greenfieldsupport

On an interesting note, has anyone had a student boot linux from a usb pen, complete with jack the ripper, wireshark and a whole host of hack tools?? not to mention proxy tunnlers/firewall bypass programs etc

one day the children will learn they can boot linux from it... and then were all in trouble

Sorted. ive gone for the other method. The RSOP was fine and there isnt a problem with the autoruns as the other cameras work, its just because it pretends to be a flash drive and the students arnt allowed drives lettered D: - H: So i had two solutions. 1: Plug in 9 random usb pens first, so when they plug in the camera they get an I: Drive or 2: (which so happens to be the one i went for) added a line in the loginscript. IF EXSIST D:\DCIM SUBST X: D:\DCIM Theyre told to plug the camera in before they log on . sorted. Thanks all for your sugestions tho. Ranger wernt much help at all :\.

Hmmm... Never!!1!1 I think i'll run a script which mounts E:\DCIM to another drive, using subst. That way they'll only be able to use memory sticks if they make a DCIM folder... let just not tell them eh?

Yeah Ive looked for that mode and it only has disk mode. USB Mass Storage. Any other idea?? im considering throwing them out the window...

Why not Disk > Disk > Offline storage at another school backed up via your internet connection? especially if its small backups like that .

Anyone else got a solution?? Thanks

why would you choose to use IMAP as your source of authentication?

Lol. Yes, Unfortioulatly tahts not an option, otherwise we would gladly donate them to willitblend.com

We see it as its the same as taking a laptop home, Most child data is held in SIMS at our school, and as well as authenticating on the VPN they have to authenticated against sims aswell with a differnt password. We state that teachers are NOT allowed to click the "remember my password and username" on the VPN connection, also only members of staff that use the vpn are ticked to be allowed to log in remotely, furthermore they have be told that if they lose their laptop, or it is stolen, they must contact Me on my mobile so i can lock their accounts out. Make sure as you can access this on the internet that you protect from dictionary attacks by setting your policys so they lockout anyone whos attempted to guess 5 passwords in a 30 second period + 15 password in any 3 hour period. or something similar. we use something more strict here. also we check the log file once a week to see if there is any "strange" activity. Its a pain but it is worth doing. Also Never enable the administrator account to log on remotely as this is the first thing people will try. As the link is encrypted we dont worry too much about sniffers, If the computers support it we use IPSEC policys aswell. Hope this helps. -Tony

We have bought some new camera's, now as we dont allow usb sticks here, the students dont have access to anything but defined drives. The cannon cameras that we own are great, when the students plug them in, autorun pops up saying "microsoft scanner and camera wizard" and asks you to transfer the photo's to your work area (Great!!) With these new cameras that isnt the case. my question is, how does one create a shortcut which tells microsoft scanner and camera wizard to use the folder d:\dcim as its source? Ive made a shortcut just to the wizard but it just says "no scanners and cameras detected" however when i connect the camera as an admin, it lets me run the scanner and camera wizard through autorun saying the device is "[D:]" Ive searched for switches which can be put on wiaacmgr but i havent found any which work . Any ideas? Thanks -Tony

Lol, have scares, want to trade pics ? Unfortionatly people used to "book" me through my parents, and i didnt have much choice over this as it was "shes a friend of a friend so you have to fix it or you'll have to move out :|" ... it got to the point where i would be fixing home pc's 4 or 5 nights a week, and as you all know sometimes, when you have to ressurect a port infested windows 98 machine, or worse, NT 4.0. It can take a good few hours. I complained enough to reduce it to about 1 night a week but then managed to move out ... Not had a job for a while now

You can see from the capture its not a broadcast storm or a loopback. plus loopbacks are easy to spot as your activity lights will flash like mad with no pause If i was you Id replace the suspect with a known good switch and test for a few days. If you still have problems, dont be lazy and REMOVE the cables form the ports, disabling them may still allow an electronic defect to disrupt your network (like when i had that bad network card) to test just put ping "Ip" -t and leave it running, at the end of the day press ctrl + C and it will give you the summary. look for amount of lossed packets, even a 2% loss is bad enough, anything higher is terrible!

Seems fine, abit of a noisey environment. could you capture a couple more minutes, and when you do could you type in your terminal ping 'problem switch ip address' -t -l 1200 192.168.0.1 is setup as a DHCP server, you should disable that if its not ment to be. You can see this as when your clients ask if their ip address is current and okay, it replys saying that the lease has expired / didnt exsist / is wrong (NAK) It looks like your clients arnt paying any attention to its NAK's as they dont then ask for a new IP address. But you should still disable DHCP on it unless you have a reason to leave it on.

Okay quick breif update, i'll look in more depth but you dont have a problem like mine, with the network card. The very little black is due to your card attempting to do checksum offloading, where the packet is captured before it recieves its correct checksum and so shows up invalid. You dont have to worry about this at all..

Oh great, people are stopping making drivers for XP too now!?? thats an outrage!. Havent they started reprinting XP discs because they were shocked at how many people ordered their shiny new laptop with XP and not vista? .

ive seen this horribleness twice here in greenfield. The first time was an overheating 3com, try spacing your switches out abit more for cool-ness. We found we were getting problems mainly around 11am - 2pm, where we had the most traffic and generally the building / day was at its hottest. The second time, which was almost impossible to detect, was an intel pro 1000 card on the server died. To the point where it was working, but not. The best way to check would be to use wireshark, if u got alot of black-ness (i.e. packets half formed or with invalid checksums) Its prollys the last problem. Now what makes it hard to detect is that even when the server was powered off, or the cable removed, unless the switches were restarted the problem wouldnt go away!! and when the switches were restarted it would take a couple hours or even days before it would re-appear!! so consider isolating the problem area, then turn off all the devices, and unplug them, then put just those two switches back on again with your laptop to monitor and perhaps one client at a time. also remember that you may find that the problems have similar symptoms, if you find this fixes your problem it could be a bad NIC or it could be the switches are running alot cooler with the reduced load! Sounds to me that you Definatly need to get a packet sniffer though, so you can see whats happening!. Good luck!!!

Your not alone, our support contract has become so useless lately that we've put in a system of 4 swap-out pc's to be used while the pc's are away for to be repaired for weeks, just for a PSU fitted or a motherboard changed, a job which could be done here in minutes. When it comes to laptops, we do tend to stick to the warrentys though, however most we find break after the warrenty has run out. We have alot of machines that we have built here also.

Sounds to me like a "nice" way of cutting your pay, instead of taking it away from you, they freeze your pay until the rest of the world catches up...

BSF Is Building schools for the future. Its a government idea that will put alot of us out of a job http://www.bsf.gov.uk/

Ramesys charge you for the media, genrally, I find, if you havent asked for it they might not have added it to your order.

essh, meanie! I thought about that, i was going to remove the connection for the two virtual connections, but what about the WAN/PPP one?

most schools end up going through a forced proxy, to allow filtering and logging etc. this means basically that your school most likely shares an external IP address with other schools, I imagine they wouldnt want to give all schools in your area access because your paying, so tell them you require a username / password soultion like butuz says.

Ive just spent ages chasing out an entry for our new file server, of the ip address before it became static, i.e. the on DHCP gave it for all of 1 min. Now Ive erased it from DNS, and its resolving okay now... before it was resolving on round robin. e.g. 50 % of the time the clients would recieve the correct, static ip, of which the server was listening to, 50% of the time they recieved the incorrect DHCP ip, which the server wasnt listening too. Ive removed the entry in DHCP also and thats worked... NOW i thought id better check on the other servers now ive got it... and when i ask to resolve our main server i recieve this: Addresses: 192.168.33.1, 192.168.91.1, 10.0.5.66, 10.0.0.63 10.0.0.4 now the problem we have here is 2 network cards are VMwear ones... the 192*'s one is WAN (PPP/SLIP) interface (10.0.5.66) ((DHCP)) and the two static, 10.0.0.63 (the correct one) and 10.0.0.4 (used for pinhole forward of PPTP, but will allow the clients to talk to it on this port) My question is, does this mean that 3/5 times, the client will recieve the wrong ip address and not work? or do the clients ignore the 192 ... ip addresses because they arnt on the correct subnet, or should i disable round robin, and tell it to always resolve as 10.0.0.63?? and if i do will that disable roundrobin for all A records, or just this server? Whats your views?? thanks

The Ip its resolving is correct, and the server is up. Its not using your proxy server and i think thats the problem. Try setting the proxy variable: type: sudo export http_proxy="http://proxy.example.com:8080" where proxy.example.com is your proxy's FQDN, or IP address Then... sudo wget http://download.moodle.org/stable18/moodle-latest-18.tgz –proxy=on Good luck!