SkreeM1980

All we will have left is computers that have VERY specialist software, EPOS mostly but there is still a windows 2000 machine connected to a CNC router somewhere, and the upgrade of the router and software to win 7 compatability cannot be justified while it is still operational.

Stupid question but have you logged off and back on? Windows only processes your group membership at logon time, and if you created the group and added yourself since then it will not recognise.

Nathan, If there isn't a profile it should create one from the default profile, I would therefore suggest that there may be a problem with the Default profile on the computers where you are seeing the issue. I'm not sure what everyone elese thinks but I would much rather had a mandatory profile for the little cherubs than allowing individual roaming profiles. you may want to look into it.

Can you send a screenshot of the policy settings? Have you got "Run in Logged on Users Security Context" ticked?

It sounds like there is something slightly out in your targeting/setup in the policy. Although worth checking that if you disable the GPP policy, and log on as a Y3 or Y4 do you get any mapped drives? If you do it is either coming through in the profile or via another method, make sure this is cleared and then re-apply the GPP. We're using security group targeting and it works great, have also targetd drives on User in OU and computer in OU, all work.

Virtualisation is a total no brainer, modern servers are totally bored with the load of a standard windows server, just add more ram and make them run 10 or 12. I've got a big environment, but I would virtualise in any environment just for the benefits of role separation and the ability to add a new server for any new roles that come along. Veeam for backup is an absoloute marvel. Mine runs through about 6TB of servers every night in about 6 hours.

If you virtualised you would have the benefit of being able to run 2 DC's, DHCP , DNS etc, that would allow some resiliency for doing updates/patches etc, but you will be putting lots of eggs in a single piece of hardware basket (no different to only having a single server to start with)

We're using Faronics Powersave ... does the job, haven't pointed it at Win8 but I would imagine it will work.

IF you have UAC enabled on workstations drive mapping via script can be a tad ropey to say the least. If all the script does is map a drive, I would suggest that you do it with a Group Policy Preference instead, it can then be targeted in all sorts of fun ways. Also if you put the script in the user account, I would suggest that putting the path may involve \\woodside.local\netlogon or %logonserver%\NETLOGON as that is the legacy default path to the location you have said the script is in.

Re publishing externally, it would be best if you have a public certificate available to only open access via https (Papercut port 9192 default) Another little trick is to put IIS on the papercut server, and put a site on port 80/443 that redirects new connection to the port 9192(or 9191 if you want to be insecure) Altho papercuts docs say you can move the service to 80/443 there are a lot of things inter dependant and it seems like too much of a ball ache to have to remember them every time you add a new print server etc.

Is your DNS Zone configured as AD integrated or is it a standalone zone?

I could do, However I was looking to avoid using the background as we have a large number of VDI desktops and best practice is to not have BG images as it can reduce screen redraw performance.

I know .. but if you haven't tried to tell them and they come crying it makes it harder to say I told you so!

We use Faronics Powersave, it wasn't necessarily cheap, but is quite effective, and provides the ability to report on the power savings, alongside policies for different groups of machines, and it has a feature to save open files which may be useful. Skr

Hi, I'm looking into ways of popping up a message to students with "Useful Info" on login (Save your work to your my documents when opening from email etc.) and thought I would be able to use BGInfo with the /popup switch, but when I do my 8 lines or so message it doesn't all fit into the popup window that comes up. Does anyone know a way of making the window size different, or a different tool I can use for this? Thanks Skr

We issued speakers on this occasion, however I have found How to disable jack detection on Windows 7 ? | The Extra Money – Esoteric Software Resolutions to disable audio jack detection.

Have just experienced this problem on one of our Dell PC's. Has anyone got any ideas of a solution other than having to plug headphones/speakers in? We have noticed that it is only when it tries to switch to HD on auto detection, is there a way we can make it default to standard? Thanks Skr

What OS are the workstations / server and are the 32/64 bit?

I think most people have hit the nail on the head, you use different scripting languages for different things, we have a lot of VBS for printer mapping and drive mapping, plus some other stuff with environment variables .. but we also do plenty with Batch files and have got some PS stuff but thats a massive learning curve for me. The last batch file i remember writing is to make Dameware Utilities available in SafeMode with networking. IT was the easist way to copy a folder and all containing values from one reg branch to another. 2 or 3 lines, in VBS it would have taken loads more.

I recently used the following script on one of our student homefolder shares for /D %%i in (*) do ( subinacl /file %%i /grant=MOULTONAD\%%i=C "/grant=MOULTONAD\domain admins=f" /setowner=MOULTONAD\%%i subinacl /subdirectories %%i\* /grant=MOULTONAD\%%i=f "/grant=MOULTONAD\domain admins=f" /setowner=MOULTONAD\%%i ) It resets the permissions and the owner, the only thing to look at is the permissions being inherited from the parent afterwards. I re-jigged tehm to allow traverse to Folder only and all is good.

We use Photoshop for our image editing in our design subject areas, the other subjects aren't really in use at our college due to being landbased primarily.

Hi All, Have been struggling with getting xbox live to work for our resident students, after an MTU related error that had nothing to do with the MTU we now have a message that our network is configured with Strict NAT. I can't find any useful info on the net, most of the advice for obvious reasons is targeted at the home user, with their £50 router/firewalls. Current Set-up Resident VLAN>Transparent Proxy >Firebox OPT > Internet. The proxy is a BLoxx device configured in transparent mode, it has NAT and forwards everything but content filters Http The firebox has all ports configured to be allowed out that Xbox requires The internet is a varied and wonderful place (although with a darker side too) Any advice, suggestions etc would be greatly appreciated

We have this problem all the time with students chosing Open from files thay have emailed themselves, usually it is from Webmail though as we don't allow them to use outlook. I would love a solution to prevent the open option on downloads in IE to make them save to MyDocs Skr

If inty can't hold it i would suggest that you just leave it, it will keep retrying for upto about 4 days, if you are only offline for a few hours no-one will recieve a delayed delivery or undeliverable message.

Hi, Can anyone recommend a 3x3 mimo External Omni directional antenna(2.4Ghz or 5Ghz) ? I'm looking at replacing an existing AP with a nice shiny new N one, but i don't want to pay the premium that is charged for an externally cased AP with the antenna's and would much rather just put it internally with an antenna. I've had a google but there is very little available in 3x3 and each link i follow leads me to a desktop antenna for your PCI card Thanks In advance, If it matters it would be connecting to an Aerohive AP340