kili

Synchtoy from Microsoft. Use it to schedule backups or run manually it has sync functions I use it for my home backup. One of the options allows for folders or files deleted on the source folder to be auto deleted on the destination ( backup) when synchtoy is run. check it out here

I'd be very interested to know how you do this? Can you advise please? Kili

If a user is plugging a device into a networked computer it's visible on your network and is subject to network policies. We use Sophos for our antiviral software and I get daily automated emails from sophos enterprise console telling me it has deleted an infected file from drive Q ( All our USB devices use drive Q when plugged in) if that infection is in a word document that's their problem we are protecting our network for the 900 other users.

The only way you would have a duplicate SID is if the machine was cloned. If so you need a sid changer Google is your friend. Search for "Sid Changer"

Chill out man just trying to lighten your day with a bit of humour. If it offended you then I apologise Kili

A release and renew will not always cure an IP conflict, if the other machine is switched off at the time, But if your using a DHCP server IP probably wont be the problem, sorry just throwing ideas in the pot

IP CONFLICT?

Top of the range

yse forest.local is an example Imaginary wide area network. Based on a windows 2003 wan Education dept wan is called eduwan.local You’re a school within that wan. You school is called school1 so you’re a subsite of the forest root eduwan.local so your primary dns suffix would be \\ school1.eduwan.local ( The .local suffix indicates that you are not an Internet entity i.e .com) A way of setting this up would be to use DFS for your shares. Do you use/know of DFS as this would be a way forward an example drive mapping to a users home folder \\domainname.forestroot.local\DFS\Home Folders\Students\2006\06BloggsJ I’m afraid to give you an explanation of DFS would take to long but if you have the time look into Distributed File System which will allow you to organise multiple shared folders or targets into a logical name space of roots and links

Just create a batch file with the md command and run that in the folder you want to create your directories in. Then run calcs to assign the permissions on the folders. kili

Yes just do an ip config and you will see your "primary DNS suffix" just use that i.e. \\your domain.forestroot.local\sharename kili

Nice buy. I had a VW westphalia 2.0 Automatic when I was 20 years of age ( Now 53) lovely machine, only problem I ever had was a split fuel line between the twin carbs which leaked onto the hot manifold just as we entered Wales ( Welcome to Wales) we caught fire, wasn't to bad just the air filter box melted. If you've got the twin carb version check the fuel lines lol.. Kili

Built in Microsoft AD tool DSADD. Works perfectly once you have an excel template set-up then it's just copy and paste to a dos prompt

That wont be any good as it allows accounts to be enabled, a function that must not be available - password changes only

My point. I'm not making a point merly wishing you good luck with your endevaours.

Good luck with that

You can use delegation so they only have access to the OU you've given them access to manage cant you?

You can install the Microsoft server 2003 AD tools on a workstation. Then make the librarian a member of the account operators group in AD and she can do all the password changes she wants with out doing any damage in AD and no special tools needed.

Roaming profiles for staff with redirected desktop to \\server\Teachers Desktop$ read only desktop stops them saving to it. I place shortcuts to resources that they need to get to on the desktop "because it's a pain having to open explore". Students no profiles mandatory or otherwise just a locally created profile when they logon.

I can guarantee your teachers will just pull the USB sticks out without dismounting the file first lol....

Truecrypt? Uses password access to access a folder, partition or volume

It sounds like these USB sticks have encryption software on them that requires a driver install, certain USB sticks with particular software have this issue when using without admin privileges. Advise your users to buy sticks with U3 software which has password protection .If a stick has encryption software on it this seems to be when it requires admin privileges to install a driver of some sort. I would look in this direction to resolve the issue. We had the same issue with a user who had bought a stick with encryption software which was to complicated for them to use and required local admin privileges to install so I gave her one that was U3 and password protected only which worked fine under her logon. Not as secure as encryption but better than nothing. Hope this helps Kili

Make sure none of your teaching staff are members of any admin groups or have full control permissions over the staff shared area folders.

This is the script I use for deleting from Teachers Home folders and profiles. Place the script on the drive you want to run it from in my case it's drive D REM -------- If you make changes to this file please leave your name and date of editing --- REM ------ Change focus to drive D: data\home folders\teaching staff -------- REM cd /d d:\"Data\home folders\teaching staff" del *.flv *.avi *.qt *.msi *.zip *.tmp *.exe *.mp3 *.mp4 *.m4p *.wma *.temp *.acc *.cda *.mpeg *.mov *.wmv *.wma *.asx *.mpg *.asf *.wav *.m3u *.m4a *.mpg *.bak *.xbk /s REM ------ Change focus to drive D: data\Shared Data -------- REM REM Only enable script below if schedtask account has access and you want to delete these file types cd /d d:\"Data\Shared Data" del *.flv *.avi *.qt *.msi *.zip *.tmp *.exe *.mp3 *.mp4 *.m4p *.wma *.temp *.acc *.cda *.mpeg *.mov *.wmv *.wma *.asx *.mpg *.asf *.wav *.m3u *.m4a *.mpg *.bak *.xbk /s REM ------ Change focus to drive D: data\profiles\teaching staff to reduce profile size on logon-------- REM------- REM------- xml files added for deletion from profiles as long xml file names causing profiles to fail loading. REM------- cd /d d:\"Data\Profiles\teaching staff" del *.flv *.avi *.qt *.msi *.zip *.tmp *.exe *.mp3 *.mp4 *.m4p *.wma *.temp *.acc *.cda *.mpeg *.mov *.wmv *.wma *.asx *.mpg *.asf *.wav *.m3u *.m4a *.mpg *.bak *.xbk *.xml /s REM ------ Return focus to drive d: and exit ------ cd /d d:\ exit This script is for deleting from student folders. I do not allow students to have roaming profiles as this simplifies management of students. Place the script on the drive you want to run it from in my case it's drive D REM ---------- CHANGE FOCUS TO DRIVE D: AND MOVE TO STUDENTS HOME FOLDERS AND DELETE ILLEGAL FILES cd /d d:\"data\home folders\students" del *.flv *.3gp *.tmp *.exe *.mp3 *.stk *.piv *.ram *.mid *.mp4 *.tmp *.js *.acc *.zip *.lnk *.cda *.mov *.mpeg *.asx *.asf *.wav *.wma *.wmv *.m3u *.m4a *.mpg *.bak *.swf *.url /s > delhunt.log REM -------------RETURN TO D: AND EXIT cd /d d:\ exit Obviously the paths will be different for your server. make sure the paths are correct and ensure you end the script with the focus back on to the drive you started from and use the exit command to close the script as you don't want the script to jump drives and cause havoc on the system drive. Create a dedicated account ( something like schedtask) for running the script and give it the appropriate permissions and then assign the account to have full control over the folders you want it to access . Dont use your main domain or server administrator account as the password should be changed on a regular basis and when you change it if you've used the administrator account for your script the job will fail because it has the wrong password set in the scheduled task properties It's not the best batch filing you'll see but it works for me. Hope this is of some help Kili