spc-rocket

@Russ Not on free radius, but we made a guide for Windows 2003 IAS (MS Radius server for CC3) could porbably give you ideas. http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html Ash.

Hi, I think on your default VLAN you may have the tagging done incorrectly, i.e. you said no untagged 13-48 well these ports are later untagged i.e. connected to stations i'm presumming. Also vlan 20 and vlan 1 shares some ports so that could be confusion it as well. Ideally if the port is connecting to servers, printers, and other end user devices then it should be set to untagged i.e. statically mapped to a particular vlan. If they are connected to other switch then it should be tagged because tagged ports will allow to carry traffic from multiple vlan on that link/port. Ash.

Hi, I agree with EDU-IT if that the first downtime you had then i would continue with them to be honest but you may want to mentioned that someone else is offering you 100Mb for £14K and see what they come up with i.e. can they match it or offer more for the £9000 i.e. say 20mb or 30mb etc. I would push VM to get you a better deal really i'm sure they don't want to lose a customer and will probably be willing to increase the bandwidth. Worth asking. Ash.

Hi, You can use the new installers of fms to install the FMS on a 64bit system. We tested this on Server 2008 R2 with remote apps and its working correctly. To get around the error of commandpulsar.exe you need to create a junction point in C:\Program Files\SIMS. You can use the tool Junction to create and remove junction point. So basically what the junction would do is create a junction at C:\Program files\SIMS (this is the native 64bit program file folder) which points to C:\Program files (x86)\SIMS. Once you do this you don't need to do the change in start 7 etc and it will not display the command pulsar.exe error. HTH, Ash.

Hi, Yes you need to do this because without IIS you can't create a certificate for a website. The way you do it at the moment with the actual server having a cert from the internal CA and then isa having the public facing involves looking after two certicates along with its renewal, expiry etc but if you are managign this well then you can continue to use this method. The otherway to do it would be to use a certificate enrolment site but this will only allow you to generate the CSR against a internal CA. You can get wildcard certificates that is bound to a domain i.e. *.ourwebsite.sch.uk which you can use on the isa server to create a listener for multiple website. This may make it easier to manage just one external facing cert rather than having one for each website. Ash.

Hi Duke, You can create a dummy site in IIS and then use the certificate wizard on that and use that to generate the CSR. After the certificate process is complete you can just export the cert with private key and delete the dummy website from iis. Ash. Ash.

Hi, You need to generate the CSR on the server which is running the website i.e. the server that you have published in ISA. Once this is complete and you have obtain the the response from the CA to complete the certificate. You need to export the certificate with the private key from the webserver and import it into ISA after which you will be able to use in a Listerner for the website you are publishing. Make sure you import into ISA's Personal store i.e. Computer\Personal. Hope this helps. Ash.

Hi, Perhaps this hotfix may help. A Windows XP Service Pack 3-based client computer cannot use the IEEE 802.1x authentication when you use PEAP with PEAP-MSCHAPv2 in a domain Ash.

@Ian, Your trick has worked, we now make it wait 15 seconds using a batch file and then lauching the FMS Application. It working correctly now and printing as well Thansk for your help. Ash.

Hi Ian, Thanks for the info, that seems a good explaination. I'll try creating a batch file to delay the lauch of the application i.e. using the sleep command and see how it goes. Ash.

Hello All, We are doing a proof-of-concept based on the RemoteApps technology which is available on Server 2008 R2. We are trying to publish the SIMS applications including FMS. Everything is working correctly except FMS is not mapping or redirecting the printers that the remote user has. Printing from sims is fine and the printers in word, and sims are fine i.e. it correctly maps the default printer of the remote user. Obviously FMS complains if there are no printers installed so we installed a dummy printer on the server. When a user tries to print, it sends the print jobs to the local printer installed on the server rather than the user's re-directed printer. All the TS easyprint components are enabled. Any advice or suggestions? TIA, Ash.

Hi, Is is the case that users behind the isa can't get to the eportal or are you trying to publish (i.e. make services available from your school) to outside world? If your users behind the isa server can't access the site then you need to extend the SSL tunnel port range. 443 should already be done. Have a look at the link below for more info, including a tool you can download to do this. Port 8443 blocked Ash.

Hi, You should use the untagged on C19 as workstations and servers should be set to untagged which means they belong to one vlan, at the moment your C19 port is tagged for two vlans i.e. carrying traffic from multiple vlan. The tagging is usually done on swicth to switch connections not on end devices. Ash.

Hi, I would use Radius server to authenticate the devices if possible. its not too difficult once you know the terminology etc. Check out the guide on the following link. http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html Ash.

Hi, Will try the reparse point method. Thanks, Ash.

Hiya, Good point, didn't think about that, just tested it and its not machine specific it does cause issue for other users on windows xp stations. I've reverted it back again now. Bummer! back to the drawing board again I suppose another way to do it would be to copy the sims .net folder into the proper program files (i.e. c:\program files\sims\sims .net) and when there is any upgrades just do the copy again i.e. overwriting. We've tested this and it seems to work i.e no commandpulsar.exe error and the rest of the users on 32bit OS are fine as well. Its a workaround until capita fixes this for 64bit installs. Ash.

Hi, We are testing sims.net on a windows 2008 R2 remoteapps at the moment and have resolved the issue of the commandpulsar.exe by carrying out the following procedure: 1) Load up FMS as usual and login to it 2) Let the error message of commandpulsar.exe not found come up and OK to it 3) In the FMS Application goto Tool menu and select Star 7 settings and update the path i.e. put in c:\program files (x86)\Sims\sims .net. 4) Save the changes and restart FMS. The error will no longer appear now. Hope this help anyone who's having this issue. We fixed it by looking at this site and it mentioned about this error: Helplines Online: July 2010 - about a third way down is some info regarding this error. This actually says to untick the Star 7 settings but we just modified the path and it works happily. Ash.

Hi, What you need to do is to backup the drives except the C drive on the server and then attach the san to the CC3 server as as iSCSI and then map a LUN for each drive to the server. Then give the LUN drive a different letter temporarely i.e. X and restore the data from backup to X i.e. if you backed up the D drive restore to X and do for all the other drives except C drive. Then change the drive letter of the X to D and so on and rename the old drivers to other letter than what they are. What this will do is make the drive which is a LUN on SAN appear to the CC3 server as a normal drive that is physically installed on the server except it is not but is on the SAN. This way you don't need to do any AD user pforile or drive mapping it is taken care of it as the drive just appears as a local drive to the CC3 server. This is the same way RM converts their customers to SAN and is what we have done 3 years ago here and its been fine. Ash.

Hiya, Can you please elaborate on what we should be looking at in regards to the sims.ini file i.e. what to change etc? Thanks in advance, Ash.

I wish the web filtering companies do a server license so the per user or per number of ip address restrictrion is removed altogether. Commercial companies who want to make money and that's what they are there for but trying to look after your customers in terms of their requirements (not just technical but licensing and support) would be really great. I think a lot of web filtering companies do offer good products but the licensing is not flexible enought or it just cost a bomb to get an appliance without restriction. Some fair pricing structure along with flexibility and some common sense on prices (esp. in a recession) would be greatly advised to all companies involved in selling their products and services to the education sector. Ash.

Hi, Yes agree with others on this, you only need the IP for the DNS server and use this for dns settings for each vlan. Ash.

Yes that is correct, ideally you should disable the STP on the access ports i.e. ports that connects to workstations, servers, printers or any other end device. It should be enabled for switch to switch ports. in Cisco this is called portfast which put the port into forwarding mode immediatly and does not wait for the loop detection process to complete. Ash.

@rsenior I think from this year onwards the HT grant will be done away so i'm not sure if schools would need to pay for this out of their normal funds. Ash.

Hi, We had some emails from county regarding the EIS service. It will be available to schools who are NOT on the embc but there will be a small charge - exactly what the small charge is for is anyone's guess but i'll find out this tommorow. I would have thought that moving eis to embc platform and then charging the schools is not really appropriate because it the info on the main county's website is free. If the creation of accounts on embc platform requires funding then it may be this cost but i'm not sure on this. Apart from that we use AVCO - the secure file transfer to and from county hall for files and this is still working as before i.e. no embc connectivity needed. I agree with the others that services such as remote sims backup etc may require the connectivity from embc however we do not require this service at present or for the foreseeable future. Ash. Ash.

@timbo343, That is not a bad price, can i ask which version of sql server is that you have. Thanks, Ash.