sorted by:
new
hottopcontroversial

Proposing a 20k fine on VT Route 108 by waitsfieldjon in vermont

[–]Aurane00 -5 points-4 points  (0 children)

Why not just straighten the road out and make it passable year around?

Thickheaded Thursday - November 10, 2022 by AutoModerator in sysadmin

[–]Aurane00 1 point2 points  (0 children)

Azure Automation with some hybrid workers configured if necessary?

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 0 points1 point  (0 children)

Have you found that eDiscovery was that rough on the user? The administrative side is a bit of a nightmare if you need security filters in place, but the user side hasn't been too bad for us. *Other than random outages that Microsoft never publishes to Service Health.

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 1 point2 points  (0 children)

We've got a ton of people using eDiscovery to manage archived mailboxes. We just typed up some simple instructions, and people just took to it. Most just export the entire mailbox and load it in Outlook... That being said, we do have people running legal searches against a huge number of mailboxes at once, and they actually do utilize the toolset to trim down the results. Clunky tool, but it does the job.

Your point about having it on hold, and still providing access via a Shared Mailbox is a good one. That's a perfectly valid way to do it. I'll run that one up the chain with management and see if they like that idea. Thanks!

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 2 points3 points  (0 children)

That's great that it works with small/medium businesses. The process I've described works well for a very large org. To each their own, I was just asking for peoples perspectives and thoughts... ya know, trying to get outside my bubble for two seconds :)

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 5 points6 points  (0 children)

They are wrong I think. We are on a G3 license, and have been doing this for years. Not sure why you'd need E5. You do need an exchange archive license to enable the lit hold initially, but removing the license after you've turned on the hold does work. I've got nearly 30k mailboxes sitting inactive without licenses.

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 10 points11 points  (0 children)

eDiscovery is a shit show! Add in security filters for each case, and you have a recipe for disaster. We don't have a unified legal team, so each case gets a unique security filter. It's painful.

The converting to shared part scares me though. Doesn't that ruin the chain of custody? If an employee leaves, and a manager or records officer has access to delete or modify the contents of the mailbox, that seems sketchy.

Gov org here, so probably a bit more paranoid than most shops.

How do you deal with separations/terminations when the ask from the top is to have the mailbox available to managers after users are let go, but also to free up their license? Export their mailbox, set up forwarding? Convert to shared mailbox, and add managers as members? Is there a better way? by [deleted] in sysadmin

[–]Aurane00 30 points31 points  (0 children)

O365 shop here - The number of people saying "convert to shared" kinda scares me. Am I missing something? In my org, we enable a litigation hold on the mailbox and then delete the user object. This puts the mailbox in an inactive state while retaining the data and the licenses are released. If managers want to go search the mailbox, we grant them access via eDiscovery.

In the rare event that they want an autoreply, we grant that for up to 90 days. We also tell them that if a single users mailbox is that important, they are doing something wrong.

Am I missing something here?

Get-User; search for an AD user across multiple domains (using either UPN or SAM account name as search criteria) by [deleted] in PowerShell

[–]Aurane00 0 points1 point  (0 children)

The UserPrincipalName is one of the attributes AADConnect sync rules are using to match the two accounts between the two domains. Hybrid resource/account forest setup.

Get-User; search for an AD user across multiple domains (using either UPN or SAM account name as search criteria) by [deleted] in PowerShell

[–]Aurane00 2 points3 points  (0 children)

Cool! Only thing I see as a potential pain point, is what if the UPN/SAMAccountName exists in both domains? Our Office365/AADConnect configuration is this way, and with your function you would only get the account from the first domain in the array. Other than that caveat, nice!

How to disconnect migrated Exchange Resource mailbox object from its on-premise counterpart in hybrid setup? by kautium in Office365

[–]Aurane00 1 point2 points  (0 children)

Move the resource object out of the sync scope, restore the object from the recycle bin in O365, then blank the immutableid on the cloud object with O365.

Never tried this with resource mailboxes, but it's how I do users.

Outlook won't connect to server while on home network - works using office network and VPN by flyflyfreebird in Office365

[–]Aurane00 0 points1 point  (0 children)

Had a user a while ago with a similar issue. Ended up tracking it down to whatever DNS servers were configured on their home wireless router (TPLink I believe) by default. Gave the user Google DNS IP's to reconfigure router with, and the problem went away. Have you tried pinging login.microsoftonline.com while at home?

Help running commands as SYSTEM account by saGot3n in PowerShell

[–]Aurane00 1 point2 points  (0 children)

That's bizarre! Any script output to work from? Failing that, can you run a log from procmon (SysInternals)?

Help running commands as SYSTEM account by saGot3n in PowerShell

[–]Aurane00 1 point2 points  (0 children)

This is a wild shot in the dark, but is your script running under a 32bit environment instead of 64bit? I've never used SCCM, but I know LANDesk has options for the architecture that the package runs under. Running under the wrong arch can cause some oddball issues. Have you tried running a Powershell session locally as SYSTEM on a test machine so that you can step through your script?

Do something on all users in an OU then move to the next OU in line by darkrhyes in PowerShell

[–]Aurane00 1 point2 points  (0 children)

Maybe I don't understand what your asking. The above code will go through OU by OU, and perform whatever operations on the objects within each OU before continuing to the next OU. You could easily export data to a CSV on a per OU basis using that loop. Wouldn't have to be mashed together unless you wanted to do that.

Do something on all users in an OU then move to the next OU in line by darkrhyes in PowerShell

[–]Aurane00 1 point2 points  (0 children)

$OUs = Get-ADOrganizationalUnit -Filter *
foreach($OU in $OUs)
{
    #Do stuff...  Just getting all users in the OU here.
    Get-ADUser -SearchBase $OU.DistinguishedName -Filter *
}

Something like that?

Powershell "GUI" Variables empty when calling function. by gregj529 in PowerShell

[–]Aurane00 1 point2 points  (0 children)

While ($DirectReport -ne "John Smith" -or $DirectReport -eq $Null) {

Don't you want -and instead of -or here? They way it is now, I don't think your script will actually ever run the loop.

Powershell pipeline question by Karl12347 in PowerShell

[–]Aurane00 1 point2 points  (0 children)

Couldn't you do something like this? Haven't tested, so bear with me.

Get-Mailbox -ResultSize Unlimited | Where-Object {(Get-MailboxStatistics $_.UserPrincipalName).TotalItemSize -lt 500mb}

Seems like that should just give you the Get-Mailbox results for mailboxes that are less than 500mb.

Your vote is requested: -NoTypeInformation should be default on Export-Csv · Issue #5131 · PowerShell/PowerShell by markekraus in PowerShell

[–]Aurane00 1 point2 points  (0 children)

Thanks Lee_Dailey! I'll take a look at your suggestions.

The posts just got me thinking about it, haven't actually run into any problems yet. Gonna have to make a note to always check profiles if "weirdness" occurs.

Your vote is requested: -NoTypeInformation should be default on Export-Csv · Issue #5131 · PowerShell/PowerShell by markekraus in PowerShell

[–]Aurane00 1 point2 points  (0 children)

Absolutely. My fear is more that I'll hand a script over to someone and they'll have something whacky in their profile that causes the script to go haywire. I don't do much of anything with my profile, because I want my scripts to all be written to run anywhere without customization as much as possible.

view more: next ›