ihaveaproblem

Here's the script I use as a login script to pin start-menu Item. Adjust as need. As for permissions on redirected folder. Set the NTFS permissions and read access. That's how mine are set and stops anyone from deleting shortcuts. Dim ObjFolder, ObjFolderItem, colVerbs, objverb, objshell Set objShell = CreateObject("Shell.Application") Set objFolder = objShell.Namespace("C:\Program Files\Internet Explorer") Set objFolderItem = objFolder.ParseName("iexplore.exe") Set colVerbs = objFolderItem.Verbs For Each objVerb in colVerbs If Replace(objVerb.name, "&", "") = "Pin to Start Menu" Then objVerb.DoIt Next Set objShell = CreateObject("Shell.Application") Set objFolder = objShell.Namespace("C:\Program Files\Microsoft Office\Office14") Set objFolderItem = objFolder.ParseName("winword.exe") Set colVerbs = objFolderItem.Verbs For Each objVerb in colVerbs If Replace(objVerb.name, "&", "") = "Pin to Start Menu" Then objVerb.DoIt Next WScript.Quit

I had the same problem. Fix for me was, 1) Uninstall Sims Disover. 2) Uninstall Sims.net by deleteing the contents in Program Files 3) Restart 4) Install Sims.Net logged in as domain admin 5) Test Exams Module ( Was working now ) 6) Install Sims Discover.

Any reason for wanting to use a script ? Be much easier and cleaner if you use the group policy windows update settings.

Not read all the post yet( And no nothing much about linux as well ) However could you not do the simple, and possibly easiest thing and change the Home Path in AD to \\lfs1\homes\%username% ?

Remember it's all good getting others to send you GPO's, but I strongly recommend you only use it for guidance. You will learn so much more by going through all the settings your self, and this way you will know exactly how your clients are being locked down and what setting effects what for when you need to change it. It can take a little bit of time and be a bit frustrating testing settings to see if they achieve what you want, but it's defiantly worth it in my opinion.

Bulk AD Users Good tool for bulk editing AD users.

because UAC is turned on for a security measure to prevent unwanted applications running without your permission. At least I think that's why. Personally I turn off UAC every where. Hate the thing

eh right well those ports should be open. I've set the proxy on the server and in wsus console to use port 801 and then in smoothwall the server is listed as a web filter exception, so as far as I'm aware it is unfiltered.

What ports need to be open on your firewall for wsus to work? Current my wsus server syncs fine but receives a message saying and I beleive it's the firewall blocking. "the files for this update have not yet been downloaded. the update can be approved but will not be available to computers until the download is complete" We use smoothwall for firewall/filtering.

Random icons like print management software icon, gfx card menu icons, but still keep visable icons I want users to see such as volume, AV, Impero Where in the registry are system tray icons stored?

Anyone know of a script to hide selected system tray items? I dont want to hide all items, only selected ones. I would do it through GP, but GP only offers hide all or show all

On smoothwall you can also publish reports to a web portal that staff login to. I think this is a nice feature because all staff ( or the staff you give perms to access the portal ) can easily view reports without bugging IT staff.

Emerge here, it works, but has less features than the full blown sims. Still a waste of money in my opinion.

I use Smooth wall advanced firewall license. I like it because it was relatively easy to setup. Has lots of good features along side the filtering, such as VPN which we now used and replaced our terminal servers. Real time logging is very useful and lots and lots of info can be generated from the reports The support is also great. Fast at responding and good knowledge

Yeah I understand it wouldnt know where to respond from, I just wasn't sure if there was an option in DNS for it to search all zones on the dns server for the host, but I guess not then.

Thanks. Did think of that, but the box isn't windows So there's nothing that can be configured on the DNS server it self to make this work?

In DNS if you have multiple zones, e.g. - "Domain.local" "Domain.com" etc How do you configure DNS so hosts from each zone can ping hosts from a different zone without entering the FQDN? I understand you can add multiple DNS suffix's in DHCP option, but this isn't an option for me. Thanks

We did it around half a year back now for our live@edu setup. Broke nothing

You should be able to achieve all this through Group Policy Preferences.

It's you. He does fine

You could try enabling the policy called "Always wait for the network at computer startup and logon" You will find it in Computer Policy -- Admin Templates -- System -- Logon What make/model are the laptops and wireless card?

safecom_tech_note_migration_from_safecom_g2_to_safecom_g3_20178.pdf safecom_g3_administrators_manual_60603.pdf safecom_tech_note_migrate_from_msde_to_sql_server_2008_r2_express_20197.pdf safecom_reports_administrators_manual_60609.pdf Here you go

I've only started fresh when installing safecom and using full blown sql. I've got all the documentation guides from safecom if you need them? But I guess you already have these. What version of safecom by the way?

Depends what the required uses of the device would be. Personal leased device ? School device ? Basic web browsing for research and document creation ? Video editing ? Graphics design ? Really depends on the requirements. I'd wait and test windows 8 tablets first personally if you have that luxuary

To generate a catolge file you have to use SIM on the same platform. E.g if your image is x86 you need to install SIM on a 32 bit machine. From here you open the software, select your .wim file and then click generate catatolg. It can take some time. Now all you need to do is place the catolog file in the same directory as you .win and now you can edit the xml