tosh74

this guide has never let me down Deploy XP Images in the Computer Lab with Windows Deployment Services on Server 2003.

Spot on Big Fella - my bad

@Iain. Have a look at loopback policy processing for your staff laptops. IF you set this to replace then you should be able to allow your staff to customise their desktops without affecting their desktop lock downs. @BRpilot. They staff should have a cached profile on the local hard disk. If the laptop cannot contact a DC it will proceed to logon the staff with the local copy of their profile.

Edit your GPO for the users (ADM Templates/Start Menu and Taskbar) and enable remove pinned programs

Use 7zip to extract any files from the Setup.exe. With any luck there will be a msi in there

another vote for shutdownertron (y). It's gonna be easier in the long run

yeah what glennda said but you should be able to export all your mac addresses from your DHCP server. You can then do a simple mail merge to create your script then add the file (bat or cmd) to your server schedule. As for shutdown I cannot recommend powdarrmaonkey's shutdownatron enough.

I'm getting all misty eye'd

Nagios uses it's own mailer service so check the header info from your alert emails for the sending IP address. This should tell you what the IP of the nagios machine is - a starting point. you can then try ping, tracert , arp etc to glean more info

I would install the GPMC - it makes it easier to trace GP conflicts and where the problem lies

Have a read over this article. It will help you out Security Recommendations for Folder Redirection: Group Policy

look at the user.man in your profile (it's essentially HKEY_Current_User). There will be re-directed folders within it. Run regedit, highlight hklm and select load hive from file menu. Load the user.man file from your problem profile (give it a temp name). Now open HKLM\temp name of hive\software\microsoft\windows\currentversion\explorer\shell folders\Personal and delete the data. Unload the hive and test your logon again. GL

If you are using Madatory profiles then enable this option. Computer Config\Admin Templates\System\User Profiles\Log Users off when roaming profile fails So if they do pull the plug and their profile is not loaded they will get logged off right away (don't let the roaming profile name put you off). As always - test this out beforehand.

I would check your proxy access logs to be sure. I would also look at c:\windows\windowsupdate.log (on a client machine) to see if they're at least trying to contact your wsus server

if you have a proxy server for your client machines. Just ensure that it's not intercepting your http requests to your wsus server

We had a look at doing this as well. We were able to use video/audio over Cat5 boxes (which worked well) but we were unable to source a USB2.0 over cat53e without paying £400+ per whiteboard. Just ensure that your usb extender can support USB2.0

HOW TO: inject drivers into Microsoft's free OS, Windows PE 2.0 Start at the PETOOLS (DOS) section

Go here http://www.microsoft.com/silverlight/resources/technical-resources/default.aspx Click on Deployment/IT Administration. Deploy guide and GP Settings guides are here. Good luck

when you exported the profile did you use the "Permitted to Use" function ?

there is a SNMP hack that you could use to gain the admin password. I can't remember it off the top of my head but I'm sure that google can help http://www.securiteam.com/securitynews/5NP01209FQ.html

Use ringmaster to add the PSP mac address to your rogue/client blacklist list. See what happens

Check that your folder permissions are setup correctly on the server with the shares you want to make available offline Best Practices for Folder Redirection in User Data and Settings Management

I believe that the MST file bypasses the Flash player install requirement (not a problem as I believe it wants to install Flash 7)

another vote for powdarrmonkey's Shutdownertron Does what it says on the tin...with minimum fuss

Puppet Master Max Clifford at the strings