Migration is worth it! - Windows Server 2003 no longer supported

Early last year Microsoft announced that it was ending support for Windows Server 2003 but would continue to provide extended support for some additional time. We addressed this in an older post and pointed to an alternative solution, Google Apps.

Here is some breaking news if your business is still running on Microsoft Windows Server 2003:

Last week, Microsoft announced its discontinuation of extended support for Windows Server 2003. So what does this mean? It means Microsoft will no longer provide fixes, updates, or technical assistance. This also means no more security updates, leaving physical and virtual instances vulnerable to any and all new security threats, which have been increasingly damaging.

Businesses that are still running Server 2003 face a number of vital considerations. It’s been over a decade since its release and the computing world has changed drastically since. Although the Windows Server 2003 platform worked well in its time, it’s now become a liability and a limitation for organizations still relying on it. Waiting to upgrade is both expensive and risky as you’re now susceptible to security threats and paying hefty fees to maintain old hardware. It's now time to leave the obsolete server and update your business' infrastructure.

Leaving Windows Server 2003 is an opportunity for change. So where do you go? Windows Server 2012 R2, Microsoft Azure, and Office 365 are all concrete solutions with great benefits, including improved performance, reduced maintenance requirements, increased agility and speed of response to business. Microsoft recommends collaborating with a partner to help execute a successful migration strategy. We have, not one, but two Microsoft Silver Competencies and are here to help you!

Alternatively you could step into the Google infrastructure and perhaps find that it's better suited for your specific business needs.

You now know that you are at the end of your Windows Server 2003's life cycle, contact us today to pave your way to a successful and permanent migration to the cloud! Migration is worth it!

Microsoft Cloud touches down in Canada!

Last week, Microsoft made a game-changing announcement: Microsoft will be opening two Canadian data centres that will offer Office 365, Azure, and Dynamics CRM services.

Our team here at Interlock IT has been leading Office 365 implementations since 2010 and has noticed a dramatic increase in interest from our clients in moving infrastructure to the Microsoft Cloud.

There are some compelling reasons to switch your email or Exchange Server to the cloud; whether you want the latest and greatest updates, Microsoft's subscription-based licensing models, or are trying to reduce costly infrastructure overhead. There is also the incentive of exclusive services and capabilities only available through the cloud, like Yammer, an enterprise social networking service, Delve. machine learning and artificial intelligence which helps you discover what's most relevant and important to you, and Office 365 Video, an intranet-style website portal to post and view videos in your organization. It is a mobile-first, cloud-first age in which Microsoft's cloud-centric roadmap for its flagship products will pave the way for you to stay ahead of the competition. This is the platform you want to be on.

However before this great announcement, the fact that infrastructure and data would be based outside of Canada and potentially subject to foreign laws and regulations such as the PATRIOT Act would sometimes dismiss consideration of the cloud for many of our clients. To have data located outside of Canadian borders is violation of some company's policies and therefore a sticking point. This has been a cloud deterrent for many, until now.

Some key points to note:

• General availability of Azure is anticipated in early 2016, followed by Office 365 and Dynamics CRM Online in late 2016.
• The data centers are to be located in the Greater Toronto Area and Quebec City (specific locations have not been announced for security reasons.)
• Microsoft will address data residency considerations (you can specify that your data will only reside in Canada.)

Can existing Office 365 tenants be transferred into the Canadian data centers? Will the pricing model be proportionate? Will performance be as robust? Will updates be released on the same schedule? All these questions come to mind and we anticipate answers in the coming months. Microsoft is finally ready to plant its flag on Canada's growing cloud industry as it hopes businesses will invest more in its ideas than its hardware and we begin to see a new dawn of cloud computing within our borders.

Fixing conflicts and errors with Active Directory synchronization to Office 365 and Azure

Sometimes user accounts (or objects) that have been deleted and then recreated on your Active Directory will become out of sync with Office 365 meaning changes to passwords and other attributes won't sync properly. Another cause is a change in the configuration of your Azure Active Director Sync utility, such as changing the SourceAnchor attribute.

DirSync is more common in the Office 365 user base because its replacement, Azure Active Directory Sync was recently released in September of 2014. For a comparison of the two tools visit Microsoft's Directory Integration Tools page.

If you have objects out of sync or conflicting you might receive an error message email every few hours when the AAD Sync utility is run.

You should also see the errors in the Event Viewer and Application Logs on the Windows Server running the utility.

In some cases, the Microsoft's own Office 365 IdFix tool can't find the problem, and thus can't fix it.

By reviewing the contents of userdetails.csv output by the PowerShell command:

get-msoluser | export-csv userdetails.csv

we were able to see that the ImmutableID was set incorrectly due to a prior sync configuration or that the on-premises Object ID shown in the error message above was already connected to another user.

Somewhere along the line, Microsoft removed the ability change or clear the ImmutableID attribute without first disabling Directory Sync for the organization so most internet postings we found while looking for a solution are no longer valid. Some postings showed that back in 2012 you could set the ImmutableID from PowerShell. Today you can only clear it to null if Directory Sync is deactivated.

Deleting (setting to null) the ImmutableID attribute on Office 365/Azure Active Directory solved the sync problem for us. You can no longer change it to match but the directory sync utility will re-populate it for you. Here's how to do it.

Start by disabling the Azure AD Sync Scheduler task in Task Scheduler on the Windows Server that runs AAD Sync:

Next Deactivate Directory Sync on your Office 365 Admin console:

In our experience, it actually takes a couple of hours during business weekdays and about 10 minutes on a Saturday night to deactivate, but it could theoretically take up to 72 hours to complete.

Copy the commands below into a new text file and save it as eraseimmutableid.ps1, change the $upn value accordingly and run it:

set-executionpolicy RemoteSigned
Import-Module MSOnline
Connect-MsolService
$upn = "sampleuser@domain.com”
$oid = (Get-MsolUser -UserPrincipalName $upn).ObjectID
Write-Output "Before:"
Get-MsolUser -UserPrincipalName $upn | select userprincipalname,ImmutableID,ObjectID
Write-Output "`n`nAfter:"
set-msolUser -ObjectID $oid -immutableID "$null"
Get-MsolUser -UserPrincipalName $upn | select userprincipalname,ImmutableID,ObjectID

Now re-enable the sync service in Task Scheduler and run it manually.

If you still see errors keep looking at the results of userdetails.csv mentioned above. Search for the email addresses and Object IDs shown in the error message email.

Feel free to reach out to InterlockIT.com for assistance with your Office 365 Directory Synchronization configuration and fine tuning.

Interlock IT earns two Microsoft Silver Competencies!

Cloud Computing is entering its second second stage of hypergrowth in enterprises. Forrester estimates the public services cloud market will grow to $191 billion by 2020, a huge leap from "just" $58 billion in 2013.

Businesses of all sizes are looking to roll out fully cloud-enabled productivity suites with a minimum of disruption to their business. We've seen a huge uptick in demand for cloud-based systems that remove the stress of administering your own email system or file server and let you focus on the things that matter—like finding new clients or executing on projects.

Early in his career as Microsoft's new CEO, Satya Nadella knew that the way forward both for Microsoft and other businesses was "mobile first, cloud first." Shouldn't your business be able to work from anywhere in the world, on any device, at any time?

Office 365 plans start at $5.10 per user per month and for $12.90 per month the desktop versions of the Office suite are included. At that price managing on-premises email servers or paying for hosted Exchange no longer makes sense.

As a Microsoft Partner with Silver-level Competencies in both Small and Midmarket Cloud Solutions and Cloud Productivity, the team at Interlock IT is well-positioned to help you move from your antiquated email system that doesn't work at the pace of modern business.