redhelpdesk

we use ShadowProtect IT Edition. Not free but it works great and also lets you do a hardware independant restore to use an image from any architecture and put it onto anything else.

I only have one test user in my setup so far. Where do I change transport settings?

Did you need to do anything special to be able to send email to your domain. We are having a problem where we cant sent email to our live@edu address, but can recieve mail from it. Also, are you using ILM to manage accounts or just running the scripts?

Thanks for the quick reply. I think I might have it set in transparent proxy mode just now, as all I am doing on my test machines is setting the default gateway as the smoothwall box and its filtering that way ? Firefox I noticed the popup on Windows 7. Cant remember if it happened on XP or not will check in the morning. The blackberries was just an example, we have iphones, nokias, htc touch etc all on the wireless too. So with the student personal laptops, the proxy settings are applied via dhcp? Will this work for mac/safari laptops as well?

Thanks Tom, thats probably it. I wasnt clicking the Add button, I thought that was about adding a new policy rather than adding the new rules to that policy. Makes sense now. Could you possibly answer about how we could go about filtering guest (students personal) laptops. Would it just be by assigning them the default gateway of the smoothwall box via dhcp, and forcing all traffic through that? Could we then also force that group to require them to enter their username and password? How does smoothwall work for our School assigned blackberrys, and staff personal wifi devices which we allow to connect to through our wifi and internet, would it just work the same way and filtering done through default gateway? Also, is there any way to get firefox to authenticate seamlessly like IE does (without the popup credentials box?) My last question (for now at least!) is about pptp vpn access. We currently use this for staff, does schoolguardian allow the passthrough of pptp connections to the Windows server? (and will staff be able to browse the web over the vpn and out through the smoothwall and to the internet?) Thanks for the help with this.

Thanks for that. I have done that, but the staff group is still getting banned going to facebook? The default policy is still set to block social networking - I cannot figure out how to take it out the default policy?

We still have a couple of 2003 servers in our domain, but do all our configuration / policies / AD stuff on our 2008 servers. Does this mean that the domain is fucntioning at 2008 level, or is it still working at 2003 level? We are wanting to implement 2 password policies.. Is this possible using the 2008 servers even though theres still 2003 DC running?

I should have probably mentioned a key bit of information as well in my original post that I neglected to mention which is entirely relevent - all the macs are leased. They are due to be returned soon and as such we were looking to just repace them with pcs. This is where the main cost factor is coming in. We have maybe 200 macbooks and about 150 imacs to go back. The equivelent price of PC hardware is a lot lot cheaper. I think the best bet could just be to compramise for the media type departments.

The way the laptops work is they have a user accuont, not a computer acocunt, with the account name the mac address, and the display name the student, and this account is what talks to the radius. Would that work? I think you could be right about not adding the staff group to the filtered bit, i remember seeing that last night. How do I enable facebook etc for staff? I cant figure out the filtering tab where you can tick and untick sections - how do you know which group you are appling it to?

Trial as in the sense demo.. Theyve given us the full commercial school guardian for 30 days to test run it. Our ISP is a commercial ISP not an educational one, so no filtering provided by them. I need 2 seperate policies for the aforementioned reasons - facebook / google images / etc for staff but not students, which is possible with smoothwall I just cant figure out how to change the levels / sections for each group. (Im in the middle of another massive project at work as well so cant really spend the hours on this I'd like, as it seems to do everything we want at a very competetive price.. )

We are trying to get rid of our MAC infrastructure (about 15% of the hardware). There are a couple of departments sticking to their guns and not relenting. We have a site license/schools agreement for everything MS, All Windows Adobe CS3 etc, so for every mac we are basically paying twice for software like Adobe. The main programs the departments have issues about is Final Cut for movie editing, Keynote for 'better templates than powerpoint'. Apart from the financial cost of duplicating software licenses, extra admin time/costs supporting 2 systems (having to maintin 2 types of images, software updates etc etc) , extra costs with hardware warranty agreements, etc, can anyone think of any other reasons we can use to get to phase out the macs. Also, apart from Adobe Premier which we dont have, is there another Movie editing package we can recommend for Win that they try?

I have created an all staff group and assigned staff from AD to that. But I dont seem to be getting any filtering now. The student group seems to work OK. I really cant understand though how the filtering groups / levels pages work. I want to have staff to have pornography/bombs etc banned (pretty much just anything illegal) but still give them access to facebook and everything else. Also another point - we give access to students on their personal laptops. We register their MAC addr with our wireless radius, and the mac address of each laptop has an account in AD. Would it work to use that account/group from AD to apply the filtering to ? Thanks in advance for your help.

Thanks for the repy tom. Ive imported all the student groups from AD, assigned them to group 5 (renamed to students). Ive assigned the allstaff group from AD to the Default Users group, and ive assigned the Domain Admins group from AD to the Network Administrators group. The diagnistics for the settings in Services - Authentication - Control all go green. What do I want in Guardian - Authentication settings ? I want to be able to reportusage on a per user basis, I only want staff to be able to log in and bypass. Whatever Ive done now, Im getting this: URL: http://www.google.com Reason: Banned site: A blanket block is in place and this site has not been explicitly allowed Category: N/A Group: Default Users So ive obvisouly set something wrong somewhere.. however even trying to bypass using my username and password from AD isnt working.

We have our main domain school.au and we have DNS mx records which point to our exchange server for that top level domain. We want to create a new A record in DNS for a subdomain.schoo.au and have MX records for that specific subdmain pointing to different mail server. How would we go about adding in more MX in the main dns entry? I Cant get my head round that part..

What we have now, is everyone goes through the firewall (set as the gateway) as a transparent proxy, but staff have the ability to 'log in' to bypass the proxy (not complete bypass but a lot less restricted) Ive managed to get smoothwall talking to AD via LDAP, ive imported the OU/groups I want it to use, but Im not sure how to set up the policies based on the groups from OU. I only really want 2 policies - staff and studentd.. Again, I apologise for not reading the manaul Im just struggling for time

Thanks for the reply... Its not that theyve gone to a newer version, rather that theyve changed the data file they were using. It is just a dual licence they have, one running on the shop Point of Sale machine, and one running in the accounts dept. So theve set the Accounts dept to use the new data file, but the shop still has transactions waiting to be written to the old data file. And they cant write to that old data file as all the financial stuff to do with that has been finalised etc.. Anyway, its out my realm of responsibility so Im not too worried, just thought Id see if anyone might have a solution.. Cheers

IVe printed off the 400+ manual and will get to it soon, so apolgoies if my questions are answered in there.

Ive just installed the trial, have set my machine to use it as the default gateway. Ive not done any configuring on it yet just using it straight out the box. Tried to go to facebook, and its banned, but when I log in to bypass it it doesnt load properly, just the text no images etc. Also, does smoothwall make you log in to bypass every single banned site, or is there a way of once logging in and authenticated, being able to browse freely.

Not sure if any of you use Quickbooks, but Ive just been called to an issue in the finance dept. that I have no idea how to fix. Im getting the quickbooks terminology wrong here, but hopefully it makes sense. We have a shop, that stores quickbooks data on it. Once a week this date is sent to the main quickbooks system. Tis 'main' quickbooks file has now been changed from 2009 to 2010. On the shop quickbooks install, we tried to change it to use the new 2010 file. However, as there is still the weeks worth of sales to be sent accross, its still looking for the 2009 file, and we cant change it until these sales are sent. Does this make sense? Any help would be much appreciated. Thanks in advance.

I cant seem to get any of the videos to play on this website. Tried in IE and in firefox and tried installing latest flash etc? All I get is a big black box. Does it happen for anyone else?