Posts made by LJ

I am assuming that just as Domain policies override local policies in Windows that Google Suite?, enterprise? or what ever it is overrides our local chrome polices that are added to our local group policy with the chrome.adm template.

Thanks for replying. there is only one public user. It is the same on all the computers. Logging off and back on doesn't solve the problem. To clarify it is when they are already logged on to the computer and login to their school managed gmail account that causes the problems. It seems that once they log in to Google suite it syncs and loads a bunch of apps and also apparently overrides my local Chrome policies. For instance I have a blacklist of all (*) for Chrome extensions that can be installed but when they sign in we are left with lots of extensions. That is one example.

Public library computers have Windows local group policy restrictions including Chrome Policy Templates. When students login to school accounts their enterprise policies apparently override our local policies and allow apps we don't want. A further complication is they don't log out and the next public user who wants to log in sees the previous user and is confused requiring intervention by library staff. We need a way to prevent this or at least a log on script to sign them out or delete something in the registry or whatever will work. Thanks on behalf of public libraries everywhere.

Thanks everyone. I ran a script basically the same as the one pmoncho posted as the first reply. After doing that I then used this from Spiceworks https://community.spiceworks.com/topic/1992814-gpo-to-automatically-create-a-mapped-folder-for-new-users-which-created-from-tem
Create a GPO.

User Configuration>Preferences>Drive Map

To use the user's name in path, use %LogonUser%

i.e. \fileserver01\user_shares%LogonUser%_Share

While in the path box, if you press F3, a box will pop up showing you all your variable options

Image: https://content.spiceworksstatic.com/service.community/p/post_images/0000246600/59131727/attached_image/Netmap.png
After setting that up the domain users have the two new shares showing up (home folder and Shared ) and their file permissions etc seem to be just right and sending them where they need to go to use their files. I have told them not to use the use recent files from their apps but to search open from the new shares. I am a little scared about getting rid of the files from the old server. Should I just change the permission on the older files to denied or read only? Anyone already figured this out?

@pmoncho
This is what I have from the MS site.
/copyall Copies all file information
/SEC Copies files with security
/E Copies subdirectories includes empty directories
/R:1 Specifies the number of retries on failed copies (1 in this example)
/W:1 Specifies the wait time between retries, in seconds (1 in this example)
/Z Copies files in restartable mode
/MT:6 Creates multi-threaded copies with N threads (6 in this case)
/NP Specifies that the progress of the copying operation (the number of files or directories copied so far) will not be displayed
/log Writes the status output to the log file (overwrites the existing log file).

Since this is copying and NOT moving or mirroring I can't go wrong. Right? Ha!

I am going to set it up as a scheduled task to run late one night.First I have to read about the share and file permissions.

SET SORC=YourSourceDrive:
SET DEST=YourDestDrive:
SET LOG=SomeDrive:\robo.log
should Source, destination and log all be drive letters and folders? If the share is setup on the destination folder with permissions for all domain users (intially) I guess robocopy doesn't have to know anything about shares? Thanks again.

I'll try it late this afternoon or tomorrow. Have to leave this location in a few minutes. Thanks again. In the meanwhile if you get a chance post the GPO info.

Thanks again. Can you give me some details about "I use GPO's to set the users home dir and shared file folders"? That's another area I need help with.

I'm looking up robocopy switches right now but at this point I'm not sure what all of the above does.

another question: What needs to be done on the destination file server before the script is run?

Thanks! My first question. I assume this runs on the server with the existing set of files.
2nd question: With as few users as I have do you recommend just manually editing the login script to change the home directory and shared files? Is there a easier/better way?

We currently use a DellT110 running a windows server 2008R2 domain that acts as a staff file server. Now we have a Dell t330 running Hyper-V 2016 with two VMs running Windows Server 2016. All three have been joined to our existing domain. One will be our file server. Next step: move and/or copy the files to the new file server and hopefully carry over home directories and shared directories and associated permissions etc. We have less than 100 GB files. 6 Users.

Need recomendations. Considering DFS and Robocopy (https://community.spiceworks.com/topic/1966255-using-windows-dfs-to-migrate-file-share). Looks complicated.
Many of you have done this countless times. Suggestions?

Thanks. That's what I thought but you never are sure when reading Microsoft terms. As Eric Siron who writes @ Altaro Hyper- V blog says "Concise and Microsoft Licensing will never intersect".

If you have Windows server 2016 and also purchased 6 user CALS does this mean (a) only six accounts can be listed under Active Directory Users and Computers-> Users (b) you can have more than 6 users listed as long as there are only 6 different human beings accessing the server (c) something different from either of these. Thanks

@dustinb3403 That's a good point. I think I would need another set of licenses with a possible exception in an emergency.
Maybe I will quit stalling and go ahead and and start using the server. I should have a fair amount of time next week.

@lj I have reinstalled the Host with a bigger partition, added it to the domain, got all the Hyper-V manager, remote disk management and Windows Admin Center connected, restored the 2 test VMs with Altaro and everything is working. I used Disk2VHD to virtual a Win7 machine then briefly got it running on the Host.
Keeping in mind that I am still learning, what should be my next step? Perhaps another install of Hyper-V on a desktop and moving VMs back and forth?

Reading the Veeam Backup Free Edition it appears it installs the console on windows Server or Windows Desktop. Does that sound right? I installed Altaro on the Hyper-V host itself. I don't know which setup would be better though. Comments appreciated.

@obsolesce I just installed Windows Server backup. It doesn't recognize the Dell RD1000 Hard drive cartridge. A little research showed me this is a known unsolved problem.
It was worth a try. I'll keep checking out Veeam and Altaro for now.

@lj More info: I don't have to have instant restore. A few hours will be acceptable in our situation. I am thinking about full backups to DellRD1000 HD cartridge several times a week even if it has to be done manually. I also have been using a Xcopy batch file that runs every night and backs up new and changed data files to an external hard drive. I plan to keep using that also.

I just finished reinstalling Hyper-V server and altaro backup. I then used Altaro backup to restore 2 VMs I had created and backed up on my previous version of Hyper-V. Now I finally understand why everyone tells me to switch from physical to virtual!
For my next step I need to decide about which free backup and restore to use. All comments are welcomed and thanks for the help so far.

I apologize for not making myself clear. Altaro VM Backup – Free Edition vs. Veeam Backup Free Edition- "The must-have tool for VMware VShpere and Microsoft Hyper-V" is what I should have said. I have Altaro installed now when time permits reinstall Hyper-V with a larger volume. At that point I will probably install the Veeam product.