Jamo

Is there any reason why you aren't looking at MDT for deployment? It does this kind of stuff so much quicker and with less hastle (its not perfect but its so much easier!)

An admin for a fingerprint software?!? I hate software like that!! What software is it? It may be that its permissions on certain directories which would be a better option as it wouldn't open your system up to any threats from a user installing/infecting the local machine.

Have you run procmon from Sysinternals? Check for boot logging activity, is there some startup scripts which are slowing down?

It does sound overly complicated for internet filtering. We have 2 linux squid boxes forwarding traffic for us, no problems at all. Wireless is on a separate VLAN, as are switches. Would like to move printers and servers into a separate VLAN but wouldn't do it for staff vs students as you can never guarantee that a staff member wont want to use a student desktop or that a student won't use a staff laptop

One other option is to setup two of your own proxy boxes (check out smoothwall express or IPCop) Use one for staff and one for students, its quite common for the ISP to be able to filter by IP (as all your interwebs traffic from each group will then be coming from a different proxy box)

Little difficult to read that post, but how is it going now? I am in the same boat as you but have just had a break through with my logon speed! Got the initial logon from 1 min 30 to 30 seconds, and second logon to under 10 seconds meaning that a laptop is up and running in under a minute from off. All turned out to be permissions on the public folders (I had deny permissions initially to stop users from writing to them) this meant that Windows was trying to read the desktop.ini files and was timing out on each one, that has had me going for about a day now!

Booooooo! Still cant see it, I went on holiday to a place with no mobile signal in feb. How would that work if all my documents were stored in the cloud! pfft if I have to look at any more targetted advertising i swear I will go mad!

Check the user version of the policy above, it should be set to not configured (or disabled if its configured elsewhere for some reason)

It does sound a bit strange tbh, on my laptop here the applying machine settings is about 2 - 5 seconds so way off anything you are experiencing. RM have had a bloat problem for a while and it could be that wireless is just tipping the balance. You could try placing a test machine in a different OU with no policies applied?

You could also try running Procmon in startup logging mode and check out hte process tree, it should show any processes which have taken ages to start up.

Its not just the name, CC3 to CC4, that will have changed though, there could be huge underlying network throughput differences and totally different methods of achieving what to the user seems the same result. The only way of doing this would be to perform some benchmarking. Is one laptop quick? Are 10 laptops the same? Is there a limit to how many you can get onto one AP? etc etc, its a pita but there really isn't another way to see what it is that is the bottleneck

Contention just means that there are a lot of wireless backoffs and timeouts caused by excessive collisions. If you are using an RM standard logon process and nothing else has changed it suggests that the wireless connection could be the bottleneck? Do you have any benchmarks with 1 laptop, 2 laptops etc and seeing where the slowdown begins?

Quite honestly 30 seems like quite a lot to get onto one AP, especially during startup, if you are getting huge contention then more APs or staggering the logons is the best bet especially if the AP isn't managed.

How many laptops per AP? Is it a managed wireless or one of the D-Link things that RM sell?

So if you were to start up just one laptop, the problem goes away? (well not the problem as such....) RM put a lot of bit and pieces into their machines scripts, I know the problem you talk of, I used to maintain a bunch of ancient laptops at an old school, was looking at a 35 min logon sometimes and that was with CC3!!!!

Hmm, network contention? Does the same happen for one laptop?

Enable the verbose startup messages Computer Configuration\Policies\Administrative Template\System-Verbose vs normal status messages - Set to Enabled You should then be able to see what section it gets stuck on You can also do this with MSConfig I think?

My phone does most of those things on the move! Plus it has a flash for getting behind those desks at the computers when there is no light to take a picture

Shouldn't the fact that you are asking about 'what can I do with it', show that it is a nice to have rather than a necessity? lol

Thats pretty good checked out the site and it seems really good. We have 700 client stations so it seems whatever solution we go for it will not be cheap

Just had a look at specops deploy, how does it rate for cost? Its mainly the EXE and MSI that I would want to deploy, I currently deploy MSIs like flash and Shockwave through startup script as other methods are so unreliable.

Sorry to resurect this thread but I am in a similar position. The CSE product uses Prism Deploy Packager which works for some things but we are getting unreliable distribution of all other packages (MSI and EXE) which software houses seem to be providing more and more. How are you getting along with the migration? Have you come across any hurdles with software so far? I am currently looking into the functions which CSE provides which obviously need to be replicated. The software deployment seems to be the stumbling block at the moment though. Prism deploy looks good, am wondering if anyone else uses the deploy side (not the deploy packager, which was originally prism pack).

Check Firewall, and also SQL by default installs without support for TCP turned on. SQL Config Manager needs to be used to turn it on. (This is a default SQL install anyhow, I have never done it straight from SIMS so sorry if it is different!!)

I had a go disabling libraries and it seemed to stop me being able to search indexed locations or type mmc etc into the start menu, i had to type the full path for everything?! You had any luck? So far I have imported these ADMs: CLASS User CATEGORY !!Custom CATEGORY !!ExplorerExtras POLICY !!HideLibrariesInExplorer KEYNAME "SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum" EXPLAIN !!HideLibrariesInExplorer_Help VALUENAME "{031E4825-7B94-4dc3-B131-E946B44C8DD5}" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY END CATEGORY [strings] Custom="Custom Policies" ExplorerExtras="Windows Explorer Extra's" HideLibrariesInExplorer="Hide the Libraries Icon in Explorer 2008/Vista/Windows 7" HideLibrariesInExplorer_Help="Enable this to hide the Libraries icon, disable or unconfigure to show the Libraries icon." CLASS USER CATEGORY "Windows Vista & 7" CATEGORY "Desktop Items" CATEGORY "Classic Start Menu" POLICY "Hide Internet Explorer Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {871C5380-42A0-1069-A2EA-08002B30309D} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Personal Folder Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {59031A47-3F72-44A7-89C5-5595FE6B30EE} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Computer Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {20D04FE0-3AEA-1069-A2D8-08002B30309D} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Network Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Control Panel Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Recycle Bin Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {645FF040-5081-101B-9F08-00AA002F954E} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Libraries Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {031E4825-7B94-4dc3-B131-E946B44C8DD5} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Search Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {9343812e-1c37-4a49-a12e-4b2d810d956b} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide My Documents Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" VALUENAME {450D8FBA-AD25-11D0-98A8-0800361B1103} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY; CATEGORY "New Start Menu" POLICY "Hide Internet Explorer Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {871C5380-42A0-1069-A2EA-08002B30309D} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Personal Folder Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {59031A47-3F72-44A7-89C5-5595FE6B30EE} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Computer Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {20D04FE0-3AEA-1069-A2D8-08002B30309D} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Network Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Control Panel Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Recycle Bin Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {645FF040-5081-101B-9F08-00AA002F954E} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Libraries Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {031E4825-7B94-4dc3-B131-E946B44C8DD5} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide Search Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {9343812e-1c37-4a49-a12e-4b2d810d956b} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY "Hide My Documents Desktop Icon" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" VALUENAME {450D8FBA-AD25-11D0-98A8-0800361B1103} VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY; END CATEGORY; END CATEGORY; CLASS MACHINE CATEGORY "Windows Vista & 7" CATEGORY "Explorer Navigation Items" CATEGORY "32 Bit OS" POLICY "Hide Personal Folder" KEYNAME "Software\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 4036231469 VALUEOFF NUMERIC 4035182893 END POLICY POLICY "Hide Libraries" KEYNAME "Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962227469 VALUEOFF NUMERIC 2961178893 END POLICY POLICY "Hide Homegroup" KEYNAME "Software\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489612 VALUEOFF NUMERIC 2961441036 END POLICY POLICY "Hide Networking" KEYNAME "Software\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489444 VALUEOFF NUMERIC 2953052260 END POLICY POLICY "Hide Computer" KEYNAME "Software\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489612 VALUEOFF NUMERIC 2961441036 END POLICY POLICY "Hide Favourites" KEYNAME "Software\Classes\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2839544064 VALUEOFF NUMERIC 2693792000 END POLICY POLICY "Hide Control Panel" KEYNAME "Software\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2693791748 VALUEOFF NUMERIC 2684354564 END POLICY END CATEGORY; END CATEGORY; END CATEGORY;

We have a couple of issues relating to libraries, which I am sure have been covered elsewhere but I am getting rather confused!! Firstly I have applied an ADM template which is supposed to disable libraries. It has... to a point, but now I have no start menu links... which is not v useful at all!! We also have a local logon on our teacher laptops, where we used to direct their home directory to D:\Teacher. With Windows 7 redirecting the homedir seems to do little/if anything at all as all the libraries allow them to save to C whether they can see it or not?! How do you guys manage libraries for network users?