purkleturkle

Hi Andy Please can you elaborate on the "Flash Player Issue" I am getting problems with Metro running under non admin accounts i.e. staff and students running on ie8 and Flash 11.3.300.257 Also has anyone got Listos working on any browser other than IE6?

Google SafeSearch and SSL Search for Schools Has anyone had any experience of blocking https / 443 / SSL / Google either using ISA / TMG 2010 or SWGFL? I just phoned SWGFL and they said it wasn't something they could do though the "Web Access Policy". When I try and add a rule in TMG using the below format it does not work (TMG states URLs included in this set (applicable for HTTP traffic only)) http://www.google.co.uk:443

Hi Iain is it possible to get a copy of your ISAPI filer to enforce strict safe search on ISA?

%USERPROFILE%\Local Settings\temp worked a treat thanks meastaugh1

Hi Pete Set 7Zip in file associations - still opens 7Zip FM. I don't understand why!? .zip is definitely defined in 'designated file types' meastaugh1 - Hi thanks yes I saw this posted elsewhere and watched it happening from my client. I was a bit concerned it would break some programs from working?

Sorry bodminman I did not read your question properly - you don't have the client to run the command on. Doh

I find this dulo.bat useful as well for curently logged on users... you just need PSTools installed on your workstation and you can pipe the bat > to a log file @echo off setlocal for /f "Tokens=1" %%c in ('net view /domain:"%USERDOMAIN%"^|Findstr /L /C:"\\"') do ( for /f "Tokens=*" %%u in ('PsLoggedOn -L %%c^|find /i "%USERDOMAIN%\"') do ( call :report %%c "%%u" ) ) endlocal goto :EOF :report set work=%1 set comp=%work:~2% set user=%2 set user=%user:"=% call set user=%%user:*%USERDOMAIN%\=%% @echo %comp% %user% Source = http://www.windowsitpro.com/article/domains2/jsi-tip-9400-which-domain-users-are-currently-logged-onto-the-consoles-of-domain-computers-

This any good? Const HKEY_LOCAL_MACHINE = &H80000002 strComputer = "." Set objRegistry = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon" strValueName = "DefaultUserName" objRegistry.GetStringValue HKEY_LOCAL_MACHINE, strKeyPath, strValueName, strValue Wscript.Echo strValue Source = Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer? - Hey, Scripting Guy! Blog - Site Home - TechNet Blogs

Brilliant I have 7zip installed on a the clients so I should just ne able to change the association in the registry. I will try and let you know thanks Pete

Yes it's defined in 'designated file types' but the zip can still be opened in windows explorer?

Got it working for .exe using the below. Just cant get it working for zips still able to open them even if they are defined. I want to stop students playing games from within zip files.. Any ideas? \\server\store\10Intake\%username%\home\*.exe \\server\store\10Intake\%username%\home\*\*.exe \\server\store\10Intake\%username%\home\*\*\*.exe or

Hi Birchy File screening management started in Server 2003 R2 so thats a no go. I was just looking at USBDLM for the blocking exes etc on USB drives but I really want to stop them from running from home folders also. Probably is something to do with the homepath but other than the drive mapping and that variable I can't think of anything else to use

I am having a problem with Software Restriction Policies not applying. I want to stop .exe, .zip running from students mapped home folder. (H:) I have tried adding enviroment varriables and drive letter into "Additonal Rules" with no success. I have enabled SRS Logging on a client and whilst logged in as a student and I run an exe or zip from the home folder it just runs with no restriction and is not logged either!? Anyone have any ideas. My settings are below... User Configuration > Windows Settings > Security Settings > Software Restriction Policies > Additional Rules %homepath%\*.exe %homepath%\*.zip H:\*.exe H:\*.zip %HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\Shell Folders\Personal%* User Configuration > Windows Settings > Security Settings > Software Restriction Policies > Designated File Types zip exe User Configuration > Windows Settings > Security Settings > Software Restriction Policies > Secuirty Levels Unrestricted - default