Duke5A

What are you using for a proxy? You could just monitor the proxy for all domains the machine requests while manually refreshing the page. I use Squid and sometime have to do it. sudo tail -f /var/log/squid3/access.log | grep 192.168.30.42 Show HTTP requests in realtime, but only ones originating from the above IP.

I guess I never really noticed before since we've only had ceiling mounted projectors for a few years now, but the bulbs in these things are needing to be replaced a lot sooner than I would have thought. The projectors are Optoma TW675UTi-3D with the bulbs advertising a 2500 hour lifespan. I'm finding that in many classrooms the picture is so dull they can barely be seen with the shades drawn and the lights off at only 1500 hours. Is this normal? If it is I can't believe you could advertise a lifespan like this and have it be so useless at 2/3rds of the way through its time. These things are $300USD a pop!

Running WDS on 2008 R2 by chance? Import the driver into the console and let WDS figure it out.

I've been told explicitly not to reuse names and addresses when migrating domain controllers; too much old cruft left behind for the old DC. Not to say it wouldn't work though, it is just what I was told from a couple of engineers. That being said, if you only have two domain controllers I wouldn't blow one off for a reload; only having a single domain controller, even for a short time, would make me a nervous wreck. You'd be just one minor failure from losing the entire domain.

You should be using their deployment utility; it'll make your life a lot easier.

We have about 500 netbooks in the district - Dell Latitude 2120 and 2100 models with 6-cell batteries. They've been great devices with the rubberized exterior and are easy to fix when the need arises to crack them open. Problem is the netbook ship has sailed and Dell axed the line. If I was starting over at this point I wouldn't look too hard for manufacturers that still make them; the form factor is all but dead now.

This, a million times this; every time someone uses the HP universal driver God kills a kitten. I've had two healthy print servers where after that driver was installed it hosed them. Printers that were successfully being deployed via VBscript and even GPP where throwing sporadic cryptic errors on the clients even though those specific queues weren't using the Universal Driver. It installs new port types and services on the print server. Nothing short of a complete reload of the server fixed the issue. As already stated, use real model specific drivers, or better yet, Microsoft provided drivers even if they aren't an exact match on the model. As long as they support the same printer features you should be OK.

If it only afflicts that one user on only that machine it sounds like a printer preferences issue as those are stored in the local profile. Go through the printer preferences and if it all seems to match those on a working system them you could try removing the printer and deleting all references to it in the registry under the HKCU hive.

So, use the card as a path to ground while doing your best Michael Jackson impression while wearing fuzzy bunny slippers on shag carpet. Personally, I prefer Thriller myself - works every time.

Had similar issues with students running portable versions of browsers and UltraSurf from their home directories and key chains - App Locker policies put an end to it. Of course you're going to need to be running Windows 7 Enterprise to use this; Professional does not support it.

I've never come across this before, but this will give you a list of all ongoing connections on a machine (both outgoing and listening) and the process that created it: netstat -b At least you'll be able to narrow it down to process.

You're still OK, but I would move the swap file to another volume with more space if you haven't already.

I don't see any reason you can't have both DG and Squid on separate boxes; just change the config to point to the correct address and port in the DG config. I do have Squid working with Kerberos in a 2008R2 AD running on Debian though. It's a bit convoluted, but with this guide you should be able to do it. ConfigExamples/Authenticate/Kerberos - Squid Web Proxy Wiki

Are your shares sitting in a DFS namespace? What OS are the clients and servers running?

That config file is really hard to parse by hand with all the comments in it; here it is with the comments stripped: acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl localnet src 172.16.10.0 # RFC1918 possible internal network acl localnet src 172.16.80.0 # RFC1918 possible internal network acl SSL_ports port 443 acl SSL_ports port 873 # rsync_SSL acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 873 # rsync acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny to_localhost acl GoodHosts src "c:/squid/etc/squid-allowedhosts.acl" acl Goodsites dstdomain "c:/squid/etc/squid-site_noblock.acl" http_access allow GoodHosts Goodsites http_access allow localnet http_access deny all icp_access allow localnet icp_access deny all http_port 3128 cache_peer 127.0.0.1 parent 4001 7 no-query hierarchy_stoplist cgi-bin cache_dir ufs c:/squid/var/cache 3000 16 256 access_log c:/squid/var/logs/access.log squid logfile_daemon c:/squid/libexec/logfile-daemon.exe cache_log c:/squid/var/logs/cache.log cache_store_log c:/squid/var/logs/store.log mime_table c:/squid/etc/mime.conf pid_filename c:/squid/var/logs/squid.pid debug_options ALL,1 33,2 log_fqdn off unlinkd_program c:/squid/libexec/unlinkd.exe refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 acl apache rep_header Server ^Apache broken_vary_encoding allow apache connect_timeout 1 minute icon_directory c:/squid/share/icons error_directory c:/squid/share/errors/English dns_testnames abs.us.army.mil coredump_dir c:/squid/var/cache I used this Power Shell snippet to do it: Get-Content .\squid.conf2.txt | Where-Object { $_ -ne ''} | Where-Object { $_.SubString(0,1) -NotMatch '#' } > squidclean.conf Anyhow, since you said this only happens with a few HTTPS pages it's probably safe to assume you have your configuration correct. What is probably happening is the ones that are failing can't call back to the certificate authority for a revocation check. I actually had this happen to a handful of domains on my Squid box. My proxies require authentication to get out and the connection request to the CA wasn't passing credentials to the proxy so the connection attempt was being swatted down. This resulted in the same problem you're having - where most SSL pages will work, but some won't. I know you're not using authentication, but from the looks of it you're using a whitelist setup and this would require the domains for those certificate authorities to be part of the list. Here is a couple: .verisign.com .usertrust.com .entrust.net There are probably more that can be added. You can find them easily enough by browsing to one of the sites that don't work while looking at the access log. There will be a deny request right next to the allow for the domain you're trying to access and it'll be for a certificate authority. Add the domain to your noblock ACL and you should be good. I hope this helps.

That was my experience with iTalc as well. LAN School is probably the best piece of lab management software I've come across when taking features, manageability, and price into account. It was far cheaper than a lot of other offerings, deploys using an MSI, is configurable through GPO and works consistently.

This right here is how you want to do it. I've also got a script for when I need to install it by hand that will flip the switches to use the transform and install silently.

Try going into AppData under the user's profile directory and deleting IconCache.db. Restart the machine and all should be well.

Go into the printer properties and under the device settings tab there should be an option to disable mopier mode somewhere in the bottom of the list. Mopier mode is used to instruct a printer to print multiple copies of a document without having to send it again for each copy. This might make printing multiple copies of larger jobs a bit slow, but then again it may fix the reporting issue.

We use Exacqvision here running on four servers with about 50 camera a piece. It barely touches the CPU since there is no transcoding going on with the camera streams; the cameras send in MPEG or H264 and that is directly written to the disk.

What kind of devices are plugged into the switch? Reason I ask is because if you don't have a need for jumbo frames to be enabled then I would disable it - it'll cause problems if some of the devices you're plugging into it don't support it, but others do. Also enable portfast on those ports if they aren't already, but only if the devices you're plugging in are clients and not other switches.

Doesn't matter if anything is on that drive letter or not. @GeekyPete nailed it with it being reserved for floppy drives. Back in the day you could use it as a ghost drive for copying between floppy disks in a single floppy drive system. It's probably something legacy related when the machine comes out of sleep.

It could be a coincidence. Do you have a directory of email addresses listed on the website? It could even be someone with your Exchange server setup on their smartphone using one of those scummy apps that mines your contact lists. There is just so many ways for these personal information trollers to find your data to sell to advertisers.

It is most likely third party software preventing changes to IE. It's either a security suite or some spyware that claims to guard IE from unwanted changes (homepage, search providers, proxy, etc). I just had this problem last week with a staff laptop. I couldn't change the proxy until I cleaned the machine out.

It sounds like you're going about this the wrong way; you're trying to disable student's ability to browse rather than setting permissions correctly on those shared resources. You need to disable read to that share for all students.