Michael's questions

With windows roaming profiles, most of the windows profile can roam to other computers in a domain, this includes the outlook profile.

We are moving away from roaming profiles in favor of UEV and work folders. UEV allows certain app data to roam including outlook credentials, but it does not roam the outlook profile.

I'm wondering if any know of a way or has an idea about how to use those credentials through powershell/automation to create the outlook profile.

I would also be okay with not roaming the profile but AT LEAST prompting the user with their correct email credentials. Currently they are prompted with their UPN (user principle name) from the domain which is different from their actual email address.

Thank you

Edit:

• Our domain is corpB.example.com
• The user upn is [email protected]
• The user's email should be [email protected]
• The exchange server is not part of our domain, but I think its part of corpA.example.com

There is a semi-centralized org structure. Where a primary IT department offers some centralized services like exchange. And we have our own domains (subdomains) that can use those services.

I've talked with a few colleagues about what might be best practice for using group managed service accounts in our environment.

It seems that ideally, we would create 1 gMSA per service (e.g. SQL Agent service) per server (e.g. SQLDEV01).

This would allow for maximum separation of concerns such that if there is any issue with any service account (compromised, deleted, locked, corrupt, etc) that it would only affect the single service and single server that it is associated with.

One of the only cons to this approach is that there could be A LOT of gMSAs to create. But with that said, once they are created, there is not much need to manage them going forward.

The other issue I'm running into is naming the gMSA (I believe it must be 15 characters or less). It seems extremely difficult to come up with a name that denotes that the account is gMSA, is for a particular service, and for a particular server.

For example a generic name following typical conventions might look like:

• gMSA_SQLDEV01_SQLAGT (20 characters)

It could be shortened to something like:

• gmsaSQLDEV01AGT (15 characters)

The above example is exactly 15 characters with no room to spare for other potentially more lengthy server or service names.

Is there any best practice or ways to handle these situations:

1. group managed service accounts with separation of concerns?
2. group managed service accounts with long names?

So many of our Dell computers (NIC or Motherboard) seem to be holding onto the Static IP Address set within windows. When we decide to put a different hard drive into the computer and re-image it, we are unable to PXE boot with SCCM because SCCM detects that the computer is still set the static IP address that was assigned within Windows of the Old HDD. PXE booting works fine for all computers set to DHCPs.

We have noticed this issue for a while now, but it's potentially very dangerous, if there is no real solution. We could technically not be able to image the computer if we ever forget to set the IP to DHCP in windows before removing the old harddrive and installing a new one.

Has anyone seen this before or familiar with anything regarding this sort of issue?

I am trying to create a GPO that disables a laptop's wireless card whenever a Ethernet LAN is detected, and Enable the wireless whenever an Ethernet LAN is not detected.

Right now I have a GPO that works by disabling/enabling wireless when an Ethernet LAN is CONNECTED/DISCONNECTED. This only works for cases when the ethernet LAN is physically connected or disconnected, but not for cases when a computer starts up and no ethernet LAN is detected.

I would have to imagine there is an event that fires for after Windows Searches/tries to connect to an ethernet lan but fails because nothing is availible. I have looked through quite of lot of event viewer sources Wired-AutoConfig and NetworkProfile, none of these seem to have an event that handled ethernet LAN Detection.

I know that if you google this issue there are various proposed solutions: -Built in BIOS option (This does not work across the board for all of our laptops) -Various Powershell Scripts (many are lengthy and require manual customization) or do not work on Windows 7 devices properly.

I am trying to deploy Microsoft InfoPath 2013 using SCCM. InfoPath was only ever included in the MSOffice 2013 installer, not as a standalone. (I think there is a 365 standalone now days, but we don't use 365).

Since I don't need the entire installer for Word, excel, powerpoint, etc.. Is there a way to delete unnecessary installer files and .msp files so that I can save some space? (the entire installer is around 3GB and it doesnt need to be.