OverWorked

Hello, I'm in the early stages of Office 2010 rollout. All existing users docs are opening in word in Protected View. They have top click the button to enable editing. How do I stop this? I want them to open their own docs (on a DFS share) without going through protected view. In GP, the only setting that makes a difference is User\Admin Templates\MS Word 2010\Word Options\Security\Trust Center\Trusted Locations\Allow Trusted Locations on the Network There are settings for trusted locations in ...\MS Office 2010\Security Settings\Trust Center\... but none of these make a difference. I thought that the MS Office setting would apply to all Office apps (the descriptions say they do). Can anyone tell me what setting they have for the trust center and protected view? Thanks.

Fixed it! The local profile folders were coming from the "default user.v2" profile in NETLOGON. I deleted the duplicated folders from the NETLOGON default user profile and also deleted the user's roaming profile. I set the GPO setting user\admin templates\Window Components\Windows Explorer\Prevent users from adding file to the root of their Users Files folder: enabled. (I don't know if this is necessary for this but I need it anyway). Logged on again as the user and the local profile folders had gone. I'm still not happy with this though. In my opinion, if the folders are redirected, they shouldn't also appear as local folders. This may be by design, as I hadn't set the "move contents" option in the redirected folders properties.

Hello, I'm in the process of setting up the pupil's Windows 7 environment ready for deployment over summer. Users have roaming profile and redirected folders. Now the user sees 2 of each folder: one in the local profile path, and one in the redirected path. Screen shot attached. I've seen this, so I know I'm not the only one - but still no solution. Any ideas how to stop them seeing the local profile folders in the ? I know I could just stop them seeing the personal folder.

There's also a Youtube video here

There's also this to hide the personal folder from the start menu:-

I have an MS EES license and I've just set up Office and Windows 7 with e-academy for staff Work At Home rights. There doesn't appear to be any control over who gets to register and download, other than their email domain name. I've only purchased ennough licenses for the staff, and of course WAH doesn't apply to students anyway. How do I stop students (with emails in the same domain) registering on our page at e-academy and downloading MS products and keys? Before I signed up I imagined that all requests had to be approved by me.

That's a good point. I was forced to deploy Win 7 when I bought some machines that couldn't be downgraded to XP. I'm surprised that some are still being supplied with downgrade media - I thought MS had stopped this. I recommend that you upgrade your DCs and file servers to 2008 R2 before allowing users on Win 7. I had all sorts of trouble with Office docs disappearing with a Win 7 and Server 2003 combination. I'm planning on deploying win 7 to the whole school in the summer.

IE9 for Windows 7 and Vista appeared on WSUS this morning.

IME the GPO methods don't fully work anyway. It would require a third-party paid-for solution. I've had a few suggestiions for Sophos, but it can only be made to scan additional filetypes for viruses. It won't block filetypes outright. Even Faronics don't have a product that can do this. I asked them at BETT last year. This should be really simple. Just deny access to files matching U:\*.swf with subfolders. How hard can that be? I've added a file screening policy to the Server 2008 file server, to block .swf and executables, which at least keeps them off the server and irritates the pupils.

I'm being thick, I'm sure. How do I find which disk volumes are on which iSCSI devices? The iSCSI Initiator lists targets, their MAC and IP addresses. It also list volumes but not which traget they're on. The Disk Manager will give a target ID in the properties for each disk. How do I match the two? I need to perform maintenance on one iSCSI device, so I need to copy its contents to the other as backup.

I replaced my Server 2003 file server wiith Server 2008 R2, about a week after that last post, and it is all working now. I haven't received any complaints of lost files since upgrading. It looks like the Server has to be 2008 (possibly R2).

Thanks everyone. I found it. It was the MBR limit, not iSCSI. I have two of these NAS boxes. During setting up the second one I saw the dialog in disk management giving the chice of MBR or GPT when I initialized the disk. The dialog describes the 2TB MBR limit.

I've just bought two 4TB Buffalo Terastation III iSCSI devices for backup. I've connected with the iSCSI initiator OK. In the disk manager, it shows a 2751 GB disk. The disk is divided into 2 unallocated spaces (2048GB and 703GB). I can create a 2048 GB partition on the first space, but can't do anything with the other 703GB - it remains unallocated. I expected to see one space of about 3TB (after RAID-5). I'm new to iSCSI. Is there a 2TB limit? How do I access the full drive space? Help!

Thanks for that. I tried the SCUP, and built an update. I couldn't upload the update I'd created to WSUS. A can't spend any more time on this - I'll just wait for MS to release it properly through WSUS.

Thanks. I've tried the import updates facility to download IE9 from the catalog. My WSUS server won't download from the MS Update Catalog site - they all fail. After half an hour of googling I've not found a solution. I can download the files for manual installation from the catalog, but I don't think it's possible to import those files into WSUS. I was just hoping it would be on WSUS soon without having to import from the catalog.

Is there any news on when it will be released via WSUS? I need to deploy it urgently, as our Fronter VLE will not work on IE8 on Windows 7, but will on IE9. If it's not on WSUS, is there any other way deploying it? Thanks.

Yes, that's them. Same script. I had Laura call me twice a few years ago. I can't believe they are still doing it. The name of the company this time wasn't MCS though. (It was three letters, I just can't remember).

They're back under a new name. Or at least another company is copying their tactics. I've just had a phone call:- Asked for my home address to send M&S vouchers to - I refused. Gave me a security code - I've no idea what for. Asked what I was doing at the weekend - Laura of MCS used to ask for dates when people would be on holiday. Said they were selling triple quantity cartridges - just like MCS used to offer. Offered to send samples of said cartridges @ £120 each, then mentioned an invoice. I put the phone down at that point. The only improvement over MCS is that this time he gave a full address for the company. Somewhere in Cornwall. I cannot remember the name of the company - I wasn't really listening - sorry. If anyone else get this, please let me know the name so I can alert the LA.

Thanks for the suggestion. I've found the cause and ifxed it it was a good old DNS error. The clients weren't registering their new IP addresses, so the DNS records were out of date and ERA couldn't find the clients. As simple as that. Funny how a lot of problems are down to DNS.

Did you get anywhere with this? I'm having the exact same error on a few machines. I have a room of 17 machines. All XP installed from the same RIS image, all with the same GP settings. For some reason, four of them will not install NOD32, when pushed from the ERA. I have tried entering the domain admin account credentials and several others. Is there a way of installing manually from the client, like there is with Sophos? Utterly frustrated.

Update again. The problem is still happening. I've manually applied the KB2434932 v2 patch, and deployed Win7 SP1 via WSUS. I can replicate the problem:- 1) Create a Word doc on an XP machine. 2) save doc and log off 3) Log on to Windows 7 machine 4) Open the doc and edit it. Save it. Close Word. 5) On Windows 7 machine Windows explorer, the doc will appear in the share, no indication of a problem. 6) Go to another machine or the server, try to open the doc, but it's not there. All you see is a .tmp file. The .doc file is in the CSC cache on the Windows 7 machine. Word or Windows 7 has saved the .tmp file to the share, but the .doc just stays in the local cache. This should not be happening. I am at a complete loss with this, especially as everyone else seems to have this fixed. I'm going to try moving the share to a Server 2008 R2, and upgrading Office to 2010.

The strange thing is, that I've been using Shark for years and have never needed the patch before.

This fixed it for me. I have Shark running on loads of XP machines for years no problem. I have tried and tried to install it now on a newly installed XP SP3 machine and got the problem. Installing the XP patch fixed it.

@ John Yes, it's the NYCC Fronter logon screen. Works fine in XP+IE8, but not in Win7+IE8, for the same user accounts with the same group policy settings. @Fronter Taking the solutions in order. 1) There is no externally hosted content. Looking through the web filter logs for a student accessing the Fronter logon page, the only URLs are:- http://crl.comodoca.com/AddTrustExternalCARoot.crl http://crl.comodoca.com/UTN-USERFirst-Hardware.crl https://fronter.com/ https://images.fronter.com/ http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl 2) Enabling "Display Mixed Content" has no effect. 3) See 1. Looking at the fronter.com certificate, I click the Issuer Statement and am presented with:- https://secure.comodo.net/CPS Internet Explorer cannot display the webpage

When my staff or students access Fronter from IE 8 on Windows 7, most images are replaced with red X's. The yellow bar says:- Clicking the yellow bar and selecting "Display Blocked Content" has no effect. I think it a Group Policy IE setting somewhere, but I can't find which. Any ideas? Thanks.