Firefox

We use Dameware Remote Control - works fine with Windows 7 and XP alike

We have followed Microsofts approach pretty much down the line. Our domain currently has about 200 policies within. This sounds like it would be a pain to manage, but if they are named appropriately it really is quite simple. We would also have 2 different policies for Computer and User e.g. Windows7_BL (Computer Part) Windows7_BL (User Part) BL stands for baseline, once this is signed off, any further changes would be made to Windows7_Inc (Computer and User part respectively). This is so worst case scenario we could disable the _Inc policy and be left with a good set of policies. The theory is that our Baseline should rarely ever change. The reason we have this level of granularity is A) We have a change department, that we obviously have to go through to get a GPO change authrorised. It is a lot easier to negate risks if you're not having to change 1 single GPO with thousands of settings. B) We run a multiple domain setup, with a lot of our devices in a seperate domain from the users, so have seperate User Part\Computer Part policies with loopback works really well. C) GPO's can from time to time become corrupt, and although this can obviously be resolved by a restore, it has less impact if you don't have 1 huge GPO. D) Multiple people can work within Policy editor, without fear of impacting each other (as you would have with 1 policy)

Sorry, I think you may have both misunderstood. I know how to get to the UAC box, and I am perfectly comfortable changing the settings. But if you open up your own..does the "Default" option, (and I mean the Microsoft "Default", not what you may have set it to) sit on the 2nd option down? Most websites I can find say the 2nd option is the default. My issue is, a number of our users seemingly have Always notify listed as "Default" - it appears as if Microsoft changed what they deemed to be the default level. My Group policy - simply sets the default level, so although we both successfully get the same policy, it appears to give a different setting, as the level is different.

I had previous set group policy so that everyone of our Windows 7 devices set the UAC to it's default level Default - Notify me only when programs try to make changes to my computer A number of people started reporting that they were now being prompted more often for their credentials. Comparing my machine to theirs, I noticed that their "Default" level is the "Always notify" option Does anyone know when the default level changed in Windows 7? If I move their setting down to the 2nd level, the wording is the box is actually different too

Unfortunately that doesn't work for us. We're running in a multi domain environment. When I try to enter credentials from the other domain I get the error below. The account I'm elevating has full control over explorer.exe

Hello, We have been rolling out Windows 7 for a while now. A Large majority of our ICT team now have this. Obviously with Windows 7 there has been a lot more attention to security, especially the inability to elevate the explorer process. Under XP we would run explorer with an elevated account, to allow us to manage user files\folders on our servers. We're reluctant to go down the road of installing XP Mode, and Ideally don't want our staff to RDP to a server to make changes. There are some 3rd party tools out there that appear to carry out what we require, but we've had varying levels of success. Is anyone else trying to manage their files\folders with elevated priveleges? how did you achieve this?

The switches are completely upto you this site provides good detail Robocopy As an example we use this one quite often "Robocopy "\\sourceservername\sourcesharename" "\\destinationservername\destinationsharename" /E /Z /XD (any exluded folders) /SEC /XO /R:0 /W:0 /TEE /LOG+:"copy.log"

I could not reiterate psydii's comments any more. We tried setting the redirection of the AppData folder, it caused no end of problems. For some reason, once redirected it actually moved a copy of the whole of My Documents into the Appdata folder (causing very lenghty login times). Rolling back from this, had to be done on a per user basis, certainly not fun! :-(

If the person installing it initially is IT savvy, can you check if they created a restore point? Once my OS is working exactly how I want, and before installing any apps, I would always create the restore point to roll back to

Answered my intial question, now looking for anyone that's maanged to get this working for multiple domains? when I try from my 2nd domain all the objects report as being disconnectors

Hello, Has anyone had any experience with this product? I'm having a few issues with the config of the basic sharepoint site. All documentation mentions Kerberos Authentication and configuring the setting "Useapppoolcredentials = True" to provide authenticated access to the site. The issue I have, this works when the setting is False....but not when set to true. Any ideas what I'm missing?

Glad to see the above worked. Also for future reference, the updates on both the DNS server and client machines may not always be instant If you create the record on a server and it does not instantly ping - From within DNS clear the Cache (This can be done by right clicking the DNS server name then "Clear Cache" Then from the command prompt type ipconfig /flushdns From a client, you should only need to do ipconfig /flushdns As a last note, if you have a large number of DNS servers and Clients a change within DNS can take some time to traverse your network

Sorry if I've missed something but I kinda just scanned the previous posts. From what I can tell, you're saying DC1 has an upto date copy of the database? Can you not just do a dcpromo /forceremoval on DC2. Do a metadata cleanup from DC1, then manually delete DC 2 from DC ADUC. You should then be able to add DC2 back to the domain and repromote it - forcing it to pull through a fresh copy of AD. The only consideration you now need is your Exchange issue. Without knowing your setup I'm not sure why it's only reliant on this DC. Do you DC's current sit within different sites in sites and services? If so is the subnet for exchange added to the DC2 site? It should automatically look for another GC if DC2 fails, but I can't think of any other place you nominate 1 individual DC.

Hello, Has anyone had any experience with this application? We are basically looking to install the 2010 version a.s.a.p as we have a pressing need for it's functionality, however we would also like to "upgrade" to 2010 R2 once it comes out of Beta and into live. Has anyone tried "upgrading" their 2010 version to 2010 R2 Beta? Did you have to carry out a fresh install? Were you able to migrate teh database if you had to reinstall? Can you update the client on machines or does that have to be removed\re-added? Essentially, if we roll this out now, and we get our users to fill in details for the password management side of things, will they have to do this over again when wego to the next version? thanks

I have it working so:- Windows Defender does not flag at all AV only flags if no AV is present (which I want) Windows Backup does not flag at all Windows Firewall does not flag at all Windows Update - being a royal pain :-( Windows Troubleshooting - Works a treat The idea is, although we have ways of checking through EPO if an agent has been deployed. We wanted the failsafe for AV so if a user spots a message about it they will contact us. Windows Update is being controlled via SCCM, but sadly the action center does not seem to recognise that as a valid source for it's settings :-(

It's my understanding this actually turns off the AC altogether? I still want it to run for other services like AV. I just do not want\need the Windows Update "reminders"

Hello, I am looking for a way, to untick the Windows Update options under action center. These are under security messages "Windows Update" and maintenance messages "Check for updates" I would really like to deploy this change via GPO rather then asking all our users to manually untick the options. I have succesfully removed the Windows Backup message by adding the DisableMonitoring reg key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsBackup Unfortunately this doesn't work for the Windows Update option. I have also exported the reg keys from HKCU\Software\Microsoft\Windows\CurrentVersion\Action Center\Checks on a machine that has these options unselected, but after reapplying these to another machine it does not change the settings. Anyone achieved this?

Thanks, I wanted to avoid a script if possible, but this really does like it will be the best approach

Hello, I am looking to deploy a shortcut to a URL via policy and have it pinned to the start menu. Deploying it to the menu under all programs works fine. But what I need to achieve is to have it pinned so it sits above all programs. I have seen various posts elsewhere that people have "tried" but nothing looks definitive. So I was wondering if anyone here has actually achieve this? thanks

Unfortunately when trying to use the performance monitor tool to connect to a DC in another domain we get the error below "No Such Interface Supported" We run the tool with an account from the same domain as the DC, it loads perfmon ok, but will not let you connect

Hello, I am trying to provide access to non domain admins the ability to logon to DC's and run certain MMC's Services Eventlog Perfomance & Alerts ADUC This is so we can delegate the responsibility without providing unnecessary access. I have seen this is possible by a domain admin manually changing the security settings of the MMC's in question. But I ideally need a way to control this via group policy so I can make this the case for all DC's At the moment I am able to provide the logon ability, but I am simply told that the everything is being blocked by group policy Any Suggestions?

Have you tried deleting the network team, disabling one of the nics, and configuring the other with your required IP? Broadcom Network Teams - Not worth the time and effort lol

Hello, This is more of a query then a problem. We have a 2008 domain, and I have been looking through the DFSR and sysvol replication. DFSR is showing as being in the Eliminated state, which suggest it's running correctly. However documentation mentions that the SYSVOL folder will be renamed to SYSVOl_DFSR but this has not happened. Do this only happen when a domain is migrated from 2003 to 2008? rather then when a domain went in 2008 from fresh? (as this one did)

Ok looks like we found the issue....this turned out to be due to "Token Bloat" with the need to increase the MaxTokenSize. MaxTokenSize and Kerberos Token Bloat - Just Blog&#39n - Site Home - TechNet Blogs This is normally caused by being a member of too many groups. Not sure how the profile path related in anyway, but by increasing the Token size, rebooting the server, the "Access Denied" error went away Hope others might find this useful

Tried all that :-( We are now looking at creating a new account for the person having trouble