New Comms Group Website

No introduction really….head on over to http://www.commsgroup.com now and leave any feedback on Twitter or add me on LinkedIn

Thanks :-)

image

Fujitsu & Comms Group

If you require any new desktop PC’s, laptops, workstations or NAS devices, speak to me here at Comms Group.

You can contact me directly on 01604 596092

Our Fujitsu partnership means we are offered preferential pricing and can pass these on to you, so give me a call today and I will personally arrange a quote for you!

http://www.commsgroup.com for further information about Comms Group UK Ltd

Fujitsu Celvin NAS Q802

Fujitsu Celvin NAS Q802

Fujitsu Celsius W530

Fujitsu Celsius W530

Great news for students and teachers – #Office365

Microsoft have recently announced that students and teachers will be able to ‘self-serve’ their ‘free’ subscriptions. Before, Microsoft put the onus on the schools and colleges to initiate the platform but now Microsoft have closed this gap.

Below is a quote from the Microsoft Office 365 blog explaining the changes and what is up for grabs for our learning/teaching friends.

It was just about a year ago we announced Student Advantage, a benefit that allows eligible students to get Office 365 from their school for free. One drawback to Student Advantage—the onus has been on the school to initiate the service, create an account and order the Office 365 license on behalf of the student.

Today we’re making it easier on the school IT department with a new self-serve model for students that lets them sign up for the free service on their own.

If you’re a student 13 years-old of age or older, here’s what you can do the check your eligibility and get Office for free:

  1. Go to Office 365 for Students.
  2. Enter a valid school-provided email address.

Here’s what qualified students will receive:

  • The latest versions of Microsoft Word, Excel, PowerPoint, OneNote, Outlook, Access and Publisher
  • Installation on up to five PCs or Macs, and Office apps on other mobile devices including Windows tablets and iPad
  • 1 Terabyte of OneDrive cloud storage
  • Office Online

Sign-up for students is available in the U.S. today, and will expand worldwide later this year.

CommsGroup Offers – July 2014

Latest offers from CommsGroup UK Ltd – for more information visit http://www.commsgroup.com or call on the number below

CommsGroup UK Ltd July Offers

CommsGroup UK Ltd July Offers

The Office 365 confusion…

There are always questions regarding the Office 365 umbrella and what is right for the customer. Microsoft have made a tidy little page for getting the crux of what your customer wants vs all the bells and whistles that you can easily pay for above and beyond requirements.

 

The link to the Office 365 service comparison site is below;

 

http://technet.microsoft.com/en-US/office365/fp123607

 

This should enable you to get to the right plan through criteria quickly and efficiently.

 

Enjoy

 

Steve

Comms Group UK Ltd – A new role…..

I have recently jumped ship to become IT Manager at Comms Group UK Ltd. I have been offered a fantastic opportunity to work in a Telecoms company moving forward with their IT Managed Services offerings. I have now been at Comms Group for 4 weeks and already we’re taking things to a new level. The Telecoms side of the business offers competitive pricing and a clued up support base to offer insight and opinions with the technology in mind.

Moving towards the IT side of things I’ve recently attended the Service Desk and Support Event at Earls Court in London where I was able to meet some of the big players of Help Desk and support applications. It was a great insight into what is available and as such we are now moving forward with some excellent products This will enable us to offer a fantastic support portal for our customers and internal users, as well as the ability to remotely manage the IT infrastructure of our Managed Service contracts. We also have many other offerings including online backup and antivirus software that comes in at a very competitive price and we’d be very happy to quote you.

Moving forward we have plenty more to work on and improve but we’re making giant strides, if you’d like to be a part of our success and excellent support services then please give us a call for a competitive quote and informed opinion – 0844 848 8144

We may be able to give you some additional discount if you quote my name when making any enquiries – Either Stephen Pothecary or Guru365 – unfortunately I am unable to guarantee a discount as this may be unavailable to the products you require, but we can certainly give you a discount on any Managed Services enquiries or contracts.

Quote from the Comms Group UK Ltd Website -

At Comms Group, due to strategic partnerships we buy landline services on a wholesale basis from BT and have the same level of access to systems and support from BT Openreach as BT Retail. By understanding your needs we aim to provide better customer service than BT Retail. We can GUARANTEE you savings compared with your current telecoms supplier, typical savings are 35% and you can be assured that you will not receive loss in service when using Comms Group for your land line low cost call charges and line rental facility.

If you have any questions please feel free to give me a call and we’d be very happy to talk to you regarding any kind of Telecoms or IT related requirements. Even if you need pricing on a piece of equipment we’ll be very happy to get you the very best price we can through our many distribution partners.

Comms Group UK Ltd – 0844 848 81 44

Office for iPad

Office for iPad

Microsoft are pleased to announce their new Office for iPad app. Makes the iPad less useless in business now……I’d still take a Surface Pro anyday :)

A good day with Amazon Prime

I’ve recently had a good experience with Amazon Prime and thought I’d tell you about it.

Much like most of you I was beginning to get a little tired of the ‘Prime’ being shoved down my throat with a 30-day free trial ending in a rather expensive renewal (either monthly or yearly). However, having looked into the product a little more I can finally give in and say what a fantastic idea.

Basically it boils down to the first idea of Prime, this is what has been going on for years at Amazon. You pay a yearly fee and you get free Two-Day shipping on millions of items. However, there are other perks, one of which I find to be extremely useful;

  • No minimum order size (handy for cheap products that you need quickly)
  • Unlimited instant streaming of thousands of movies and tv shows with Prime Instant Video (Oh hello Amazon, goodbye Netflix)
  • Finally, Read free books each month through Kindle First and Kindle Owners’ Lending Library.

For a years worth of the above, it’s extremely cost effective, even if you only use the delivery thing once or twice a year you can certainly get your money’s worth in the 3 bullet points above.

It’s been a good experience and there’s usually complaints in this world. Please feel free to click the link below to give yourself a Free 30-day trial of Amazon Prime, yes there is a cost after this but I think once you have explored the other benefits you’ll see how far your £79 a year really goes.

http://www.amazon.com/gp/prime/signup/videos?tag=guru365net-21 – For the full Prime

http://www.amazon.com/gp/video/primesignup?tag=guru365net-21 – Alternatively if you’d just like the subscription service for movies and TV – click here :)

Oh and you can cancel your subscription before you have to pay anything, so if you aren’t sure/impressed then you are able to cancel when you want.

Happy shopping / reading / watching :)

Microsoft Books – You can also look for the latest Microsoft books focussing on Office 365 and Cloud Computing – some excellent authors out there willing to share their knowledge.

Enable-OrganizationCustomization

This is due to the hydration status of your tenant at Office 365. Each Office 365 tenant is not “hydrated” by default. Hydration is the adding of lots of settings in the Exchange Online directory service per tenant – by default lots of tenants do not need these settings and so rather than creating the settings per tenant, each tenant shares these common settings. To enable your own Transport Rules, Free/Busy Rich Coexistence and custom RBAC settings require that all the “common” settings in the directory are copied to the tenants area of the directory. To do this means you need to run the Enable-OrganizationCustomization cmdlet in remote PowerShell to Exchange online. Once this is done the GUI will create RBAC, rules, free/busy etc. without throwing Exception has been thrown by the target of an invocation error. The exact steps to perform on your Office 365 tenant before configuring RBAC, rules or coexistence are as follows:

  1. Start the Windows Powershell
  2. $cred=Get-Credential tenant_admin@tenant.onmicrosoft.com (If domain
  3. $EOSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/PowerShell/ -Credential $Cred -Authentication Basic -AllowRedirection
  4. Import-PSSession $EOSession  -AllowClobber
  5. Enable-OrganizationCustomization

Directory Synchronisation

Directory Synchronisation

Brief Overview of Directory Synchronisation (DirSync)

The Windows Azure Active Directory (AD) Synchronisation Tool is an application that synchronises the on premises Active Directory with Microsoft Online Services. This allows services like Office365 to provision the user structure for migration to the cloud.

It is good practice to install this tool on only one computer in the local network of the domain you are migrating, it is also good practice to tightly restrict access, as you would with a Domain Controller or other sensitive network infrastructure.

Dir Sync effectively synchronises the full set of attributes from your on premise Active Directory to the Windows Azure AD tenant used for Microsoft Online Services, once provisioned in Windows Azure AD, services such as Exchange Online can utilise this infrastructure to ensure a relationship between the users details on premise to in the cloud. The latest edition of Dir Sync provides a simple-sign on process using the Password Synchronisation feature, or you can utilise the Single Sign-On experience of ADFS (Active Directory Federation Services). In addition to this, a small set of attributes can be synced back from Windows Azure AD to the one premises infrastructure.

Preperation is the key to Dir Sync

An administrator must complete some basic preparation before being able to synchronise their on premise AD to the Windows Azure AD.

This process includes deciding on a ‘simple sign-on’ or ‘single sign-on’ environment.

Simple sign-on – Allows the synchronisation of the on premise AD DS password hash with Windows Azure AD to allow users to authenticate to Windows Azure Ad using their UPN (User Principle Name) and corporate password.

Single sign-on – Identity Federation enables a company’s users to authenticate using the customers corporate AD. This process requires on premise hardware and configuration separate to the Simple sign-on process, but can give some benefits which I will touch on later.

Dir Sync requires certain prerequisites in order to perform a successful migration, these include;

Joined to the Active Directory Forest – The computer must be domain joined, it will need to contact all the DC’s for all the domains in the forest**

** A forest is one or more Active Directory domains that share the same class and attribute definitions, site and replication information, and forest-wide search capabilities.

Dedicated Server (Best Practice but not a requirement) – This is a good practice recommendation to avoid interference with other applications or services on the particular server. EDIT ********Can now be installed on a Domain Controller!

Running a supported Windows Server OS – 64-bit edition of Windows Server 2008 Standard or Enterprise, Windows Server 2008 R2 Standard or Enterprise, Windows Server 2008 Datacentre or Windows Server 2008 R2 Datacentre, or 64-bit edition of Windows Server 2012 Standard or Datacentre.

Running Microsoft .NET Framework version 3.5 or later – Server 2008 R2 upwards this can be added as a feature through Server Manager.

Running Windows PowerShell – Windows Server 2008 R2 upwards has PowerShell installed by default.

Access-Controlled environment – Access to the computer should be limited to administrators only.

Running Microsoft SQL Server Software – If you have more than 50,000 AD objects you will require MS SQL 2009 Standard / R2, if you have less than this number you can utilise the default SQL Express database which is installed as part of the Dir Sync process.

Things to Consider

Active Directory Object Limit (as mentioned above) – Default limit of 50,000 objects in Windows Azure AD, to increase this limit you will need to contact Microsoft Cloud Services support and request an increase. Expect a week or more to have this resolved.

When using Simple Sign-On – Consider turning on the Password synchronisation Feature of the Windows Azure AD Synchronisation Tool. However, this should be enabled, after a migration, as this can interfere with certain functions of the migration.

Directory Synchronisation write-back – Write-back is required to enable full rich coexistence, if Exchange hybrid servers are not to be deployed or there is no Exchange server on premise then write-back is not required. If enabled – only a few attributes will be written to the on-premises AD service. Microsoft Exchange Server 2010 SP3 schema extensions will need to be installed to enable write-back, this is included in latest versions.

Service Account Requirements

The Windows Azure AD Sync Configuration Wizard will create a service account in your local AD, this will require your intended Windows server to be domain joined. The installation wizard creates this account using the local AD permissions that you provide.

To prepare, create or use 2 service accounts;

  • An Enterprise Administrator account in the on-premise AD domain.
  • A Global Administrator account in Office 365. (Set to never expire)

The details of these accounts will be required later in the installation.

Existing user accounts will be soft matched if they are already in existence in the Windows Azure AD, if this is the case please use this link to further elaborate on this process – http://support.microsoft.com/kb/2641663

Activating Directory Synchronisation

Directory Synchronisation must be activated before installing the Directory Synchronisation Tool, Microsoft strongly recommends that you leave it activated for the entire time that directories are being synchronised. Once deactivated the source of authority is transferred from the on premise AD domain to the cloud.

Dir Sync must be deactivated if you wish to transfer all user, group, contact, and mailbox management to the cloud. For example a company that used the staged migration tools to move their mailboxes to the cloud and no longer want to manage objects from on premise, can deactivate Dir sync.

To activate directory synchronization, log into your Office 365 portal and follow these steps:

  1. Select Office 365 from the Admin dropdown in the header.
dirsync1

Figure 1: Office 365 Admin dropdown

2.            Click users and groups in the left pane of the Admin page.

dirsync2

Figure 2: Office 365 user and groups

3.            Click Set up located at the right beside the Active Directory synchronization tag.

dirsync3


Figure 3: Office 365 Active Directory synchronization setup

4.            Follow the onscreen steps to activate the directory synchronization features.

dirsync4

Figure 4: Office 365 directory synchronization steps

Please be aware that this may take up to 24 hours to take effect. The portal updates with the status of the configuration change. Please wait until the configuration is complete, before proceeding.

Installing the Dir Sync Tool

After activating Windows Azure AD synchronisation for Office365, you can download the Dir Sync Tool. This is either utilised in the SQL Server Express version for less than 50,000 AD objects or a full SQL Server instance for more than 50,000 objects.

The process for downloading this is below;

1.            Access the Office 365 portal.

2.            Select Office 365 from the Admin dropdown in the header.

3.            Click users and groups located in the left pane of the Admin page.

4.            Click Set up located at the right beside the Active Directory synchronization tag.

5.            Click download under step 4 and follow the instructions to save the installation file on your computer.

dirsync5

Figure 5: Directory Synchronization Tool download

6.            Verify that the Microsoft Online Directory Synchronization Tool package downloaded to your computer.

Installing Dir Sync Tool – Less than 50,000 objects

1. On the computer where you want to install directory sync install the following; http://go.microsoft.com/fwlink/?LinkID=278924 (64bit)

2. Follow the instructions in the Setup wizard.

3. On the last page of the wizard, select Start Configuration Wizard now, and then click Finish to start the Windows Azure Active Directory Sync tool configuration wizard.

4. Provide the Enterprise Administrator and Windows Azure Active Directory credentials as prompted.

5. Enable the optional features that are required.

6. When prompted, check Synchronize your directories now to start synchronization.

 

Installing Dir Sync Tool – More than 50,000 objects

The Directory Synchronization Tool can be installed in Wizard mode, which provides step-by-step guidance through the installation process. Double-click the installation package and follow the directions to install. Continue with the following steps when using full SQL:

1.            Log onto the Directory Synchronization Server.

2.            Click Start, then Run.

3.            Type CMD and click OK.

4.            Type the path to where you saved the Directory Synchronization Tool package.

5.            Type DirSync.exe /fullsql and click Enter. If prompted with a User Account Control prompt, do either of the following:

a.            Click Continue.

b.            Enter the username and password of the on-premises service account and click OK.

Note: The fullsql switch installs DirSync without installing SQL Express. The install stops after the Install-OnlineCoexistence cmdlet is installed.

6.            Click Next through to the end of the wizard and then click Finish.

Important: The Directory Synchronization Tool installation is completed using Windows PowerShell.

7.            On the Directory Synchronization computer, open Windows PowerShell by opening the command-line tool and entering the command Powershell.exe -noexit.

8.            Press Enter.

9.            Type Add-PSSnapin Coexistence-Install at the Windows PowerShell prompt.

10.         To install the Directory Synchronization Tool

a.            Using a remote installation of SQL Server 2008, type

Install-OnlineCoexistenceTool –UseSQLServer –SqlServer <SQLServerName> -ServiceCredential (Get-Credential) –Verbose

Sample:

PS C:\Temp> Install-OnlineCoexistenceTool -UseSQLServer -SqlServer “SERVER\INSTANCE” -ServiceCredential (Get-Credential) -Verbose

b.            Onto the same system as SQL Server 2008, type

Install-OnlineCoexistenceTool –UseSQLServer –Verbose.

11.         At the Windows PowerShell Credential Request prompt, type the username and password of the on-premises service account.

Configuring the Directory Synchronisation Tool

After installing the latest supported version of SQL Server 2008, completing the Microsoft Online Services Directory Synchronization Tool Configuration Wizard is required for synchronization to occur.

  1. From the Directory Synchronization server, click Start/All Programs/Microsoft Directory Sync and then click Directory Sync Configuration.
  2. Click Next.
  3. Provide the username and password for a user account with Administrator permissions in your organization on the Microsoft Online Services Credentials page of the Microsoft Online Services Directory Synchronization Configuration Wizard and click Next.
  4. Provide the username and password for a user account with Enterprise Admin permissions on the on-premises Active Directory service located on the Active Directory Credentials page of the Microsoft Online Services Directory Synchronization Configuration Wizard and click Next.
  5. Select Enable rich coexistence if you would like to enable it and click Next.
  6. Select Enable Password Sync if you would like to enable it and click Next
  7. Click Next to complete the configuration.
  8. Select Synchronize directories now on the Finish page and then click Finish.

Verifying Directory Synchronisation

If you want to check that Active Directory synchronisation is provisioning users, groups and contacts from on premise apps to the cloud correctly, you can verify your directory sync.

After automatic synchronisation

  1. Sign in to the cloud service with service administrator credentials.
  2. When directory synchronization is complete, verify that the changes you made in your local Active Directory now appear in the cloud.

After forced synchronisation

  1. Ensure that there is a valid email address for your organization’s designated cloud service technical contact.
  2. Sign in to the cloud service with service administrator credentials.
  3. Verify the additional properties of a specific user account (such as Job title, Department, or Street address) that will be synchronized from your local Active Directory to Windows Azure AD.
  4. Verify that you cannot edit the additional properties of that user account in Windows Azure AD.
  5. Log on to your local Active Directory with the permissions needed to edit user accounts, contacts, and distribution groups.
  6. In your local Active Directory, make a simple but obvious change to one of the additional properties of the specific user account.
  7. Open the Windows Azure Active Directory Sync tool Configuration Wizard.

a. Provide the information requested on the wizard pages.

b. On the Finished page, select Synchronize your directories now, and then click Finish.

  1. When directory synchronization is complete, view the additional properties of the user in Windows Azure AD, and verify that the change you made to the additional properties of the specific user account in your local Active Directory have been synchronized to Windows Azure AD.

Synchronisation Notes

•     To verify that the Directory Synchronization Tool is working from your local Active Directory service to Microsoft Office 365, testing both manual synchronization and automatic synchronization is required. It may take up to three hours to complete this process.

•     The Directory Synchronization Tool writes entries to the directory synchronization computer’s event log. These entries indicate the start and end of a directory synchronization session.

•     Directory synchronization errors are reported in the event log and emailed to your organization’s designated technical contact.

•     When reviewing the event log, look for entries with Directory Synchronization as the source. An entry designated as Event 4 with the description “The export has completed” indicates that the directory synchronization is complete.

  • When directory synchronization is installed, the local Active Directory becomes the master for all changes to the synchronized mail-enabled objects in Office 365.
Follow

Get every new post delivered to your Inbox.

Join 940 other followers

%d bloggers like this: