User3204

Where do you get this figure from ? I know what the ICT figures are, but I've been looking about for the wholescheme figures, per school/pupil/LEA. Sounds like a crap job then.... time to move on. I like the [bold]POWER[/bold] I have now... ! Still, I suppose if I get involved with the BSF process, I can then use this as a bounce to another job.... "oh, yes, I was the BSF co-ordinator for the school, sir, now give me a job!". I keep saying to myself... 5 years is a _long_ time... and I keep not believing me.

Yeah, that's right. Unfortunately, now, he's (ooh I assumed he, sexism here), gonna want to know how to change it... can anyone remember ? I've done it once.... in 2002.

Avantis CDServe ver 2.4. It comes with an MSI, to install the client, but it will not allow you to pre-specify the drive letters. I have created (copied off the internet) a script that adds the required letters in the registry, but it doesn't always work properly, sometimes I get them duplicated, not moved. I think it comes down to the script has to run BEFORE the install... ! I realise that people will now point me towards Daemon Tools, but we have a CDserver.... I'm not gonna scrap it yet, maybe when it's full up, I will invalidate the warranty and open the case.

@Grommit. About Foundation schools, I was under the impression, that Foundation (and whatever else "opted-out" types), were able to "choose" whether to join BSF or not. ...actually all schools are supposed to be able to choose... Of course, what they say _now_, may have changed in 5 years. -==- If you get TUPEd, it's because your SLT (and LEA) decide to TUPE you... -==- Actually our school is quite good at working with other schools... Primaries admittedly... we send out specialty staff to do teaching in the local "feeder" schools The fact that a lot of us are willing to sign up to this forum, means that we are able to work in groups... it's just, that, damnit... we want to be able to choose which groups. I'm sure there's lots (or at least some) things that the BSF scheme will introduce that we will want to sign upto, but there's lots of things that I don't (necessarily). Every so often I get chatting to the local RM chappie, and he shows off a really cool util, but we have to sign up to the full RM package to use it... But I don't want to... and I suspect I will see a lot of similar stuff.... LEA wide VLE = Yes (because I'd rather not mess with it). LEA wide Internet = Maybe. LEA wide SIMS management = not with my LEA. LEA wide PC purchasing = NO! Not after using the machines they got from the LfT scheme. There's going to be a lot of the same type of stuff. I want to be able to select "modules" of support etc... but I doubt this will be possible. I want to be able to continue to use my current suppliers, as they provide good service.. but I doubt I will be able to do this. I would have liked to be able to attend the meeting you had with RM, but I had to work (ha) so I will wait until the notes are all typed up... It would have been sensible for me (and others) to have written up a list of questions we wanted answering. -> I'm sure someone will now point me to a thread where this happened, but I managed to miss... -==- Do you have any plans to contact other bid winners... actually not sure who any of them are (I'm guessing Capita will have tried)...

Some of us want an "appearance" of anonymity... ..so we can say disparaging remarks about our LEA / School / Boss, without it getting back to them..

I try to keep my GPO installs al in one share (imaginatively) called "deploy", partly 'cause I had issues with stuff not installing properly. In the end it was due to security permissions, I have since changed the security on this share (and the sub folders within), to be be read access for "domain users" and "domain computers", although I suspect that just the "domain computers" should be enough, stuff didn't always install properly until I did this. I usually only require two restarts to install an MSI, but we have scripts that do this for us. They'll always be some software that comes with an .EXE, or has something that requires additional scripting.

I use brothers, the HL2070N is a nice small cheapo one (we used to get the HL1400, but they discontinued), and the HL7050N is it's bigger brother (hey pun!). I like the fact that a lot of the printers use the same cartridge/drum combos. Whereas the HP stuff doesn't, and this makes the cartridges overall cheaper for the brothers,. We still have a few HP 4050s, 4100s, 4200s, which seem to run forever...

The problem with having schools "working as a group", is that the previous scenarios of this we see, are the LEA.... and a lot of people don't like they way that the LEA make you do things certain ways, especially in ICT Support. Our school went Grant Maintained -> Foundation -> (possibly) Trust, "just" to make sure that the LEA can't tell us what to do. If I had to follow what the LEA told me to do with the ICT, or had used them as support (other than just as an ISP) then I would have left this job ages ago. I have been told that this school is "very unlikely" to join the BSF scheme, but things may have changed in 5 years...

Actually it might be useful to check which machines the domain thinks are DCs. We had a situation where the server knew it wasn't a DC, but the AD stuff thought it was, we eventually had to remove the server completely from the network and reinstall it, as this cleaned up all the bogus entries. If you check in Active Directory "Sites and Services" (or possible "Domains and Trusts", I can never remember which is which), it will list the DCs and the Global Catalog servers. The Global Catalogs are the machines that process logons for computers/users, it may be that you have a server that is set as a DC but not set as a Global Catalog.

We have a similar scenario. We found that when student usable laptops were attempting to logon over the wireless network, it took ages. So we dropped all the machines out of the domain, created a couple of users on the domain, so that the machines could authenticate onto the wireless network. This of course meant students couldn't access their own work etc. So one of the technicians wrote some software for us that: 1. asked for username and password; 2. logged them onto our internet proxy (inty exoserver, so just a telnet session); 3. mapped their home drive, based upon \\servername\%username%, and passed the username and password when mapping it. We don't allow them to print from these machines... so this wasn't an issue. But we have already got a page on our intranet site that allows staff (and students if they knew how), to map a printer. This page does require them to type a user/pass combo, which we tell them to cache. I'm sure there is a good reason why the staff logon to their laptops locally and not via the domain, but you may want to rethink this.

Do you not need to ping "adminserver.admin.com" ? It is because the servers are in a different FQDN, and the machines are adding the "curriculum.com" to the end of the servername automatically. What I have done is create an alias in the "curriculum.com" domain for "adminserver" that points towards "adminserver.admin.com". And vice-versa... Either that or set the machines up to forward unknown requests to the other domain, but I worry about this looping infinitely...

You could still use this system to logon the machines. Have two OUs with two GPOs, one that does the auto logon thing, when you need to logon these machines, move all the relevent machines to the autologon OU/GPO combo, and then restart the machines (there's various ways to automate this). It's a bit messy, but it should still work. I've been looking for something that will allow me to logon 30 separate users into a room (as a test), for a while. If I find anything, I'll try to remember to post it here.

Check the network driver version. We had a problem with the GPOs not applying on some machines, and it turned out that the network card driver was resetting the card at the point when it was trying to contact the DCs at bootup time. I'm not sure what the error message was, but it was similar to the one you're quoting. Our policy would apply if we did the "gpupdate /force".

At logon, Member servers allow you to logon to the domain or the local server. DCs will only allow you to logon to the domain.

Right, this is what we have: There's also a space in the registry for adding comments onto the "Press CTRL-ALT-DEL keys to logon" screen, but I can't remember where that is, also the space is a lot smaller.

Join it to the domain. Who suggested it should be outside the domain ? I suppose (in theory) you could create a trust level towards the domain, but, why.... ? We have a domain user group called "SIMS Staff", which has full control to the Sims share.

Yes, we have this permission issue. Only admin level accounts can install printer drivers initially, or possibly it's associated to power user access. To an extent, I quite like it... as it means that students can't install/print to the wrong printers. The printers are reset at logon for all users, but only if the drivers are installed. It means we have to logon to each workstation image, and decide which printer drivers will be necessary. I have been moving towards a Linux printer server, as all my previous NT & 2000/2003 printer servers have had spooler issues, that eventually required them to be re-installed...

Oh, that's just irritatingly simple.. gurrhh... I bet you went and read the manual at some point... guurrhh

If you use Mandatory profiles, you're able to load these into regedit (or maybe regedt32), so you can edit them. You _may_ have to do it as a DAT file, I introduced a MAN file it briefly at our school a few months back, but ran into problems with it.

We use it, I'm not at work, otherwise I would paste it here. We tried to put in the whole AUP, but discovered there is a character limit, and no way to do CR/LF. So we cut out a large amount of the AUP, so it basically translates as "be good". If I remember I will paste it here tomorrow..

Not finished. Not going to be finished. There were 32 items on my list, and I had no real expectation of doing them all. There are some things that I have prioritised, but there's other stuff that can be done anytime that I will leave.

@ZeroHour Yeah, that's right, it doesn't need the proxy details... or more precisely it won't use them. It needs a route to the server that doesn't use any proxy, we found we had to put it into a special VLAN on the outside of our firewall for it to work properly. I did eventually sort out our PIX/Router to send the packets correctly. Your gateway device needs to have a rule that allows access from the library machine (I set mine a static in the DHCP), to the remote public IPs, without any sort of authentication involved. It uses an unusual port too, can't remember what it was. We stopped using these features when we got a new Librarian... so it is no longer an issue... This Librarian is also quite keen on changing the Library software, for something else... We still have issues with our system, I wanted to integrate the users with the Windows AD, and the instructions I got (for Apache), were related to Moodle.. which has a different file structure.

Well, the fact that I'm deploying it out across our school should help them... It does seem to be changing the internet explorer icon to the firey fox. People will always need to be able to run IE, 'cause you can't do Windows updates in anything else.... And that feature enhancement listed, is something that Opera does already... sorta...

I find that the sysprep (and restore) never resets the local admin password away from the originally set one, I'm probably selecting the wrong settings somewhere... I don't have an issue with this as we use the same password everywhere, but, I think you can change this via GPO (assuming it has joined the domain properly)... which it hasn't in your case. Do you know what the password is set to ? If you want to have different admin user passwords for different areas, then can't you create additional admin level users on your image before sysprepping ? I realise you've probably already deployed your images out, but it's an idea for next time. You can also tell sysprep to auto-logon after first bootup, and then you could change the password (if necessary), or at least make sure it has joined the domain right.

Yeah, but some of us have only just managed to convince people that having managed switches in each cabinet is a GOOD idea. "..but, it works.." was always the response... Now I just have to figure out to setup VLANs on HP switches... that don't interfere with the VLANs setup on the Cisco switches for the wireless networks.