Drive map acting weird through GPO
We are having a really weird issue with mapping a drive through GPO. We used Carbonite Migrate to migrate a server to a new data center. All other functionality is fine. We have a User drive that is mapped through the GPO using the syntax \\servername.domain.local\Users. The drive maps to the user but the weird thing is that it shows a very limited amount of content in the shared folder. If we disconnect and map manually without using the suffix information, the mapping is correct with the correct data. Now we tried to test just through the file explorer and when we use the FQDN it shows some limited version of the shared folder. In the properties the General tab shows nothing, the Network tab shows: Computer name: this is correct Computer type: Windows backup Domain: this is correct The Offline files tab shows This folder is Offline. What is happening here with the GPO drive map and how do I trace where this is actually mapping too?
Write Only File Share
I have access to a shared Windows folder as part of a Active Directory group on a network. I need to set the permissions on the folder for the rest of the organization to Write Only. No one other then the specific AD group or Administrators should have anything other then write access. Please note that the share is not in OneDrive nor Office 365. This is a standard network share. Using OneDrive or Office 365 is not an option in this case. I have seen several resources which suggest that setting the share permissions to "Full Control" for domain users and then setting more restrictive NTFS permissions might work but I am having a problem identifying how to accomplish this. There does not seem to be a lot of documentation on write only access as compared to read only. Can anyone advise? Thank youFile Share Write Access Denied to user from one PC
Hello, I have a user that cannot access a file share from one computer. Normally replacing the computer or anything like that would be a fine resolution, but in this scenario I can't. I have however used a backup from a day ago and restored the computer to a previous, 'believed to be working' state. So I am not entirely sure when it started occurring (as I don't know how often the user uses this computer and it still doesn't work), and I don't have that much retention on the device's backup. Either way here is what we have. A domain authenticated user is trying to access \\share\drive\baby\ and save files to the directory. The permissions haven't changed on the share before it stopped working (they had full control before I changed it today but it wasn't working then so I left it on modify as that is my preference), the account isn't locked, the computer hasn't changed, and I can sign into any other computer as this user, and save to the share in question. So I am at a loss on what is going on or what to check next. Here is what I have tried: For giggles, I removed the user's permissions (as they are explicitly defined by user and not designated by groups), and I added them back (as modify though). I also tested adding them to a group, giving the group full control, signing out/in of the computer and trying again. I have removed the computer from the domain, deleted the computer object and added it back, and still no dice. The credentials are not in Windows credential manager for me to clear. Tested from several other PCs as this user and I can edit as needed from them. I have not deleted the account and rebuilt it on the computer, but if there are no other suggestions this is my next step. Here are some visual aids:
Post-webinar recordings when using the Teams Webinar format
Hello! My team and I have been using the Teams webinar function to schedule customer-facing webinars. After the event, we like to share out the recording, but right now our organization has security measures in place so we are unable to share that file that shows within the chat after someone has recorded the meeting publically. Has anyone figured out the best way to do this or have any recommendations of apps to integrate into teams to help our team with this? Thanks!API Management Policy to perform Azure Storage File Shares operations
API Management Policy to perform Azure Storage File Shares operations We can use APIM policy to perform operations like create, update, delete and get on Azure Storage File Shares. To do this, we need to insert an inbound policy to the API operation configurations in Design mode. Steps to add inbound policy to create a file in File Shares – Go to the API Management Service, select APIs from APIs blade. Then select any of your API from the ALL APIs list. This will populate the related API Operations. Select POST (create Resource) from the API operations list like referred in the screenshot below- Click on the </> sign to enter Edit mode and insert the new policy like in the below screenshot. Copy the below policy definition and paste in between the <inbound ></inbound> tags. Update the highlighted values with your Storage account details and save. Please make sure all the required headers are in the same format as below. <inbound> <base /> <!-- Initialize context variables with property values. --> <set-variable name="storageAccount" value="NameOfYourStorageAccount" /> <set-variable name="x-request-body" value="@(context.Request.Body.As<string>())" /> <set-variable name="x-request-body-length" value="@{ return (string)context.Request.Headers.GetValueOrDefault("Content-Length","0"); }" /> <send-request mode="new" response-variable-name="tokenstate" timeout="2" ignore-error="true"> <set-url>@{ return string.Format("https://{0}.file.core.windows.net/NamOfYourFileShares/FileNamewithextension?SASToken ",(string)context.Variables["storageAccount"]); }</set-url> <set-method>PUT</set-method> <set-header name="x-ms-type" exists-action="override"> <value>file</value> </set-header> <set-header name="x-ms-file-permission" exists-action="override"> <value>inherit</value> </set-header> <set-header name="x-ms-file-attributes" exists-action="override"> <value>none</value> </set-header> <set-header name="x-ms-file-creation-time" exists-action="override"> <value>now</value> </set-header> <set-header name="x-ms-file-last-write-time" exists-action="override"> <value>now</value> </set-header> <set-header name="x-ms-content-length" exists-action="override"> <value>65336</value> </set-header> </send-request> </inbound> After saving the policy, go to the Test tab of API. Select that updated API operation and click on send. If all the updated parameters are authenticated, you will receive 200 OK and the trace will show 201 (Created) response code. The new created file can be viewed in the File Shares – In case, we want to do the error handling we can add the on-error section to track the error responses as well. We need to add this block after outbound closing tag. This will give use information about the related errors. Reference link for APIM error handling- https://docs.microsoft.com/en-us/azure/api-management/api-management-error-handling-policies <on-error> <set-header name="ErrorSource" exists-action="override"> <value>@(context.LastError.Source)</value> </set-header> <set-header name="ErrorReason" exists-action="override"> <value>@(context.LastError.Reason)</value> </set-header> <set-header name="ErrorMessage" exists-action="override"> <value>@(context.LastError.Message)</value> </set-header> <set-header name="ErrorScope" exists-action="override"> <value>@(context.LastError.Scope)</value> </set-header> <set-header name="ErrorSection" exists-action="override"> <value>@(context.LastError.Section)</value> </set-header> <set-header name="ErrorPath" exists-action="override"> <value>@(context.LastError.Path)</value> </set-header> <set-header name="ErrorPolicyId" exists-action="override"> <value>@(context.LastError.PolicyId)</value> </set-header> <set-header name="ErrorStatusCode" exists-action="override"> <value>@(context.Response.StatusCode.ToString())</value> </set-header> <base /> </on-error> Similarly, we can perform other operations like update and get by updating the required headers into the policy. Reference link for File Share operation APIs - https://docs.microsoft.com/en-us/rest/api/storageservices/operations-on-files
Check list for onedrive migration based on MS best practices
Are there any MS best practices defined while doing OneDrive migration that we need to consider before migrating user's data. Source of the user's data is network fileshare and destination is OneDrive for business. Also, is there any governance for OneDrive for Business that we can apply?
SharePoint migration tool and Active Directory Groups
We have a department that is looking to migrate from a file server to SharePoint Online. In looking at the SharePoint migration Tool, I know this is possible, but I have a question regarding permissions. Most of the permissions on the file server shares are set to groups in our local AD. Most, but not all, of those groups are synced to Azure AD. Assuming the groups are synced, do we need to generate a custom mapping file, or will the Migration Tool assign permissions in SharePoint to the same AD group that's used for the file server share? Likewise, if all user accounts are synced to AAD, do we need to still create a custom mapping file?
File services in azure
We currently have DFS setup on-prem. We are visualizing our environment but wanted to get away from DFS. We need to have all the files in DFS migrated to azure VMs. Im just not sure what the best way to go about this is. I was looking at Azure Files, but learned that it doesnt support ACLs. I know there is a preview for this feature, but we don't use AAD DS. The only way i can currently think of is setting up a few VMs with shares. Just didnt know if there was a better option in azure that supports ACLs and some type of replication.
