MK-2

A member of staff mentioned that they can't log in to the TES members area recently. I registered and tested myself and once you click OK after entering login details you get the ISA network error message page come up with the following: Explanation: The request timed out before the page could be retrieved Technical Information (for support personnel) Error Code 64: Host not available Background: The gateway or proxy server lost connection to the Web server. Date: 03/06/2010 10:37:13 Server: firewall.internal Source: Remote server I've tried the hotfix from MS that should fix it, but it doesn't. I've also had word that this sometimes affects other sites that are SSL and require you to login. I've changed the compression setting in ISA (2004) as per another recommendation but it still doesn't work. It's only one website at the mo but it's driving me mad! Any help would be appreciated

Steve: Thanks for that, I'll take a look through later. Will it work on a machine off the domain? As in a laptop connected via wireless to the network, but not actually a member of the domain (such as students laptops). that is the major downfall im having, making it authenticate on a domain it is not part of. sorry if it already does! **edit** just tested and i get the error i have been getting with mine: the specified domain either does not exist or could not be contacted (line 9)

thanks to abullett the remote auth is working, its now just the group check thing. this is the code ive got that i cant tell if its working or not, or if i have it the wrong way around, etc. strUserPath = "LDAP://dc=server1,dc=derbyhigh,dc=internal" & objSysInfo.UserName Set objUser = GetObject(strUserPath) ' Test for membership in the group. Set objGroup = GetObject("LDAP://cn=Year13,ou=Main Site,ou=DHS,ou=Establishments,dc=derbyhigh,dc=internal") If (objGroup.IsMember(strUserPath) = True) Then WshNetwork.MapNetworkDrive "N:","\\dhs-sr-001\" & strUserName & "$" i want it to check if the username entered is a member of the Year13 security group, then process the mapnetworkdrive command if they are, or fail if not

thanks for that. i'll have a read through in a minute. the only problem i can foresee is that the app will be run on machines not joined to the domain at all. so i need a way of it verifying against LDAP even though it isn't on the domain. so if you were to put in user "test" it would have to know to look at domain xxxx for user test. i think i might just leave it until tomorrow when i'll be a bit fresher!!

I'm sure this is easy, I'm just having a bad day! I want a laptop, connected via wireless to our network, but not joined the domain, to be able to bring up a box that will ask for user/password and then authenticate that against our AD. I know it can be done with IsMember, but will it work with machines not joined to the domain, only picking up its DHCP etc. **edit - probably helps when i type the problem out right too!!** i want it to authenticate the user and check they are a member of a certain group, hence me mentioning ismember if anyone has any script i can use that will let me check a user aganist a certain group that would be great. ta

I love MCS, the good old "we'll take you out for dinner and send you free stuff" computer company. I know we've almost all had dealings with them, and I'm annoyed at myself for not being prepared today. I had a call from them (the second time since working here) to say how they have just won a contract with the Premier League for toners and are giving away the free football shirts. Of course I feigned interest in football, and when asked if any of the kids would like it I said it's an all girls school (I know, I'll get some stick for that hehe). He then offered rugby or F1 merchandise instead. It's amazing how much free stuff the premier league contracts bring you, even F1 gear!! He then tried going down the actual toner route of how many printers, what make and model. Not being prepared I just thought I'd see how long I could hold on with him so kept pretending I didn't know what make printers we have or what model number. After he asked me to "go and check what model number a printer is near you" I said I couldn't as I was very busy and he was the one calling me. Unfortunately I never got through my next sentence as he hung up Well it made my morning anyway..... Glad to be back too

Created on XP machine and correct sysprep file, but the cause was brain in neutral. I started from scratch last night and got to installing drivers and thought "why don't I have these, I downloaded them a few days ago to install", then realised I'd used the Toshiba restore disk to get XP on, not the VL cd. Hence me having no drivers for it. The restore disk I assume would have been the OEM key installed. Have just sysprepped and ghosted again, and it went through! I hate realising the error at 11PM!!! grrrrrrrr

We have an XP VL CD and VLK which works fine on all PC's and laptops I've ever used it on. I have just created a sysprepped laptop and entered the CDKey in the sysprep.inf. On the desktop sysprep image, it goes through fine, but on the laptop it has stopped at the CDKey part and says its invalid. I've entered it manually and it still says its invalid. Is there any reason this key wouldn't work with this laptop yet worked with a desktop ten mins prior?

very weird. just went into device properties to see which driver it was, and the power management was back on to enable device to be switched off. i disabled it and something has turned it back on! i know it might be silly, but the bios has the XD feature which reading about it it said some device drivers try to write to kernel stack which this feature disables. could that cause it? im seriously clutching at straws now

xathros, not a daft question at all! but i have checked. i even rejigged my cab here to free up a switch that i know works and put that in there. just looking now as i get in and it looks like about 9 are offline. if its not the switch i dont know what else it can be!! *seems someone had switched off a few machines last night, so at least that accounts for the 9 being off* *but it doesn't account for one just dropped off again. no ping reply, and this is with a different switch!*

not NIC power management. all are off and a further two machines have just dropped off. looks like ill be buying a replacement switch then. bloody hope it is that otherwise i'm really stuffed.

So basically if I sysprep a machine, and add the whole host of drivers stored in our drivers folder on the server (which covers just about every machine in our school), then after ghost it will pick up any relevant drivers from there? Are there any comprehensive guides to this?

I know this has probably been asked many times before but is it possible to create a near generic ghost image? One that I can roll out to many types of hardware and then let GPO update the software afterwards. It just needs to get Windows XP on to the machine really. I know RIS is an option, and that ghost and sysprep can get something similar but is it possible just with Ghost? If not, what's the best and easiest option with Ghost as the imaging software? Cheers

i went back into the nic settings and there was a power management tab (which i must have overlooked before!!). all enabled to "allow pc to turn this device off to save power". so ive unticked that and see how we go. i was sure i'd looked in there before for power management and didn't see anything.... grrrrrrr

the switch is 100mb, i'll try setting the speed to 100mb and see how we go. just wish i had a replacement switch to try!!

they are allied telesyn switches. the thing is that this problem didn't occur prior to last week and no changes have been made on the switches. and really the only thing that changed was we had an engineer remotely looking at something for us and said he had made some changes in dns. would dns changes stop the link light coming on until a reboot?

This is an extremely weird problem. We've had a new ICT suite built, new data points (all FLUKE tested) and new HP machines. For two weeks all was fine. As of last week, machines would randomly drop off the network. Link light on the switch goes off, machine says cable unplugged, can't ping it. If you switch off the machine and power it back on the link light comes back and all is OK. It happens at any given time to any given machine. At first I thought it could be DNS as we had someone working remotely on the server who was looking through DNS and made some changes. Unfortunately I don't have a spare switch to replace and test if it's the switch. All I know for now is it's not the data points as they have been tested again yesterday and definitely work. Anybody have any ideas? Thanks

Can you edit the content filtering? As per my example I am having pages within wikipedia blocked due to "content filtering" but I'm not being told what the content is. It's kind of hard to unblock keywords when you don't know what keyword is being blocked or see a list of currently blocked keywords. The site itself (wikipedia.org) is already allowed, so there's no point unblocking the site or creating a new policy as its the content part that is stopping me, which RM support have said I would need to email them with the URL for them to unblock. This to me isn't us in control of the filtering, its partly us partly them

Can you give me a rough estimate so I can compare with the RM one. I'd need to be able to offset what we pay now against any new costs so that we aren't paying too much more

Was it RM ISP filtering or the RM safetynet filtering? The annoying thing is, it has blocked the wikipedia result page for Bond. It says content filtering, which I can only assume is because it has related terms of Bondage and Julia Bond Porn Star at the bottom. I cannot edit the content filtering, so would have to email rm to get it unblocked. That's one search page on wikipedia. so multiply that by however many pages exist on wikipedia that may have a bad word on, and then multiply that by any search engine! And I'm expected to email them every time this occurs? Their filtering doesn't seem to be thought through. Have a staff policy which can't be edited, so if you want to add a website thats being blocked, you need to create a new staff policy, add the website to that, then link that one to the first staff policy. It's like a 50/50 control between school and RM! Will look into SchoolGuardian. Is there any pricing available or are different setups different costs? Is SchoolGuardian hardware or software, as we have an ISA box that I can't move, so it would need to work alongside that, not in place of it. Thanks

Since our CC4 install we've had the RM safetynetuniversal filtering put in. I'm not happy with it at all, and we dont seem to be 100% in control of the filtering. I'm after an alternative that can do group based filtering (students get one, staff get another sort of thing) based on AD, and gives us complete control over content/extension and such filtering. I'd also like one that didn't only operate the whitelist, where we have to allow every site visited. I'd like one that allows sites but uses known blacklists and content filtering but still lets us unblock any pages visited ourself rather than having to contact someone else. I know there are a whole host of filtering software packages available, I'm just after ones that people have used and can recommend that I can research into. Thanks Mike

This was kind of asked before about front and back end IIS servers by someone else. We have an IIS server visible on the internet which hosts our home access for staff and students. We also have a machine internally that hosts room booking and the helpdesk. What I would like is to have a link on the home access for staff on server1 (iis) which will forward to server2 (internal site) The problem is of course, internally it works fine, but externally it tries to search on global dns for server2. now the other thing is the internal server doesn't run iis, it runs either its own wrappers etc (as its java based) so i cant just do an iis>iis connection. is there any way around this or is it going to be more trouble than its worth?

If the first copy is in-house and the connection dies, how will people get to the php file to redirect them to the external copy as that would also be hosted internally wouldn't it? Might just be me not thinking about this properly though, sorry

OK so this should be fun as I have no ASP knowledge, but am willing to start picking it up as I go. For our remote webfolders webpage (RM Easylink), I want to be able to display a page based on a users AD membership. So staff will see the staff shared folder, students see the students, etc. I've looked through a couple of help pages but cannot find anything definitive. All I want is a main page, with a login link. When you enter your details, it checks against AD and if you are in the student group, you get student.asp page, if you are in staff, you get staff.asp....each with different webfolder mappings. Is this possible? Thanks

webman: is there any ETA on V2? I really like that layout but would need to use it on Windows with AD integration. I don't need any fantastic features, it would only be a weeekly timetable, with 2 or 3 rooms, is there a win32 version of v2 i could use and test or is it still in production? cheers Mike