Search the Community

Hi all, Left LA a while ago but my AD domain is still name.region.sch.uk which I'd like to change (if its not going to cause me too many problems). Our domain has always been that named that way instead of ****.pri or ****.local since before I worked here. Has anyone ever renamed their domain ? If so how did you do it? I take it that all the client machines had to be rejoined ? Cheers in advance

I'm still rocking the 2003 forest and domain functionality. I was thinking of just raising them, do I go Forest then domain.. Does it matter? All 2012r2 DCs and a few 2008r2 members and 1 2008 server. Any troubles I should check for first?

Wix tech support are telling me that I need to add an "a record" pointing my domain "beaminster.dorset.sch.uk" to point at the wix ip.. I have for a long time had a cname record pointing the address "www.beaminster.dorset.sch.uk" to wix, I thought that should be enough... I'm almost certain that if I did create the "a record" they request all other internet addresses (the non www ones) would break. This they tell me is why the TLS cert no longer works. (although it had worked for over a year prior to this)

Hi i got a strange problem. Ive got a windows server 2008 r2 server domain environment with windows 7 64bit clients I have a teacher in our school that is deleting her files that she doesnt need. she logs out, then the next time she logs back in the files return I have del proffed the machine i have gp updated the machine. i have deleted her from AD and then recreated her. and its still doing it any ideas?

Greetings, We are looking at migrating to 2008 Server this summer in order to run Windows 7 with full functionality. Its the first time i have personally done something like this and I need some advice please. I have 2 x 2003 server standard domain controllers, call them DC01 & DC02 It seems that all the FSMO roles are on DC01. DNS is installed on both servers while DHCP is installed on DC01. I want to keep DC01 as the main domain controller as its the higher spec server of the two. My main questions are.. 1. Is Server 2003 upgradeable to 2008 or will it need a re-install. 2. Assuming it is upgradeable it is possible to do it in-situ without having to move roles, demote, remove, upgrade, promote. Are there any pit falls and what is the procedure for a process like this? 3. If it isnt possible to upgrade and a reinstall is in order, whats the procedure for moving roles, demoting and re promoting. Will i still keep policies and all the other settings we currently have. 4. Is it possible to have a back up of the server in case this goes horribly wrong? Many thanks for any help you can give! James

Dear all, I've recently set up 2 windows servers, running server 2008. At the login screen after your press CTRL ALT DEL it used to give the format: **OurDomainName\Administrator e.g. mydomain\Administrator However now it's for some reason giving the format: **OurFullyQualifiedDomainName\Administrator e.g. mydomain.internal\Administrator Being relatively new to windows server 2008, any help or advice would be greatly appreciated as to why this has suddenly changed. Many Thanks.

I thought I'd open this problem up to hopefully get some different perspectives. The problem is as follows: As a school we support our primary cluster in their ICT and for a significant period of time now they have had to authenticate against our GFL proxy to gain internet access. It has always been a problem to the teachers in the primary's to try and get young children to remember the log on details, and the initial concept of authenticating was to track users browsing habits. This never materialised though and is now used for filtering. I'm looking for ideas really how I can get rid of the secondary authentication for internet access. The primary schools log on to the computers within school, all have Windows Server 2003 DC. The secondary authentication then ties into the GFL Smoothwall filtering and I do not think that an ISA server in each school is a viable option as they would then require local filtering also which is unpractical. Google throws up interesting options such as ADFS but haven't really found any references to using it in a situation such as this. Just wanted to get the opinion of others to see if they've encountered this issue and/or solved it. I appreciate any replies.

I have server 2019 members just fine the domain controllers x3 are 2012r2 the forest and domain are functional 2008r2. I think I can just go for 2019 in place upgrade but people are mumbling about SMB1.0 needing to be enabled. Do I raise the functional level to 2012r2 (can i) just to tickle some memories for those who did this 5 years ago Once I get them to 2019 I can raise again to functional 2016? cheers

Could anyone clarify this for me, We are a large secondary school with 400+ 6th form students, when asking JISC to register for a .ac.uk domain name i was told by a phone operator at JISC that we need to be a primarily based 6th form school in order to register. Days prior to the call I submitted an application for a .ac.uk domain name and we paid the fee for it. Thinking it would be rejected I dismissed pursuing the application process and now when I login to my domain name registrar the .ac.uk domain name is now appearing in the control panel. Has anyone else in a secondary school managed to get a .ac.uk name? or have I managed to register one by mistake?

Hi Everyone, I'm trying to install SIMS' Attendance module on our teachers' laptops and I'm having some problems. We have a curriculum and an admin network and I have no control over over the admin network - it's being administered by the council's ICT services. So, a while ago I asked them to setup a trust, which they did, but I can only see the share from the curriculum server but not from any of the clients. I have verified there's a two-way trust and I can ping the admin server by name. I've contacted ICT services again, but I've been put on hold and I need to sort it relatively soon. Has anyone else had this issue, or have any ideas on what to do? Is there something I could from my end? Thanks

Hello. we use Comodo Antivirus for Linux in a network with limited internet access. Only whitelisted addresses are allowed. For enabling Comodo to get updates, I therefore need the IP address or Domain name that Comodo uses for its update. Does anybody can help me? I didn't get any answer from Comodo so far... Thank you very much in advance, Martin

Hey guys, I'm creating a new domain for a department in the district who has a separate setup than the rest of our district, and I've always used .local domains in the past. However, for this setup I'm thinking of using the actual domain name, . Now, if I use that domain name when I configure this new server running Windows Server 2012 Standard when I'm adding the Active Directory role, can anyone see any downsides? This server also hosts the website for this department via IIS [previously 6 on 2003, now will be 8 on 2012], which is accessed at , the same domain. As I said, in the past, I've used .local on their last network [XP/Server 2003, which I'm currently switching them from and then updating their laptops to Windows 7 and connecting to the new domain once I've configured it]. Does anyone see a problem with using the same domain name as the internal Active Directory Domain? I'd usually think not, but I seem to remember in University at one point our instructor saying "if you make the domain name the same as your external domain name you may have some issues". Any advice would be great! I plan to install the Active Directory roll today. Thanks in advance!

Hey Guys, I'm new here! I was hoping someone could point me in the right direction. Some of the staff have an application called 'Spark' IM installed on their computers, it is no longer used therefore we want to remove it from everyone's computer in the domain, i was hoping somebody could advise me the best way to do this and how to do this without having to manually remove the application 1 at a time. Maybe a script or group policy to remove the application maybe? Thanks in advance.

Hello, Here at our school we have a curriculum IP range and an admin IP range. Being the ICT technician my computer frequently needs to connect to both to manage some printers, resources and perform certain tasks. Our server has two network cards which are both patched into our network and on the same domain. All the switches are attached (i.e. there is no physically seperate admin / curriculum network). My question is- is it possible to operate on both these networks at the same time from one machine? If not- what could I do to make the process easier?

Hi, lurked for a while, signed up today! The issue I'm having is we have a classroom using a lapsafe, running 12 laptops all trying to go through a wireless access point. This room happens to be next to a house that has an unsecured wireless connection. What happens is the laptops seem to keep going to either one connection, a lot of time the unsecured network - the unsecured access point must be way more powerful than our access point in the same room. The students are not able to log into the domain a lot of the time, even though the wireless is turned on and signifying that it is working. The college access point is of course saved onto the laptops as the default connection for these computers. Is there any way we can somehow 'lock' the one wireless connection to each laptop? So it refuses to join the unsecured network no matter what? Cheers!

Hi all, We've been having an ongoing fight with machines with trying to get them to respect what we're setting up, either through ignoring GPOs or just changing behaviour. Students: Our students use Mandatory profiles. We did have an issue last year where Chrome did not work, due to an issue with it interacting with a cryptographic service, but that has been resolved. All machines are now running Windows 10 1809, Enterprise. Intended behaviour: A student logs in, receives the shared mandatory profile. Does work, signs out. Machines delete the user profile on log-off. Policy in place to delete user profiles older than 1 day, to catch any others. Roughly six months ago, on 1803, this worked. Actual behaviour: A student logs in, receives the shared mandatory profile. Does work, signs out. The profile stays on the machine (200MB each, minimum). On logging in again, it uses that profile. If there is ever an issue with that profile, it prevents them logging in with a "Group Policy" error - "Cannot load profile", which means their profile must be manually removed from the registry. The issues we're running into are students not being able to log in (due to the profile error), machine hard drives filling up and students saving work to the machine, rather than network storage (we can't redirect Documents/Appdata due to Creative Cloud throwing a wobbly). Policies configured for the profiles: Public Key Policies/Certificate Path Validation Settings/Stores[url="http://www.edugeek.net/"]hide[/url] [TABLE="class: info"] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [/TR] [TR] [TD]Allow user trusted root Certificate Authorities (CAs) to be used to validate certificates[/TD] [TD]Disabled[/TD] [/TR] [TR] [TD]Allow users to trust peer trust certificates[/TD] [TD]Enabled[/TD] [/TR] [TR] [TD]Peer trust certificate purposes:[/TD] [TD]Client Authentication; Secure Email; Encrypting File System[/TD] [/TR] [TR] [TD]Root CAs that client computers can trust:[/TD] [TD]Third-Party Root Certification Authorities and Enterprise Root Certification Authorities[/TD] [/TR] [TR] [TD]For certificate-based authentication of users and computers, along with CAs that are registered in Active Directory, the client computer must use should also use user principal name (UPN) constraint compliant CAs[/TD] [/TR] [TR] [TD]Disabled[/TD] [/TR] [/TABLE] System/User Profiles[url="http://www.edugeek.net/"]hide[/url] [TABLE="class: info3"] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Add the Administrators security group to roaming user profiles[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD]Delete cached copies of roaming profiles[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD]Delete user profiles older than a specified number of days on system restart[/TD] [TD]Enabled[/TD] [TD][/TD] [/TR] [TR] [TD="colspan: 3"] [TABLE="class: subtable_frame"] [TR] [TD]Delete user profiles older than (days)[/TD] [TD]1[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [TH]Comment[/TH] [/TR] [TR] [TD]Do not forcefully unload the users registry at user logoff[/TD] [TD]Disabled[/TD] [TD][/TD] [/TR] [TR] [TD]Do not log users on with temporary profiles[/TD] [/TR] [TR] [TD]Enabled[/TD] [/TR] [/TABLE] Staff members: Staff members use Roaming profiles and have a separate set of User OUs and Machine OUs. On first logon, with no network profile, the Start Menu (list of programs, not tiles, redirected via GPO) appears as expected. On second logon, or a logon to a new machine, the Start Menu only contains the automatically-added programs (Mixed Reality, Photos, Cortana...). Deleting the NTUSER.dat file from the staff member resolves the issue as long as they are using machines they have a profile on. Going to a new machine requires the deletion again. Folder Redirection is set up for all document folders and libraries, to their Network Home Drive. ExcludeProfileDirs is set up with "AppData\Local;AppData\LocalLow;$Recycle.Bin". Unfortunately I'm at a loss on where to go next, for both issues. Students were fixed and working, and as far as I can see should work ("Delete user profiles older than 1 day" is pretty explicit...). Staff members, everything I try to look up leads me to issues about the Tiles, which we do configure, but I'm much less concerned about. Has anyone encountered these before, or have any idea where to go from here? I've heard rumblings around Roaming and Mandatory profiles being phased out for... something else, but I've never seen anything explicit on what to do instead - running without profiles just fills the local drives. Many thanks!