harriuk

Cheers for all this advice guys!! The IP address will be different. I'm thinking that the log off / logon option is the only way. Just wish I had a definitive answer to what would happen and why..... perhaps some testing is needed.

Yes the time to live will be reduced to 5 mins.

Yes that's my thoughts too. Why would it not reconnect? Is this something to do with the local client cache?

So they won't just reconnect once the new server is online and responding correctly?

Hi all I need to migrate a file server complete with shares and I pretty much have it all planned including the cutover but I have one question I cannot find the answer to. I'm migrating files and shares to another server keeping the same name (which I have planned downtime for) what I want to know is what will happen to all those clients that have current mapped drives open to the old server once I have made the relevant dns changes. I want to know specifically how the mapped drive will act when the dns entry has been changed and the ttl has been lowered. I know any new logons/connections will work but what about those with current connections. The clients are windows 7. Thanks all

I know a manual bulk way. In AD Select all the accounts and under the profile section choose a drive letter and then enter \\nameofserver\users$\%username% and click OK. This ( if you have the permissions right) will create all the folders needed under user$ and give each user full permissions. You just then need to setup folder redirection in group policy if you haven't done already. I hope I understood your request correctly!!! Edit: No I didn't understand it fully lol. We had the same issue as you. We created a separate desktop for our assessments and put the fikes on there. The desktop background explained that they had to copy these files into their home folder before they opened them. It worked. On the few occasions students didn't follow instructions the exams officer knew that they hadn't done that and showed them where to save it. Worked really well for us.

Here is your issue https://support.microsoft.com/en-us/kb/2939340. It's not the destination mailbox that needs the smtpproxy address setting it's your on - premise mailboxes. And you'll probably want it to be your real domain, not the onmicrosoft.com one if you want them to continue using the real domain suffix.

If I remember rightly can't you just set up a template and then apply that to the student folders you want. I suppose it depends on how you have the folders set up. Are all the student folders you want to change in one folder. If so you apply the template to the top level folder.

Have you used the chrome gpo to automatically download the imperial addon and enable it? Sorry if you have but worth asking.

We use a hta that sits on the staff desktop you search for users by username or surname and it allows staff to change the password of students. I think I got it from the spiceworks website. I'll dig it out when I get back in on Monday.

Excellent.... how?

Ahhh yes Adfs should be published as a Web server AFAIK.

Yes that is correct so copy that rule, place it above your original rule and make the changes detailed above. By having the new rule above it allows the office clients to connect to the adfs directly as it needs to using the paths it needs as stated above. All other Web traffic to your adfs server will be unaffected as they will still use the original rule. Does that make sense?

OK. You just need to copy your original rule and change the authentication delegation to "No authentication but client may authenticate directly" and the paths need to be (without quotation marks) "/adfs/trust/mex/*" and "/adfs/trust/2005/*" . This rule needs to go above your original rule. Also ensure there is no link translation on any of your adfs rules. Let me know how you get on!

How are you publishing your adfs server? If it's through TMG you need two rules, one for the browser and one for the client "Rich" experience.

Yes. Go for it it really makes the whole experience run smoothly in a school environment. Adfs is not too difficult to get set up. The guide in the office 365 administration page is clear enough to help you.

Yes my thoughts too. It also works great in conjunction with Office 365 as a student can be working on a piece of work and the teacher can view what they are doing on the board in almost realtime (some sync lagging). The teacher can then get the students to discuss the first student's answers and make any corrections on the fly, which updates on the first students work on their screen. Peer assessment and marking all at the same time!!!

You could set up an RD Gateway on each site. It accepts external connections over https:// 443 and routes them on 3389 to the internal server you want to control. Other advantages are that you can set up rules that govern who can connect to what and when.

^^^^^ already dealt with by Sanchez.. my bad!

Going off memory here but if you have copied the files already using robocopy you can tell the gpo to not move files from source to destination - going from memory so not sure exactly what the wording is, but it's there in the options.

Yes that's what i meant you can get the students to set up the server how they want it under strict supervision, let them trash it a few times but once it is completely set up how it's needed, lock it in a cupboard and only allow remote access.

Hi yes. I have done this. We have one of our ICT rooms kitted out with two networks. One for school and one for btec networking. These sockets go into different vlans on a switch. Each PC has two network cards one for the school network and one for the btec networking. The clever bit happens in the switch the school network nic is mac locked so only that nic can connect, so if they plug the btec networking nic in the school network port it shuts down. The btec networking nic is the only one allocated to virtualbox and will only work in the btec networking socket. The way we handled the server was to get the server set up for AD DNS and DHCP connected in the classroom under strict supervision. Once it was set up we moved it into the cupboard in the classroom and only allowed remote access to it on the btec networking network. This server was also used as a proxy server and was connected to a totally separate SWGfL connection directly into the border router. So in affect the btec networking network was completely isolated from our internal network. Hope that helps.

@markwilfan. That only happens when you use a kms key on a client not when using the /skms switch.

Slmgr /skms servername will set the kms server. But tbf it should find it from AD. Slmgr /ato will activate a client.

Err... tell me how!! You kept that quiet with all the trouble we had with Java..