chrisbrown

Great to hear! Glad you got it sorted. Weird! I just used the in-line image uploader that's part of the forums...

Is "special permissions" ticked on the simple security display? Ensure your permissions on the root look like this:

Microsoft's online doco is good, but there are a few gaps here and there, which is why there's such a thriving MSITPro community ;-) I'm intrigued by your comparison of PowerShell v1 versus v2...how are you switching between versions? It's not something you can just switch between on one box. I only use PowerShell v2 (and as of today, v3 CTP! -- excited!) and have not had any problems with the script. Note that PowerShell is still wrapped within the cmd.exe window, and for this reason you're limited to displaying your console in the same fashion as cmd.exe. Personally, I rarely run the shell itself, I usually have it nested within PowerGUI or the PowerShell ISE. I'd suggest you look into these for versatility and flexibility when it comes to PowerShell visuals. HTH

Mine is set up like this, and the script (with those two line modifications, which I'll write into my blog post shortly) works as required: (Creator Owner: CO, System: S, Domain Admins: DA, Administrators: LA) D:\ - CO: Full Control (Subfolders and files only) - LA,DA,S: Full Control (This folder, subfolders and files) D:\Students\ - Inherited as above - Students Group: Traverse folder/execute file, Read Attributes, Read Extended Attributes (This folder only) D:\Students\ajsmith - Inherited as above - ajsmith: Full Control (This folder, subfolders and files)

Hi danboid, I see you found my blog! If you have any issues with the script, please let me know. Also note what one commenter pointed out. You may need to change a couple of lines dependent on your requirements: (88) $inheritanceFlags = "ContainerInherit, ObjectInherit" (90) $propagationFlags = "None" Please do let me know how you go, hopefully my post can be helpful!

Sorry if I seemed blunt - I get pointed when I'm trying to write quickly and concisely

Not exactly... You could happily run Win7 machines connected to a Windows 2003 Forest/Domain Functional level. Some people will tell you you need 2008 for Vista and 2008 R2 for 7...but likely what they mean is that "2008 and R2 include the group policy templates by default for their counterpart desktop operating systems". That, and to edit/create certain group policies you must be logged onto a box with GPMC running on 2008 R2/7/2008/Vista.

You have two options, logon script or event log tasks. I'd suggest the latter.

Can you censor and then link (or PM me) your BAS-AS and BAS-NCC log files please? Also..never ever ever ever (ad nauseum) install BES on an Exchange server...But since you've done it, let's get this fixed. I'm familiar with this error, and the BAS-AS logs will tell more. Do you have a local authentication account (non-AD) available to log into BAS with??

The R2 books are out and definitely worth getting. I've sat 70-642 and am studying for 70-640. The exams for both are very R2ey..and R2 is quite different to 2008, under the hood. Also - I don't know where you decided that "it allows the connections (in AD) for Windows 7"...That's simply not true.

I asked this very question of an MCT, he told me that they should look at *other* DCs first: DC1 should look like: 2,3,1 DC2 should look like: 3,1,2 DC3 should look like: 2,1,3 However I've just put the word out to some friends on Twitter, we'll see what comes back.

Funny...I wrote a blog post on this just yesterday: How to Standardise Exchange 2010 Message Size Limits | Flaming Keys

Set-ExecutionPolicy AllSigned will still let the students run the console and execute one-line commands, just not run scripts. I'd suggest you block them using application control. I have command.com, powershell.exe and powershell_ise.exe in here.

I can endorse this. I've spent over 18 hours on the phone with RIM regarding this...

Why not put the script in the thread here so everyone can see it?

Even so, you could still do it using split horizon DNS...Which windows DNS won't do

ProCurve (2600s at least, they're the only HPs I've ever bothered with) do it too...

I'm afraid I don't understand. You create a new VLAN that goes as far as your core routing devices VLAN 222, IP range 17.24.20.0/24. Have a route on your router that has a default route out of your network for that VLAN, but will not allow routing between the networks. Simple stuff, really. You don't need a firewall to segregate two LAN segments.

My $0.02: Our tech to PC ratio is 1:830...Every student has a notebook...We do just fine!

The other option is to send a trunk down to the vSwitch and then use VLANing as you proposed. This would also work, and will not require you to have an extra firewall device running.

There's no reason not to virtualise almost any kind of server these days. With a decent Hypervisor and some fast storage, you'll often get better performance out of a VM than you will in a physical box. You also have the ever-useful advantage of being to throw more storage at the box faster than you can say holycrapIneedmoredisk. I've seen SQL, Exchange, File, print and DCs all virtualised very effectively with no performance hit whatsoever.

How about this? http://i56.tinypic.com/28slfzk.png Most fields within Group Policy preferences allow you to open a list of variables by pressing Shift+F3. Let me know if this helps ...

Is it just me or was a post deleted from here?

Cool. I hate to be callous but I'm so sick of seeing regular user accounts with inappropriately high permissions.

I used to live there, still have lots of contacts there, and am back once a month or so.