Search the Community

Hi, For some WEIRD reason I've been having issues with our user profiles (Windows 2003) in that I have duplicate folder names (e.g. swilson, swilson, swilson) but when i open one of them it will be the profile for a different user in the address bar!! If I change the folder name to that user- it duplicates the name and replaces the folder name of some others almost randomly... what's happening? I thought it was a corrupt profile at first but it looks like something else may be happening. Any ideas? It's driving me nuts.

Hi All, I have a user provisioning issue. I need to see if the new Year 7s have been created in AD. however i'm not sure on what OU or containers they will have been placed into. does anyone have a script that i can run that will return a list of users that were created on a certain date? hope this makes sense. Ryan

Hi everyone, We are using Google Credential Provider for Windows (GCPW) on our PCs. The majority of these machines are currently domain-joined, although going forward, there is no requirement for them to be. Local profiles are created when users sign in via GCPW. We want to ensure the following happens automatically when a user logs in using GCPW: Automatic sign-in to Google Chrome. Automatic sign-in to Google Drive for Desktop. Google Chrome is set as the default browser. We have Google Workspace for Education Standard. Has anyone successfully configured these settings for users logging in via GCPW? Any advice on how to enforce this would be hugely appreciated!

We have a couple of laptops in school that staff take home and use a local (non-admin) login to access the pc when at home. Is there a way to prevent them from saving documents, etc onto the desktop? I want to stop them from saving all their stuff there and instead use their cloud storage or pen drives to save their stuff. I've looked around and the only way to do this is when they are connected to the domain, but as they are using the laptops at home, this way won't work. Does anyone have any ideas?

Hey Edugeek, I've had a user responsible for attendance come to me to say that she entered a whole school's worth of attendance for a couple of days, but come back to it to find 50% of it missing. I'm tempted to say that it was just a failure to hit save, but has anyone ever encountered users reporting attendance just disappearing? Cheers in advance.

Is it possible to see which users on a network have accessed a word document/PDF file on a shared drive? Or is there some VB code that would provide similar? Many thanks

Hi All, Wondering if someone has come across this before or been asked by their school. One of the schools i look after want to be able to give students individual passwords and have them recorded in a spreadsheet or similar. Are there any software applications or scripts that can apply passwords from a spreadsheet to users in AD? Or will generate random passwords in english and apply to the users. EG 'whale12' I know it cannot be done with CSVDE and i already have a VBS to bulk change users passwords, but applies the same one for every user. Can anyone help?? Buddy

Hi I need a little help and advice. We have some networked fizzbooks for our students (Primary School). I want the children to be able to take them home, log on, do their work, save it, log off bring them in to school and when they log on to the network all the work they did on the laptop is synchronised with the school server... All the users have the same logon username and password. Is there a way for the children to be able to log onto the fizzbook under the school domain, at home, even when the domain isn't available? Hope this makes sense! Jay

I am trying to write a script that when users leave and are moved to a Leavers OU, a scheduled script runs and exports their email to PST, moves their Home Folder to an acrchive and clears all their custom attributes. The PST export works, the clearing of the custom attributes works but I cannot get the moving the home folders to work, any assistance would be appreciated. # Import Modules Import-PSSession $Session -AllowClobber -DisableNameChecking # Variables $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://server.domain.co.uk/PowerShell/ -Authentication Kerberos $OU = "domain/leavers/staffleavers" $Search = "OU=StaffLeavers,OU=Leavers,DC=domain,DC=co,DC=uk" $filepath = "\\server\archive$\PST" $movesource = "\\server\homefolders$" + $userhome.name $movedestination = "\\server\archive$" # Move leavers email to PST on Archive share Get-Mailbox -OrganizationalUnit $OU | foreach { New-MailboxExportRequest -Mailbox $_.Alias -FilePath ($FilePath+($_.Alias)+".pst")} # Move leavers home folder to Archive share Get-ADUser -Filter * -SearchBase $Search | ForEach-Object ($_.samaccountname) { if (test-path($movesource)) { Move-Item -Path $movesource -Destination $movedestination -force } } # Clear all leavers custom attributes Get-ADUser -Filter * -SearchBase $Search | Set-ADUSer -Clear "extensionAttribute1" , "extensionAttribute2" , "extensionAttribute3" , "extensionAttribute4" , "extensionAttribute15"

Hello all I'm not sure this is the correct section for this. so sorry if its not. Is there a tool / program for exporting information from SIMS to make our active directory users and groups.. possibly even mail lists? we are soon going to be managing our users ourselves (moving away from our LEA) and I just think SIMS will be the best thing to work from as it already knows all the staff students and timetable. dose any one know of such a program or script? If not I guess I'm going to have to make myself one Thanks Pete

Hello. We've just got some new PC's in school with Windows 7 on them. When joining them to our 2003 domain everything goes well. The user can see their folder share and other shares...but it comes up with 'Windows has logged you on with a temporary profile. All changes you make will be lost etc...' It just doesn't seem to want to pick up the profile for the user. We have a generic profile folder for all our class logons called 'student' which holds all the desktop and start menu settings etc... The XP machines log on no problem, they pick up the profile and everything is sweet. If someone logs on as 5B- it works. If someone logs on as 4F- it works. Why are the Windows 7 machines not doing it properly?? Any ideas??

Hello! We recently had our 2008 R2 server migrated to 2016 and it's brought over a few issues I need help with if possible, in relation to folder permissions for home shares. Users have lost access to their Home shares. I've had a look and the security permissions don't show their name anywhere in the properties of the home share folders on the server. The name of the folder is the same as their username. In AD I have put in \\server\userdata$\users\%USERNAME% on an individual user in properties and it grants them full permission as needed following a dialogue if i would like to grant them access. What I want to know is - how do I do that for multiple users at once? I've done it in AD and it comes back saying folder already exists but doesn't ask about granting permissions, so the path changes to their username in properties fine but doesn't set permissions on the folder. Is there a new way on 2016 that just works? All help massively appreciated!

import_users.zip I've been working on and tweaking this code for the last few days in-between the other normal jobs that we all have to do and this is the result. <# .SYNOPSIS Import AD Users from a CSV File. .DESCRIPTION Import AD Users from a CSV File. The script will request user input for a password and LOG / CSV file and then just get on with the task at hand. .NOTES Authors: © Alex Haines Modified for use at Millfields First School in Bromsgrove by Alex Haines in December 2010. Original basic code was from a TechNet forum post - http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/5b0420a6-2ff7-445f-8887-07c295073f45 Some other code was taken from another TechNet post later on to add Home Folder features - can't credit as can't remember - sorry! Last edited on 09th February 2011. This script ASSUMES a Domain called "millfields.local" You must edit appropriate spots to reflect the CORRECT domain name in your environment. Also ensure and test in a TEST domain vs production before unleashing the script. YOU HAVE BEEN WARNED!!! .PARAMETER CSVFilePath Path of CSV file to import .PARAMETER LOGFilePath Path of ERROR LOG file if needed during script processing .EXAMPLE import_users.ps1 -CSVFilePath C:\Scripts\Users.csv -LOGFilePath C:\Scripts\ErrorLog.txt #> # Forcefully request info on where the LOG & CSV file should be created. param ([parameter(Mandatory=$True,HelpMessage='Path of ERROR LOG file to write to:')]$LOGFilePath, [parameter(Mandatory=$True,HelpMessage='Path of CSV file to import from:')]$CSVFilePath) # Test for existence of supplied LOG - if not exit. if (Test-Path $LOGFilePath){ Write-Host '' Write-Host 'The Path to the ERROR LOG file appears to already exist. APPENDING TO & CONTINUING SCRIPT!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen LOG file (' + $LOGFilePath + ') already exists! Do not panic, I will just append to it.' | Out-File $LOGFilePath -append } else{ Write-Host '' Write-Host 'The Path to the ERROR LOG file is not valid. CREATING & CONTINUING SCRIPT!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen LOG file (' + $LOGFilePath + ') was not valid! Do not panic, I will just create it.' | Out-File $LOGFilePath -append } # Test for existence of supplied CSV - if not exit. if (Test-Path $CSVFilePath){ Write-Host 'The Path to the CSV file appears valid. CONTINUING SCRIPT!' Write-Host '' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen CSV file (' + $CSVFilePath + ') exists so the script continued!' | Out-File $LOGFilePath -append } else{ Write-Host 'The Path to the CSV file appears invalid. EXITING SCRIPT!' Write-Host '' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': ERROR 4 - The chosen CSV file (' + $CSVFilePath + ') did not exist so the script had to be terminated as there was no work to do!' | Out-File $LOGFilePath -append Exit } <# Get a temporary password for the users. If you don't the accounts will create no problem but they will be "Disabled" accounts. This will mean you have to go through and enable them after the import. As we don't really want to have to do this, I advise you leave this step in place - you could hardcode the $Password variable if you wanted as it makes no real difference. For Secure Mode use -AsSecureString (This blanks out the password as you type and hides it from view when using 'Up Arrow'). #> $Password=READ-HOST 'Enter a Temporary Secure Password (eg Golf!911)' -AsSecureString <# Go through EACH item in the list (Header row is treated as variable names by default) #> $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': Start of the main loop.' | Out-File $LOGFilePath -append FOREACH ($USER in (IMPORT-CSV $CSVFilePath)) { <# I could just Assign straight in from the Cmdlet but I'm putting them into Individual variables so you can see how the data is referenced (check your CSV headers, those are the exact names but are NoT cAsE sEnSiTiVe). A standard csv from county will be given with 6 Headers givenName | sn | gname | department | uname | ctPassword #> $FirstName=$USER.givenName $LastName=$USER.sn $JobTitle=$USER.gname $Department=$USER.department $Username=$USER.uname $Password=$USER.ctPassword <# You will see that most of the lines below don't have any data in them - this is deliberate as in most situations, the schools won't need them. If you do, just replace with the correct header name as your csv file requires in the format =$USER.header #> $Title='' $Office='' $Email=$Username+'@millfields.worcs.sch.uk' $Extension='' $Mobile='' $Address='' $City='' $StateProv='' $PostalZip='' $Country='' $ImmediateSupervisor='' $HomeDirectory='\\ALABAMA\Homes$\'+$Username $HomeDrive='Y:' $ProfilePath='\\ALABAMA\Profiles2010$\'+$Username $LogonScript='student.bat' $Domain='millfields.local' $UPN=$Username+'@'+$Domain $DisplayName=$Username+' - '+($FirstName+' ').Substring(0,1).Trimend()+'.'+$LastName $Company='Millfields First School' $PhoneNumber='01527 831 885 + '+$Extension $Web='http://millfields.networcs.net' $Description=$FirstName+' '+$LastName+' belongs to the '+$JobTitle+' group and joined the school in '+$Department+'.' $Fax='' <# SAM USERID cannot be greater than 20 characters so trim away - LEGACY! #> $SAM=(($Username+' ').Substring(0,20)).Trimend() <# Check to see if the user already exists. If it does add it to an error log and then continue with the next user. If it doesn't then add the user and loop. #> $count = Get-QADUser –samAccountName $SAM | Measure-Object if ($count.count –gt 0) { Write-Host 'The user'$SAM' failed. This is because the user already exists!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The user ' + $SAM + ' failed. This is because the user already exists!' | Out-File $LOGFilePath -append } else { # Create the home folders and assign permissions. # Checks starting character of accname and load balances to two (or more) servers if desired. $server1 = 'a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z' #$server2 = 'o','p','q','r','s','t','u','v','w','x','y','z' Switch ($SAM.substring(0,1).tolower()) { { $server1 –contains $_ } { $homeserver = '\\alabama\'; break; } { $server2 –contains $_ } { $homeserver = '\\alaska\'; break; } } # Test for non-existence of created home directory - if not skip creation. if (Test-Path $homeserver'Homes$\'$SAM){ Write-Host exists? $homeserver'Homes$\'$SAM $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': ERROR 6 - User ' + $SAM + '.' | Out-File $LOGFilePath -append } else { # Make the directory. Mkdir ($homeserver + 'Homes$\' + $SAM) } # Construct two commands to add Read/Write access to the directory. $cacls1 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":R" $cacls2 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":W" $cacls3 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":F" $cacls4 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":C" # DEBUG #Write-Host $cacls1 #Write-Host $cacls2 #Write-Host $cacls3 #Write-Host $cacls4 # Now create the user. NEW-QADUSER -ParentContainer $Domain'/Imported' -Name $DisplayName -UserPassword $Password -City $City -Company $Company -Department $Department -email $Email -FAX $Fax -Firstname $FirstName -Lastname $LastName -Mobilephone $MobilePhone -Office $Office -Phonenumber $PhoneNumber -Postalcode $PostalZip -samaccountname $SAM -StateorProvince $StateProv -StreetAddress $Address -Title $JobTitle -UserPrincipalName $UPN -webpage $Web -Description $Description -displayname $DisplayName -HomeDirectory $HomeDirectory -HomeDrive $HomeDrive -ProfilePath $ProfilePath -LogonScript $LogonScript $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The user ' + $SAM + ' succeeded.' | Out-File $LOGFilePath -append # Run the two commands. cmd /c $cacls1 cmd /c $cacls2 cmd /c $cacls3 cmd /c $cacls4 } } # Close the log file. $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': EoF' | Out-File $LOGFilePath -append ' ' | Out-File $LOGFilePath -append The code works well and successfully imported my users into AD with their home folders all correctly assigned. The only thing I had to do afterwards was move the users from the Imported OU to the correct OU and assign them to any groups, but this is very easy to do. Feel free to modify or recommend changes, but please post them back on this forum or send me a PM. Also, if you are going to use it or republish it, please link back to this post so Edugeek can get some more members. Oh and if anyone is wondering why I didn't use one of the many other scripts out there, I found that none of them would work in a Server 2008 R2 environment!

Hi, I was wondering how to set a standard font for all users' outgoing messages, so that each message will automatically default to that font with a standard signature. I think I have worked out how to do the signature using a Transport rule, but cannot work out how to do the email font. Is this actually possible? We are using Exchange 2007 with Outlook 2003. Thanks.

I'm working with the MRBS calendar system, and have it set up with LDAP for my school. Right now, everyone who logs in with their username and password is a level 1 user, so they have rights to book a room in any area (since the only levels of authentication are 0-anonymous, 1-default user, and 2-administrator). I was wondering if anyone could help me add code to some of the files to give permissions to users, allowing them access to only book rooms in certain areas, but not the right to book any area. I assume if i created different user groups (a different authentication level for each), it would be easier to add to the already created functions and "make permissions", so to speak.