Search the Community

Hello, Is it possible when creating new users in Active Directory for them to have auto created Google Classroom Accounts? I've been trying to research it online and through this forum but haven't had the best of luck, and I apologise in advance if I am duplicating a thread that I've not found.

Hi All, I'm fairly new to the systems used within education but i'm quickly picking things up! I work at a trust where the trust hub is on a school site. The hub has its own AD set up and the school has its own. I need to merge these two domains to be one. Does anyone have an easy-ish process on how to do this? Id also be extremely grateful of any useful tips and tricks with Active directory. Many Thanks Dan

We have user-space quotas setup across the board split by the key stage of learning-e.g KS3 -500mb KS4 - 1GB KS5 - 2GB Year on year as they progress up though the school the student's groups get automatically provisioned in AD but the quota change is still a manual process... anyone know of a way this can be automated?

Hi I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get this done with a group however... I have tried the following search filters: - (&(memberOf=cn=ProxyAccess,ou=pfsense,dc=MyDomain,dc=local)(sAMAccountName=%s)) - (&(objectCategory=user)(memberOf=cn=ProxyAccess,ou=pfsense,dc=MyDomain,dc=local)(sAMAccountName=%s)) Whilst trying to authenticate, I run tail -f cache.log and I cannot see any errors Can anyone please assist me? Is there also a way getting more detailed logging so I can try figure out what is going on? I am assuming it is the search filter as I can authenticate when just using the user search filter Your assistance is greatly appreciated

We want to set a Group Manager for all of our security groups so that we know who to contact for info on them all. By group manager I mean the 'Name' filed under managed by. We have a LOT of security groups. I was hoping I'd be able to run a fancy script to 1. pull out a list of all the groups and maybe the first 5 members 2. Send an email to these 5 members so we can ask who manages them. And that was kind of as far as I got but any ideas welcome as to how I could automate it so we don't have to manually edit thousands of security groups. Cheers, R

Hi, So Im fairly new to installing Windows Server 2012 r2. So my issue is when a computer tries to connect to the domain it says domain could not be contacted. So my server ip is 192.168.3.253 it has DNS and DHCP with AD and my gateway is 192.168.3.254. So i ran a ipconfig/all everything seems to be good. I then ran nslookup and was good too. But then i ran dcdiag /test:dns and i got an error. I was wondeing if someone could tell me what i did wrong? heres the link to see the error photos Postimage.org / gallery - Clipboarder 2015 05 18 021, Clipboarder 2015 05 18 022, Clipboarder 2015 05 18 025 Thank you Testing server: Default-First-Site-Name\ZEUS Starting test: Connectivity The host 8dd8e9a2-e109-46d3-9978-1f085bac3f8d._msdcs.casa.local could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc. Got error while checking LDAP and RPC connectivity. Please check your firewall settings. TEST: Basic (Basc) Error: No LDAP connectivity Warning: adapter [00000010] NVIDIA nForce Networking Controller has invalid DNS server: 192.168.3.253 (ZEUS) Error: all DNS servers are invalid No host records (A or AAAA) were found for this DC TEST: Records registration (RReg) Error: Record registrations cannot be found for all the network adapters Summary of test results for DNS servers used by the above domain controllers: DNS server: 192.168.3.253 (ZEUS) 1 test failure on this DNS server Name resolution is not functional. _ldap._tcp.casa.local. failed on the DNS server 192.168.3.253 Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext _________________________________________________________________ Domain: casa.local Zeus PASS FAIL PASS PASS WARN FAIL n/a ......................... casa.local failed test DNS

Hi All, I work at a school where we have the following setup - Users > Students > Year 7 ... and so on What I would like to achieve is so that every student in Year 7 is part of a Year 7 'security group'? and then when they move up to Year 8 they're removed from year 7 and added to Year 8 - Is there any sort of 'Dynamic' groups that I can use in order to achieve this? Many thanks, James

Need to give an AD group execute permissions to a particular folder on the c drive of cover 550 computers and I want to automate this.

Hello everybody In the hope somebody can help me. At our business their is a Follow Me server setup with enrollment of a smartcard. Normally not to many issue with it (or user related), but recently their was a report of quite a strange issue. A user has to re-enroll every time he want's to print, every enrollment is been done with the same badge that gives the same code. The user is not manually deleted (since I'm the only on active on the follow me webpage). Has anybody encountered a samelike issue? I've checked if the expiring was not activated and this was not the case. Since our follow me server has been linked with AD, should I be more looking in that direction, or could it be a setting that I'm looking over? Thank you in advance for the help

Hi All I have noticed that my account in AD has recently been locking out and dont know why. Its since I have changed my password. I now in the past we have had this issue and I want to try to find the root cause for this issue and identify a simple way to address this. Done the usual checks like changing my password on active sync (as that is usually a culprit) removed all credentials in credentials manager on my client machine. Now I have used the security log on our PDC emulator to help me identify the computer which I think might be locking out my account and I think it is event ID 4740 in security logs which gives me the answer however I am not 100% so just wanted to ask if anyone knows a better way (possibly in the form of a windows app) that will tell me this information with ease, if not an app possibly a script of some sort. It's getting really annoying and just want to find out the root cause. Any advice would be appreciated. Thanks

Hi All, We have currently set up via powershell an authorisation list that can email to certain AD Distribution Groups. At present we add users one by one manually via AD in Attribute Editor using the users "distinguishedName" Value then adding it to the "authOrig" value. Is it possible to do use the Distinguished name value of a security group that certain users are in to allow group authorisation? Thanks Lewis

Hi, I am trying to set up folder redirection of the documents folder for all users. Now im sure that if i have \\servername\share\%username% as the home folder path and set up documents redirection i will end up will all the folders being renamed as Documents. One of the things Microsoft recommends is to create all home folders like the following \\servername\share\%username%\Documents which would work fine but when i put that into the profile settings for each user then it complains that it cant find the file path. Ad will create the file path if the location ends with the %username% but apparently not when you add another folder like 'Documents' after it. Short of crating something that creates the file path first, is there anyway i can do this? Thanks Mik

Hi, I have had to re-install Azure AD connect on our server as I could not find the Synchronization service manager. I have setup the AD groups again that I think where selected. When I select run to initial a sync I have the following options and not 100% sure what to choose as all the accounts are in Office 365 now and have previously synced but I just need to sync it again and don't want to delete any on-prem data. The options I have are below, what should I select? Thanks in advance

Hello everyone, I am trying to make a program inside of power shell/powershell studio that lets teachers be able to change students passwords pulling the information from AD. So far I have managed to make AD pull information into my GUI and display the information however I am struggling to get a working search box inside of power shell studio to work pulling information from AD. As well as this I am struggling to get the program to only search from inside one OU rather than how it is at the moment where it is pulling from the entire root directory. The source document for powershell studio is here: password reset.zip Other wise the code is as follows: Mainform.psf $MainForm_Load={ #TODO: Initialize Form Controls here } $buttonCallChildForm_Click={ #TODO: Place custom script here if((Call-ChildForm_psf) -eq 'OK') { } } $A_Click={ #TODO: Place custom script here $buttona.text = "A" $users = Get-ADUser -f { surname -like 'A*' } Load-ListBox -Listbox $listbox1 -DisplayMember name -Items $users #TODO: Place custom script here } #region Control Helper Functions function Load-ListBox { <# .SYNOPSIS This functions helps you load items into a ListBox or CheckedListBox. .DESCRIPTION Use this function to dynamically load items into the ListBox control. .PARAMETER ListBox The ListBox control you want to add items to. .PARAMETER Items The object or objects you wish to load into the ListBox's Items collection. .PARAMETER DisplayMember Indicates the property to display for the items in this control. .PARAMETER Append Adds the item(s) to the ListBox without clearing the Items collection. .EXAMPLE Load-ListBox $ListBox1 "Red", "White", "Blue" .EXAMPLE Load-ListBox $listBox1 "Red" -Append Load-ListBox $listBox1 "White" -Append Load-ListBox $listBox1 "Blue" -Append .EXAMPLE Load-ListBox $listBox1 (Get-Process) "ProcessName" #> Param ( [ValidateNotNull()] [Parameter(Mandatory=$true)] [system.Windows.Forms.ListBox]$ListBox, [ValidateNotNull()] [Parameter(Mandatory=$true)] $Items, [Parameter(Mandatory=$false)] [string]$DisplayMember, [switch]$Append ) if(-not $Append) { $listBox.Items.Clear() } if($Items -is [system.Windows.Forms.ListBox+ObjectCollection] -or $Items -is [system.Collections.ICollection]) { $listBox.Items.AddRange($Items) } elseif ($Items -is [system.Collections.IEnumerable]) { $listBox.BeginUpdate() foreach($obj in $Items) { $listBox.Items.Add($obj) } $listBox.EndUpdate() } else { $listBox.Items.Add($Items) } $listBox.DisplayMember = $DisplayMember } #endregion $buttonB_Click={ #TODO: Place custom script here $buttonB.text = "B" $users = Get-ADUser -SearchBase "ou=Student" -f { surname -like 'B*' } Load-ListBox -Listbox $listbox1 -DisplayMember Name -Items $users } globals.sp1 #-------------------------------------------- # Declare Global Variables and Functions here #-------------------------------------------- #Sample function that provides the location of the script function Get-ScriptDirectory { <# .SYNOPSIS Get-ScriptDirectory returns the proper location of the script. .OUTPUTS System.String .NOTES Returns the correct path within a packaged executable. #> [OutputType([string])] param () if ($hostinvocation -ne $null) { Split-Path $hostinvocation.MyCommand.path } else { Split-Path $script:MyInvocation.MyCommand.Path } } #Sample variable that provides the location of the script [string]$ScriptDirectory = Get-ScriptDirectory

Hi I'm in need of a bit of help, we are trying to move around 1000 computers from under the ou of one place example:Site into multiple ou's within ad. For example everything is currently under "site" but we would like to break it down into room numbers for troubleshooting. Example: Site >Admin >Staffroom1 >Students >Classroom1 Does anyone know if it is possible to do this with a csv and PS ? for example: a csv or text file with and then use powershell to move the 1000 computers ? [TABLE=width: 500] [TR] [TD]Name[/TD] [TD]OU[/TD] [/TR] [TR] [TD]computer1[/TD] [TD]room101[/TD] [/TR] [TR] [TD]computer2[/TD] [TD]room102[/TD] [/TR] [/TABLE] Many thanks for any help. Phil