Duke5A

Sounds like a HAL issue. From what I've seen SATA driver issues will cause the machine to BSOD and reboot continually, while the incorrect HAL will blank the screen and freeze. If WDS gives the image to you as an option though then it was sealed with the correct HAL in place. What does the HAL line in your sysprep file look like?

The WinPE version on a stick that works, is that based off of the same WIM that you boot over the network from? Do you have drivers imported into WDS? What I'm thinking is the stick version works since it is using a default MS display driver while the network boot one pulls a display driver from the deployment server. Of course this is entirely tossed out the window if you don't have drivers imported into the deployment server or you inject them into the WIM you're stick booting off.

I second this and wouldn't think twice about going used for Cisco equipment. I've got about 40 or so managed Cisco switches in my environment and we've only had to replace one in their ten years of duty. The one that fried was due to a lightning strike hitting an outside IP camera mounted on a poll. It stopped at the switchport and nothing else was affected. I did get some cool video from the other outdoor cameras too.

I've had issues with IE9 and certificate revocation with proxy filters. Is she using a content filter? If IE is blocked from contacting the CA who issued the certificate you'll see these kinds of problems.

I would bet it is a problem with one if the printer drivers. What happens if you try to print of a test page from every printer installed on the system? For me it was a HP P1606 driver that was causing a very similar issue.

Whoever wrote the installer for Java didn't potty train it properly. When doing an MSI install all previous versions have to be removed beforehand otherwise you run the risk of it botching the install. Then you have to manually wipe up after it with the Windows Installer Cleaner. (all of this you're more than familiar with) To push out Java I use the script FN-GM posted being called from a command script. Looks like this: if exist "C:\Windows\Java-7-Update11-x86.log" goto :EOF cscript /B /nologo "\\Server\deploy$\Java\Remove-Java.vbs" /keeponly "\\Server\deploy$\Java\7.x\jre1.7.0_11.msi" /quiet /log C:\Windows\Java-7-Update11-x86.log :EOF I run that as a startup script set through GPO. It works almost every time with some exceptions. All my teachers have laptops and I've noticed them turning the machine on closing the lid as soon as the login prompt comes up (startup script is still running in the background). They interrupt either the uninstall or the install and break it. Outside of that issue this is the best way I've found so far to push out this utter excrement of a run-time environment. On another note, there might be a transform you could apply that would disable the uninstall of previous versions. That right there would fix the issue. Having the old version installed wouldn't pose a security risk since the new version would replace the old browser plugins and file associations to Java Web Start. Just an idea....

I know it would seem like it shouldn't matter, but have you tried a different monitor? For some goofy reason I've had monitors (one in my basement) just one day decide to stop showing a certain display ranges.

I created a separate XML used to automated the questions WDS asks it starts up. This should do it... OnError 1 Primary true true NTFS Local Disk C 1 1 0 true OnError 0 1

Greets! I'm trying to setup device certificate based authentication for iOS devices on our managed wireless network. The end goal is to have iPads automatically join a special wireless network using nothing more than a pre-installed certificate with no user credentials involved. I've already setup WCS to use on a non-production domain controller as a Radius server, and setup the wireless controller as a client in the NPS snap-in. I need help setting up the network policy to grant access as I've never done this before. Any help would be greatly appreciated! Thanks...

My favorite way to hose a Linux system is this: Doom http://www.cs.unm.edu/~dlchao/flake/doom/start.gif Original Doom on Linux modified to attach the process ID to each monster. Kill the monster, kill the process. Walk into a crowded room with the BFG-9000 and let it rip.

I don't think there is. Heck, as it sits you have to enable logging of print jobs themselves, let alone printer changes. As for the print spooler, I loaded the HP P1606 laser driver and it caused all sorts of issues on client computers, including bombing out the spooler service. Once I deleted the driver from the spool directory the spooler was stable again. You don't have any 1606s floating around do you?

Logon scripts can run interactively, but they won't hold up the process. You can have it pop up a message box and the desktop will still load behind it. You can always go with a nag message in GPO that will popup when someone tries to logon to a specific computer. This will halt the logon process until OK is pressed. Be careful though, users have a strong tendency to just click through dialog boxes after a while.

Still having problems with this only now I've seen it on an account with local administrator privileges. Typically logging off and then back in clears it up. My workaround for staff and students has been to have to the logon script create a desktop icon pointing to sndvol.exe. Anyone?

Ubuntu lost me as a user on the desktop with 11.04. For anything Linux I'm back with Debian on the server side and Mint on the desktop. All I can see coming from this is another OS sending my usage data to online retailers and ad agencies. I'll pass....

Is it necessary to have logging on both ends? If you've got your staff authenticating internally maybe use a generic account to authenticate to the upstream? I have the exact same setup here without the requirement for upstream authentication. Student and staff both have their own Squid 3.1 proxy with Kerberos setup and the ISD proxies as cache peers for filtering.

How did you overcome HTTPS issues with Squid running in transparent mode? For mine I setup a splash portal in Squid and forced people to click an acceptance button on the TOS page before it would pass HTTP requests. After clicking the acceptance button directions are listed for using the proxy.pac file. If users bother to read through it and set it up they'll get functional HTTPS, if not, they're stuck with HTTP.

This one is really driving me up the wall. Our students are limited users and most of the time, but not all, they will be unable to bring up the volume control window from the system tray icon. It's visible, but doesn't respond to left or right clicks. You know immediately when it's not working too because it'll accompanied by blank spaces in between it and the other system tray icons. This affects multiple model Dell systems, with both the Microsoft and Dell provided drivers. Oddly enough, this never presents to be an issue when a user with local admin logs onto the computer. To make the issue even more of a head scratcher, when it is acting up you can browse in Windows\System32 and launch the volume control app just fine. Has anyone seen this before? I'm at wits end with this.

It has been years since I last messed around with this, but it's still developed and the music program at my last district seemed to love it. Free Music Notation Software | Finale NotePad They're got a free version available for download and it says Win7 x64 compatible.

Use dsquery and pipe its output to dsmod. dsquery user "ou=2013,ou=grad year,ou=students,ou=users someschool,dc=someschooldistrict,dc=com" | dsmod user -pwdneverexpires no -canchpwd yes The above would modify every user in that OU to having their password expire and be given ability to change it.

The imagex utility was never designed to be used like Ghost; it only creates an image of the file system and not an entire partition or disk. Because of this you're going to have to script the creation of the partition and boot setup before dumping your WIM. Really though, if you're not going to use WDS/MDT then you should look into Ghost or something similar that can create entire partition and disk images.

Try uninstalling the Smart software. There is something with how it hooks into Windows with how the windows are drawn that causes specific pieces of older software to crash. This happens mainly with WJIII. My only solution for staff who wanted both pieces of software installed was to run WJIII in XP mode (Windows XP VM in Enterprise).

Computer Configuration > Policies > Administrative Templates > System > Group Policy : Startup policy processing wait time Set it to something high and the machine will wait for the network to become available (talk to a DC) before allowing a user to login. Be careful though, if you've got a machine with this policy set and it's disconnected from the domain it'll wait the entire timeout period before letting you proceed. I wouldn't use this on wireless either; I learned the hard way.

Samba 4.0 was just released and can now function as an AD domain controller. From what I've read once it is setup and you manage your policies through the RSAT tools on a Windows 7 box.

How are the shares setup? Typically, the way to set them up is to allow everyone RW on the share, and control it at the file permissions level. How I would set it up is like this: -StaffFolders +TeacherA +TeacherB +TeacherC On the top level directory StaffFolders, share it with RW access to everyone and only give file level access to administrators. Finally, at the teacher name level, give the teacher modify access to the folder and contents. Teachers can be mapped to their specific folder by \\server\StaffFolders\TeacherName. Now you only have one share to deal with and permissions can be copied over by robocopy. Since staff doesn't have file level read access on the top level they can't browse higher than their own home folder.

Yup, we block all web browsing by IP. A lot of the filtering we do is by domain name and browsing using IP would bypass that specific list.