jimbow

I would like to know how you did this please. Share your testing. Thanks JimBow

Thanks dude.. I had a quick look and noticed that this is fairly defunct, and also caught through one of the forums that it is now replaced by CoovaChilli | Coova :: Open Source Captive Portal Access Controller and RADIUS Software Both need a linux box to run on and also need a seperate Radius Server by the looks of it. The later also has a firmware option for APs but I don't think ours are up too that option. I will look deeper into the issues on this solution but am still keen to hear of others. Cheers James

Hi, We have win2k3 server with ISA doing all our web filtering and PaperCut NG doing all our charging. All machines are registered on the Domain via AD and GPO controls everything. Users log on and gpo and logon scrips manage experience based on machine location and type and user type. What I would like to do is have a way of allowing staff but mainly students to bring in their own laptop, PSP, smartphone, etc and hook on to our network without IT support. What I want to happen is that they detect our wireless network, or plug directly into a wired port, and from there get auto directed to some web page or similar that authenticates them somehow. Once authenticated they can have access to internet, printers, folder shares, and other domain resources as per their authentication privileges. If they don't authenticate, then we can either block them, or offer them a variety of guest accounts (visiting staff), or give them the choice to pay for our network service via some coupon system. Is there anyone out there doing this already and could point me in the direction of where I could find software solutions to install on our servers to achieve this. Apart from Office staff who would have domain joined desktops, eventually I would have no other desktops and the students and staff could choose their own (mac, pc, *nix, whatever) laptop, network capable device and hook on. I am not worried about software compatibility at this stage, as I know having multiple OSes would mean multiple document platforms (ie MSWord on Mac/PC versus OpenDoc etc) I have a plan for that problem. So again, are there any off the shelf solutions out there ie Cafe Hotspot style access that is good for a school situation. PS: we have simple wireless APs, but have good switches with VLAN support etc. Cheers James

How do I lock down everything for the students.. Is there a guide somewhere? This is the most urgent and important aspect and I will need guidance... Cheers Jim

Hi, I have inherited an older system that has not been maintained for a number of years, and appears to have been hacked around a bit. Three servers running Win 2k3 1=AD plus Exchange plus plus plus plus bits 2=AD plus SMS 3=Terminal Server There are around 75 plus workstations ranging from laptops to desktops and a mixture of student and teacher configurations The login script is using something called kixstart and is full of errors and registry hacks. There is very little in teh way of GPO settings The AD is poorly organised and not making efficient use of OUG's Where do I start? I am no expert, just well informed, so I would need a lot of asssistance. The first thing I want to be able to do is stop students from launching any applications/scripts/batch files from anywhere accept the authorised locations such as C drive etc. How do I do that? Second, I want to re rationalise policies/profiles and login scripts. At the moment each logon creates a profile on teh machine which slowly fills the local machines hard drive and kills it. Would Mandatory Profiles stop this or not? I want to be able to first lock the system down for students and also for some staff who are useless at security to protect the sytsme from hackers and wasteful malicious pranks. Also would like to expand in the future to add student laptops with a variety of OS's and capablities Also would like to know how subnetting could work, as we are only using one domain and if that could have subnets as we are running out of IP address! I appreciate your help in advance Jim