ckuntz01

All that and more. We do pretty much anything and everything that has to do with technology, and making it work from start to finish

I have since moved on. The district that I used to work for was consolidated with the ISD in the county. I now work for them, and we have a larger but still kinda small team. Over the county we now have 8000 workstations, various phone systems, and other devices, different networks and different services. There is a total of 6 techs, 2 engineers, and 4 data people that take care of this giant. And yes I do actually have personal time and get sleep every night My typical work week during non rush time is 40-45 hours as I refuse to live at work. At the previous job I worked about the same and things ran pretty good for the most part.

We use just network drives/shortcuts on the desktops with NTFS permissions. If you are interested I can attempt to explain it... I know it is not "software" but it is Free =}

K-12 School district In the US we use Microsoft Windows 2008 with GPO. Currently merging most districts in the county (10 districts in all) and anyone that is not on Windows will be Windows by the end of summer.

In Organization Config -> Address Lists Create the address book there. First Screen select "The Following Specific types" and select "Users with Exchange mailboxes", "Resource mailboxes", "Mail-enabled groups" Then click Next Under conditions select "Custom Attribute Value and fill in the bottom with the correct attribute name. then Next out. This will setup the rule. Then in the mailboxes (can do this in Powershell) assign the mailboxes with the custom attribute that you put in the rule. User Powershell Command Get-Mailbox -OrganizationalUnit "OU Name" | Set-Mailbox -CustomAttribute1 Group Powershell Command Get-Group -OrganizationalUnit "OU Name" | Set-DistributionGroup -CustomAttribute1 Hope this helps..

We do ours with a rule and a custom attribute in the mail account to assign them to the correct GAL after creating it.

Attached is a screenshot of the quotas as I have them setup. Nothing really special.....

I have a VERY similar setup as the way that you have yours setup, and mine reports correctly Using windows 2003 server and Windows XP desktops. Maybe (although I don't know) the issue maybe are you enforcing the quotas? There is a select to not allow the users to exceed their limits. Maybe that has something to do with it.

Thanks I will check it out.

Would you mind sharing the script that you use on Windows XP? I want to something VERY similar to that. Thanks in advance.

That is district wide which is 12 schools and 2 admin buildings.

We have 2000+ computers with myself (Network Engineer) and 1.5 techs. We also do phones, clocks,bells,security cameras, and projectors in every classroom.

That is how mine is setup, 1 domain 2 OUs

The only thing I see different really from my config is the User Attribute in the User Lookup Settings on mine is sAMAccountName not cn. I could not get it to work with cn. The only other thing I can think of is that I know that the enrollment happens when that user logs into moodle, it will not happen before then, but I am assuming that you know that

I have it running after many hours of playing. What do you mean by "config" If you can tell me what it is that you are looking for i can prolly get something for you. I can tell you a few tricks though: You said you got logged in and the issue you are having comes from the enrolling part. The trick to the enrolling is that you need to call the group the same thing as the name of the class. I am not recalling which names needs to be the same (Full,Short,Course ID Number). I think it is the Short name or the Course ID Number that needs to be identical as the Group Name. The Pre 2000 Name DOES NOT have the be the same. When creating the group you need 2 OUS is AD. One for Student and one for Teachers. Then Under Courses-> enrollments Enable LDAP and click Edit. In the LDAP Server Settings point to a valid account. For the Enrol_Ldap_bind_dn you need to give it the cn style. Then in Rol mapping put the LDAP Contexts to the OUs created earlier for the Teacher and Students and the LDAP member Attribute is member. I am attaching a screenshot of my course enrollment settings. And I have AutoCreate courses turned off. Hope this helps. If not let me know and I can try to help you some more.

Where can you set in GPO the number of concurrent logons?

What you will need to do (and I have done this for an RDP server) is setup a loopback policy in AD. You can even say the program that it is to launch on login and once that program is closed the session will close. In the Delegation tab of the GPO Click Advanced and add the groups you do NOT want to have the Policy applied to. Highlight that group/user and check the box "Apply Group policy" as a deny. This will take ruling over anything else in that stack and that policy will not apply to you. I have 4 different groups stacked on this server with different GPO depending on what application they need to access and has worked great. Let me know if you need any other information or questions.

We wrote our own scrip this year that uses a SQL Database to track the user sessions and WMI to log them off when it has exceeded the limit. We used to use Limit Logon, but had many issues with the upkeep of it.