TheydonBois

And as pointed out, this happened six months ago, but I want to know how it all tunred out, and how much he charged

Please test this on non live data first, (or replicate a smaller version of what you have): Remove the PRIMARY permissions from the folders above, then import all their names from SIMS or equivalent into an excel file, then concatenate all the text from the colums into one text that you copy into a batch file and run. Something like: CACLS x:\pupils\intake x\Jack Sparrow /E /T /C /G PRIMARY:C CACLS x:\pupils\intake x\Fred Blogs/E /T /C /G PRIMARY:C CACLS x:\pupils\intake x\Bobby Ewing /E /T /C /G PRIMARY:C CACLS x:\pupils\intake x\Fred Astire /E /T /C /G PRIMARY:C CACLS x:\pupils\intake x\Wilma Rubble /E /T /C /G PRIMARY:C ...which will apply the PRIMARY account with write permissions to the user folders only, and not the ones above. That way the only files they should be able to move and delete into each other are ones within the students name above. Not sure how it will all work with Home Directory as only using one account still means that Fred can go into Bettys folder and delete her work within the folder anyway, even if he cannot delete the Betty root folder.

Steve, do you know the rough cost of this?

Students: Year of Entry + First Three Letters of First Name + First Three Letters of Surname Staff: ST + First Three Letters of First Name + First Three Letters of Surname Office Admin: First Initial and then First Two Letters of Surname Resulting in: 13THEBOI, STTHEBOI or TBO for me. We have had some dupes, but they are rare.

Isnt that too far back then? If you have one user say PRIMARY and it has permissions at that level, it needs to be reset to be at the level of the name of the students. For instance, my setup for kids would be E:\Users\ then folders containing all the student logins (they have seperate logins) at the Users folder level however, they have no security permissions, but if I checked E:\USERS\THEYDONBOIS then THEYDONBOIS has Modify permissions. Your generic logon account needs to only have access at the PUPIL NAME level. Sorry if thats not clear, if not, then I will try and explain it better later

How much can be locked down with this setup though?

What security permissions do you have on the \\server\pupils\ level?

Cheers David, I will double check my settings against what you have suggested.

That simply cannot be right, and totally defeats the object of creating seperate media sets. I have created two jobs, one for each server, that I want to allocate to Monday 1 for instance. I then create a media set that contains my Monday 1 tape. Why on earth does it ignore specific instructions? All the tapes have to have allow append and no over write period as other wise the second server cannot write to the same tape as the first for any one given day. Edit: Just to add that the other servers are setup in the same way you mention, one job for all days that picks any random tape from the pool. Its just this one needs to be set speciifcally to make sure two servers from the same day back up to the same tape.

We have a superloader and are using BUE2010. I have 15 jobs set to specific tapes (Mon - Friday, week 1 -3) as I also have a remote agent backing up another server to the same tape. This allows me to have one tape with two servers from the same day. What I am finding though is mysteriously, tapes are moving from one media set to another, so Monday 3 will end up writing to Friday 2, and when checking the media set, I find Friday 2 alongside Monday 3 in the backup pool. They are Ultrium 3 400/800Gb tapes, the first server backs up 250-300, and the second server is backing up less than 50gb. TIA!

Three servers that back up via Symantec to Autoloaders LTO-3, around 400GB/server full backups each night, tapes ejected in morning. 15 tapes in and 15 tapes 'offsite' (other end of the school). End of month tapes stored offsite which also takes tapes out of rotation. Other servers are on NTBackup to RAID 5 terastations that are robocopied every weekend to offsite Terastations, and these servers that we have not yet got to a tape solution are backed up to tape during the terms as a psudo end of month solution via Symantec and Remote Agent.

Us too. We were told that they are looking into it, but a fix would not be coming anytime soon.

This is true and it would have been a course we may have considered - I think that for us though, this would have been a logistical nightmare and not one that could be implemented. Dont get me wrong and I very happy with all the responses given, and it helped us to come to what I hope is a complete solution, but with a class size of 27-29 kids and non IT teachers using IT rooms for their subject meant it would be very hard to implement with 100% guarentee that the appropriate department was being billed.

And who is going to monitor this day in and day out? Yes we have had a cost approaching £1000 in lost RAM which we are not replacing, we are lucky enough to have 4Gb in each machine and during the installation of these plates, are reducing all the PCs to 3Gb that had more giving us spare RAM to use in places that lost theres. Our costs have been £500 RAM purchases, £60ish acrylic materials, a few hours O/T in DT Tech time, and my O/T to install, but this will resolve the issue. Sitting on a webcam all day long requires extra manpower, and plus how are you supposed to be extra vigalent to 11 rooms that probably require 2 to 3 cameras each? But it does not actually resolve the issue, plus as they are not stealing all the ram, in most cases the PC still boots up. How can you prove a departments lesson had x amount of RAM stolen without knowing EXACTLY how many where in there at the beginning of every lesson? This would require opening the cases as Windows would only report RAM it has installed correctly, while some sticks may be present just lifted slightly where the student was disturbed, meaning departments are charged incorrectly...

Looking good. No further 'attacks' in the completed areas and a teacher even caught a student with his hands in the till so to speak and is on a 5 day suspension, and hopefully an explusion as he is apparently a troublesome student anyway. Which I think is probably code for theiving toerag, but cannot confirm for sure. Details on Materials Used: 5mm thick Acrylic (we are using black so it appears as part of the PC), cut to 22mm high and 128mm long using Techsofts 2d Design software cut by a 55w LaserCamm by our excellent DT Technician. This is dropped into the slot where the floppy drive screws would fix with the DVD drawer put back into place above. The plate cannot more to either side nor be pushed upwards as it is held in place by the DVD above.