manick

Hi all, Has anyone any experience of moving an existing EPO server onto a different server? This is something I am attempting to do now, but am having difficulty connecting the new install of EPO onto the attached sql database files. At the moment I am going around in circles and getting very frustrated, Mcafee's site is useless and has no info on it at all!!! Cheers nick

Hi, OK made a big mistake of looking at using content advisor for students, little did I know what a big bag of mince idea that was!!! first off the ratings aren't installed on most of the machines so errors are all over the place, also discoverd that it applies the content advisor to everybody once a student has logged onto it (teachers, admins, everybody). I thought Oh well, cancel that idea, OH NO says Microsoft, I'm not going to let you do that that easily. So, anyboady got any idea of how to undo the damage I have done?!!!!! Is there a way to turn off content advisor on client machines through GPO? Ta Manick

logmein-----genius, piece of pee to set up and is encrypted to boot. sorted, thanks for that. Manick

Right I'm joining in now, i too need to do what Zoom is asking, but we appear to be going everywhere on this thread with no solution. As far as i can tell the 2 main ways of pulling this off are either VPN or terminal services server. Eventually we will be wanting to connect kids and teachers from home (probably just connect them to network shares), for now I just want to connect one user who is off and who wants to connect to FMS. I am considering using Terminal services just for now (for the single user), Can i install it onto one of the DCs and the user still use FMS off the SIMS server? Which route would you take? Cheers

Me too, pulled too much hair out on that one!! thanks for your help manick

Right, S*d it, no more faffing!!!! I've copied the GPO that does work and applied that to the students (it was a copy of the original pupil GPO in the first place) and it worked. I love microsoft, they're great!!! honest Thanks for everybodies help and i'm sorry we couldn't resolve it properly to find out what the problem really was, I can only assume that the pupil policy is screwed somehow!! manick

Yup afraid so!! still no joy.!! manick

Hi again, here is the state of play, replication Ok, firewalls OK. It looks like the policy isn't set right somewhere, but I don't know where. I copied the policy and set up a new user and put them in their own group used the policy, this works fine, but the original group doesn't. I'll nail it one way or the other. manick

I've made quite a few changes in the computer config part of the pupils gpo, but they haven't taken on around half of the machines. We have two DCs, I'll look into the Sysvol idea. manick

I've made quite a few changes in the computer config part of the pupils gpo, but they haven't taken on around half of the machines. manick

Lo. yes firewall is running, but having just compared machines that are working against those that aren't, there isn't any difference between the exceptions apart from RemoteExec is allowed on those that are picking up GP (or appear to be). Bit of confusion here though, earlier someone said that the pupils policy should show in both computer config and user config, however it isn't showing in computer config, but is applying all the settings??? manick

About 3 months ago they were!!, I've been fiddling with policies since then, trying to lock the school down!!! Cheers manick P.S. I'm glad you won't be beat one this one, me neither, I'm googling my ass off, looking for this RPC server error!

just my ha'penneth worth. Another program is AB control from AB consulting, each licence cost around £150 (sliding scale dependent upon how many purchased), however, the licence is for the management side, each client is free, so if you want you only buy one licence and can control the whole school. With this software you can create rules for internet use, email use etc etc and also you can watch was the little darlings are doing if you so wish!! Cheers Manick

Morning!!, OK checked all of those and all OK: scope = applied to student user group, sec filtering = authenticated users, wmi filtering = none. both users and computer config enabled linked GPO - OK and enforced gp inheritance = 1=pupils 2= default domain policy. Any other ideas? cheers Manick

This is the result of gpresult on the client machine (logged in as student, co they can do everything at the mo!!!) Computer config: Appied group policy objects: IS THE PUPILS ONE SUPPOSED TO BE HERE, IF SO IT ISN'T! other policies are User Config: Applied group policy objects: pupils and others The following GPOs were not applied because they were filtered out : Local group policy filtering. not applied (empty) Thanks Manick

OK with your help, we are slowly getting there! No errors but pupil group policy isn't being picked up at all for computer config, I can't understand this though as about half of our machines are picking it up!? In security filtering, only authenticated users is listed, does it need the computer groups in there as well? thanks Manick

lo, Logged on as student can ping dc using FQDN, also rsop shows that computer config isn't applying correctly. What does that point to then??? Thanks manick

Lo again, Right, first, thanks for the replies, however, looked at the tests etc and the following is the results. inheritance isn't blocked when trying to run the group policy results wizard, i get the following error: "Failed to connect to [pc] due to error listed below. Ensure that the WMI service is enabled on the target computer and consult the event log for further details. The RPC server is unavailable." WMI is enabled, nothing out of the ordinary in Event Viewer, rpc is running on the local machine. Any ideas (again???) many thanks manick

Sorry, shoulda said, already done that but no errors!! Flummoxed manick

Hi all, Wondered if any of you have any ideas about the following. I have created a GPO for students with all the necessary lock downs tweaks etc. However, using a test account, it is not filtering to all machines that I log onto. Those machines that it has not filtered onto, using the test account, I can get into the group policy and notice that some of the policies are not even listed nevermind set. Any idea why this would be? Cheers Manick

Too true. I'm still not quite all the way there!!, We have Office XP installed locally onto each PC (Don't ask me why), are you aware if there is still a way to lock down office (not word as already done) in GP using the office resource kit? Manick

lo all, All sorted now, with regards to a couple of the replies, the drives are hidden in GPO, but this is bypassed by creating a hyperlink in word. Again on the subject of AUPs, TechMonkey, I don't know what sort of school you work in me old china, but rules don't necessarily mean a lot here, I'm in an innercity school where kids and teachers have other things to worry about. Stopping kids accessing computers means a reduction in grades which nowadays are all important. We do have an AUP, but the only way to stop em is by making the system as watertight as possible. Cheers Manick

Thanks I'll look at the ORKtools and give that a go, the software policy doesn't seem to stop the use of the programs I have listed it may be something I have missed. With regard to acceptance usage policy, I don't about you, but I don't think in a school environment they're worth the virtual paper they're written on!! Thanks for the reply I'll let you know how it goes. Manick

Lo all, I have a problem and was wondering if anybody can point me in the right direction here!! We have a student GPO which locks students profile down quiet well, HOWEVER, we have a major problem. Some students (and now all, you know how it works!) have figured out that, they can hyperlink to the c drive (even though hidden in GPO) using word, this then enables them to get access to help and support and basically everything else on the C drive. I'm struggling to find out EXACTLY where I can either a) stop the students being able to create hyperlinks in word (although this realistically is not feasible or practical) or b) stop command.com, cmd.exe and helpctr.exe from runing using GPO, I thought I'd found a part of gpo which stops these running , but I appear to be wrong. Can you give me your thoughts please. Cheers Manick