ihaveaproblem

Thanks, will take a look. To be honest I've got no idea how much work she will have to backup and how much storage space she would need. She is doing law so I guess most of it will be word documents, so shouldn’t need a great deal of space.

My sister is soon to leave for Uni. I've advised her that she should create backups of any work she saves on her laptop. I was thinking she could use an external hard drive to back it up, but was also wondering if there’s any good online backup solutions (Preferably free or not to expensive) for her to back work up. Thanks EDIT I was leaving in a dream world when I said free^^ As cheap as possible though.

Anyone know where this policy is? I've searched and can’t find it anywhere and it's starting to bug me because some computers don’t get these options at the login screen because they have different gpos applied, however I can’t even find an option set on these policy’s that hides the buttons.

Oh that. Hmm well it's set as not configured, but it may have been set on the old gpo's before I recreated them. I'll try setting it to disabled and see how it goes. Would this effect the restart button as well?

Where is this policy? That’s exactly what is happening ( sometimes it does the same if I click restart ) instead of shutting down/restarting the machine it logs off and presents you with the ctrl -alt - del login screen. Can’t seem to find this policy you mention that changes the shutdown button in the start-menu to log you off instead.

shutdownertron does look good and easy to manage, however there seems to be quite a few features missing and also the current version doesn’t fully support windows 7. Might use when the 1.5 version is released. I'm still hoping for an idle X amount time shutdown method, but from all my searching I haven’t found much if anything on how to do it. I've seen people mention that they use a script that checks to see if a user is logged on, then if yes don’t shutdown and retry in X minutes, if no shutdown, and then force shutdown of all computers that are still logged on at X time. Anyone know where this script lives or willing to share with me:)

This would work...but I was hoping to have it setup so the computer shuts down if idle for X amount of minutes. I guess getting a setup like that isn’t as simple as I thought? The way you mentioned. Is there an easy way to pull all the computer names out of AD from a specific OU? Just makes it easier to manage.

Those group policy options only control stuff like, If close lid = shutdown, sleep etc. If press power button = shutdown, sleep etc. In my case (and in jamesbrown's case I thought) we are pressing the shutdown button in the start-menu and instead of shutting down, it logs you off I’ve not seen a policy that does this (And why would there be since there is a log off button to log you off^^) I’ve still got this problem and still not found a fix

whats this website? It may work for what I need. How do you handle shutting down of the computers?

Ok, it doesn’t work. For testing I shortened the time down to 2 minutes, so after two minutes of being idle I was supposed to be prompted with the shutdown message, but it never prompted me or shutdown the computer. If I force the task it runs fine (Apart from I don’t get an option to abort the shutdown ) If stuff is running in the background will this prevent the computer being seen as idle? On my test I had IE open only and I didn’t touch the computer and thought that would be classed as idle. Might need to find another way of doing this=]

My plan Push out a scheduled task using GPP that will do the following on Win 7 clients Action = C:\windows\system32\Shutdown -s -f -t 60 -c "Powering off machine. Please press cancel now to abort." Conditions = Start the task only if the computer is idle for 25minutes Wait for idle for 5 minutes This seems far too easy ( I guess I’ve had one of those weeks where nothing seems easy ) Am I right in thinking this scheduled task will only start the shutdown process if the computer has been idle for 30 minutes? And then the user will be prompted with my message and have the option to abort the shutdown. Also if the computer was idle for say 20 minutes and then a user started using the computer for a lesson, but then logged off at the end the condition rule would run again? Of course the easiest way is to test it It's Friday through! And I’m about to go out for a meal. Please tell me my idea is this easy to implement =] (Also feel free to say how you handle shutting down the school computers) Thanks and have a lovely weekend

Not sure best codec. I use VLC Media player and Windows Media Player and between them they've always played everything i've thrown at them.

True. I made these images just before the summer started though and I most certainly didn’t add this group as a local admin. Someone else could of done It I suppose (Not sure why they would do that) Where would I look in the default profile to see if it’s coming from that? I guess the test to see if it's coming from the image is to check the administrator’s group members before the script runs that joins the computers to the domain. Could it possibly be the sysprep file I created adding the group? I'll give that a check. Would like to know what's causing this, because it's a bit of a concern having members become administrators and not even know why/what’s causing it. To prevent it until I find the cause I can at least set a policy or script to remove these from the admin group.

Nope cant see it set there. It happens on all computers so must be something from the network.

Nope. Already done. Plus I re-made all the group policy’s this week that are being applied to this computer/user and I’ve 100% not set it to make this group as a local admin. The only other policy that’s being applied is the default domain policy (Only one I didn’t remake and nothing is set there to do this either)

Ok..I cant find anything. Hope i'm not being dumb but this is really driving me crazy. I know this = The security group is somehow becoming a member of the local admin group 1) This group isnt a member of administrators on the server 2) No group policy is causing this 3) No logon script is causing this I'm really out of ideas of what else can make this group a member of admins

What this makes no sence. Honestly I checked the local admin group before and none were a member. I just checked now and this group thats affected is !! Now to work out whats causing this -.-

Had a look through all the groups and the only group is power users is a member of domain users ( Which I dont beleive is needed ) all the rest are fine. Group policy should be fine because I created all new from scratch this week. The user and computers are only getting the policys I made so it cant be that ( This problem occured on the old gpo's as well ) I'll check the event logs. Not really sure what else do

Thanks for the reply Ben. Tested what you suggested 1) Made new account and did not add to the security group mentioned in first post. 2) Logged on client as this new user to see if it had admin rights ( It Didn’t) 3) Logged off and added the new user to the affected security group 4) Logged on client as this new user to see if it had admin rights (It Didn’t) 5) Restarted client 6) Logged on client as this new user to see if had admin rights ( It did ) Security groups shouldn’t require a restart to take effect? Or should they? Maybe it's something set on the computers in AD. I'll check through all the groups again incise I missed something and one is a member of administrators.

My setup is like this for Win7 and W2k8 I set at 'All Users Level' My AD OU structure goes like this Managed users >>> Students >>>Staff I have a gpo called all users set on managed users so that way all staff and kids get the policy. The policy I set is under User Config -- Policies -- admin templates -- desktop -- desktop Enable the policy called 'Desktop Wallpaper' and enter the location where the wallpaper is stored ( I store it on the C:drive of the computers) You can then either place the wallpaper whilst creating your image. Or if like me and it's not on your image you can push it out using GPP If you need to push it out with GPP set the policy at 'Managed Computers' so it applies to all computers then use Computer config -- preferences -- windows settings - files Add new file Action = replace Source file = \\domain\NETLOGON\Desktop Wallpaper\wallpaper.jpg ( or where ever you keep it ) Destination = C:\windows\wallpaper.jpg On the common tab I tick 'Apply one and do no reapply' I set the file copy as a computer policy to try and keep login times fast. Hope that helps =] Adjust to your setup of course!

As title really. Domain users are becoming an admin even though they are not a member of the administrator’s security group. How??? I've narrowed it down to a security group (If I add a user to this security group they become an admin, if remove they become non admin) This security group is a member of other security groups, however I’ve checked through all the groups and NOT one of them is a member of administrators, domain admins etc. etc. I've checked the local security group on the computer and they are not set as an admin there. I've checked gpo's (and this week made new gpo's for Windows7) and there is nothing in them to make this security group become an administrator. What else could it be?

I set the folder redirection on the server like you would with any type of redirection, documents, desktop, start menu etc. The document redirection adds the network home drive to the libraries. I'm confused why I see two my documents and wondering if I set something up wrong

I'm creating new because upgradeded to 2008r2 from 2003. The policys that were made on 2003 work but seem a bit unreliable so if you have the time it might be worth doing

Il try restricting access to the C: drive. I have that set up for students but not staff who get this problem. Cant really think of a reason why staff would need to be able to access the C: Drive, so it's worth a shot. EDIT Hide/Restricting the C: Drive sort of works. The user still gets the two My documents folder ( The redirected and local one ) but they can no longer access the local one. If this is common behaviour with Win7 documents redirection I'm happy to leave it like that. I just want to make sure this is how it's supposed to appear because to me it seems a bit strange to have two my documents folders and I’m thinking this could cause confusion for staff. Is it possible to set a group policy that completely removes the local documents?

Oh! One is the user network home directory drive thats set up for my documents redirection and the other is the local profile my documents. With document redirection on Windows 7 is this suppose to happen then or have I set something up incorrectly? Maybe you can remove the local documents one so it only shows the redirected documents?