Duke5A

When I read the thread title group policy to make teachers bring in laptops I thought it would be awesome to be able to use GPO to control user's behavior. Man, the custom templates I would write for some people... Anyways, how are your updates pushed out? I recently started using Local Update Publisher in conjunction with WSUS to push things like Flash, Java, Chrome, etc. It has been working great, but a lot of my users will take their laptops home over extended breaks and by the time they come back the machine is horribly out of date. I was thinking about making my WSUS server public facing, or at least forwarding the ports needed to make WSUS work. We own the outside domain name that matches our internal domain, so I could call out to WSUS in GPO by the full name (http://wsus.ourdomain.com) and it would resolve correctly on both the outside and inside. I haven't gotten to trying this yet, but it looks doable.

Tone generators are nice, but the tone can bleed into adjacent ports. Do you have Cisco switches? If so, I would gut the entire cabinet and patch your panels back in to correspond to the same numbered port (panel port 13 goes to switch port 13). Then take a tour with a small laptop and use CDPR on all the ports in the rooms. Cisco Discovery Protocol is enabled by default on all Cisco switching hardware. Every 60 seconds a packet is sent out all the ports containing the switch name, management IP and port number. You can even turn down the default broadcast interval to every 5 seconds or so while your mapping the ports.

Dan's Guardian isn't designed to be used as a proxy, but work in conjunction with one. Your AD integration would be setup in Squid.

I've observed this as well; 2012R2 will do the same thing. If you try and deploy images at a level under that of an 8.1/2012R2 boot it'll error out in the specialization phase.

You should NEVER give console access to your domain controllers for something such as this. Your delegated users should be using RSAT on a separate workstation. If it is a problem that these users don't have an assigned workstation, then setup an intermediary. I have a couple users that had this exact problem so I setup a virtual machine loaded with RSAT, and created a user that could only logon to that particular windows install. The delegated user was only given the exact access it needed to a limited number of organizational units.

I'm seeing it here as well. What is odd is IE wasn't upgraded as the 10 update I'm seeing is on machines that already had it.

Sorry, I've been away. The update CD is an ISO you download from HP. The individual firmware downloads I linked to are added to the CD and the utility will automatically load them. You do have to take the server down for about a half hour though.

Just an update. The flicker setting was buried under exposure control on the Axis cameras. By default it is set to auto, so I flipped it to 60Hz and it solved the issue on most of the cameras. Thanks again guys.

Alright, I went through it and here is the load out: Controller: P410i 5.12 Drive 1I:1:1: MM0500FBFVQ 500 GB HPD1 - Original Drive 1I:1:2: MM0500FBFVQ 500 GB HPD1 - Original Drive 1I:1:3: MM0500FBFVQ 500 GB HPD8 - Original Drive 1I:1:4: MM0500FAMYT 500 GB HPD5 - Original Drive 1I:1:5: MM0500FBFVQ 500 GB HPD1 - Original The drives are a bit out of date and the controller is really out of date; according to ACU the drives are all wearing the same firmware they came loaded with from the factory. The current firmware links are below. Controller: P200i v9.30 5 May 2011 http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdHome/?sp4ts.oid=3902575&spf_p.tpst=swdMain&spf_p.prp_swdMain=wsrp-navigationalState%3DswEnvOID%253D4064%257CswLang%253D%257Caction%253DlistDriver&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken MM0500FBFVQ Drive: HPD8 © 18 Feb 2014 Drivers, Software & Firmware for HP SAS Hard Drives - HP Support Center MM0500FAMYT Drive: HPD6 © 18 Feb 2014 Drivers, Software & Firmware for HP SAS Hard Drives - HP Support Center The controller firmware needs a valid support contract in order to be downloaded. If you don't have one then this can still be found on Google or I might even be able to download it - I think I may have an HP box with that controller still covered under a Care Pack. BTW - the firmware is designed to be loaded using the HP Firmware Maintenance CD. You can download any version and place the updated firmware onto it. Let me know if you need any help.

The drives with the bugged firmware will pass tests right up until they fail outright. Reading your latest posts I'm pretty confident this is your issue. Run the ACU, generate a diagnostics report, and attach it to this thread. The report will contain the drive models and firmware revision they're on. This will tell me for sure and I can help you sort out of the mess that is the HP website. If they're the same model drives I may even have the firmware laying around. I think HP went to a model where they will only let you download firmware updates if you have a valid support contract now.

What model HP server and what kind of drives? I've got four DL180G5 servers in the datacenter used for CCTV recording and had nothing but trouble with them last year munching drives. Symptoms were similar to what your describing with the logs being clear and the filesystem randomly locking up. Given enough time individual drives would fail. It turns out a number of 750GB and 1TB drives had a faulty firmware on them. Check the models of each drive and get the latest firmware and do it for the controller as well. The only other thing I can think of is maybe jumbo frames got turned on somewhere. If a client/server is using it and one or the other/something in between doesn't support it then you'll see stuttering on the network links. This wouldn't account for the server physically locking up though - drive firmware would.

That is odd; I have the exact same policy and mine works as expected. Find an afflicted machine and use RSOP to determine whether or not it is in fact receiving the policy settings you have defined. Who knows, if might be filtered or another policy higher up can be conflicting. You can even use the Group Policy Modeling Wizard on the computer OU in GPM.

If it is not even creating the directory then I would think it has something to do with the system variable. Try using C:\Windows instead and see what happens.

You too, huh? Some of Intel's marketing monkeys must have found their way into engineering - product names and device ID's are a mess. The drivers seem to be suffering too as I had an entire lab's worth of Optiplex 780 machines randomly drop link and rolling back drivers fixed it. I don't think I've ever had an issue with a Broadcom NIC. Realtek on the other hand isn't worth silicon that was used to fab the chip.

Windows does not expose this information via SNMP, so there is no way for the Dude to get to it. Sorry.

This again? We had a similar issue with poor copy performance between 2k/XP clients and 2008 server editions. Although the symptoms are the same, the root cause in this particular issue was something in TCP I think - something like having to disable heuristics.

Last I looked support for 2012 R2 Server and VMware 5.5 in Backup Exec was still in beta. To be honest though, Backup Exec has turned into such a pile that we're just biding our time now for the current license to expire - we're looking heavily into Veem to replace it.

I'm not going to link to it since it is waaaay NSFW or even family viewing, but John McAfee's video on How to Uninstall McAfee Antivirus should be required viewing for anyone considering one of their products. As far as Truecrypt goes there is quite the conspiracy theorist discussion on Slashdot going on right now. If Bit Locker isn't an option, I've read GPG is something worth trying.

How much of a performance hit do you guys see when running Bit Locker? Laptops with mechanical drives are already painfully slow and this worried me implementing this would only exacerbate the problem. Our standard fleet of laptops right now is the Dell Latitude E5400 with 5400 RPM drives that do about 60MB/59MB on sequential read/write.

If you're looking for a bit more logic in the script: VB Script for network printer deployment - Blogs - EduGeek.net

If you run into issues with the GP you can try this: VB Script to set Java security level to medium - Blogs - EduGeek.net I had to implement this last year after Java started to not run unsigned code when its self imposed expiration timer hits.

I still deploy with VB rather than GPP. I tried GPP and found it to be so stinking inconsistent it drove me nuts. VB works every time and allows for such granular control over who gets what I don't see any reason to move away from it and clutter up my Active Directory.

Some stuff that I include in the base: 7-Zip Infra Recorder VLC Media Player Cute PDF Writer Notepad++ Windows Live Movie Maker Stuff that is regularly updated like Flash, Java and Chrome should be pushed by SCCM or some other method after imaging. If you do install the Windows Live version of Movie Maker then be sure to clean up after it as a bunch of Win Live services are started and be sure not to install the entire Live package. For VLC it will have a first run dialog you can do away with by placing the appropriate registry keys in the current user hive of the registry inside the default user profile. For Notepad++ I would use the portable version without the auto updater component and drop an icon on the public desktop and all user start menu located in 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs'.

Run this at a command line: netstat -o -a Look for 127.0.0.1:51139, take note of the process ID number, and look it up in task manager. You should be able to identify what piece of software is doing this.

I have never gotten Java to deploy cleanly using the MSI through GPO. I always get the exact same problem that you're describing where the previous install is left in a smoldering ruin and the new one refuses to go. I think it has something to do with whether or not Java was already installed by hand on the system before trying to push it out with GPO. The Java installer itself will attempt to remove previous versions before installing the new one and this is where is breaks. The method I have working now is one I got from here. The policy is setup as a startup script which launches a separate removal script that wipes all traces of Java off of the machine before it starts the MSI for the new version - taking away the job of removing the previous version of Java from the actual Java installer. If you can't get the GPO method linked to above to work I'll dig through my notes and try and find the original post for this method.