Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

spc-rocket

Members
  • Posts

    800
  • Joined

  • Last visited

Everything posted by spc-rocket

  1. Have you got a recipient limit set on the user that is trying to send emails? or is the recipient limit part of a policy? 1) To check go to AD Users and Computers on your exchange server and then find the user (the one trying to send emails) and double-click on the user to bring up the properties. 2) Click on the Exchange General tab 3) Click on the "Delivery Options" button 4) Under the section of Recipient limits which option is selected? Use default limit or Maximum recipient? If its use default limit then you may need to look at the policy. HTH, Ash.
  2. Hi, How you got Bromcom system install on your network for e-behaviour or registration (Winfolder)? If this is the case, the ldf file will grow and grow and the only way to shrink it to do a backup using the DBAttach utility provided by Capita. HTH, Ash.
  3. Hello All, Apologies in advance if this is already covered in another thread (i have tried searching but couldn't find the right info). I want to know if its possible to give staff a copy of our Office CD with our (school's) license so they could install on their home PC. We don't use Schools agreement as we opted for select licensing model. I've been look at the microsoft site regarding this info and it appears that you can but just wanted to know if any of your come across this situation? http://www.microsoft.com/uk/education/buy/licensing/buying.mspx Look under the "software for staff" section. Ash.
  4. Hi there, You should be able to image the server using Acronis or Symantec BackupExec System Recovery v6. and above. Remember imaging does not have anything to do with raid except that fact that when you restore your system you will need to add in the drivers of any scsi radi card if and only if its different to the scsi cards that were present when the image is taken. So in a DR scenario you would create the raid array from scratch and then use the utilities provided with the relevant software to restore the partitions. Both of the products are good in the sense what when restoring it will allow you to resize the partitions if you wanted to before restoring the data. The Symantec product can also take image of dynamic disks whereas i think the acronis one doesn't - not in v9.1 anyway. Ash.
  5. I think there is an 8Gb one available as well (not sure about UK at the moment) which is windows compatible and Asus are looking to sell these PCs with windows pre-loaded. http://eeepc.asus.com/en/news10192007.htm Ash.
  6. spc-rocket

    Exchange

    I think Exchange 2007 does'nt need many servers as some people are mentioned as you can install all the roles on one box. The server does need to be high-spec i.e. dual/quad core with min 4Gb RAM. We are looking to upgarde our exchange 2000 box next year and will be considering migrating to 2007 rather than 2003. Ash.
  7. Hi, I'm watching this thread ith interest because we have got to migrate data from local disks to SAN and need to keep the shares, permissions and also the files. The SAN will deliver basic disks to servers but what i need to do is to copy the files from the current drives to these basic drives that we will be using from now on. My plan is to : 1) Restore the data using veritas backup to these basic disks (SAN) 2)Manually create the approprite shares 3) Use permcopy to copy the share permissions 4) Change old drive letters to different letters 5) Rename the new (SAN) drives to the correct drive letter Any thoughts as to what may go wrong?? Plan B: 1) Copy data using robocopy from old drives to new ones 2) manually create the appropriate shares 3) Use permcopy to copy the share permissions 4) Change old drive letters to different letters 5) Rename the new (SAN) drives to the correct drive letter any thought, suggestions welcome. Ash.
  8. If you're struggling give a me call and i'll check out configuration and rules for this. PM with your number. Ash.
  9. Hiya, Have you looked at the monitoring section and under loggin what does the live logging display. in order to narrow it down the server you can use the Client IP and use the exact option and enter the IP address of the exam server. Then start the query and try to login using the exam software and see what ISA is up to. You can enable different columns to be shown and it may tell you how isa is handling the request and if there are any errors or other rules that are blocking or causing it to fail. Ash.
  10. Hi, We have the new verison of the software setup and the server doesn't hav any issues and its working fine via isa server (2004). The server is a secureNAT client and does not have any firewall client installed on it. The rule does authenticate but the user logged into the server has access to the net. Sometime developers will not use the proper way of negotiating things proxy servers and this is what sometime issues like this happen. Ric is correct, create a rule (to test this out) at the top of the rules and allow HTTP, HTTPS FROM the exam server (you will need to create a computer object for this) TO External network and leave the users on All Users (anonoymous). See if this solves the issues. Also check that your HTTP deep packet inspection section has not got any filters or extentions block i.e. HTTP signatures, payload etc. If the above works then there is some issues with the user authentication if it doesn't then the issue doesn't seem to be isa. HTH, Ash.
  11. Hi guys, @Dos_Box sent you a PM Thanks for the responses i was quoted £16.50 or something for these. Thanks! Ash.
  12. Hi Guys, Not sure where to put this, i'm looking for some APC serial cables for simple signalling. 940-0020 cables? The prices i've been quoted for these are really silly and would not like to pay too much for these. hasy anyone got any spare or older ones they no longer need? TIA, Ash.
  13. Hi all, Just wondering what your recommendation would be on this. We will be getting our SAN installed during the half-term break and as a result want to move all our data on the server(s) to the SAN. Basically what will happen is that each server will get a iSCSI connection to the SAN array and there will be 3-4 LUNs per server for each of the partitions that we got on the servers. Now we want to move all the data from all the different drives (except for C drive) on to the LUNs on the SAN. The question is that there is all types of data i.e. D, F, G, H etc and there are user's shares on some of the drives so i'm looking at utilities or tools that can keep all the share info, NTFS permission and copy the files over to the other partitions. Now i've looked at the robocopy and that is one such utility that i have under consideration but i was thinking of restoring from backup? Any ideas/thoughts/suggestions welcome. TIA, Ash.
  14. Hi, I think some settings to do with authentication needs to be done via the ESM rather than IIS otherwise you will get the symptoms you are describing where it will override the settings at the next update interval. I'm not sure what kinds of things you need to do but see if you can do the settings from ESM rather than IIS and see if it holds the settings. HTH, Ash.
  15. - Terminal Servies for SLT only at the moment - 2X Application Server (to publish the apps - appears to them as local apps and seamless connects back end to TS box. - Outlook web access for email (this is to all staff + students) - Easylink (WebDAV) for My Docs + Shared Folders (this is to all staff + students) - VLE (this is to all staff + students) Ash.
  16. Hi, We are looking at this kind of setup as well where the 6th Form students buy their own laptop and when they are in school they will be able to access the internet, their my document and our VLE. We are proposing to use a completely seperate VLAN for this and use 802.1x authentication against a RADIUS server (IAS connected to the CC3) that will then allow them to use their normal network logon to login to the wireless network. What i mean by logging on to connect to the wireless network not logging on the OS as these will be configured by them we don't want that hassle. The unmanaged wireless vlan will be connected to our firewall and web filter and will filter out web access appropriately. For us its pretty easy or easier to setup because we are already utilising the vlans in our school. HTH, Ash.
  17. Hi, It could be STP, generall the rule is to disable STP on the ports that connects to servers, printers and desktops since these won't causea loop. STP should only be enabled on ports/interfaces that connects to other switches. On cisco you can turn on the portfast on the port to make it go into forwarding state immediatly and skip the STP calculation. Also have a look at the firmware for the switch and see if a newer version of the firmware is available. HTH, Ash.
  18. People who bash RM, usually have only had experience with a badly set up / badly run CC3 network. Andrew Not true we run CC3 across 750 stations (yes 750) and the software side is not too bad especially with lock down etc. Of course we do standardise on equipment from Dell and therefore could the build process could be better. Also if you notice many posts on communities forum you will find that people wstill have problems with the build process when the PCs are not from RM - seems to me they are trying lock people into buying RM hardware. Of course the RM will build find because they have tested this, if the build process for really flexible then there should be easier way to build non-RM PCs. Now obviously they have thought about the feeback and comments because CC4 will have build process based on better technology which is not only better but more managable and also well documented even outside the RM land. I'm making comments here because our team have a high-level skill set and therefore could see alternatives to the current RM build process and are actually thinking out of the box rather than drilling in the idea that RM process are great and wonderful because they are so much in bed with RM. Ash.
  19. The CC3 licenses even when bought in bulk is expensive. So rather than being £90 a shot it might go down to say around £65 each when bought with 30-50 or so i guess, - i'm commenting this on what i have found but i still think its expensive and few people have got a point. Now i have been trying to get RM to respond as to what is included in a RM CC3 license but so far they have now got back to me. Also they still instsit on puttin in the RM tutor (i'm not going to comment on how good or bad it is because our school does not use it) when some schools (such as ours) don't use it. They should be an option pick what you want rather than enforcing this i.e. take the printer credits stuff out for people who don't use it. The starnge thing is that from various people i spoke to some account managers do exclude tutor licenses and some don't so there is an inconsistancy on what they feedback to the customers. As far the RIS and WDS is concerned RM appears to have seen the light as their next version CC4 will be based on WDS. Their current build process has to go down and the worst possible way to image/build PCs in history in my opinion. Ash.
  20. Hi, DMcCoy is pretty much spot on with the guidance. Your core should be good enough to do the inter-vlan routing (certainly i wound't use a router to do the routing as its software based rather than ASIC with a Layer 3 switch). The only thing to look out for is the gateway of last resort which should point to your internet router or your internal firewall/proxy server as the switch (core) will not know how to router traffic to say the bbc.co.uk servers so you need to tell the core switch to route all unknown traffic to your router/firewall/proxy server for internet access. A bit silly by HP to charge extra for multicast routing and the CLI is almost the same as cisco which makes me think they are actually buying some of the stuff from cisco in a OEM thing . We a similar setup to what localzuk is trying to do. It does work and makes a hell of difference to broadcast reduction not to mention performance improvement and administration/management. Another think to bear in mind is the subnets, in fact i would start with this first i.e. work out which subnets will be assigned to which vlan and then you can get into configuring on the switches. Ash.
  21. Thats usually the good practice but not strictly true, the drive needs to be larger or equal to the other drive. Some drives althrough they may say 120Gb it may be slightly less than that or more than the exact 120Gb. Even few bytes will cause it not to pick up or use it to rebuilt. So take a note of the good drive size (in bytes) and then compare the size of the replacement drive and see if these match. If you new drive size is greater than your good drive then that's should be fine but if less you're out of luck and will need another drive that is equal or bigger. HTH, Ashok.
  22. Hi, We also use TS for remote sims access. We have bought a new server just for this task although at the moment the access is only open to SLT members but that my change. We don't allow them to connect to TS directly using the TS box but use a software called 2X Application Server which allows you to publish the applications to the users so whrn the user is accessing the applications on their remote PCs they think its running on their local machine i.e. no remote desktop window etc. The 2X Application server in the background uses RDP and TS but has its own RDP type client that supports SSL so we use this to encrypt the traffic. There are other ways to encrypt the traffic i.e. tunneling through SSH etc but we found the 2X Application server easier to use and deploy both in terms of from administration and users' point of view. The TS license does cost but the solution works. We also have FMS available to our bursar as well so he can work from home if required. Ash.
  23. Can't you image it and restore it to your bare-metal new server? I know there are imaging utilities out there that will allow you to restore your server image to new and different hardware: - Symantec Backup Exec System Recovery - Acronis True Image Server Edition You could also do an image with one of the system rescue disk (linux) to image it and restore it to your new server and then repair the windows installation to pick up the mass storage devices etc. This image process will save a lot of hassle as it does not need to rejoined to domain, sids etc will be migrated as well. Ash.
  24. Hi, Isaserver.org is the best place for ISA Server resources, tips and tricks etc. What you need to do is to have the county's IP bound to the external interface of ISA and your private range specified on the internal range. Ash.
  25. spc-rocket

    BSF Meeting

    Hi guys, I think there are too many people making assumption regarding BSF without having real facts or having knowlege of BSF process. I'm going to wait untl Tony has uploaded the notes but will say that some the assumptions people are making are clearly wrong or misleading. As Russ mentioned no two BSF projects are the same and people really do need to understand this point to the T. If you are nearing the BSF at your place i suggest that you get more info from your LEA as possible and have regular meetings with them to keep yourself updated with what's happening. Ash.
×
×
  • Create New...