a product called ShareGate for porting, while we're not using it to port SharePoint we are using it to migrate and pre tag data. As for backups..... Well..... I'm taking the view that there's a 7 year retention option and previous versions so while I will get slaughtered for this, I'm relying on MS! We have a potential capacity on Sharepoint and Onedrive of 1.3 PB, even if that were 500TB I'd NEVER have a means of backing it up! I need to spend more time on Compliance Center but I believe the answer to the question of can you set this up later is yes. I've no experience of either Trend or Intune I'm afraid. OneDrive/SharePoint - big one for us ATM this as it's now our main focus. OneDrive On Demand is a game changer, particularly for students, have a read about that, look into Office 365 Pro Plus Device Based Activation (there's stuff on edugeek about it) as you'll want students and ideally staff running that rather than good old Office 2016, this means Office will Sign in when you open it without needing roaming profiles. As for SHarePoint, we're using a company called Cloud Design Box to help with this, we're going at it as a blank canvas, we're not just copying up Staff and Student Shares and then saying that's it, we're teaching staff about Meta Tagging and using that rather than folders, we're then not mapping any drives or even using OneDrive to present SHarepoint sites, we're going web/cloud first and removing the staff/student shares over the next 3 years from on prem good old fashioned file explorer to SharePoint. Hope that all helps. Good Luck.

It is yes, there's a GPO for enabling and managing settings for it. There are some prerequisites but I can't seem to find my document on it, this website seems to cover most of it - https://gshaw0.wordpress.com/2017/11/21/onedrive-files-on-demand-update/ It doesn't 'require' Azure AD Passthrough no, if you're using roaming profiles or people are always on the same machine a onetime config will be fine, with Passthrough/Seamless students can just log into Windows and get their onedrives showing out of the box, one issue though is that Microsoft seem to think that if the user is new to the machine (no profile) then that user needs to have OneDrive installed during login EVERYTIME. I think this is to ensure that you are running the latest version, but it means theres a delay between logging in and then getting OneDrive.

Or you could just give her an smtp alias of the ***trust.co.uk and then change her UPN in o365 to be the new email alias, that way there needs to be no changes, she can also then continue to use her old email address. May not be as easy as it sounds now as it sounds like you have already created her trust account. The process we do is what I've said above, for those moving from school to trust we just add an alias to their existing account and change the UPN to that alias and then set the reply address to be the new trust account. Sometimes people then come back to the school after a years secondment and we can then easily unpick it but just reversing the process.

Second for SalamanderSoft, we're a trust of 9 schools and rely heavily on them provisioning our users on prem AD, Office 365 and now Sharepoint.

I'd second 1709 Windows 10 and on demand OneDrive, I know it's a huge job moving to Windows 10 (3000 PCs to do here) but trust me, performance/reliability of OneDrive On Demand beats any other product. With pass through and seamless SSO https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-pass-through-authentication in place we've not looked back and working flat out to get OneDrive On Demand deployed. Plus it's FREE!

That's been my approach, every time somebody has asked a question I've just put it down, there's many more relating to parents and finance etc that I've not put up there. Few questions: From a device PoV I would sort of say yes, we also have a rather large put for infrastructure, wireless and wired in most schools is being ripped out and replaced with Cisco Meraki. I guess they wanted my input on the hardware side, as in answering some of those questions I put down, there has been T&L input in that they prescribed the need for keyboards. The Pilot, due to start at the end of Jan, should hopefully answer any T&L questions that might occur, or at least that's the aim. Absolutely, top of my wish list was insurance and warranty (so that option has been ticked) and also a tough case with a keyboard, that's all included in the price yeah. An absolute must! We'll see how the pilot goes, TBH the CEO was pretty much Apple from day one and it would need to have been something absolutely amazing for him to shift from that direction. I do understand that, yeah, it's a huge investment for the school and to present it as a bad idea would be, well, egg on face time. Support staff are not being included in this so they'll stay as is, there is an assumption that some PCs, in staff rooms, classrooms etc will remain for access to things staff can't do but as their primary device the iPad Pro 12.9" will have to be it, if not simply because of cost, which leads me to: I don't think I've put trust name down anywhere yet but in case I have I'll answer that question when 'parents' have been spoken to.

Absolutely it is and yes it's just the JumpStart part.

I will get my MDM review sorted once I've got access to JAMF, they're being a nightmare ATM as they want to charge £700 to set up the profiles and stuff which we can do ourselves. As for Intune, nobody we have visited has looked at it, we did have a trial to test with Windows 10S and it looked from an iOS point of view to be massively limited, perhaps not surprisingly, personally I wouldn't touch InTune for iOS management for now, it's that limited and as for Zero Day (lastest iOS) support, I suspect it'll never have that.

Absolutely, I wouldn’t dream of suggesting this personally, not without SMT buy in. We’ll see how we go, I’ll keep my blog up to date as best I can. Pilot iPads arrived today and MDM (JAMF) is being setup ready for us by Monday. Pilot runs until Easter with Apple and a training company heavily involved, we have apple providing initial one 2 one training with out ‘digital champions’ in January, they’ll then start the process of getting staff trained ready for a pilot student group at the end of January.

3 years rolling replacement, I guess I have the benefit of having SMT on board as they proposed the project and Apple have backed me up on that so there’s been little argument. TBF I’m not sure the Finance Director is as happy about the idea as SMT have been. The CEO is essentially pushing this, he’s been the main instigator. His view is that (and this hasn’t been the case for the last 5 years) IT is here to stay, computers/tablets/tinerweb it all needs to be embraced as part of learning, it should be an integral part of learning and not a supplementary part, it’s no longer a subject of it’s own (that’s now computer science) but part of daily life, we all use technology in some form. With that in mind his view is that we need to invest in IT, not keep pushing it under the carpet and hoping it’ll go away as it won’t, if we don’t do this now we run the risk of the investment needing to be more in the future or worse, being left behind completely. There are of course alternative views to this and that good teaching should not require technology and technology, as I have said earlier, in its self will never make a bad teacher a good teacher.

Can’t argue with you there, however (and I’m in no way Apple man, I have a Surface, love it, if the battery life were better I’d be pushing these on all users) what they can’t do is be easily portable around the room, have the app eco system, have the battery life, imagine managing 6000 Windows PCs for staff and students to work anywhere, deploying programs to them with the imediacy that an Apple or Android device can. The staff need a device that’s the same as the students, you could argue for a normal iPad and a laptop for staff but that’s like saying, here you go students, use that for your work, we can’t so we’re going to have laptops as well, but you’ll manage! Microsoft need to up their game when it comes to management/app deployment, SCCM (we use it across our 2500 or so devices ATM) is a beast and deploying one program takes days of packaging and testing and then weeks to deploy, especially across that many machines. I believe MS are getting there, Windows 10S is a move in the right direction, Microsoft 365 and Intune could be the move MS need to catch up but for me, I need to make a decision right now and they’re just not ready. IOS (love it or hate it) is simple to manage, support and deploy.

Absolutely 100% agree with this! I have made this comment on more than one occasion and it got to a point where everybody knew I was going to say it so it just became a joke. I’m from the commercial world and I have yet to see a world where a tablet in any form is anything more than an ‘extra’ device. My blog does cover this. Whether people like it or not Windows is the tool of choice in the big bad world, not Apple, not iPads. I am very worried about this aspect and will ensure that at least some IT rooms with PCs in them remain!