prad

Meraki will continue to work fine if t'internet goes down. Usage stats and all that data just queues locally on the AP until the connection is back.

Here's a random question. Focus --> Assessment --> Template --> Open a template Under Template Columns --> Open a template column There's a read-only flag on that property page. Does that read-only flag do anything other than make the column in associated marksheets read-only? i.e. are there any knock-on effects other than the obvious? I know this sounds like a silly question, however someone is trying to tell me something different and I need to get to the bottom of it. Thank you in advance. Kind Regards Prad

So here's the thing.... We must have 500GB of videos simply stored on a file server amoungst all other departmental documents; I want to introduce a DLNA server and centralise everything. There;s loads of devices available for home use, but are these robust enough to use on a large network like a school... would it handle streaming upto 50 computers at a time (and potentially 50 different videos). Before I bought myself a buffalo NAS DLNA Server for home use, I used to use a application called Serviio; that worked pretty well. Hardware vs Software? Any comments would be greatly appreciated... Thanks in advance...

Sounds like a SID issue to me... I remember years ago I had the same issue and I found out the machines had the same SID (where built from ghost and not sysprep'ed)

If you buy a Netgear ReadyNAS, it has a built in online backup solution with http://www.vaultservices.net. So basically you back everything up to the ReadyNAS device, and in the background it backs up its files online... about £150 per year for 50GB. I'd recommend it.

Have you configured DNS forwarders on this DC? If not, that might be a reason?

sounds like windows7 sync centre to me... this will sync the users' home folder by default unless turned off by a policy (different to the standard offline files policy used for xp)

Do you have kaspersky and if so has the outbreak policy kicked in just on your computer? This threw me the other day.

Sorry, just seen this. Have you checked share permissions? (rather than regular permissions) when you create a share in windows 2003 and above, the 'Everyone' group only has read access by default.

Morning. The roaming profile directory is created when the users logs on for the first time. This is why the user needs the create folder permission on the root folder. But considering the roaming profile folder is under the home folder (not good practice btw; I know you mentioned it was the previous guy) the premissions should be okay. Have you tried creating a seperate share and setting the permission how i mentioned in my previous post and pointed the users roaming profile to the new share?

That's because when you create the user, Active Directory User and Computers creates the home folder and sets the permissions explicitly. However it never does this for the profiles folder.

Really does sound like the users don't have 'Create Folders/Append Data' permissions on the root folder

Check the permissions again: Correct permissions for roaming profiles directory

That's great news! Good on RIM.

oh oh oh... forgot to mention a REALLY important point about blackberrys and Blackberry Enterprise Server: They are the only devices that you can wipe remotely (as long as you have BES). From within BES there is an option to disable and wipe the handheld. A signal is sent over the mobile phone network and the devices resets. When it powers on again, ALL data is wiped. From a data protection point of view this is hugely important when thinking about using smartphones in a school. Also, with BES, the blackberrys will be able to access the schools LAN across a secure VPN. So if you have an intranet or other resources you want the blackberrys to access....

Totally agree with teejay on this one. When you buy 10 blackberrys they should give you 10 Blackberry Enterprise Server CALs for free (if they don't then insist they do and they will). If you're going with Vodafone, tell them you've got dead spots all around the school and they should throw in some suresignal devices...

this sounds like the nic or switch port struggled to auto negotiate. Hard setting the speed and duplex on servers is good practice, considering they are always on and connected, just don't forget to set this on the switch port as well.

So here's the requirements: 1. A certificate server on the domain dishing out certificates to all domain computers (well at least the ones you want to use the wireless policy) 2. IAS installed on a domain controller 3. Wireless Access points that support WPA Enterprise (most do now) In IAS: 1. You need to create a wireless access policy. Mine is based on the group 'Domain Computers'. This allows all computers that are a member of that group access. In that policy setting you will see PEAP options where you select your cerificate server 2. You need to add a RADIUS Client (the access point) and configure a shared secret On the Access Point: 1. Configure WPA Enterprise security.. The only settings are, RADUIS Server IP, and the shared secret. Then either through a GPO or directly on the computers configre the wireless profile for that SSID, selecting WPA (or WPA2), but there's an option to choose PEAP authentication. Check the local certificate by running the 'Certificates' mmc snap in and selecting local computer. The certificate should be the one issued by the same server selected in the IAS wireless policy. That's pretty much it. The logs on the server running IAS will help you troubleshoot if you get any issues. Feel free to give me a shout and I will send you screen shots of all my config.

You can do it with 2000/2003

thanks everyone... that's been useful.

Yeah.... I used to use IAS (Windows Server 2000/2003), and since upgrading to Server 2008 I now use NPS. Both are the same and have a RADIUS server built in.

User --> Administrative Templates --> Start Menu and Task Bar --> Remove common program groups from Start Menu Although be careful with this setting. I use it in combination with re-directed start menus. Not sure of the effects without

There are various ways of doing this, but I don't think I've got the best method as there are reports of users still runing exe files. any suggestions appreciated.

I know this isn't a direct answer to your question, but if you used a WPA enterprise style setup, you can get authentication based on computer certificates, and therefore no need for keys It's supposed to be the most secure method for wireless networking. I can provide more info if necessary.

Are the users in the same OU? Check the ownership of the folder as well. Windows 7 is fussy about the ownership while Windows XP doesn't care.