maniac

Hi all - long time no posts from me. I'll keep it very quick, does anyone have lurking somewhere in the depths of their hard drive an old windows 7 compatible version of Systernals process monitor, or the predecessor filemon / regmon? Long story short, I work in industry these days and the manufacturing company I work for has a lot of windows 7 running dedicated devices because they are highly customised. I've got a problem with a workstation installing some drivers which I need to try and troubleshoot. Of course the current published version of process monitor only runs on windows 8.1 or better and you can't find the old version anywhere! Thanks in advance! Mike.

Thanks, you were actually correct, but I managed to get there myself in the mean time. I realised it was EXACTLY the same problem I had when I first set it up, I needed a static route on the Sonicwall to send the traffic back to the network switch as by default the router assumes it is the default gateway, which it isn't for my network. As soon as I sorted that out it worked as expected. It's ALWAYS the simple things!

Hello all, long time no see from me. Now working in business, so this forum is less relevant to me now, however occasionally the odd issue crops up like the following. I have a Sonicwall firewall in this business which is our perimeter device, and it has 5 ports on. I'm in the middle of some massive network changes here so all 5 are currently in use. I have 3 ADSL lines coming into it and at the moment 2 separate LAN segments because I'm re-addressing this network. We have also just had a fibre line connected and I am keen to move services across to this ASAP, but need to do so without interrupting the existing ADSL connections for now as they all handle various incoming/outgoing services which need to stay live while I do this. So the question is how to free up a router port. Easy solution I thought, combine both the LAN segments onto one router port since they are on different VLAN's and the router can create virtual LAN ports, should be easy right? So at the moment I have LAN segment 132.140.x.x (Don't ask about that IP address range, I inherited it) on port 0 and LAN segment 10.100.x.x on router port 4. They are both connected to their respective VLAN on my network which is a port on the switch with the untagged VLAN set appropriately. Great this all works. The Sonicwall router is also the default router for Lan Segment 132.140.x.x but for my new network the routing is all handled by the switch with a static IP route to send traffic out to the internet on the appropriate IP address. This has been working absolutely fine for the last 2 months or so. Hope you're still with me! So to move both LAN segments onto one router port I'm doing the following Set VLAN 999 (which is my internet VLAN) as tagged on the router port that currently handles just the 132.140.x.x network Remove the IP address from router port 4 which stops all internet traffic on the 10.100.x.x range as expected Add a virtual LAN port on interface 0 with VLAN 999 specified and the same IP address as router port 4 had previously. By my reckoning because the VLAN is set as tagged on both the router and the switch it should work, but it doesn't! I get no internet access on my 10.100.x.x network after making this change, but the 132.140.x.x network carries on as usual. HOWEVER, this is the odd thing. From an SSH session on the core switch I can ping both the router on it's VLAN 999 address and ping outside of the network, but only from the switch not from any of the network segments. Looking at the ARP list it also shows the correct IP address is on the correct port, so the switch is communicating with the router on VLAN 999 on that port, it knows which port to send traffic to for that IP address, just for some bizarre reason I have no connectivity from any of my machines even thou it's actually the same VLAN and same address that it was communicating perfectly happily on just moments previously on the other router port. Can anyone see what I'm potentially doing wrong because I'm stumped at the moment! Cheers, Mike.

You were correct by the way - the router had automatically added a route for the subnet, but with no gateway because it presumes it is acting as the gateway. I added the same route manually but specifying the gateway as well and it all sprung into action. It's always the simple little things isn't it. Mike.

Obvious when I think about it. The switch is pinging the router from the default gateway on that VLAN so it doesn't need any routing, of course things on other VLANS do. That makes perfect sense now. Cheers, Mike.

Hello everyone :-) OK this is puzzling me, I'm trying to setup some really basic VLAN segregation on this network to allow me to control traffic a little bit e.g provision visitors internet access while shielding them from our network etc. However, I'm struggling to get the switch to do it's routing properly. This is the first time I've actually tried to configure this myself, although I know, in theory, it should work. So consider this: The IP address range I've chosen (as I'm re-addressing the network as well) is 10.100.0.1/21 which gives me an address range of 10.100.0.1 - 10.100.7.254 Within this I've defined several /24 ranges for different things so for example 10.100.0.1/24 is servers 10.100.1.1/24 is workstations etc. I've decided to bring the internet connection in on it's own VLAN so I can use ACL's to easily control which VLANs do and do not have access to the internet, so I've defined a VLAN of 999 and given it a narrow address range of 10.100.7.248/29 (right at the top end of the range I've chosen) so I only have 6 addresses in this range, enough to provide a gateway on the switch and an address for the router. The router (which is a sonicwall NSA 250) has been given IP address 10.100.7.250 with a mask of 255.255.248.0 (so it should route for the entire address range) and connected to a port on the switch which is untagged for VLAN 999. VLAN 999 has a router address on the switch of 10.100.7.248 I've setup a static route on the switches routing table for 0.0.0.0/0 10.100.7.250 so it should send anything it doesn't handle to that router. So with this all in place, I can ping outside the network from the switch console its self, if I ping 8.8.8.8 for example (googles DNS servers) then I get a reply when I do it on the switch, but I cannot ping outside the network from any workstation on any of the VLANs, so if for example I put a workstation on VLAN 100 with approperate IP address, it cannot ping anything outside my own network. inter-vlan routing within the switch is fine, I can ping all the gateways and things on other VLANs fine, but anything outside the network gets lost. What have I done wrong? somewhere something isn't quite right, and I cannot work out where. Switch config below SW_H1_CAB01_01# show config Startup configuration: 138 ; J9726A Configuration Editor; Created on release #WB.15.18.0006 ; Ver #09:14.29.eb.8f.fc.f3.ff.37.2d:ba hostname "SW_H1_CAB01_01" module 1 type j9726a mirror-port 2 gvrp timesync sntp sntp unicast sntp server priority 1 132.140.0.71 telnet-server listen data time daylight-time-rule western-europe web-management listen data ip ssh listen data ip timep manual 132.140.0.71 ip route 0.0.0.0 0.0.0.0 10.100.7.250 ip routing snmp-server community "public" unrestricted snmp-server listen data snmp-server contact "Systems Manager" location "H1 Server Room" oobm disable ip address dhcp-bootp exit router rip redistribute connected exit vlan 1 name "DEFAULT_VLAN" no untagged 1-24 untagged A1-A2,B1-B2 no ip address exit vlan 100 name "SERVERS" untagged 1-12 tagged 23-24 ip address 10.100.0.1 255.255.255.0 exit vlan 110 name "WORKSTATIONS" tagged 23-24 ip address 10.100.1.1 255.255.255.0 exit vlan 120 name "STUDIO" tagged 23-24 ip address 10.100.2.1 255.255.255.0 exit vlan 130 name "SFDC" tagged 23-24 ip address 10.100.3.1 255.255.255.0 exit vlan 200 name "MANAGEMENT" tagged 1-24 ip address 172.16.0.1 255.255.255.0 exit vlan 210 name "OLD NETWORK 132.140 range" untagged 13-19 tagged 23-24 ip address 132.140.0.250 255.255.0.0 exit vlan 300 name "iSCSI" untagged 21-22 tagged 23-24 no ip address exit vlan 800 name "VISITORS" tagged 23-24 ip address 192.168.0.1 255.255.255.0 exit vlan 999 name "INTERNET" untagged 20 ip address 10.100.7.249 255.255.255.248 exit primary-vlan 200 tftp server listen data password manager password operator Regards, Mike.

I remember way back in the days before vBulletin when it was on phpBB3, that's how long I've been here! Great to see the place thriving, even thou I'm not in education IT anymore, this site is much bigger than the niche it started out serving.

This is actually my job (again) as I ended up staying in January, but I am now leaving again. If you want any further information, please contact me. Mike.

It has just come to our attention that the way the age restrictions are applied to apps in IOS 8 appears to have changed. Prior to IOS 8, when age restrictions were applied via Profile Manager to an iPad, the age restricted apps weren't even listed in the app store when searched for. Now it appears they are and the students can install them to their iPad, it just prevents them for actually being run. The consequence of this is students can download and fill up their iPad with all manner of apps but there is no way of removing these apps without removing the management profile from the iPad. Not sure if this is a fault or by design yet, but has anyone else noticed this? Mike.

Yes, should have added to this things have gone tits up for them since January, we have stopped using them and can't get any answers from anyone who we try contacting. Shame really, as their scheme was good and has worked well for the first 10 months we were dealing with them. Thankfully the insurance at the moment still seems to be valid, I am awaiting confirmation from the underwriters regarding whether this will be valid for the full duration of the term if instar themselves cease to exist.

This doesn't work, reasons for us are two fold. Firstly our teacher usernames have a "." in them and office 365 transfers these into a "_" for onedrive access so the %username% variable is no good. Secondly the user has to be authenticated to office 365 before the drive mapping will be successful, that's why my script opens internet explorer and visits the one drive site first which on my system does a SSO via ADFS to authenticate the user to office 365 before mapping the drive.

Since when did this place become so bitchy? Bossman is right to be proud of his website, it's very good and it forms part of that judgement. Thanks for all the suggestions people, a few companies to approach there so that's all good.

I would contact Corerro (now Civica) support, they are actually really helpful most of the time.

Not sure if Untangle will do this? They have paid for a free modules in their software. https://www.untangle.com/

Hello all, I have been asked to look at 'modernising' our school website, so I am wondering who other people use for their website development and what you think of them value for money etc. We currently have our site with a company who supply quite a lot of schools websites, but the quotation we have had for moving us onto a more modern looking site is quite high in my opinion, so I am looking for alternative companies I can approach for a comparison quote. I don't want to go down the road of in-house designing/hosting as we simply don't have the necessary skills or time in the Academy to look after this, so it's got to be a hosted solution that is designed for us using a content management system so changes can be made easily and quickly by delegated people to different parts of the site. Any advice appreciated, websites are not really my area of expertise, but naturally it's fallen in my lap to do something about it. Regards, Mike.

Hello everyone, With computer hardware becoming ever more reliable I now find myself questioning the need to extend the warranties on server hardware when they expire. I know hardware can become more unreliable as it gets older, but in 3 years I've had only 1 drive failure in my entire server infrastructure. Compare this to ten years ago when drive failures in servers even newer ones were relatively common and the hardware just seemed much more fragile. Does extending the warranty represent value for money any more, or are we better off just paying for replacement parts as the need arises. Discuss. Mike.

The simple argument is that a majority of servers are well underutilised for a majority of the time so by hosting multiple servers within one physical host you are making better use of the resources available to you. It also allows you to be much more granular with your servers so I have dedicated appliances for most items. I have 25 servers in my virtual infrastructure, I don't need that many but each service I have I tend to put on a dedicated server, so for example WSUS has a dedicated server, AV management is a dedicated server, Finance is a dedicated server etc. because under the datacentre licenses you can buy on EES you can run as many servers as you like per appliance you have brought a data centre license for. also makes deployment much easier, I can deploy a new server from a template in just a few minutes which is dead handy, I can also extend the storage available to any server, memory available, processing time available etc. all with a few clicks and monitor the whole thing quite effectively from the management console so I can get a good idea of how much our system is actually being utilised. Put quite simply for any medium to large organisation I wouldn't consider anything else. However, you say you only have 4 hosts so a full on virtualisation platform with SAN is probably a bit overkill, however you might be better off with an appliance like this Integrum | Servers | Stone Group which is effective for organisations wishing to take advantage of virtualisation on a smaller scale.

A well constructed "business case" for the infrastructure change and you could find you'll have all the money in one go. One thing I have learnt in 12 years of working in schools is they *always* manage to find money if they perceive they need it.

This is why a majority of my workstations auto-lock after 10 minutes of in-activity. It annoys the hell out of staff, but if we don't have it the amount of workstations that were left unlocked around the academy was astounding.

That's a great help, thank you! :-)

Let me know if it works for you, as I say it's not 100% reliable here for various reasons, but it works well enough in the absence of an official solution for this. Mike.

On a SharePoint page, basically I want to put a custom table style into a sharepoint page if I can.

Well maybe not daily, but I spend quite a lot of my time on strategies/planning because they move the goal posts so often here. Another batch of office moves over the coming holidays, that's more planning for me. I don't have a daily routine, that's for my senior technician to follow and report any issues to me. I didn't really read your first post I must admit.

Our LEA (Kent) are very good and provide very good speeds at competitive prices. We have totally unfiltered (apart from the real obvious) connections for myself and my techs and have complete control of the filtering it causes very few issues. On the other hand when I worked for another LEA some years ago they had a blanket filter applied to all machines which was a right PITA and we had a separate BT business ADSL line which we used for various reasons.

We don't have any physical security on any of our ICT assets now except for a few in a very public area of the building. Most projectors are screwed to the mount anyway and are not easy to steal so the risk is low unless you have a lot of people using your premises unsupervised. But as above, check with your schools insurance company as they may have specific requirements.