Search the Community

Hello, We migrated our emails from Exchange 2003 to Office 365 last year and everything was running fine whilst our old exchange server was still running. Students and staff passwords were being synchronised from local AD so they only had one password to manage and everyone was happy! Recently we have removed our old exchange server from the network and whilst the bulk of our users have not even noticed, all of our Year 7 pupils are now being asked to change their passwords on O365 independently from AD. This has resulted in a lot of confusion, particularly as it's the younger students being requested to do this. I have checked their users in the Admin section of 365 and it says "Synced with Active Directory" but nevertheless it insists that their passwords are not synced. I have also checked the sync settings on dirsync and upgraded to the latest version and still it doesn't work. Has anyone else experienced this? I could really do with some help as I had very little to do with the migration and have had no training, yet I am now the most senior person employed now and it's left to me to sort out.

This was brought to my attention by one of our teachers.... [GroanAlert] http://www.thesucculentwife.com/wp-content/uploads/passwords-are-like-underwear.jpg [/GroanAlert]

Had an issue with a student comprimising a staf members password last week so I thought I would force all staff to change their network login password. Unfortunately I did this in a hurry and reset them all to blank instead of forcing a password change. I announced this rather sheepishly in the briefing notes in the morning stating that once logged in they will need to change the password manually as a handful had already done this. Although I would have thought it obvious that you cannot have no password at all staff being staff a lot of them still have not changed. (I only no this because the Openfire IM does not allow them to log on with a blank password) I was wondering whether its possible to retrieve the users from active directory who still have blank passwords and set those to reset next logon as i should have done in the first place. I know I could just set them all to do this but think it will cause a lot of complaints (I'm getting enough already for the change in the first place although imho this shouldn't have happened in the first place).

Hi, We have a single domain: @StAwash.xyz; this domain originated in Google (I think) then got ported into Exchange with no changes. As such, when a user signs into Google with their @StAwash account they log into the school via their Google account. When the user signs into Edge with their @StAwash account they log into the school with their Exchange account. I need it so that when they sign into their browser using their @StAwash account the bookmarks and everything will sync nicely. Preferably stored in Exchange and synced, but if it needs syncing both ways then so be it. GCDS/Password sync is already running so if it's an option in there then I win. OR If they are signed into Chrome, this automatically forces them to use the Exchange area to save their bookmarks and passwords. The beauty is that the user will not even know they are signed in, they don't need to use any credentials or anything, as the sign in has to be automatic and hidden to allow some other things to work. They are allowed to see they are signed in, but they won't be able to sign out etc. etc. Is it even remotely possible? I have a feeling it is really simple... Common questions I am bound to be asked: Why are you using two browsers? Edge is standard with Windows, easier to manage because of this, and means I don't have to use Chrome everywhere. However, Chrome is baked into the Win10 image that has been deployed EVERYWHERE. As such, Win11 onwards will be Edge only and Chrome will become a distant memory. Why do you need them synced I feel like it will make my life easier when they swap over to Win11 and lose the ability to use Chrome. But in reality, if it can't be done then so be it. Why not uninstall Chrome from each machine People don't like little changes, and will likely rebel. A big change like going to Win11 convinces them that this is for the greater good. Also can't be bothered with the arguments, pleading, and setting something up in the GPO. Why not use the ...onmicrosoft.com account you get with each Exchange account? Turns out that isn't possible due to Google requiring you to use Google account.

I am having real problems synching our AD changes to GSuite. We have both Google Cloud Directory Sync and GSuite Password Sync installed as per requirements. The only way I've gotten it to work at the moment is as follows: 1. Log into pupil Google account 2. Log into pupil AD account 3. Change pupil AD password which then updates the GSuite password If I do it any other way, the password changes do not sync. I really do not want to manually log into 700 GSuite accounts - what am I doing wrong/how do you do it? FYI we are using the standard free version of GSuite for EDU with our LAN using Server 2012/2016/2019 with Windows 10 clients.

Hi there, First post on here, but looking for some help regarding password protection. We have been asked to send off video evidence of a drama project. And asked to password protect it, due to it containing images of students. However, I have attempted to password protect it using 7zip/winRar but obviously this would require the external PC having one of these programs installed. I just wondered if there is an easier way that doesn't require them to download a piece of software to open. I'm aware this was made extremely difficult when windows 7 was introduced but thanks for any help in advance. James

Hi, It has been a long time since I posted on here. I was wondering what you all think of the LGFL change that happened today regarding staff passwords. Traditionally, LGFL have always allowed approved support and nominated contacts to view passwords for staff. This allowed us to issue new passwords to the staff. If the USO Sync was in place, it also meant we could login as a staff member without having to disturb them to check their machines. LGFL have now taken this ability away - citing GDPR compliance. I take issue with this for 4 reasons: 1. We did not receive notice that this was happening. I am asking LGFL if any was issued. 2. I am no GDPR expert but I have spoken to a few. I do not believe that having the ability to see users passwords was a breach of GDPR. GDPR is all about informing people what is happening with their data and protecting it as much as possible. It would actually be more relevant to hide the staff mobile numbers for example. As long as the staff are aware that we have the ability to see their passwords, then GDPR compliance should be met. Also it probably would have been better to give staff the ability to hide their passwords from support should they wish. 3. In the real world, this change is very impactful. An example is that during half term we are undergoing a change (coincidently LGFL related) at one of our new schools. During half term we are wanting to check various computers and teacher logons. This is now not possible as we cannot see their passwords and the staff are not contactable during half term. Any resets of passwords are going to the staff mobiles and we will not be able to access them. 4. LGFL have stated that 'In order to make it simple and efficient to reset staff passwords we would encourage staff to verify their mobile numbers.' Again, there has been no lead-in time to set this up or prepare. I would be interested to hear if you are affected by this change and what your thoughts are.

Hi all, I was wondering what you would think of this password guidance, found on the Wokingham All in One e-Safey policy

Can anyone please post me a link to a recentish thread about posters reminding users to change their passwords along the lines, "Treat your password like your toothbrush...don't let anyone else use it!", an others but can't seem to find it.

Hi folks, Just curious how many of you reset passwords at the start of the school year, or do you leave them as per previous year? (This is a poll, just in case it doesn't show up for mobile users)