Alex

Nope, we're having this same problem and we've got that policy enabled Does anyone know how to ban all .bat and .exe from a users documents with software restriction policies? Ive blocked command.com and cmd.exe but id like to block all batch files Getting R2 sorted near christmas but would like to stop this now Presumably they can only save these files to their 'home' drives & public file areas? In which case add a DENY permission under security (in advanced)for : Traverse Folder / Execute they then cannot execute any files stored in this location. so right-click root of students home drives folder, properties / security / advanced. Add Students group with explicit DENY for Traverse / Execute. repeat for any area where they can save files. You can also explicitly dney them access to notepad as an executable within AD blocked exe files (forget where exactly), the traverse folders / execute one is useful - stops alot of their nefarious type activities. Only way round it is for them to find somewhere they can save to, that you havent applied that permission.

Security wise it should be fine to share it through the same firewall - we use a sonicwall & have the wifi on a seperate segment to the main network. Though that's down to your own judgement and opinion - when I worked for the MOD, secure and non secure networks had to be seperate by at least a metre and couldnt be connected through any of the same devices - amusingly KVM's coulnt be used to connect a secure and non secure servers / pc. But yeah, I'd be fine with it - do some kind of risk asessment and justify it if you feel necessary. I would load balance for redundancy if you can tho. Sonicwall's are slightly new to me, and I'm not 100% impressed - but for the cost and ease of use they're hard to beat.

Stream it using windows media encoder / windows media player? (it has a built in screen capture device) presume vlc can do something similar

what data do you want to sync what platform will the web server be

look for a another job, You could fight a losing battle trying to educate people about what's involved in keeping a network running - but why bother? You sound like a capable chap - 'vote with your feet'.

you dont by any chance work for them? edit: you sound quite enthusiastic that's all

checked the smtp service / settings / logs on the exchange box.

I guess everyone that logs on to a workstation uses a generic username / password? Hmm, arguments for and against really. Certainly using a domain for logon authentication & individual user accounts would be a good security / auditability wise. However, if you have one box running AD, I'd really want another as a backup - could just be an old desktop if there's no spare capital. Using it for filestorage is going to be rough with that amount of diskspace - maybe if you gave each user 30mb it would be feasable - but you would want to invest in some kind of backup device (external usb HDD prob a good option). Personally, I'd set it up & promo it to AD / 'domain controller' and only run DHCP / DNS / Printer Sharing on there. Also, install server 2003 on one of your desktops and promo that too - in case the main box goes offline. Would need to train a member of staff on how to reset passwords tho, and there's going to be some admin involved in setting up / disabling accounts etc

uhm, just dont give them an internet routable email address? e.g. [email protected].

ah- indeed it is I'm not convinced that's particularly obvious from the main blurb

never used it, but it looks easier thank the KB article: http://www.quest.com/recovery_manager_for_active_directory/

Content Filtering - Sophos Pure Message (you may well get this free for your lea) Monitors the smtp service and yoinks out anything it doesnt like. http://www.gunstar.34sp.com/filter.jpg To stop kids having internet mail only give them a .local smtp address - they wont be able to send / recieve emails to the the internet. Give staff proper ones and they will. http://www.gunstar.34sp.com/emails.jpg To stop student sending to staff - use the Delivery Restriction dialogue in ADU&C http://www.gunstar.34sp.com/restrict.jpg

that approx 50% what SQL Server is on per CPU licensing for non-education. You have to work out whether it is cheaper to get server + cals or per cpu licensed server. e.g. If you've only got 5 people using sims, it's cheaper to buy server + cals. If you've got 1000 - per cpu. I *think* it's per concurrent connection as opposed to per any other user count, but you might want to dbl check that.

work on the basis your time is worth £900 / day -- pretty standard consultancy rate these days.

can be problematic through proxies sometimes in the authentication options in IIS check clear text as well as windows auth - see if that works. (turn back off afterwards) You could also enable forms based authentication