Frazer

Sorry to tag onto the end of this but my problem is relevant Ive now got most of my machines imaged using unicast (couldnt faff around with multicast for too long as they had to be done). Now that ive one ict suite left ive tried multicasting again. First problem was SQL password issues from the logs (reset root mysql pass and sorted that). I queued a multicast image for 30 pcs (all on the same HP switch, same HP PC/network card, igmp snooping enabled across all switches) They all boot from pxe, 'please wait' while they all prepare themselves, once all have got to this stage, 20 out of 30 PCs start on the next screen (the actual imaging) while the rest just stay on 'please wait' Ive ran through what Geoff suggested earlier and got the following: root@hhfog:/opt/fog_0.27/bin# cat /proc/net/igmp Idx Device : Count Querier Group Users Timer Reporter 1 lo : 1 V3 010000E0 1 0:00000000 0 2 eth0 : 1 V2 010000E0 1 0:00000000 0 root@hhfog:/opt/fog_0.27/bin# ping -c1 224.0.0.1 PING 224.0.0.1 (224.0.0.1) 56(84) bytes of data. 64 bytes from 192.168.250.10: icmp_seq=1 ttl=64 time=0.507 ms root@hhfog:/opt/fog_0.27/bin# ping -c2 224.0.0.1 PING 224.0.0.1 (224.0.0.1) 56(84) bytes of data. 64 bytes from 192.168.250.10: icmp_seq=1 ttl=64 time=0.283 ms 64 bytes from 192.168.4.235: icmp_seq=1 ttl=255 time=0.379 ms (DUP!) 64 bytes from 192.168.4.50: icmp_seq=1 ttl=64 time=0.463 ms (DUP!) 64 bytes from 192.168.4.13: icmp_seq=1 ttl=64 time=0.524 ms (DUP!) 64 bytes from 192.168.4.27: icmp_seq=1 ttl=64 time=0.617 ms (DUP!) 64 bytes from 192.168.4.9: icmp_seq=1 ttl=64 time=0.621 ms (DUP!) 64 bytes from 192.168.8.233: icmp_seq=1 ttl=64 time=0.784 ms (DUP!) 64 bytes from 192.168.9.101: icmp_seq=1 ttl=64 time=1.03 ms (DUP!) 64 bytes from 192.168.250.17: icmp_seq=1 ttl=64 time=1.11 ms (DUP!) 64 bytes from 192.168.250.11: icmp_seq=1 ttl=64 time=1.12 ms (DUP!) 64 bytes from 192.168.250.18: icmp_seq=1 ttl=64 time=1.12 ms (DUP!) 64 bytes from 192.168.250.22: icmp_seq=1 ttl=64 time=1.12 ms (DUP!) 64 bytes from 192.168.250.16: icmp_seq=1 ttl=64 time=1.15 ms (DUP!) 64 bytes from 192.168.250.21: icmp_seq=1 ttl=64 time=1.15 ms (DUP!) 64 bytes from 192.168.250.26: icmp_seq=1 ttl=64 time=1.16 ms (DUP!) 64 bytes from 192.168.250.24: icmp_seq=1 ttl=64 time=1.19 ms (DUP!) 64 bytes from 192.168.250.14: icmp_seq=1 ttl=64 time=1.20 ms (DUP!) 64 bytes from 192.168.250.12: icmp_seq=1 ttl=64 time=1.34 ms (DUP!) 64 bytes from 192.168.250.13: icmp_seq=1 ttl=64 time=1.36 ms (DUP!) 64 bytes from 192.168.250.20: icmp_seq=1 ttl=64 time=1.60 ms (DUP!) 64 bytes from 192.168.250.15: icmp_seq=1 ttl=64 time=1.84 ms (DUP!) 64 bytes from 192.168.3.240: icmp_seq=1 ttl=64 time=6.93 ms (DUP!) 64 bytes from 192.168.250.10: icmp_seq=2 ttl=64 time=0.252 ms --- 224.0.0.1 ping statistics --- 2 packets transmitted, 2 received, +21 duplicates, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 0.252/1.235/6.933/1.281 ms Subnet mask is 255.255.0.0 192.168.4.x - all hp printers 192.168.3.240 - hp printer 192.168.8.233 - netgear wag102 wireless access point (have various ones of these around school, must be left on somewhere) 192.168.9.101 - KCORP lifestyle wireless router (used as access point only) 192.16.250.x - HP switches HP Printers have ipx/spx & appletalk turned off. Now its found these are replying, what am I supposed to do about it? or is this normal? Its also doing about 100MB/minute, where 10x unicast were doing about 700MB/minute (1gbit server) See multicast logs on next post (too long!)

Cheers! Generated the encrypted password again with FOGCrypt and seems to have fixed it. Im going to blame copy and paste

Ive setup FOG over the holidays and - after a shed load of testing - it appears to be working nicely! Tested, tested and tested again my image until it was right, everything on FOG service I wanted was working (hostname registration/changing only). Got all the drivers right/working Sysprep'd, took image, imaged out to about 150pcs over weekend, no probs! Came in today (Monday off) and the hostname changer isnt working, and wont register them on the domain. Ive enabled hostname changer for the 'host' and globally in fog. Heres what the log says: 18/08/2009 14:22 FOG Service Engine Version: 3 18/08/2009 14:22 Starting all sub processes 18/08/2009 14:22 3 modules loaded 18/08/2009 14:22 * Starting FOG.SnapinClient 18/08/2009 14:22 * Starting FOG.HostNameChanger 18/08/2009 14:22 FOG::ClientUpdater Starting client update process... 18/08/2009 14:22 FOG::ClientUpdater Sleeping for 435 seconds. 18/08/2009 14:22 * Starting FOG.HostRegister 18/08/2009 14:22 FOG::HostnameChanger Starting hostname change process... 18/08/2009 14:22 FOG::HostnameChanger Yielding to other subservices for 8 seconds. 18/08/2009 14:22 FOG::HostRegister Starting host registration process... 18/08/2009 14:22 FOG::HostRegister Attempting to connect to fog server... 18/08/2009 14:22 FOG::HostRegister Module is active... 18/08/2009 14:22 FOG::HostRegister Attempting to connect to fog server... 18/08/2009 14:22 FOG::HostRegister MAC already registered. 18/08/2009 14:22 FOG::HostnameChanger Attempting to connect to fog server... 18/08/2009 14:22 FOG::HostnameChanger Module is active... 18/08/2009 14:22 FOG::HostnameChanger AD mode requested, confirming settings. 18/08/2009 14:22 FOG::HostnameChanger Could not find any recognizable digits. 18/08/2009 14:22 FOG::HostnameChanger at System.ParseNumbers.StringToInt(String s, Int32 radix, Int32 flags, Int32* currPos) at System.Convert.ToByte(String value, Int32 fromBase) at FOG.FOGCrypt.hexToByte(String hex) at FOG.HostNameChanger.changeHostName() Any ideas? It worked fine on my test image pc when asking it to rename the pc just before i took the image. Also installed it onto a working pc with the previous image, works fine, renames/joins domain ok. I was hoping this little service was going to save me a shed load of time wandering round rooms!

I thought about firewalling the pcs, but wasnt sure what ports should be left open to allow normal operation and block the spread of the virus. I use this script currently on startup to help clean pcs + fix broken services - hope its of some use to others set server=YOURSERVER set share=YOURSHARE rem Stop Server service so that infection doesnt happen while we turn off sophos sc config browser start= disabled net stop browser /y sc config lanmanserver start= disabled net stop lanmanserver /y rem Fix Windows update services sc sdset bits "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" sc sdset wuauserv "D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)" rem Check Essential Services are set correctly and running sc config wuauserv start= auto net start "automatic updates" sc config bits start= demand sc config dhcp start= auto net start "dhcp client" sc config dnscache start= auto net start "dns client" sc config eventlog start= auto net start "event log" sc config audiosrv start= auto net start "windows audio" sc config w32time start= auto net start "windows time" sc config lanmanworkstation start= auto net start "workstation" sc config wscsvc start= auto net start wscsvc sc config ERSvc start= auto net start ERSvc rem disable task scheduler while we clean up sc config schedule start= disabled net stop "task scheduler" AT /Delete /Yes rem Disabling "AutoPlay" reg.exe add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDriveTypeAuto /t REG_DWORD /d 0xff /f rem Turn off sophos on-access scanning so it will let us remove the virus via symantecs scanner sc config savservice start= disabled net stop savservice rem Scan/patch PC for cleanup rem KB \\%SERVER%\%SHARE%\con-patch-xp.exe /quiet /norestart rem MS malicious software removal tool (quite/silent mode) \\%SERVER%\%SHARE%\mrt-june09.exe /q rem Symantec conficker scanner \\%SERVER%\%SHARE%\FixDwndp.exe /SILENT /LOG=c:\%computername%_%username%_logFixDownadup.txt rem Turn on Sohpos, renable Server service, enable task scheduler sc config savservice start= auto net start savservice sc config browser start= auto net start browser sc config lanmanserver start= auto net start lanmanserver sc config schedule start= auto net start schedule You can check if sophos is installed with this too and make it install if your having problems with your enterprise console. @ECHO OFF REM --- Check for an existing installation of Sophos AutoUpdate if exist "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" goto _End REM --- Deploy to Windows 2000/XP/2003 \\sophosserver\InterChk\ESXP\Setup.exe -updp "\\sohposserver\InterChk\ESXP" -user "yourdomain\administrator" -pwd "your password" -mng yes REM --- End of the script :_End After this you can do a full sophos scan to try and catch anything thats missed. This combination has helped me clean things up, but im still getting some reinfections. You can also roll these scripts out using psexec remotely - however this dosent always work as some pcs become unreachable over the network, probably due to service termination - mstsc into this machines to install manually.

We have also been infected with this recently. Can anyone explain to me why, if your machine has been cleaned, patched, sophos fully up to date (on-active scanner is active for files on read+write) are machines still being infected? Surely if you disconnect a machine, clean it up, patch it, enable sophos, reconnect this machine should not be reinfected? Maybe my clean up tools are lying to me?

I understand their reasoning for not allowing it, but I was hoping it had changed since they last wrote the T&Cs. I was proposing no filtering, but the backup connection would ONLY be able to access the whitelisted sites, therefore no need for filtering. Anyway, a fruitless task since its not allowed. If we got rid of CLEO I couldnt see the school agreeing to pay twice/thrice the amount of CLEOs price for 100Mbit plus extra for backup and losing all the cleo 'freebies' email/moodle/videoconferencing.

We have a CLEO 100Mbit filtered connection. As The Internet is becoming increasingly important in schools, almost to the point where our school see it as mission critical (at least for emails, not so much for teaching resources), where do we stand on getting a backup connection? Ive read through some older posts here and it seems part of the T&Cs of CLEO are that we are not allowed a 2nd connection at all? Has this been changed since? Is it likely to change? If not, why not(reasoning below)? Schools are now becoming ever more reliant on internet access and speaking to a contact of mine, who deals with a lot of schools (including building schools for the future), backup connections are becoming increasingly popular. If the 2nd connection only allows access to particular sites, (lgfl email/school moodle/vle/sims learning gateway/hotmail/bbc etc) as there would be little/no filtering on this, would this be acceptable, or is it just a straight 'no' if your currently with CLEO? Is the only way to end up with a backup connection to terminate our CLEO connection and look for 2 other providers (expensive!)? Im aware the costs are massive for things like leased lines @ 100Mbit, but for the odd occasion CLEO does break, I think ADSL2+ would be sufficient, or perhaps a 10/20Mbit syncronous line. If this 2nd connection is allowed, where would we stand for using this to access SMT-vetted whitelist sites while the primary link is still up, eg youtube.com which is blocked at county level via our primary connection? I guess an alternative to this would be to host moodle/vle/slg/email internally - and hope your own switches/servers dont break . Not a route I would like to take as it puts a lot more strain on us as support staff! Thoughts?

Hi, I have a few teachers wanting to use iPhone on the move with their email - IMAP works fine for emails but they need to syncronise calendars. This would also be useful for Outlook. I have got it to make a connection so that it appears in the 'devices' section of OWA, but it wont sync. The iPhone comes up with "connection to the server failed". Not really made any attempt with Outlook/RPC over HTTP. Has anyone got the correct settings to get either working? Thanks EDIT: Posted in CLEO as its specific to lancsngfl mail settings. EDIT2: Think im only missing the domain\user info. Ive seen it somewhere but cant remember where! Something like "LANCS\-" eg LANCS\02102-f.james EDIT3: Found it in owa->options->change password-> "LANCSSCH\-" - this still doesnt work in iphone settings, it activates and says update completed at but when you try to retrieve mail it fails to connect.

I want to upgrade our File Server to 2003 Server R2 in order to make use of the file extension filtering on shares (to stop kids dumping movies etc on the file server). All our current servers are 2003 R1 SP1/SP2, including domain controllers. From what ive read if I just want to update a single server (not DC) to R2 I dont need to run adprep on the DCs? But I want to make use of a new feature within R2 (file extension filtering) - does this not require the schema to be updated? or is this done on the actual file server rather than via active directory? Bottom line, if i want to use file extension filtering, do I need to do adprep on DCs or update DCs to R2 aswell as the file server itself? Also if I do update the schema, do I subsequently need to update the DCs to R2? Cant find a clear answer to this on microsoft/google. Hope thats not too confusing Ta!

When I talk about VC machine, its just another PC that we use for VCing.. When the internet supposedly goes off, i go over to this machine and try to browse using IE (set to use proxy.lancsngfl.ac.uk) - this works fine I try nslookup on the same pc - fine. The same fails on ISA when tried within a few seconds while the internet is 'broke'. I forgot to mention, but i did try the ip address, while I had ISA running (rather than using the DNS proxy.lancsngfl.ac.uk) - same problem.

Hi, Im having a strange problem at school that only started during the half-term break in February(maybe the week before, but no earlier). Our setup was as such: Windows 2003 SP2 + updates ISA Server 2000 SP2/FP1 + updates (CLEO as ISP in Lancashire) Webproxy service running on ISA to allow kids access to internet (various rules for blocking internet on a per room basis, naughty kids etc). Firewall client installed on the odd few pcs for outlook 2003 to work. Our access is filtered, and any internet access must go through proxy.lancsngfl.ac.uk (ISA is chained to this proxy) This has been running for some time (around 2 years) with no problems (other than the odd restart being needed as the machine wasnt particulary high spec) While browsing the internet appeared to break for no particular reason. ISA was reporting timeouts. I found the following things while this problem existed(only a few minutes at a time): Video conferencing PC (xp/average spec) has direct access to the CLEO switch and gets its internet via proxy.lancsngfl.ac.uk rather than our ISA server. This pc continued to work, browsing worked, nslookup was returning responses ok. On ISA, nslookups would fail, couldnt browse to ip addresses either (these timed out). I thought to replace the ISA server as it was getting old and needed doing anyway. Once replaced with a quad core/4gb ram/same config (imported from previous machine) it started to produce the same errors. Timeouts appearing for a few minutes at random intervals. I tried the ISA server into the same port that the video conferencing machine was working fine on - same problem (also using different cat5e lead) After all this I thought, if the VC pc is working fine while ISA goes off, it must be ISA related - maybe some config had been changed/added recently (damn sure it hadnt been touched for a long time) Removed the ISA machine and replaced with Smoothwall 3 SP2 + Advanced Proxy. Set it up offline, got everything working no problems. Swapped it out with ISA, made revelant dns changes/proxy changes. Still getting the same random timeout problem, Smoothwall reports the parent cache is unavailable for a few minutes then starts working again. Driving me up the wall, Ive replaced virtually everything but it still wont work. Yet the video conferencing machine carries on working fine - suggesting there is nothing wrong with our physical connection. Any ideas?

Fixed! (rpwillis suggestion) Used DBAttach to detach the database from SQL Server on the latop/vmware. Stopped the sql server inside SQL Server Management Studio Express Created a new xp user called sqlserver, added to administrators group. Computer Management -> Services and Applications -> Services -> Properties of SQL Server (SQLEXPRESS) -> Changed 'Log on' to use the new sqlserver account. Restarted the SQL instance by SQL Management. Attached the database using DBAttach (if you get errors, you may need to start again from the top but copy across the "Microsoft SQL Server\MSSQL.1\MSSQL\Binn" folder from the original server - dont overwrite any files) I did try reducing the sqlserver to a normal user but the service wouldnt restart so ive left it as administrator at the moment. If you need to use nova, then you will have to copy (from original server) s:\snova to your new s: drive. Thanks for the help people.

superfletch, perhaps I should make myself a little clearer. (1)Old server. Dell power edge that used to run Server 2000 + SQL 2000 for our admin network (trust relationship to curriculum for teacher access to sims). Upgraded to SQL 2005 at christmas - all working fine. (2)New Server. Replaced (1) with new shiney Dell in May (Server 2003, SQL 2005, member server on curriculum, all admin workstations moved to same network as curriculum) - working without problems to all admin & staff. (3)Laptop (now VM ware until i sort the problem) - has the problems posted here. The (1) is where I am getting my sims folder/sims database from as its much easier to do what I want, when I want without having to kick people off the live system(2). When I vnc into (1) and check SQL 2005 Manager, the sims database is not attached. I assume this was detached properly using the capita dbattach by westfield when the database was moved to (2) in May and left detached. Simstest is the name of the vmware workstation and sqlexpress is the name of the sql instance. The folder structure on the test system is as follows: c:\shared <-- shared as Shared$ with sims folder inside (standard westfield centre setup) \\simstest\shared$ mapped to s: c:\program files\sims\sims .net\connect.ini redirects to s:\sims\connect.ini s:\sims\connect.ini points to simstest\sqlexpress & sims database I havent tried using 127.0.0.1 but I did try using (local) in the sims.ini which should be the same, ill give this a go. The /restoreui is new to me so I will try this too. Thanks for the suggestions.

Could find any permission related things - except on SQL Server Surface Area Confiruation but this refers to vista not xp (added myself as administrator anyway, no change) Tried SQL Server 2005 Express Edition with Advanced Services SP2 - same problem. The old DB must have been detached and reattached to new server properly or we wouldnt have a working system on the new hardware. Its driving me up the wall, authentication is obviously working as I can login directly using sql management. Through sims it appears authenticaion is also working as i get one error message if I type my username AND password correctly, but a totally different message if I type an incorrect password OR username. The main SQL logins have been copied across so it appears the db was originally detached properly. When I attach the sims db I do end up with the main SQL sims_ usernames and the same within the sims DB. Main SQL usernames are mapped to the sims DB usernames. Any more ideas?

Hi All, Thanks for all the suggestions. Originally I did not detach the database from the server as it was inactive (our old server had 2005 installed at christmas and we have just replaced the hardware as it was pushing 4 years old). Using dbattach, after I copied the inactive database files across, it did remap the sql users to the sims database users but as SteveMC says if they are stored in the master database then this is probably my own fault for not detatching the database originally Ill check permissions first and if that fails ill try activating the old database and detaching properly then reattaching. If that doesnt work ill try the SQL Server 2005 Express Edition with Advanced Services SP2. Thanks all! Let you know how it goes. EDIT: Looking at the old server, it looks as though the sims database has already been detached - im guessing this was done when we moved to the new server hardware. What permissions can I actually check for sqlexpress? I have had a snoop round SQL Server Surface Area Confiruation and SQL Server Management Studio Express and cant find anything obvious then again SQL isnt exactly my forte.

Yep Both are pointing to the correct place. This is also shown by the different error messages I get when playing with usernames/passwords.

Ive currently done the following to get sims running on a standalone laptop Installed SQL Express 2005 onto laptop Installed SQL Manager for Express 2005 (not actually needed but useful) Copied s:\sims from original server (while database is inactive) to c:\sims on laptop (and shared on laptop as shared$. The local user then maps \\locallaptop\shared$ to s: Copied sims.ldf & sims.mdf to the laptop. Used dbattach.exe to attach the sims database to sql express using SA username/password. Installed SIMS.net on the laptop from s:\sims\setups (from the local machine) Changed the s:\sims\connect.ini to point to the local machine. This is done as per notes http://support.capitaes.co.uk/websupport/RenderXSL.aspx?KB=KB25354 I then try to login but get the following error message: With correct username and password: SIMS Connection failed for Login , reason: 0 With correct username but wrong password: Invalid user name/password If I go into the SQL manager and reset the users password manually i get the same error: Invalid user name/password If I use the SQL manager to login I can use one of the sims usernames to gain access directly to the database tables etc but it just fails to login using the sims interface. Any ideas how I can solve the login problem?

Well, The Default User profile is made before the workstation is imaged. When you run office for the first time it sets the Username in office as your workstation username. Last time I did this I removed the user info before I imaged the workstation so that when people logged in it wouldnt have administrator and ask them to confirm their username. That worked out fine until they noticed a small problem. If students/staff double clicked a document in mydocs and hadnt already opened word/excel/etc then the software would open but not open the document, leaving them to do it again. So I reverted back to a pre-set username in the default user profile but now staff whinge when they cant see whos locked files. Pretty sure our contracts should say 'fix all the stupidly small problems that eat up the most time to solve'

This one has bugged me for a long time but ive finally stolen someone elses code Sorry I cannot give credit as I have no idea who made it. This is useful under the following scenario: Staff use spreadsheets as 'databases' Staff1 opens excel.xls Staff2 opens excel.xls and cannot edit because Staff1 has locked it. Staff2 gets the message cannot open excel.xls for writing because 'Administrator' has the file open ('Administrator' is used because the default profile is set when the workstation image is made) Staff2 whinges to techs because they want to edit. By using this code as a login script it will update staff members username in tools->options->general->User Name (and initials) to their current username. This will give them the error: cannot open excel.xls because 'Staff1' has the file open. Staff2 promptly whinges to Staff1. YAY! Less whinging. The only thing you will have to change is the strOfficePath to your relevant version, Office 2003 is 11.0 which is what I have used. UpdateOfficeUserName.vbs Set nw = CreateObject("WScript.Network") Const HKEY_CURRENT_USER = &H80000001 strOfficePath = "Software\Microsoft\Office\11.0\Common\UserInfo" strMachineName = "." strUserName = nw.UserName max = len(strUserName) For intLoop = 1 to max step 1 asciiName = asc(mid(strUserName, intLoop, 1)) if newAsciiName = "" and newAsciiInitials = "" Then newAsciiName = asciiName 'newAsciiInitials = asciiName else newAsciiName = newAsciiName & "," & "00" & "," & asciiName end if If intLoop <= 2 then newAsciiInitials = newAsciiName & "," & "00" End If Next updateName = Split(newAsciiName,",") updateInitials = Split(newAsciiInitials,",") strMoniker = "winMgmts:\\" & strMachineName & "\root\default:StdRegProv" Set oReg = GetObject(strMoniker) userNameSet = oReg.SetBinaryValue(HKEY_CURRENT_USER, strOfficePath, "UserName", updateName) userInitialsSet = oReg.SetBinaryValue(HKEY_CURRENT_USER, strOfficePath, "UserInitials", updateInitials)

I tried PARSql on some Fujitusi Pocket Loox 720's a while back which was 'ok', but we are now about to move to Lesson Monitor. Are there any specific requirements to run it over a PDA? Will 802.11b be sufficient? I seem to remember back when I last looked at PDAs there were very few 802.11g PDAs. What spec are the PDAs you guys are currently using with Lesson Monitor? If your average PDA will be fine, ill probably look to getting the replacement to the Loox 720.

As much a dab handy I am with a soldering iron, I havent a clue where to being, or even how, testing for this problem.

Yeah but 17" takes up more room, not a luxury we have in some suites.

The backlights on our 15" Fujitsu Siemens are starting to fail so I was wondering if you lot had any decent 15" monitors to recommend? Native Res 1024x768 (not that ive seen many 15" that arent) Looking at sub £100 ex VAT It would be useful if they were long term models so the ICT rooms dont look a mess with random makes/models as time goes on. Obviously this isnt always possible but I would like to continue with the same model where possible. We have just recently bought some HP DX2300 PCs which are black, so black monitors would be preferred as Im hoping to get some more of these PCs in the summer assuming they arent phased out.

Usually it is SOLUS but we do still get the odd CD, probably for those larger updates, although hopefully we will be on 100Mbit come March and it shouldnt be a problem!

Yeah thats what ive done so far and what has caused this problem. I think I just need westfield to try and upgrade using the SQL SA user/pass to force out any logged in users. Bit odd how it picks up 'sysman' as a logged in user and refuses to upgrade as you need sysman to start the upgrade process. Knew I should have stayed in bed yesterday.