chaplic

Years back I went on a splurge of getting certs so MBCS I joined and and I think it's CITP I got However for me it seemed to bear no resemblance to the world I see and it assumed everyone was a programmer in environments that have strong academic-like discipline . Also, for me working in a micro-firm (3 employees, and I'm lead) the various hoops / development activities were nonsensical.

Im not entirely sure what you mean by that, but best of luck!

You can't just copy the DB and hope for the best. Theres a CHK file which records which logs are played into the database and which are not, so if you put a old database against an newer chk file all hell will break loose. It's been a very long time since Ive done this but a voice in my back of my head says applying the old database and renaming the check file will cause it check all current logfiles (might take time) and then mount. But I cannot find any reference to that on the internet so use at your own risk Definitely stop exchange services cleanly and take a file copy of the current DB before doing anything, and if it were me I'd not be rushing right now and using the weekend.

If you are using Azure AD Connect, and it sounds like you are, then your identity details will ALWAYS be mastered in AD (and Exchange 2013, sort of). Not sure what you mean by hybrid tool, Exchange 2013 will connect to O365 (and vice-versa) via SMTP to ship mail and via EWS for things like free-busy lookup. Directory info is (with minor exceptions ) AD> Azure AD Connect> Azure Active Directory > Exchange Directory

If you have A1, I’d suggest the minimum you need would be Azure AD Premium P1. You can get that on a ratio of something like 1:15 FTE to pupils and it’s quite decent. Gives you intune and Conditional Access In terms of your own development, get yourself a O365 developers tenant and start doing autopilot!

Hi From Suffolk! Did this pre-covid (just) and never looked back. The office 365 offerings Microsoft gives schools is pretty generous and will take care of most of your file storage needs, intune covers PC management and software deployment. I would say you probably won't be using azure as such; hosting your existing server there is possible but makes little sense. We still have SIMs on-prem because there's not a better alternative. I'd say there is a step-up in technical knowledge required and some things are just not as slick but having laptops vpn-less, access to all data and able to be managed is great (also makes DR plans very easy).

just looked at a proxy pac here which doesnt have the http:// in front of the proxy server but not sure thats the issue However, I recall wpad and the like were considered dodgy security-wise - google dnsserverglobalqueryblocklist as you might have to allow it in DNS to see if that helps. Additionally, for troubleshooting enter edge://net-export Start it, do a bit of browsing and then upload the log - it's quite nice at showing proxy in use per URL

If the VB command work, run procmon whilst it runs and see if it's changing a registry key?

the NLA decides what network it is on, and determines domain network if it can see a DC. I can imagine the netlogon service starting after the NLA service but NLA service resolving via DNS that the best DC is itself. Maybe setting the NLA service to delayed start might be a punt, too?

I’m guessing somehow the network stack isnt running right and cannot see the DC. I don’t think the suffix is the issue as a domain joined machine will apply that automatically. Go into the Reg key shown and determine your network name then change profilename.local to that, run as admin/ system, perhaps set on boot via GP etc. Alternatively I’m sure you can work out a GPP to set, though I assume there was a reason I’ve put the logic in as below.. $o=gci "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles" foreach ($r in $o) {$IP=Get-ItemProperty $r.PSPathif ($IP.ProfileName -eq "profilename.local") { write-host "Change" $ChangeOne= $("HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles" + "\" + $IP.PSChildName) New-ItemProperty -LiteralPath $changeOne -Name 'Category' -Value "1" -PropertyType Dword -Force -ea SilentlyContinue; New-ItemProperty -LiteralPath $changeOne -Name 'CategoryType' -Value "0" -PropertyType Dword -Force -ea SilentlyContinue; } }

You still need DNS server if you have ANY active directory in play - albeit Azure AD joined PC, signing in with Azure AD Accounts, will reduce the burden (and still allow you to access AD resources). Assume you have azure ad connect in place and passsword hash sync, the route to getting to Azure AD only is reasonably straightforward by making the domain MS managed.

I use dhcpserver.de DHCP server on a NUC that also runs PRTG and a second DHCP server on the SBMs PC which also runs sims. It also does basic web hosting which is handy if you have a need for proxy.pac. Everything else on-cloud. Printing I just do IP printing direct to the printer, but it’s just for teachers.

Cant make my mind up if it's connectivity or a logical AD thing. Connecting to things via IP \\10.1.2.3 is going to use different protocols to \\dc2 You say you are confident about the firewall what about local firewall. Has the server decided it's not on a domain network and through the FW up? I would also be looking in DNS very carefully tho ensure every record is tehre and expected and not pointing at wrong IP. I'd also definetly fiddle with DNS settings on various DCs as DavRs suggestion edit: no-one tried something daft with hosts? BTW I had thee seperate sites each with a DC disconnected for several weeks/months (wan bill was not paid!) and much to my pleasant surprise it all sorted itself out with very few issues.

I dont quite understand what you are trying to do, but have you looked at compare-object? it's pretty cool and fast enough for things that size.

If you've got a lot of stuff in dropbox, goodsync might be a good option to avoid manually pulling files down for SPMT to get them

Setup an account to allow SMTP access in O365, write a bit of powershell to send the email and attachment.

Assume that's actually the setting for the shared mailbox proper and not the mailbox that's initially logged into (sorry) An out of office doesn't have the senders from address below the skin, how does your barracuda know its your office365 sending the email? some sort of x-header? and does that apply to the out of office message?

When you setup an out of office, it actually sends two email for every email received and the transport system drops one. So the drop could be a false positive. Dumb question but are the out of office settings on the mailbox correct?

Probably not this, but worth a punt - reduce the MTU size to about 1500. Ideally on the laptop (which I'm guessing you cannot do) but a quick google suggests can be done on router Superhub 5 MTU. - Virgin Media Community - 5040178

Before it starts doing that, you can see what other keys LSASS is looking up (including ones that dont exist) and you might find one that is named 'DontDoThisSlowStuff' or similar. Bit of a crap shoot but cannot see microsoft offering up a support response.

Youve got an issue because, I suspect, no-one else in the world has 50k accounts on an individual computer. AD having 50k accounts wouldn't be unusual. Install DNS on the server, point the DNS settings on the nic at itself, then configure DNS forwarding for your ISPs DNS, run dcpromo. The local user accounts will be upgraded to domain user accounts. There's a reasonable chance that everything might still work. On the flip side if something is still slow there's something well odd going on.

For giggles Id try turning it into a domain controller; 50k users isn’t going to be a big deal and there’s lots of sizing info out there (you might find your app just works!) if it’s still slow then it’s not directly related to user accounts

Subtle I know. Even less subtle would have been to say I’ve been involved with Exchange since version 5 and every version in between and at some point in the past clients would pay lots of money to parachute me in to solve issues exactly like this. Phone Microsoft.

So Im guessing something enumerating something and let’s say it’s 10 seconds per user then it’s gonna be forever. I’d try going hardcore disabling services especially things like WMI to see if that helps. Id love to get a procmon trace (and you can configure it to do boot time logging) but the question is, how do you get it off the machine Having just said disable all services, can you enable powershell removing and get into it via powershell from another machine when it’s spinning away to see what its doing?

Phone microsoft. Eseutil /mh against the database will tell you if its dirty which it might be if you have deleted log files (why) Take a file-copy of the file with no exchange services running. When is the last time you done a sucessful test restore phone Microsoft.