jamesfed

Hyper-V should always be a dedicated role on a dedicated server with no other roles installed. At worst maybe System Centre Virtual Machine manager could be installed as well but nothing else. Key reasons for this are that virtual hosts should be as locked down as tight as possible (most certainly no IIS running!) to avoid security problems and someone getting a hold of all those nice VHDs with all your data on.... Microsoft says you should always have one physical DC, although we don't do this here (we use local storage (no SAN!) on both our virtual hosts and each has a full DC running inside a VM) it certainly is the best way to go.

Next stop explaining how a nuclear reactor works (sorry thats a little OTT but had to be said!). You are certainly correct there though - either way I'd want to opt for the simple option first give it a few years and then say - 'This is copyright infringement, its a little like stealing but a bit different'.

To be totaly honist this is wayyy outa what I was thinking when I used the word steal Just using simple terms in referance to my education point - after all would you rather want to try and explain to a 5 year old what Copyright Infringement is or what stealing is?

Just using simple terms and I guess if you want to look at it like that you did steal (maybe duplicate is a better word) it because the 0s and 1s that were once on the servers hard drive are now on the person who downloaded the file. This way just because something is digital it dosn't mean there something physical (to steal) somewhere along the line.

My two thoughts are- As with many things today education is the key - if people are taught that stealing is wrong (and movie piracy in all senses is stealing) then they won't steal (at least in an ideal world!). and...... Yesterday I bought a pizza online from Dominos, it was simple and painless just dump in PayPal details and boom 15mins later the Pizza turned up - people like me want things to be simple and easy, going onto Amazon buying a DVD and waiting for it to turn up is one big pain and it takes time. Even most (legal) movie streaming services that I have used seem to want to know everything and anything about you before they even let you touch a film and even then you can't download it for use on any device you want as many times as you want. So my real point is....Movie world take after Dominos and make things simple and easy to buy!

Just setup MRBS on IIS enable windows authentication as a sign in method (again inside IIS) - sooooo much simpler than mucking around with apache (no offense to above poster!).

Just incase anyone wanted to know how they look on the outside/inside! http://www.youtube.com/watch?v=aeEm3Vx5E20 - DL165 G7 http://www.youtube.com/watch?v=EG5IQYHFU3U - DL385 G7

One other thing to try is if you have multiple RAM sticks try taking one out and running the system - if it still dies then try the other stick. Although RAM tests are good sometimes the good old process of trial and elim works better

Maybe check for a BIOS update or a dodgy stick of RAM?

One other thing I was looking at is System Centre Service Manager - seems to work great with the other System Centre products and Lync 2010 (which we should be getting soon) however it only seems to run when using localy hosted exchange.... So does anyone have this with something other than local exchange? Also would it be possible to setup a local exchange with just an account for the IT Helpdesk and dual run that with our LEA Live@Edu?

Ok I've got a session of SIT up and running - put in the email details and configed that Scheduler thingy to run as a scheduled task to run every minute however it doesn’t look like SIT is actually reaching out to the web to get any emails. I get that by looking at TMGs logs and no HTTP (or other) request are coming from the server when the scheduled task runs. I’ve got SIT on a 2008 R2 server with just the normal Windows Firewall but if its something that I need to configure in there then I have no clue.

If only our Live@Edu wasn't controled by our LEA Going to be the project for next year to keep chipping away at LEA services and brining them in house or at least getting it sorted so things like Live@Edu and so on are on our accounts and not the LEAs All the same this does sound like the best idea if only I could get it going...

Sorry I might have it wrong but I'm looking at getting it setup so that incomming mail can talk through the proxy not external access to the site (although I could be wrong here!)

I was (and still are) a bit of a Star Trek geek so had to be- Star Trek New Worlds (took ages to find a PC that will run this!) Star Trek Bridge Commander (runs great on anything ) Star Trek Birth of the Federation (little bit glitchy but as turn based stragetys go its great!)

Did you get this to work over your proxy (if you have one) because last time I tried with SIT it failed horribly

If you have a load of drivers in the image it will quickly chew through space (expecily if there are unneeded ones in there like video drives ect)

Cheers I'll look into it Anyone got any other suggestions?

Gotta be a bug - just got 142mb read and 86 write out of my 120GB Vertex 2 (which is resonable) but GB/s just isnt possible. Did you do a re run at all?

I know there are plenty of Helpdesk threads out there but I can't seem to find one that answers my questions So here goes..... I need a bit of Helpdesk software that will- Play nice with Proxys (ours is TMG powered) Play nice with Live@Edu for email ticket creation (so where someone emails in with issues) Ideally runs off IIS (own personal reasons but I could be flexible) and that doesn’t look like total pants! So if anyone has any clues do let me know!

Yeah its a total pain - we had a kick and scream at the LEA trying to get them to get us to bypass their Squid filter but then in the end just coughed up the cash. Give the trial version a go with the script on the site to see if its the same problem though!

Very much so - Squid totaly runins TMGs transparent proxy ablity (we found it out ourselves). Theres a solution here though but it costs - SecureNAT client Guest Access

What is your upstream proxy based upon? Squid?

Here we basicly have TMG 2010 running inside a Virtual Machine - one network point is dedicated to traffic to our edge switch, one to our domain joined network and a 3rd network point for our Student WiFi VLAN. Our Wireless is setup so that anyone joining our student WiFi SSID gets pointed onto the VLAN and part of the WiFi software also runs a DHCP server to which the default gateway is set as the 3rd nic on the TMG server (this way anyone joining that SSID gets pointed right at the TMG server). For upstream proxy on your TMG server go to Networks > Web Chaining and create a new web chain rule. Set the action as Redirect them to a specified upstream server and in the settings put the details for your upstream server. Then in Network Rules make sure the Internet Access rule for your assinged IP address range for your WiFi clients is set to Route instead of NAT.

We got it working by making the TMG server the default gateway - only problem is you then loose the ablity to do user level web filtering So at the moment we have a kinda hybrid enviroment where there is a VLAN for our student WiFi which points at the transparent proxy (using the default gateway of the TMG server) and then our domain joined machines use proxy settings applied by GPO.

As said above DFS is the best way to go but if that looks good to you then seriously consider going Server 2008 R2 (or at least 2008) as it makes things a whole lot simpler. You might also want to take the time to look into the Volume Snapshot service which offers quick on the fly restores of data (but doesn’t do 'system state' backups). Finally what do you run for backups at the moment?