kili

Good idea, but having a 015 entry would be a normal set-up and should be included in your DHCP scope options by default

Add an entry for 015, the string value should be the domain name for your domain ( Not the forest root domain name if your part of a WAN)

Are you sure you have the correct DNS details set under "scope options" (015 DNS Domain Name) and DNS server IP's listed under 006 DNS Servers

When we upgraded to the latest client, enterprise console simply upgraded the install, no removal necessary

We had this very problem with some machines not updating. After checking event viewer on the affected computers it turned out to be a corrupt windows installer service. Re-install the windows installer service. I used this file WindowsXP-KB942288-v3-x86.exe from Microsoft to re-install the service. Search MS for that file and run it on the workstations in question. This may solve your problem. Kili

Ah I see the autorun.inf file in the root of the usb stick. We have autorun blocked so no joy in that direction

Yes your right that's how it all works. I don't see an autorun.inf file for Truecrypt traveller in the program files which is what where using but yes your also right we don't want autorun.inf available either

I did this using the hash file signature of Truecrypt portable although the exe was allowed to run I still hit the problem that the user needed admin rights to install the Truecrypt driver file. I need some way to install the driver via a script to all my workstations prior to the user inserting their USB stick with Truecrypt portable. Kili

Yes I agree this is what we do . Create a specific GPO for your students this gives you much greater control over your GPO's We have 3 one for teachers one for students and one for office admin staff.

Yeah i agree with Chris, sounds like your thermostat is

We don't use any of those file types for lessons. Movie files are not permitted on the servers as playing movies without having a streaming media server just brings the servers to a crawl. If anyone wants to play music they do so from thier USB sticks or external drives.

How do you generate a hash file for a given program type? I was under the impression a hash file can be generated for a particular program or file only. I'd be interested to know how you do this

I don't have that problem I run a script every night which deletes all the following file extensions from every folder on our data drive. *.com *.bat *.flv *.avi *.qt *.msi *.zip *.tmp *.exe *.mp3 *.mp4 *.m4p *.mpa *.wma *.temp *.acc *.cda *.mpeg *.mov *.wmv *.wma *.asx *.mpg *.asf *.wav *.m3u *.m4a *.m4v *.mpg *.bak *.xbk *.au I have a separate script which runs every 30 minutes for those smart ass teachers who think it's funny to copy stuff over every morning knowing it wont be deleted until later that day. set up a batch file to deal with these buggers

No we just work with the same type of people. Went to school, went to uni, went back to school never had to work in the private sector so have no idea what it's like in the real world so they don't worry about little things like making an effort , Hope my daughters not reading this she's a teacher lol...

As rlane states use GPO's for a redirected desktop easy to set-up and easy to update the desktop, just drop a new short cut into the redirected desktop folder and it appears instantly. Set read only so no one can save to the desktop. I introduced this after our less computer literate staff started saving huge files to the desktop and taking 20 minutes to logon whilst there desktop part of thier profiles was downloaded with gigabytes of data lol..

I'll happily give up the copyright, it's all yours

I gave up on expecting someone with a degree to be able to login to a helpdesk and place a call, all the lazy have to do now is send an email to helpdesk@maildomainname and they still send students to the door. I send them back with ask your teacher to place a support request. As for FAQ's I don't want to be any more negative than I have been but frankly they cant be bothered to read them and place a support request asking " How do I do this in word" I used to point them to our FAQ but there so thick/lazy they wont even help themselves. so now I just tell them to go to help in the application and let them get on with it. How many products are we expected to be an expert in?

I wouldn't know where to start creating an MSI.

And no un-installer. I can deploy this over the network but I cant un-install it from 400 computers due to the fact there's no automated un-installer

The answer is here Go to post number 19. I implemented this solution and it works great also blocks cd-rom drives from running exe's and any other file types if you wish. Kili

What your implying is that all users of a security group have access to a common group folder which is not the case for our setup. All users have a folder within their home folder so permissions are set on a single folder, there are no additional security groups needed or required as the destination is their home folder not the creation of additional folders and security groups. Go read my original post

Lol... we only have a few staff with laptops one head of dept went out and bought one without consulting anyone and then bought it to me for anti virus install. I installed the anti virus then set him up as an ordinary user and used local group policy to lock the windows 7 machine down. He's really pissed he thought he was getting a free laptop for him and his kids to play with but he cant install squat now. Lock them laptops up so tight they wont bother asking for one again.

Yes that may work for groups. Where not assigning access to groups but individuals.

No it's not the same, using a security group will not work. I don't want to assign group access to an individuals folder hence the reason for assigning permissions to the individuals folder and not a group.

Where would you find this? I cant see it under GPO editor on my windows 2003 server cheers Kili