Zenden

I Second this, its easy to setup and runs over https so you only have to allow 443 through your firewall. also very easy to configure the client access. i have it set to only allow connections from Computers which are a member of my "TSClients" group and users from my "TerminalUsers" group so its quite easy to control who is getting into it. Give it a try, it is really easy

lol well i guess that explains that! thanks for the quick reply

Morning All, I have HAP up and running with no problem but as soon as I attempt to enable Forms Authentication I am gettting errors. I have it running on IIS7 (adapted the steps from the youtube video setting it up on IIS6) so I am unsure if there is anything I need to do different. It is stating "Could Not Load Type 'CHS_Extranet.Login'" so I think it is something relatively simple but I am rubbish with ASP so I am completely stumped. can anyone help me out please?

Had a bit of a strange issue the past few days. all PCs in just one OU (Science) have been having real trouble applying Group Policies (Both User and Computer). Basically the PCs are freezing during bootup before the logon screen while applying policies, Sometimes its when applying startup scripts, sometimes when applying loopback policies etc but it is quite random. If the PCs do manage to make it to the logon screen then it allows users to logon but no User policies are applied eg no network drives, no scripts, no IE settings, no Control Panel lockdown, no group policy Preferences etc. We couldnt find anything in the event viewer on the clients or the Domain Controller so I am kind of stumped. We spent the last two days taking policies away from that OU one by one and testing until we realised that it didnt matter which ones were linked, it just wouldnt work. We have the same GPOs attached to other OUs which work just fine and the same users can use those other PCs with no problem. In the end we found the only fix was to create a new OU and move the PCs into that which has sorted the problem. However, I am curious what might have caused this and how it can affect just one OU. I am not worried for now because its sorted but I have major concerns that this might reoccur somewhere else and I am wondering if anyone knows anything i can investigate or try to get me further info? this has had me running round like a madman!!! any help hugely appreciated, thanks in advance.

went from Fronter provided by the LA (used by one teacher) to Moodle we host ourselves on Ubuntu/Apache and now we have about 60% using it (only launched it in april!). Really is worth going down the moodle route, its very easy for teachers to get the hang of

thanks to all who have helped me over the last year, i am sure you all deserve a nice break from the stresses of school networks! Merry Christmas

Do you have any Server2008 Domain Controllers? you could use Group policy preferences to force the custom file out to their local profile location!

to disable UAC: Computer Config\Preferences\Windows Settings\Registry -->New Registry Item: Action - Replace (or create if thats how you like to do these things!) Hive - HKEY_LOCAL MACHINE Key Path - SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Value Name - EnableLUA Value Type - REG_DWORD Value Data - 00000000 That has stopped all my Sims UAC worries. For the upgrade permissions: Computer Config\Policies\Windows Settings\Security Settings\File System -->Add File Two Policies are needed in this location---> Policy 1: New File--> Folder : %ProgramFiles%\SIMS Set it to "Configure this file or folder then Propogate inheritable permissions to all subfolders and files" then click "edit Security" and assign your Staff/Sims User group (mine is just called STAFF) the appropriate permissions (enough to Read/write/modify at least or full control) Policy 2: Repeat this process but for the folder location %SystemRoot%\Sims.ini Now for the Registry Permissions: Computer Config\Policies\Security Settings\Registry --->Add Key 4 Keys are needed: Key 1: MACHINE\SOFTWARE\Classes Again choose "Configure this key then propogate inheritable permissions to all subkeys" then choose Edit Security and add your STAFF group with write/modify or full control. do the same for MACHINE\SOFTWARE\Classes\CLSID and then MACHINE\SOFTWARE\Classes\Interface and also MACHINE\SOFTWARE\Classes\TypeLIb (I am quite sure you shouldnt need to set these three keys permissions since it should be inherited by the first Key but I like to be sure) I hope that long winded explanation covered it, I can always provide screengrabs if you are still unsure. Good Luck

rather than use simsperm, i have a GPO which assigns the all staff group permissions to the right folders and regkeys and also disables UAC meaning they can run the sims update but dont have admin rights I can supply more detail on the GPO settings if needed

That looks great, how did you get the applications on there? I have some apps setup on our TS Web Access Site which i would love to add to Home Access Plus, is this what you have done? any help would be hugely appreciated EDIT - I replied to a reply here by accident but hopefully you get the point anyway!

as stated before, as long as you deploy and register the ocx its not a problem, should be a simple guide with it explaining the share permissions too. other than that we just have it running straight from the network share

Release2 needs purchasing seperately I think. Print Management isnt bad really although it doesnt allow you to control whether the printers being deployed are the "default" printers or not. I prefer controlling Printers through Group Policy Preferences but you need at least Server 2008 for that. I would look into getting Server 2008 if your server is up to standard

couldn't agree more and I hope it isnt percieved that i am trying to talk you out of it. Just thought i should pass on my experiences to give you another perspective. I hope it all works out for you mate

to be honest it isnt that bad if you can hack it. My problem was that i didnt want to lie to people, allow me to give an example. I am a "Mac Specialist" in an apple store and a mother comes to as for my guidance: Mother: "excuse me, My daughter is going to uni to study graphic design and i dont really know what she will need, can you help?" Me: "sure, what is your budget?" mother: "well, i cant really afford a mac but i will find a way if that is what she needs". Unfortunately, it is the apple way to recomend she buy a mac, even though i know she could spend a third of the price, get a machine which is just as capable and probably get the Creative Suite aswell. This is something i just could not see myself doing and I ended up leaving my apple career before it started. Just be careful to diferentiate between loving Apple products and loving Apple Stores, i have learnt that they are two very different things.

i worked there for one day and left. Even if you want to go down the "Apple Genius" route, it is 100% sales driven. I found i knew far more than their most experienced Apple Genius' yet they couldnt give me any assurances i wouldnt be a sales monkey for as long as i worked there. Criteria to get a job there is that you "sell the apple image" IE. You have a cool hairdo, an iphone and that you can convince windows users that macs are the light at the end of the tunnel. There were nice people at that store, dont get me wrong but unless you want a job in sales, I would avoid it.

I have a GPO setup which assigns our Staff Group the needed permissions to the Sims folders and Regkeys and also turns UAC off via Registry. Probably not the safest way to do it but it gets the job done.

great article, couldnt agree more with everything you have said there. keep up the good work

fantastic stuff

Just installed this and I have to say it really is very ver well done, big thanks for this! Just wondering, we have HAP and Moodle both using LDAP for the authentication, would it be possible to allow SSO from HAP to moodle (as moodle hosts our helpdesk and booking system?). Thanks in advance and thanks again for a truely great piece of work!

Sounds ominous, I will look forward to this!

This is incredibly funny and incredibly racist..... what was with the gun to his head and the bailout bag!?

Alt+Tab is good for that too! or Win +Tab if you really want to baffle them

lol I had a similar thing last weekend. what astounds me is that you fix these things and some people think you are some kind of genius for it!

See your point there. United and Liverpool have both been in a bad situation for a while. Lucky for us that we are the highest earning club in the world so for the moment we can finance the debt, but Liverpool nearly fluffed it completely! Never mind what will happen when Citys Sugar Daddy gets bored and leaves them with rediculous wages to pay!

i havent gone for the jailbreak yet but I am tempted for the South Park app which Apple denied, allows you to stream loads of south park!