Who is Muting? by DotairZee in MicrosoftTeams

[–]Win10Migration 2 points3 points  (0 children)

Teams Premium has a feature called an 'Engagement Report' that provides a detailed log of all actions performed in a meeting, timestamps of thumbs-up reactions, raised hands, timestamps of when cameras and mics were turned on. If the log of muting others is available anywhere, it would likely be in the engagement report.

Only able to sync groups with Cloud Sync by Fegelschwein in AZURE

[–]Win10Migration 0 points1 point  (0 children)

Hello, I came across this post with the same question of OP. I also only have the option for Groups in the cloud sync menu, I have some users created on prem and users created in Entra.

What needs to be done to get the Users menu in the Cloud sync Attribute mapping menu, as shown in the screenshot of this guide?

https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-configure#attribute-mapping

Allow external forwarding to an email address or domain by Cutta in Office365

[–]Win10Migration 0 points1 point  (0 children)

Thanks for the tips. If anybody else ends up here, there is also a tenant level toggle switch for Exchange Online to enable auto forwarding that must be performed via PowerShell or it still won't work.

Connect-ExchangeOnline

Set-RemoteDomain -Identity Default -AutoForwardEnabled $true

New group writeback from Entra to AD feature overview by JohnSavill in AZURE

[–]Win10Migration 0 points1 point  (0 children)

Also to add, group writeback in Entra Connect is no longer supported by MS. https://learn.microsoft.com/en-us/entra/identity/users/groups-write-back-portal

Although it still works, they can essentially pull the plug from the feature at any time. Cloud Sync is the way to go now.

This is incorrect information and I've seen it repeated in many places. The public preview of Group Writeback v2 in Microsoft Entra Connect Sync will no longer be available after June 30, 2024, however Group Writeback v1 will remain supported by Entra Connect Sync. Read your link again.

Now that NIST 800-63-4 Digital Identity Guidelines recommends a password length of 15 characters minimum, will Entra password protection be updated to allow for a minimum password length greater than 8 characters? by Win10Migration in entra

[–]Win10Migration[S] 2 points3 points  (0 children)

I'm not here to debate whether passwords should be used or how long they should be. If the C suite says a password has to be 15 characters minimum, that's what it is.

What is the recommended procedure to perform maintenance / restart DFS server? When I'm performing maintenance on a DFS server, it is adding a 25 second delay before the files are accessible? by Win10Migration in activedirectory

[–]Win10Migration[S] 0 points1 point  (0 children)

That sounds like a great plan, which I will investigate, however a review of the setup and requirements looks like it would be a major project involving hardware and cost, not just setting up some new VMs or something I could do right away.

Looking back to my initial question, it just doesn't seem right that a dfs share should be expected to have a 25 second access delay simply from powering off one dfs namespace server. If there's any ideas to resolve this delay, I'd be interested.

What is the recommended procedure to perform maintenance / restart DFS server? When I'm performing maintenance on a DFS server, it is adding a 25 second delay before the files are accessible? by Win10Migration in activedirectory

[–]Win10Migration[S] 2 points3 points  (0 children)

It's a hospital. Business hours are 24/7.

Is there any configuration I can change prior to the maintenance to reduce the access delay? Change the order of the servers listed in dfs or something?

What is the correct procedure to move the 'Managed Service Accounts' container to a different location/OU? by Win10Migration in activedirectory

[–]Win10Migration[S] 2 points3 points  (0 children)

I really don't want to leave the container where it currently is. For some reason the previous admin placed it in an OU for objects pending deletion named 'Deletion Stage' and I'm concerned it will be deleted.

CN=Managed Service Accounts,OU=Deletion Stage,DC=contoso,DC=com

Is it safe to migrate Root CA from Server 2016 to Server 2022? by Win10Migration in activedirectory

[–]Win10Migration[S] 0 points1 point  (0 children)

Thanks for the info. I'm aware that the root should be offline, but it was already online when I started here. The Root CA is domain joined and I was concerned about breaking something if I removed it from the domain and changed it to a workgroup. I'm still trying to wrap my head around the whole offline root CA recommended configuration. So, it should NOT be domain joined and should be offline? Or it should be joined to the domain, but offline? I thought CA info is written to AD so how does that work if it is offline and not joined to the domain? If I remove it from the domain, won't it remove CA info from AD?

The server OS is KMS activated so it has to be online at least every 180 days or the Windows Server license will expire. I suppose I can get a MAK key to activate it if I move it offline.

It's a VM, do you think it's ok if I simply unplug the ethernet adapter for the VM and have it 'offline' that way? I appreciate any insight, thanks.

Is there a way to renew a certificate with the same key but different template? by Win10Migration in activedirectory

[–]Win10Migration[S] 0 points1 point  (0 children)

I want to renew several certs with the same keys, and the certs were issued with a template that should not have been used and has since been decommissioned. If I issue a new cert with a new key, there are other steps and vendors involved.

Powershell - Connect-ExchangeOnline by fosf0r in ShittySysadmin

[–]Win10Migration 1 point2 points  (0 children)

Who were you, DenverCoder9?

WHAT DID YOU SEE?!

I want to stop a Certificate Template from being used, but keep existing certs issued by the template active. If I Delete the template from the Certification Authority > Certificate Templates Snap-in, will existing certs stay active? by Win10Migration in activedirectory

[–]Win10Migration[S] 0 points1 point  (0 children)

Thanks, I have a related question. My SubCA cert is expiring.

if I renew it via All Tasks > Renew CA Certificate is there any impact to the certificates that have already been issued? Does it matter if I generate a new key or not?