markwilliamson2001

I understand the software restriction policies upto a point. I have managed to block specific programs (such as media player and windows games) using Path Rules. How, and what type of rule have you used for your USB drives. I thought it would work the same for users home directories, but so far no luck. All our students use H: for their home directories. I tried H:\*.exe and H:\..\*.exe but to no avail!!! Thanks Mark

How did you do the software restriction policies for the USB drives? This is the nut I currently cannot crack! Ta Mark

Hi! I am trying to block all EXE files in students home directories, using Group Policy Software Restriction Policies, but am struggling at the moment! It is not dependant on a specific application, I just want blanket coverage for all EXE's. It would ideal to block exe's from Pen drives as well. I have looked at USBDLM, but have come up against the software restriction policy again! HELP!! Please... Mark

Hi Guys, I am trying to create a staff photo report in SIMS, with each staff members code or surname + forename underneath each relevant picture. I am struggling through SIMS to get the physical photo out in a report. Has anyone managed to do this? Ta Mark

Thanks that worked a treat! Mark

Still crashes at Line 9!! Think I am going to give up on this! Thanks for all the help anyway. Mark

I have included my current script, modified for your perusa Set objRootDSE = GetObject("LDAP://rootDSE") ' Define the Distinguished Name of the Organizational Unit ' containing the users to modify strUserOU = "ou=TESTBATCH," & objRootDSE.Get("defaultNamingContext") WScript.Echo strUserOU ' Bind to the users OU Set objOU = GetObject ("LDAP://" & strUserOU) ' Set the filter to only return user objects objOU.Filter = Array("user") ' Iterate through the user objects setting the required ' attributes For each objUser in objOU ' Get the user's display name strDisplayName = objUser.displayName ' Set the user's discription = user's display name objUser.Description = strDisplayName objUser.SetInfo Next ' Clean up Set objOU = Nothing Set objRootDSE = Nothing Thanks mark

It only displays ou=TESTBATCH,DC=CHASE,DC=local, even though the TESTBATCH ou is inside an existing ou called pupil, which is in the domain root! after the echo, it still crashes, at the same point, line 8 (now line 9). Thanks Mark

I also checked out the struserOU, and it matches with a ou called TESTBATCH in an existing OU called Pupil. Not sure if this makes a difference! Ta Mark

It is to do with line 8 char 1 around this area i guess, but objuser is not explicitly defined as such: objUser.Description = strDisplayName objUser.SetInfo which is part of: For each objUser in objOU ' Get the user's display name strDisplayName = objUser.displayName ' Set the user's discription = user's display name objUser.Description = strDisplayName objUser.SetInfo Next Hope this helps, Thanks for all the help so far! This seems like a tedious thing, but the network manager wants it! Mark

Still no luck, now it says that the object (scriptname).vbs, doesnt exist, and I have checked the file name more than once! Mark aarrrrggghhhh!

Tried running the script but it came up with an error concerning the objRootLDAP, which it says is required!, not too sure on how to fix this! Mark

Thanks Iain! Much Appreciated

How can I run this script? Can I create a batch file that points to the vb file, or do I need to do somethign in particular! Thanks for all the help by the way, although I havent managed to get any of the solutions working so far, but this script looks okay! Just need to get it working now!

That sounds more like it! Ta Mark

Yes, but that means I can only update all users with the same description!! I want to match individual users display name to the description, then move onto the next user. P.S. I have 300+ users to do this for!! Kind regards Mark.

Hi! I am new to this forum, but have been reading with keen interest lately! I am trying to do some thing I think is fairly simpe in active directory. I have added a load of bulk users in active directory, but I would like to add the users display name, to the users description, so it appears in the user list. I have looked at dsmod user for this, but cant find any examples allowing me to do what i want to do! Has anyone done this before, or got any ideas? Ta Mark

Hi, can anyone enligten me as how to prevent students running windows batch files in there home directories. We have an OU setup in Active Directory, which contains all the pupils also in seperate OU's for each year group I need to block all students regardless of their location for logging on. For their areas, we have a main network share setup called students, with hidden shares (\\server\share name$) setup for all student areas. I tried applying a new gp object to the Pupil OU and the following paths, but this didnt work! (See attachment) Thanks if anyone can help, Mark blockbatchfiles.doc

Hi, I am new to the forum, but was pondering on whether someone else's experinces could benefit me? I am trying to deploy Visual Studio 2003 by using Active Directory combined with Group Policy and an MSI Package. I can successfully install the software, but when I come to run VS2003 IDE, it runs then immediately(?) closes again... :-( The most information I can find out is that my Product (PID) Key was incorrect in the setup.sdb file, which was suitably changed, but still no luck... Has anyone had any experience of installing this program successfully by using this process? Thanks Mark.