Search This Blog

Saturday, June 27, 2015

Q&A Which of the following services is NOT part of Office 365?

Friday, June 26, 2015

windows 10 joined a windows 2003 domain

windows 10 joined a windows 2003 domain

will that still work? mixed results here


https://social.technet.microsoft.com/Forums/en-US/ad819a03-3341-4266-b998-bafbda23b897/windows-10-build-9926-domain-join-on-active-directory-2003-domain-level?forum=WinPreview2014General

Access Denied on USB drives

Access Denied on USB drives

http://h30434.www3.hp.com/t5/Notebook-Operating-Systems-and-Software/Access-Denied-on-USB-drives/td-p/3662944

like a joke

Sunday, June 21, 2015

Yes, I done ADFS 3.0 using Windows Azure VM with Office 365 .... here is my version

Yes, I done ADFS 3.0 using Windows Azure VM with Office 365

I thought of doing this for sometime now. eventually with Windows Azure VM, it bit easier to do the test ADFS,

there is a great post I am referring to

http://office365support.ca/setting-up-the-primary-ad-fs-3-0-server-in-windows-azure-for-office365-single-sign-on/

I basically followed the steps listed above ...

here is my implementation ....

0/ a windows azure AD is setup like datasys.biz like DSLPDC

1/ I setup another server like DSLRDS, installed dirsync

2 / verify in azure portal that you own the domain, put ms=xxxx in the dns record. there is a caveat in doing this as I have to create datasys.biz as standalone rather than federated

3/ then convert the datasys.biz to federated domain

4/ plan ADFS structure , in my case, I use Windows Azure only domain, ie no link to on-premise AD. I would say this method will work as hybrid as well.

5/ plan the farm, a ADFS farm with two servers, a webproxy farm with two servers, ADFS servers are domain-joined; web proxies are not domain joined.

6/ in this test, another network created under the azure network as DMZ network...
172.16.16.x as primary   ---- DC, ADFS on this
then 10.118.118.x as DMZ -- 2 webproxy servers on this one

it is routable between this two sub networks

7/ I used internal load-balancing for ADFS,  so I dont need modify the host file approach in the above mentioned link

8/ plan your ADFS name, I would use one name fs.datasys.biz ; this is the name for all adfs-related servers --- 2 ADFS + 2 Webproxy

8.8/ create a service like dataADFS, install VM - ADFS01 inside ( then adfs02)

9/ get a trial cert from comodo (3 month) or geotrust (1 month) ; with the name fs.datasys.biz ; do this on adfs01 ; export the cert with the private key plus password. this will be imported to 3 other servers

10/  install adfs02 , import cert, install adfs role etc

11/ install internal LB with windows azure powershell cmd, the load balancer name is fs.datasys.biz ; this balancer , is not available to internet; you can do internal test by going to
 https://sts.domain.com/adfs/ls/IdpInitiatedSignon.aspx
in my case , its https://fs.datasys.biz/adfs/ls/ldpInitiatedSignon.aspx
this URL is very important for me for testing

12 / now create a WAP service, put datawap01 in it, install the webproxy role under remoteaccess (assuming you use all server 2012 r2) , import cert, then start the configuration wizard ... follow the wizard the federation name is fs.datasys.biz ; I used domain credentails , as local credentials keeps getting error.

13/ install 2nd dawap02, do the same as above, I kept getting error like something like glabal config ; then I viewed the cert, import the cert again, after a long think , ADFS success what a relief.

14/ configure WAP URL load balance, in azure portal, datawap01, enable https end points, create load balance set

15/ for datawap02, add it to the https balance set

16/ note the wap service public IP

17/ in public dns, put the IP to fs.datasys.biz

(note dattasys.biz is an example domain)

18/ test by browsing to portal.office.com

19/ this will re-direct to the fs.datasys.biz

20/ enter a valid username/password in your windows azure VM AD

21/ then it will re-direct you back to portal.office.com as a logged-on user.

22/ yeah, I have finally done ADFS after thinking-of doing this for years

many thank to Kelsey Epps Office365 MVP








Sunday, June 7, 2015

outlook 16 connection error to Exchange 2010

outlook 16 connection error to Exchange 2010

there is an error citing EWS,

this happened with my non-domain joined w8.1 ; my w10-domain-joined notebook seemed fine

https://community.office365.com/en-us/office_2016_preview/f/991/t/347764

https://technet.microsoft.com/en-us/library/aa995956(v=exchg.141).aspx

something to do with the autodiscover


Saturday, June 6, 2015

office 2016 first impressions --- it looks like replaced my current office 2013 -- O365 subscription

office 2016 first impressions --- it looks like replaced my current office 2013

enable office 2016 preview for download in office 365

enable office 2016 preview for download in office 365

https://support.office.com/en-nz/article/Office-365-release-options-3B3ADFA4-1777-4FF0-B606-FB8732101F47?ui=en-US&rs=en-NZ&ad=NZ

Set up the release option for your organization

You can change how your organization receives Office 365 updates by following these steps.
Important   It can take up to 24 hours for the below changes to take effect in Office 365. If you opt out of First Release after enabling it, your users may lose access to features that haven’t reached the scheduled release yet.
  1. Sign in to Office 365 with your work or school account.
  2. Go to the Office 365 admin center.
  3. Go to Service settings > Updates.
  4. To disable first release, select Standard under the Standard release heading.
    To enable first release choose Entire organization or Select people and follow the steps below.


Select people for First Release

Follow these steps to select individual people for First Release. You might, for example, add your IT staff for First Release so they can review features before the rest of your organization. Enable First Release with select people following these steps.
  1. Go to the Office 365 admin center.
  2. Go to Service settings > Updates.
  3. Under first release, choose Select people.
    Note    If you don't see this option in your admin center, your subscription will soon be updated with it and you can change the setting then.
  4. Choose Pick people to add users individually and then use the people picker to select them for first release.