Set up Hybrid Azure AD device joining
paul | Wednesday, 14 November 2018 | Office365 | AzureAD
The following steps can be followed to prepare a hybrid environment for joining domain machines to Azure AD:
 
1. Configure Service Point
2. Configure AD Connect to sync computers
3. Configure AD Connect for device writeback
4. GPO join Windows 10 machines to Azure AD
5. Updated Azure AD Conditional Access rules to include condition “Hybrid Azure AD Joined Devices”
 
Configure Service Point
 
On ADConnect PC.
Check SP created:
 
$scp = New-Object System.DirectoryServices.DirectoryEntry; $scp.Path = "LDAP://CN=62a0ff2e-97b9-4513-943f-0d221bd30080,CN=Device Registration Configuration,CN=Services,CN=Configuration,DC=dc,DC=dc;
$scp.Keywords;
 
Create SP
 
Connect-MsolService
Import-Module -Name "C:\Program Files\Microsoft Azure Active Directory Connect\AdPrep\AdSyncPrep.psm1";
$aadAdminCred = Get-Credential;
Initialize-ADSyncDomainJoinedComputerSync -AdConnectorAccount yourADConnectorAccount -AzureADCredentials $aadAdminCred;
 
Configure AD Connect to Sync Computers
 
Azure AD Connect > Customize synchronization
Connect to Azure AD > With an admin account
Add Registered Devices for Domain and OU filtering
Add your computer OU for Domain and OU filtering
Press "Next" button
[v] Password synchronization
[v] Device writeback
Device writeback forest: Choose your forest
Press "Next" then "Finish"
 
GPO
 
Computer Configuration/Policies/Administrative Template/Windows Components/Device Registration
Enable: Register domain joined computers as devices
 
Check Windows 10 PC is joined to Azure AD:
 
dsregcmd.exe /status
 
Should return "AzureAdJoined should be YES".
 
Display Comments...
Shared Mailbox missing folder in Outlook client
paul | Monday, 12 November 2018 | Outlook | Sahred

Outlook client missing folders for some shared mailbox. This may happen when a user has access to many shared mailboxes or they have many folders. There is a limit of how many folders the Outlook client will load (500) when using "Cached Exchange Mode" and "Download Shared Folders" enabled.

This can be fixed by going into Account Settings and disabling the option "Download Shared Folders" or by group policy setting below:

User Configuration -> Policies -> Administrative Templates - Microsoft Outlook 2016 -> Account Settings -> Exchange -> Cached Exchange Mode -> Download shared non-mail folders 

Display Comments...
Joining machines to Azure AD
paul | Monday, 12 November 2018 | Office365 | AzureAD
Windows machines can be joined to Azure Active Directory to apply conditional access policies and management policies.
 
Set Up
 
In Group Policy set "Computer Config\Policies\Admin Templates\Windows Components/Device Registration\Register domain joined computers as devices" to "Enable".
 
Assuming Azure AD configured to allow and firewall access configured then on logon the machine should then try to register with Azure AD.
 
Windows 10
 
To check if the machine is joined to Azure AD you can use the Windows 10 built-in utility dsregcmd.exe.
 
dsregcmd.exe /status | find "AzureAdJoined"
 
Should return either "AzureAdJoined : YES" or "AzureAdJoined : NO".
 
Windows 7
 
Windows 7 machines cannot be joined to Azure AD until they have the package "Microsoft Workplace Join for non-Windows 10 computers" installed (https://www.microsoft.com/en-us/download/details.aspx?id=53554).
 
The following command can be used to query if the machine has joined Azure AD.
 
"%programFiles%\Microsoft Workplace Join\autoworkplace.exe" /i
 
That is an interactive command so cannot be captured fromm command line. The event log query command below can be used to check for the event logged when the machine joins Azure AD.
 
wevtutil.exe qe "microsoft-workplace join/admin" "/q:*[System[(EventID=201)]]" /c:1 /rd:true /f:text | find "Date: "
 
Should return the date the machine joined Azure AD if it has done so.
 
Once joined you can use conditional access and intune to manage the devices and access.
Display Comments...
Searching Contacts does not work in Outlook 2016
paul | Friday, 19 October 2018 | Outlook | Search

Searching the Contacts view in Outlook 2016 Pro Plus does not return any matches even if you can see what you are searching for present in the list. The foolowing steps can be followed to get it working again.

 

  1. Go to “Search Tools” and select “Select Options”
  2. Select “Indexing Options…”
  3. Press “Modify” button
  4. Untick “Microsoft Outlook” and press “OK” button

 

Then wait for reindex process to complete (check under Search Tools -> Indexing Status…) and then try searching your contacts.

 

Display Comments...
Windows Server 2008 R2 firewall service will not start
paul | Monday, 15 October 2018 | Windows | 2008R2

We recently had an issue with some of our older Windows Server, running 2008 R2, not starting the firewall service. It failed with the error "The windows firewall service terminated with service-specific error 2150760483 (0x80320023)".

 

This was due to a group policy firewall exception which the 2008 R2 server did not like. Removing the policy and then running a Gpupdate/force fixed the issue.

Display Comments...
Page 1 of 68 (343 Articles) << 1 2 3 4 5  Next >>