Freedom

I'd love to join in but tickets seem to be all gone - any chance of getting on a wait-list? EDIT: Ignore me, I've found the relevant link on the Event Brite page.

Also try using "outlook.office365.com" as the server if you are using the Office 365 service which it appears that you are.

In this case could it be the space at the end of the % before the "? origunc "%homedir% " unc "%homedir% "

If you can't fit a screen as an IT tech you need to learn, so I would advise just ordering the screen off them and sorting it yourself - will give you some valuable experience as it won't be the last! Most screens are easy to fit however I have seen some stupid HP designs recently and a very bad Dell that required almost the whole machine to be disassembled first!

I am having the same problem and I don't have anything under that reg key to do with HAP - I have tried restarting the service but will reboot the server now too ... EDIT: Have restarted the server but I still get the same error. Any other ideas?

Strange I count 6 USB ports And yes, that is DVI & 2 * DisplayPorts - interesting combo

Yeah, +1 on the encryption of admin password

Thanks for the link, a good job I am deploying a fresh SP1 image in the next few months - as this will resolve a nasty issue.

You've got a spelling error in 'Macromedia Studio MX 2004' before some know it all kid spots it On another note I really need to do this to our network so when I get a chance I will start playing with the code you guys have already posted . Thanks for it!

If he is thinking about what I am then the GPO templates are in the GPMC and you change the setting there - this then makes the necessary registry change on affected machines/users. I believe the option you may want is Microsoft Office 2010/File Open/Save dialog box/Restricted Browsing.

+1 for Start SSL - fantastic set of tools, free and it's built in certificates work on all major phones and browsers. cacert is another, but the root ca is not installed within major browsers so the end user has to install the cert before it will work properly. I would personaly go with Start SSL...

I'm struggling just to get the master and client to talk on a 1 to 1 basis, yet alone deploy it out. I've made the share folder which the client can access in explorer fine. I've edited the registry settings to show it where the keys are as per the documentation, but the master just can't connect. Any ideas that I should try. Firewall is off and AV is not blocking the app (it was to start with).

Just wanted to nudge that I believe this issue is to do with Standby return. On our Windows 7 RTM machines, if they return from standby or hibernate the first logon fails. I too came to the same conclusion and have since disabled the standby and hibernate options and I have had no more problems. Whether this is a Windows / Driver / NIC issue is another problem entirely... Curiosity, but what NICS and OS are we all having these problems on? Ours is NVIDIA nForce / Win 7 RTM

I will tell you now that I have *never* been able to get this to work - post or pre SP1 install plus many a hotfix. I find GPP to be heavily bugged. I still use it but I just accept it's quirks as I have spent far too long trying to iron it out - please update this thread if you manage to get it to work properly

I'm presuming you can output in csv format from your particular CMIS? I am also presuming you can use Power Shell. I advise looking over my post here ----> http://www.edugeek.net/forums/scripts/70649-bulk-add-users-server-2008-r2-powershell-script.html#post630317 It's built for use on Server 2008 R2, but may work on other platforms. My code is heavily commented so you shouldn't have a problem adjusting it to fit your needs. If you improve on my code, please post it back up

I know this is an old thread, but I have had the need to start monitoring print usage as it is just rediculous and a nice pop-up warnign people of this I think will help. We are using the free version of PaperCut to just monitor and report on what is being printed and where to name and shame. The old code had a couple of problems where it would pop-up multiple times for the same print dialogue if they were slow at clicking onwards so this one waits for the print window to be closed. The problem with both the old and new code is it doe not work for office 2010 suite as they do not use the standard dialogue - any help on this would be appreciated. Anyway the new code is below: #Region ;**** Directives created by AutoIt3Wrapper_GUI **** #AutoIt3Wrapper_icon=printer.ico #AutoIt3Wrapper_outfile=PrintHelper.exe #AutoIt3Wrapper_UseX64=n #AutoIt3Wrapper_Res_Comment=A little script to sit and run in the background of all logons to prevent excessive printing within school. #AutoIt3Wrapper_Res_Description=Prompts User if they Really Need to Print #AutoIt3Wrapper_Res_Fileversion=1.0.1.3 #AutoIt3Wrapper_Res_Fileversion_AutoIncrement=p #AutoIt3Wrapper_Res_LegalCopyright=Alex 'Freedom' Haines #AutoIt3Wrapper_Res_SaveSource=y #EndRegion ;**** Directives created by AutoIt3Wrapper_GUI **** ; Original code taken straight from this source: ; http://www.edugeek.net/forums/how-do-you-do/33367-do-you-need-print-message.html ; Do not allow the user to pause or exit the script. Opt("TrayMenuMode", 1) ; Start the main loop. Do ; Wait until the print window is active. WinWaitActive("Print", "Ready") ; Prompt the user to pay some attention to the need to print. MsgBox(0, "Stop and Think", "Do you really need to print that?" & @CRLF & @CRLF & "Have you used print preview to make sure it looks correct?" & @CRLF & @CRLF & "Don't forget I am watching and monitoring and we will be naming and shaming abusers every month!") ; Bring the pop-up window to the front. WinActivate("Stop and Think") ; Wait until the print window is closed (to stop multiple pop-ups at the same time). WinWaitClose("Print", "Ready") ; End of the main loop. ; Exit the loop using 'ExitLoop' command. Until False

#Region ;**** Directives created by AutoIt3Wrapper_GUI **** #AutoIt3Wrapper_icon=green_padlock.ico #AutoIt3Wrapper_outfile=User2Shibboleth.exe #AutoIt3Wrapper_UseX64=n #AutoIt3Wrapper_Res_Comment=A little script to sit and run in the background of child logons to automatically re-enter their globalid. This is a huge time saver especially for the younger children that can't type quickly. #AutoIt3Wrapper_Res_Description=Passes Username to a Shibboleth SSO Form #AutoIt3Wrapper_Res_Fileversion=1.3.1.2 #AutoIt3Wrapper_Res_Fileversion_AutoIncrement=p #AutoIt3Wrapper_Res_LegalCopyright=Alex 'Freedom' Haines #AutoIt3Wrapper_Res_SaveSource=y #EndRegion ;**** Directives created by AutoIt3Wrapper_GUI **** ; Start the main loop. Do ; Wait until the logon window shows itself... WinWaitActive("Login - Windows Internet Explorer", "https://shibboleth.networcs.net/SSO/auth/networcs_auth2/index.php") ; Make sure this is the username window... ; WinWaitActive("Login - Windows Internet Explorer","Please enter your Username:") ; Add a little delay to avoid lag in accessing the website. Sleep(500) ; Send the current logged on username to the form (which defaults to the username box). Send(@UserName) ; Send the enter key to progress to the next page. Send("{ENTER}") ; Display a message so the user knows what is happening. MsgBox(0, "Shibboleth Logon Helper v1.3", "Hi " & @UserName &"! I noticed that you were trying to use a SSO service enabled website. To help out, I have already entered your username for you. Now all you need to do is put your password in.", 10) ; Wait for the user to finish entering their password and then loop. ; This helps stop us entering the username again by mistake as we can't differenciate the pages due to iframes! Sleep(5000) WinWaitClose("Login - Windows Internet Explorer", "https://shibboleth.networcs.net/SSO/auth/networcs_auth2/index.php") ; Sleep again and then loop to beginning to avoid double pasting etc. Sleep(10000) ; End of the main loop. ; Exit the loop using 'ExitLoop' command. Until False User2Shibboleth.zip

Can't so I thanked you instead I figured someone else may find the info useful. Will add a post with full code loop etc later...

Seems I was being stupid as this is easy on first glance of my quickly done AutoIt script - just need to loop it! ; Wait until the logon window shows itself... WinWaitActive("Login - Windows Internet Explorer","https://shibboleth.networcs.net/SSO/auth/networcs_auth2/index.php") ; Add a little delay to avoid lag in accessing the website. Sleep(500) ; Send the current logged on username to the form (which defaults to the username box). Send(@UserName) ; Send the enter key after another small delay to move to the password page. ; This is just so the user can see what has happened... Sleep(1500) Send("{ENTER}")

I am sorry guys, I've done a search and couldn't see on here - or on Google an easy to understand guide for my request - actually the teachers as they are going insane but Basically we are moving to a SSO structure within WCC and part of that is having global ids which move with the user throughout their education within WCC. This global id gives them access to a range of services using the Shibboleth SSO platform. We also use these global ids and passwords in AD. What I want to do is pass the current windows login details (preferably both username and password but I highly doubt the password bit is possible) to the Shibboleth webpage when they open it. I was going to do some form of AutoIT script, but I can't work out how to go about getting the windows username. Does anyone have any good ideas for this? The webpage requiring input is here Worcestershire Learning Gateway using the login link on the right. The page first asks for the username and then you submit and then it asks for the password. As stated I want to enter at least the username when prompted and submit the page so that they just have to use the password. Any help appreciated!

import_users.zip I've been working on and tweaking this code for the last few days in-between the other normal jobs that we all have to do and this is the result. <# .SYNOPSIS Import AD Users from a CSV File. .DESCRIPTION Import AD Users from a CSV File. The script will request user input for a password and LOG / CSV file and then just get on with the task at hand. .NOTES Authors: © Alex Haines Modified for use at Millfields First School in Bromsgrove by Alex Haines in December 2010. Original basic code was from a TechNet forum post - http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/5b0420a6-2ff7-445f-8887-07c295073f45 Some other code was taken from another TechNet post later on to add Home Folder features - can't credit as can't remember - sorry! Last edited on 09th February 2011. This script ASSUMES a Domain called "millfields.local" You must edit appropriate spots to reflect the CORRECT domain name in your environment. Also ensure and test in a TEST domain vs production before unleashing the script. YOU HAVE BEEN WARNED!!! .PARAMETER CSVFilePath Path of CSV file to import .PARAMETER LOGFilePath Path of ERROR LOG file if needed during script processing .EXAMPLE import_users.ps1 -CSVFilePath C:\Scripts\Users.csv -LOGFilePath C:\Scripts\ErrorLog.txt #> # Forcefully request info on where the LOG & CSV file should be created. param ([parameter(Mandatory=$True,HelpMessage='Path of ERROR LOG file to write to:')]$LOGFilePath, [parameter(Mandatory=$True,HelpMessage='Path of CSV file to import from:')]$CSVFilePath) # Test for existence of supplied LOG - if not exit. if (Test-Path $LOGFilePath){ Write-Host '' Write-Host 'The Path to the ERROR LOG file appears to already exist. APPENDING TO & CONTINUING SCRIPT!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen LOG file (' + $LOGFilePath + ') already exists! Do not panic, I will just append to it.' | Out-File $LOGFilePath -append } else{ Write-Host '' Write-Host 'The Path to the ERROR LOG file is not valid. CREATING & CONTINUING SCRIPT!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen LOG file (' + $LOGFilePath + ') was not valid! Do not panic, I will just create it.' | Out-File $LOGFilePath -append } # Test for existence of supplied CSV - if not exit. if (Test-Path $CSVFilePath){ Write-Host 'The Path to the CSV file appears valid. CONTINUING SCRIPT!' Write-Host '' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The chosen CSV file (' + $CSVFilePath + ') exists so the script continued!' | Out-File $LOGFilePath -append } else{ Write-Host 'The Path to the CSV file appears invalid. EXITING SCRIPT!' Write-Host '' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': ERROR 4 - The chosen CSV file (' + $CSVFilePath + ') did not exist so the script had to be terminated as there was no work to do!' | Out-File $LOGFilePath -append Exit } <# Get a temporary password for the users. If you don't the accounts will create no problem but they will be "Disabled" accounts. This will mean you have to go through and enable them after the import. As we don't really want to have to do this, I advise you leave this step in place - you could hardcode the $Password variable if you wanted as it makes no real difference. For Secure Mode use -AsSecureString (This blanks out the password as you type and hides it from view when using 'Up Arrow'). #> $Password=READ-HOST 'Enter a Temporary Secure Password (eg Golf!911)' -AsSecureString <# Go through EACH item in the list (Header row is treated as variable names by default) #> $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': Start of the main loop.' | Out-File $LOGFilePath -append FOREACH ($USER in (IMPORT-CSV $CSVFilePath)) { <# I could just Assign straight in from the Cmdlet but I'm putting them into Individual variables so you can see how the data is referenced (check your CSV headers, those are the exact names but are NoT cAsE sEnSiTiVe). A standard csv from county will be given with 6 Headers givenName | sn | gname | department | uname | ctPassword #> $FirstName=$USER.givenName $LastName=$USER.sn $JobTitle=$USER.gname $Department=$USER.department $Username=$USER.uname $Password=$USER.ctPassword <# You will see that most of the lines below don't have any data in them - this is deliberate as in most situations, the schools won't need them. If you do, just replace with the correct header name as your csv file requires in the format =$USER.header #> $Title='' $Office='' $Email=$Username+'@millfields.worcs.sch.uk' $Extension='' $Mobile='' $Address='' $City='' $StateProv='' $PostalZip='' $Country='' $ImmediateSupervisor='' $HomeDirectory='\\ALABAMA\Homes$\'+$Username $HomeDrive='Y:' $ProfilePath='\\ALABAMA\Profiles2010$\'+$Username $LogonScript='student.bat' $Domain='millfields.local' $UPN=$Username+'@'+$Domain $DisplayName=$Username+' - '+($FirstName+' ').Substring(0,1).Trimend()+'.'+$LastName $Company='Millfields First School' $PhoneNumber='01527 831 885 + '+$Extension $Web='http://millfields.networcs.net' $Description=$FirstName+' '+$LastName+' belongs to the '+$JobTitle+' group and joined the school in '+$Department+'.' $Fax='' <# SAM USERID cannot be greater than 20 characters so trim away - LEGACY! #> $SAM=(($Username+' ').Substring(0,20)).Trimend() <# Check to see if the user already exists. If it does add it to an error log and then continue with the next user. If it doesn't then add the user and loop. #> $count = Get-QADUser –samAccountName $SAM | Measure-Object if ($count.count –gt 0) { Write-Host 'The user'$SAM' failed. This is because the user already exists!' $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The user ' + $SAM + ' failed. This is because the user already exists!' | Out-File $LOGFilePath -append } else { # Create the home folders and assign permissions. # Checks starting character of accname and load balances to two (or more) servers if desired. $server1 = 'a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z' #$server2 = 'o','p','q','r','s','t','u','v','w','x','y','z' Switch ($SAM.substring(0,1).tolower()) { { $server1 –contains $_ } { $homeserver = '\\alabama\'; break; } { $server2 –contains $_ } { $homeserver = '\\alaska\'; break; } } # Test for non-existence of created home directory - if not skip creation. if (Test-Path $homeserver'Homes$\'$SAM){ Write-Host exists? $homeserver'Homes$\'$SAM $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': ERROR 6 - User ' + $SAM + '.' | Out-File $LOGFilePath -append } else { # Make the directory. Mkdir ($homeserver + 'Homes$\' + $SAM) } # Construct two commands to add Read/Write access to the directory. $cacls1 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":R" $cacls2 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":W" $cacls3 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":F" $cacls4 = "cacls " + $homeserver + "Homes$\" + $SAM + " /E /G " + $SAM + ":C" # DEBUG #Write-Host $cacls1 #Write-Host $cacls2 #Write-Host $cacls3 #Write-Host $cacls4 # Now create the user. NEW-QADUSER -ParentContainer $Domain'/Imported' -Name $DisplayName -UserPassword $Password -City $City -Company $Company -Department $Department -email $Email -FAX $Fax -Firstname $FirstName -Lastname $LastName -Mobilephone $MobilePhone -Office $Office -Phonenumber $PhoneNumber -Postalcode $PostalZip -samaccountname $SAM -StateorProvince $StateProv -StreetAddress $Address -Title $JobTitle -UserPrincipalName $UPN -webpage $Web -Description $Description -displayname $DisplayName -HomeDirectory $HomeDirectory -HomeDrive $HomeDrive -ProfilePath $ProfilePath -LogonScript $LogonScript $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': The user ' + $SAM + ' succeeded.' | Out-File $LOGFilePath -append # Run the two commands. cmd /c $cacls1 cmd /c $cacls2 cmd /c $cacls3 cmd /c $cacls4 } } # Close the log file. $(Get-Date -format "dd/MM/yy HH:mm:ss") + ': EoF' | Out-File $LOGFilePath -append ' ' | Out-File $LOGFilePath -append The code works well and successfully imported my users into AD with their home folders all correctly assigned. The only thing I had to do afterwards was move the users from the Imported OU to the correct OU and assign them to any groups, but this is very easy to do. Feel free to modify or recommend changes, but please post them back on this forum or send me a PM. Also, if you are going to use it or republish it, please link back to this post so Edugeek can get some more members. Oh and if anyone is wondering why I didn't use one of the many other scripts out there, I found that none of them would work in a Server 2008 R2 environment!

Didn't know this, but then again I am on Windows 7 so

Very important to SysPrep and then take the image - avoids the need for NewSID (which never worked properly) and does it in the supported MS fashion. Saves all the minor headaches with things like WSUS too

I have the same problem - can't for the life of me get the management console to communicate to ANY of the detected machines without this error.

Sadly I have to tell you there will be no more feature improvements from Paul. However I am planning to pick up his project shortly and start making some changes (providing he has commented the code well; which I am sure he has). Once I have studied his code and I am confident I can add new features/fix bugs etc, I will post back a new thread for this sort of stuff to go in. Speak soon!