Duke5A

I think you guys are going about this the wrong way. You're looking for technical solutions to something that is ultimately a disciplinary issue. You can eventually reach a point where you can box them in to where they can't do these sorts of things, but management becomes a pain and the functionality of the machines is hampered. Start out with handing lunch detentions out like candy and move on from there if the problem persists.

The Gears of War series by Karen Travis The Sigma series by James Rollins Red Storm Rising by Tom Clancy Can't recommend those enough. Great time sinks.

MikroTik Routers and Wireless: The Dude Looks cool.

I'm just pulling this out of the air as I'm only running WDS, but maybe try presenting the remote storage to your MDT server over iSCSI?

You need to build a new image; cross architecture upgrades are not supported. When you build the new one keep a log of all your changes and save somewhere in the image.

All of our teaching staff has laptops (six buildings, 250 teachers in total) and it has been a lot better than I though it would be. Accidental damage does occur, but not that often. We haven't needed to replace as many parts as I though we would either. The real kicker though is the machines just went out of warranty last month and I'm sure batteries will start dropping like flies anytime now. This is going to get expensive very quickly.

Every major change coming through the pipes from Microsoft seems to be more about gradually boxing the user base in and gently leading us into vendor lock-in. This is especially true with their gaming division if the rumors of the 720 turn out to hold water. I can't be the only one who thinks they've been doing nothing but chasing Apple for the better part of a decade now with nothing to show for it.

Does your proxy require authentication? If not, then the log will only contain IP addresses and not usernames. DG: /var/log/dansguardian/ Squid v2: /var/log/squid/access.log Squid v3: /var/log/squid3/access.log

If I had a nickle for every time GPP printer deployment caused me or somebody else grief I would be able to retire. I tried it and found it to be inconsistent like much of everyone here has. I went back to VB script and never looked back. VB Script for network printer deployment - Blogs - EduGeek.net

Try going into the Java control panel applet and sliding the security level down to medium. Somewhere in the 7.x history they made the default level high instead of medium and it bugs the crap out of you when running unsigned code.

Do you use an upstream cache peer for filtering? I was building a Squid proxy for this very purpose and found out there is a bug in Squid that when using SSL bumping with a cache peer it will actually send SSL traffic to the cache peer unencrypted. After reading that I gave up on the project as it was a deal breaker. I don't know if it has been fixed yet.

Well, on the other side of the pond here at least the 1980's was the automotive industry's Dark Ages. Increasing CAFE standards (mileage and emissions) basically killed performance until technology finally caught up in the 90's. It didn't help either that the big three were getting cocky and believing the Eastern auto companies posed no threat. I'm still a fan of the 80's though since when I got old enough to get into the hobby the only cars in my price range were from that decade. This was during the collector boom where Muscle era car prices started soaring, so I built what I had and kept on rolling with it ever since.

It will respond to ping intermittently? When it does, is the ping reply time high? First thing I would think of is excessive CPU load if no other switch exhibits the same symptoms. If other switches do then I would be think broadcast storm. If the switch is manageable then go into the console and check the CPU load, and if it's high check to see what process is eating it. If its STP you could have a loop somewhere.

We used to use Radius for our iPads, but when the staff member's password would expire it would make for all sorts of fun to get the iPad working again. Simply changing the password in the wireless profile wasn't enough; you'd have to remove the profile completely along with every other wireless profile on the device and then recreate it. To this day I have no idea why this was, but it stumped me and a couple of other very experienced techs. To get around this we settled on creating a new network for managed devices, used a static WPA2 key, and make it 63 characters in length (the maximum) with completely random characters. When then used the iOS Profile Manager to handle passing out the settings. So we don't actually have to type the password and since it is so damn long it would take from now until the sun burns out to crack it.

You need to move over to using a Radius server for your wireless authentication using AD security groups. I've got a single group wireless devices that I can remove machines from if I have to.

Might want to look into student dropbox folders. It's basically a share with permissions set in such a manner that it makes it a blind-put. Kids can save to it, but are denied read and list to prevent them from opening other students' completed work. Teachers on the other hand have RW to the folder so they can clear it out. In addition there is a common area where kids have read so they can get assignments. I made a script for creating these folders in bulk that I use at the beginning of the year. There is a blog entry I made here regarding it: VB script for creating student drop boxes - Blogs - EduGeek.net

I'm going to agree with you mrbios, but not for the same reasons. I've got classes that work with photo/video editing too and to have a source file 3GB in size is a regular occurrence. They only get so much class time so I could definitely see the advantage to a 1Gb link. That being said though, I would never give clients 1Gb links if that is what the backbone and servers are running. If everything else was 10Gb, then sure, no problem! It's always been drilled into my head to not give access clients backbone speed, and to me this gets more important as the size of the network increases.

They really don't sound bad at all; it'll do VLANs, spanning tree, SNMP, auto cross-over, IGMP, and jumbo frames. What more do you really need in a basic IDF cabinet?

Thanks guys. I'll give it a try.

Anybody use Papercut NG? I'm just looking for thoughts/opinions on this as it looks to be pretty cool.

Blocking students from emailing staff would kind of defeat the purpose of giving them email wouldn't it? If your only concern is students using existing distribution lists then you can set permissions on those lists in ADUC and only give staff rights to read them. For the students that circumvent that and manually add a ton of teachers to a message by hand, AngryTechnician has it right: start handing out detentions and eventually they'll fall in line.

No uninstall issues? I tried deploying the Java MSI via GPO and it would work on some and bomb on others. What would happen is the uninstall of the previous version would break and wouldn't update after that. The only surefire way I've seen to silently remove Java via script consistently was that VBS script MS put together.

Dust off the first generation Pentiums guys, lets rock Duke3d! Now how do get IPX/SPX multiplayer to work, VPN maybe?

We use a combination of things: - all students get an account consisting of the first six letters of their last name followed by the last four of their student number - the passwords for K-5 accounts are all set to the same thing and cannot be changed - elementary buildings get a generic account named after their building with a password that is the same as the logon name - middle and high school students are expected to know their usernames and change their passwords We used to have the students on a first letter of first name followed by last name syntax, but with the sheer number of students there were lots of duplicates and their accounts were overlapping with staff accounts. It was especially a pain in the neck since we have an onsite Exchange server and provide email to staff. Some of the staff had numbers in their usernames because students had the same ones. The generic building accounts work at the elementary level, but students still have their own login and home folder if they want to use it.

It could be that they're logging on with cached credentials before the network link is ready (pulling DHCP, etc). You can try setting this in GPO: Computer Configuration > Administrative Templates > System/Logon > Always wait for the network at computer startup and logon