Azure Help

This is an odd issue I can't figure out. I have several remote users who log in to our network through a Sonicwall using NetExtender then into our Terminal Server through Remote Desktop. They are set up in the Environment tab in Active Directory to start the specific program they need upon login so they are just taken directly to the login for that program (Abila HRMS HR program).

One user (MP) can login just fine and after connecting through Remote Desktop they see the login screen for Abila HRMS. This is where the problem starts. The user logs in to HRMS and then just sees a blank screen (note: this user is using a laptop).

I had another user (SK) login at her Desktop computer using the other user's credentials and after logging into HRMS, she sees the HRMS program running minimized. She maximized the program and disconnected from the session leaving the program up and then the other user (MP) was able to login to HRMS and see the program. But if he logs out and tries to get back in, the same thing happens. I tested MP's login from a laptop and had the same issue, I just see the blank screen.

Basically the HRMS program is starting minimized and the user MP can't see it as it must be off screen on his laptop (and from the laptop I tested from), but the user SK from her desktop can see the minimized program at the bottom and then maximize.

Is there some sort of setting that would force the program to start maximized for this user?

7 Comments

CompTIA Cloud+

LVL 13

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

I'm migrating to new hardware from SBS 2011 to Window Server 2016 Standard (not Essentials), I will add the Essentials role. I've done half a dozen SBS 2011 to Windows Server 2012 R2 Essentials and to 2012 R2 Standard but it's be a while and this is 2016. We are not migrating Exchange, already on Office 365. We don't use WSUS or Sharepoint.

I am looking for a step by step document, I previously used https://blogs.technet.microsoft.com/sbs/2014/03/31/windows-server-2012-r2-essentials-migration-keys-to-success/ but that is from 2014. Is there a more current step by step for 2016?

2 Comments

Could someone explain to me the difference between Anywhere Access and a VPN with Remote Desktop on Windows Server 2016 Essentials? I am in the throes of setting up remote access and have to figure out how to set this stuff up. Any advice on how to proceed would be appreciated.

11 Comments

Our Remote Desktop Gateway is Windows Server 2016.

I need to be able to disable a RD CAP and RD RAP via powershell. We are going to set up a scheduled task to run the script to disable certain RD CAP and RD RAP rules. So I need to be able to disable the rules by name.

Ideas?

James

2 Comments

I created an Azure VM using the CIS Hardened Ubuntu image. When setting up the VM I chose to use a public/private key to access the VM. This was in April of this year. Now when I logon its telling me my password has expired but we never gave the user a password.

I'm guessing that this is due to the hardened CIS image and it wants us to change the password. However we dont know what the old password would be. Using the serial console in Azure I can create another admin user and i tried to use chage -d -1 <user> but that doesnt seem to work.

I'm wondering if anyone else has come across this issue or can help me find a way to remove the password expiration.

7 Comments

We currently have a AD domain with two replicating 2012 Server DCs. Domain Functional level is at 2012.

The Primary DC is a physical server with Windows Server 2012 Standard, and will be (7) years old.

The other replicating DC is a Windows Server 2012 DC that's a VM. The Hyper-V server that hosts this VM and another VM that is an Exchange 2010 Standard server is Windows Server 2012 Standard and is also close to (7) years old as well.

Overall, AD is healthy without issues. At the end of this year we will retire the existing Exchange 2010 server and move to O365 hosted mailboxes.

I am getting ready to purchase a Dell R440 that will serve as a Hyper-V server. Will purchase Windows Server 2019 Standard. I will install a new VM that will replace the primary 2012 DC that's on the physical server.

I also have an existing Dell R440 server that is a Hyper-V Server with Windows Server 2016 Standard. I have one VM that is a Windows Server 2016 that serves as a Storage server.
I plan on spinning up a second VM on the server to serve as a new replicating DC server.

When I purchase the new Dell R440 server along with Windows Server 2019 Standard, should I go ahead and install the Hyper-V Host with Windows Server 2019 Standard, and then also install the new primary DC that will hold all FSMO roles as a Windows Server 2019 Standard VM or downgrade it to Windows Server 2016 Standard?

I already have 25 Windows Server 2016 CALS. I can go ahead and bite the …

15 Comments

Really I just want to check that what i am doing is a supported config.

I have 3 servers i use for HCI using S2D 2019.

I have 3 Virtual Disks all using 33% of the storage minus 1 spare HDD for failure(cache + ssd + hdd) seems to be working ok.

I want to add 8 1TB drives into each of the servers to create a new virtual disk that only uses cache + hdd.

The HDDs are a different model than the HDDs used in the other 3 virtual disks. I know that i should utilise only the one storage pool, but would i still be in a supported configuration, on top of that how would it know what disks to create the new virtual disk on? I dont want it to attempt to use the space capacity disks i currently have (they are 1.6tb disks) with the new ones i intend to use (1tb disks)

Thanks in advance for any feedback!

3 Comments

Azure AD Experts,
Whats the difference of get-azureaddirectoryrolemember vs get-azroleassignment?

It's odd most of the directory roles are in get-azureaddirectoryrolemember...
but there's a bunch of stuff under get-azroleassignment, which I'm guessing has some privileged assignments delegated to primary ids as well?

Azure

1 Comment

I have set up a replica DC in Azure. My boss wants to get rid of the on-prem DC and only have the one in Azure. I have transferred all the FSMO roles to the Azure Domain controller, but when I remove the Site to Site VPN connection I can't log into the Azure DC anymore. The internet access is being turned off on-prem tomorrow. Am I missing a step?

16 Comments

Someone accidentally deleted our Windows Server 2016 AD-Integrated forward lookup zones using a third party tool. What would be the easiest way to recover the DNS zones? We do have the ability to restore the any of the domain controllers in its entirety, but we will have to accommodate for an Authoritative restore which it doesn't seems to be a straight forward process.

18 Comments

Fundamentals of JavaScript

LVL 13

Learn the fundamentals of the popular programming language JavaScript so that you can explore the realm of web development.

Hi Experts,

on a Fileserver 2019 I have a data partition with REFS.
Now they need replication but this is not supported.

What can I do ?

2 Comments

what kind of activities on a windows server would actually require local administrator privileges, or as a server engineer yourselves, what day to day tasks do you perform on windows servers that do require you to be a member of the local admins group. We have got to go through the local admins groups on a number of critical servers and the numbers seem on the high side, but I want to be equipped with some examples of when you do need local admin rights to query if these users would ever need to perform such a task as part of their duties? If I could get something like the most common 5 admin type duties that are performed on windows servers that do require local admin rights that would be a start I suppose. I suspect in many cases those with administrator group privileges on some of the servers have no real requirement to have it. In case its of interest the vast majority of these servers run Windows server 2012.

4 Comments

Hi i want to configure Client Apps in 365 Device management to prompt each time i open any microsoft installed Office application. the machine is not on the corporate domain just BYOD windows 10 pro build.

I have been looking into App Protection policies but not coming up with anything. Help is needed :)

2 Comments

Hi,

How do I restrict website (IIS) access to certain AD security groups only.

J

1 Comment

When i run the command get-azsecurityalert, i get the following result:

Id : /subscriptions/4b06/resourceGroups/GUD01/prov
iders/Microsoft.Security/locations/centralus/alerts/256470605332_2de8ba64-8ec8-47-8ce0-00
4f77588f3f
Name : 4777-8ce0-00488f3f
ActionTaken : Undefined
AlertDisplayName : Azure Security Center test alert (not a threat)
AlertName : SCUBA_RULE_ASC_EICAR
AssociatedResource : /subscriptions/6e6ab4b06/resourceGroups/CCLOUD01/prov
iders/Microsoft.Compute/virtualMachines/azrapp007
CanBeInvestigated : True
CompromisedEntity : RAPP007
ConfidenceReasons : {}
ConfidenceScore :
Description : This is a test alert generated by Azure Security Center. No further action is needed.
DetectedTimeUtc : 25/09/2019 10:42:32
Entities : {Microsoft.Azure.Commands.Security.Models.Alerts.PSSecurityAlertEntity,
Microsoft.Azure.Commands.Security.Models.Alerts.PSSecurityAlertEntity,
Microsoft.Azure.Commands.Security.Models.Alerts.PSSecurityAlertEntity,
Microsoft.Azure.Commands.Security.Models.Alerts.PSSecurityAlertEntity...}
ExtendedProperties : {[compromised Host, AZRAPP007], [user Name, Kloud\KellyGarcia], [account
Session Id, 0x13ce9cc], [suspicious Process,
…

1 Comment

Hi Guys,

We've had an audit finding: "SMB Signing not required"

I realise that SMB signing is by default enabled on the DC's.

My question,
Weighing up the risk versus the performance overhead, is it recommended to enable SMB signing on all servers?

1 Comment

Hi,

I have DC under Win 2008 and also use WIn 2008R2 as Backup DC as well as Azure AD connect to the O365 .

I plan to upgrade to Win 2012R2 by install another new server to migrate the DC.

I need an advice or maybe the link for the steps to migrate the DC from Win 2008 to WIn 2012R2, Also how to move the Azure AD connect where our users mail already on O365.

KIndly please advice

Regards

Stefan

4 Comments

Hi,
Anyone knows what Micorsoft’s policy is on using Azure VMs to mine for cryptocurrency?
I understand that it may end up costing more than it mines

5 Comments

Hi,
I have an issue with my server running Windows Server 2016. I think the issue is DNS or DHCP related but unsure.
for a while now, myself and a few colleagues have been domain joined.
When we're out and about, we connect in to the server Via VPN - which seems to work fine.

The server assigns an IP address and lets us in.

This has stopped working now and I can't figure out what config has changed.

If I connect directly to the network where the server is at, my laptop gets no internet at all - when I try and troubleshoot I get an error which says "WiFi" doesn't have a valid IP configuration. The IPv4 settings are set to retrieve the settings automatically from the DHCP.

Interestingly, I am trying to connect a brand new laptop up to the domain and having a slightly different issue. When the new laptop is on the same network, the servers DHCP manages to assign an IP address. When I go to join the domain, it asks for credentials but then errors and says:
The following error occurred attempting to join the domain "xxxx.local" The network path was not found

From this new computer, I can remote desktop into the server when I disable the server firewall- even though it isn't domain joined
and with my existing computer, which is domain joined, I can't RDP in now.

Both new and old laptops are on windows 10 pro - the oldest being less than a year.

Any help would be hugely appreciated

Kind Regards,
Dave

16 Comments

Python 3 Fundamentals

LVL 13

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Hi Experts,

I have a Windows Server 2016 setup with Hyper-V. On the server 2 virtual machines have been created. This has been a standard installation and the default Production Switch is used.

I would however like to give the 2 virtual machines machines a fixed IP (different from the IP they automatically received).

The information I see requires to setup a different virtual switch. Since the machines are in production I would like to be sure this is the correct procedure. Perhaps a link to the correct procedure?

Thanks for any help in advance,
Mark
2019-09-20_111931.png

2 Comments

I have a linux VM in Azure but I'm curious, is there a built in way in Azure to backup/export files within the VM? Like from the /home folder?
I have VM backup but not sure that gives me file level restore and/or a way to restore them out to another destination like blob storage or a file server.

4 Comments

LVL 18

Question by

WORKS2011

2019-09-19Solved

Fully Delete Office 365 Email in Azure / Exchange

How do I gain access to exchange servers in Azure where my Office 365 email is located. I need to remove data from a user that is confidential and want to make sure the retention policy reflects the data completely being removed.

3 Comments

I have migrated our 20 person environment to O365, staged migration single domain, single tenant. All mailboxes are off of the Exchange 2003 server, which I have to take out of service. We are using Azure AD Connect. Never used Dirsync, never used Azure Active Directory Sync. I want to manage users on-prem. If I add new users I can manage them from the cloud with no issues. Can I safely completely remove and shut down the Exchange 2003 Server? I see some artices that say I cannot, some that say I can. Which answer is correct? Does anyone have good info to add the the articles below?

https://blogs.msmvps.com/bradley/2011/01/28/manually-removing-exchange-2003-from-the-migration-process/
https://docs.microsoft.com/en-us/exchange/decommission-on-premises-exchange?redirectedfrom=MSDN