Alex

Nope, we're having this same problem and we've got that policy enabled Does anyone know how to ban all .bat and .exe from a users documents with software restriction policies? Ive blocked command.com and cmd.exe but id like to block all batch files Getting R2 sorted near christmas but would like to stop this now Presumably they can only save these files to their 'home' drives & public file areas? In which case add a DENY permission under security (in advanced)for : Traverse Folder / Execute they then cannot execute any files stored in this location. so right-click root of students home drives folder, properties / security / advanced. Add Students group with explicit DENY for Traverse / Execute. repeat for any area where they can save files. You can also explicitly dney them access to notepad as an executable within AD blocked exe files (forget where exactly), the traverse folders / execute one is useful - stops alot of their nefarious type activities. Only way round it is for them to find somewhere they can save to, that you havent applied that permission.

Security wise it should be fine to share it through the same firewall - we use a sonicwall & have the wifi on a seperate segment to the main network. Though that's down to your own judgement and opinion - when I worked for the MOD, secure and non secure networks had to be seperate by at least a metre and couldnt be connected through any of the same devices - amusingly KVM's coulnt be used to connect a secure and non secure servers / pc. But yeah, I'd be fine with it - do some kind of risk asessment and justify it if you feel necessary. I would load balance for redundancy if you can tho. Sonicwall's are slightly new to me, and I'm not 100% impressed - but for the cost and ease of use they're hard to beat.

Stream it using windows media encoder / windows media player? (it has a built in screen capture device) presume vlc can do something similar

what data do you want to sync what platform will the web server be

look for a another job, You could fight a losing battle trying to educate people about what's involved in keeping a network running - but why bother? You sound like a capable chap - 'vote with your feet'.

you dont by any chance work for them? edit: you sound quite enthusiastic that's all

checked the smtp service / settings / logs on the exchange box.

I guess everyone that logs on to a workstation uses a generic username / password? Hmm, arguments for and against really. Certainly using a domain for logon authentication & individual user accounts would be a good security / auditability wise. However, if you have one box running AD, I'd really want another as a backup - could just be an old desktop if there's no spare capital. Using it for filestorage is going to be rough with that amount of diskspace - maybe if you gave each user 30mb it would be feasable - but you would want to invest in some kind of backup device (external usb HDD prob a good option). Personally, I'd set it up & promo it to AD / 'domain controller' and only run DHCP / DNS / Printer Sharing on there. Also, install server 2003 on one of your desktops and promo that too - in case the main box goes offline. Would need to train a member of staff on how to reset passwords tho, and there's going to be some admin involved in setting up / disabling accounts etc

uhm, just dont give them an internet routable email address? e.g. [email protected].

ah- indeed it is I'm not convinced that's particularly obvious from the main blurb

never used it, but it looks easier thank the KB article: http://www.quest.com/recovery_manager_for_active_directory/

Content Filtering - Sophos Pure Message (you may well get this free for your lea) Monitors the smtp service and yoinks out anything it doesnt like. http://www.gunstar.34sp.com/filter.jpg To stop kids having internet mail only give them a .local smtp address - they wont be able to send / recieve emails to the the internet. Give staff proper ones and they will. http://www.gunstar.34sp.com/emails.jpg To stop student sending to staff - use the Delivery Restriction dialogue in ADU&C http://www.gunstar.34sp.com/restrict.jpg

that approx 50% what SQL Server is on per CPU licensing for non-education. You have to work out whether it is cheaper to get server + cals or per cpu licensed server. e.g. If you've only got 5 people using sims, it's cheaper to buy server + cals. If you've got 1000 - per cpu. I *think* it's per concurrent connection as opposed to per any other user count, but you might want to dbl check that.

work on the basis your time is worth £900 / day -- pretty standard consultancy rate these days.

can be problematic through proxies sometimes in the authentication options in IIS check clear text as well as windows auth - see if that works. (turn back off afterwards) You could also enable forms based authentication

no idea, they come with their own (excellent) software

bit over your price (£100 iirc) but > * http://www.nebula-electronics.com/

it's fine, as long as it's not mission critical and isnt going to be run 24/7. That said, you could pick up a server from Dell for £300 ish

There's nothing in Classlink a decent IT proffesional cant recreate themselves with very little effort.

we use these guys: http://www.planetdv.net/Content/Editing_Systems/Desktop_Editing_Workstations.asp give them a call, see what they advise

/me passes OTL a soldering iron

What corp Preston?

you need a couple of things. I Assume you have a fixed IP on your internet connection? For the domain you want to have email for, speak to whoever hosts your nameservers / domains and create an 'A' record - e.g. mail.mydomainname.com. pointing at the fixed IP address of your internet connection. Then create a primary / mx5 / 10 record with your newly created hostname (mail.domainname.com). You then need to get your router / firewall to port forward port 25 from your external IP to the internal one of your exchange box. When someone sends an email to you, their mail server does a DNS lookup on the domain name. It will find that the MX (mail exchanger) record is the IP address of your internet connection. The server will directly initiate a connection with your server sat behind the firewall, through the port forward and send you the mail. You can test your mail server from an external PC (e.g. if you can VNC to your box at home), by telnetting on to port 25 of the A record you set up / IP address. e.g. telnet open mail.mydomain.com (or the IP) 25 HELO mail.testing.co.uk MAIL FROM: [email protected] RCPT TO: [email protected] DATA . What you should also do, is contact your ISP to get them to allow you to use their mailservers as a secondary MX. Then, if your mail server goes down messages are queued at the isp, & filter back to your server when it comes back up.

Depends if you have inhouse Linux expertise or not. IMHO its something you should seriously look for if your thinking of employing new people. It'll save you buckets of cash. Also go find your nearest LUG. They've been known install and support Linux based systems in schools for free. I don't work in education any more That said, I do have a couple of chaps who specialise in Linux - they tend to deal with our older web servers though.

Education pricing 4tw \o/