spc-rocket

Hi, This link contains information about how to change the password expiry time etc - may be helpful. Q: Can the password of a Windows machine Ash.

Hi, The issue you describe of wireless laptops dropping off the radius and ias is due to the expiration of the computer account's password. This password cannot be renewed on wireless connection and hence it does not allow the laptop to connect when performing authentication. When you connect to the wired network the computer accounts password is automatically updated and futher connection wired or wireless will work until the password expires again. There was someone who posted how changed the GPO so that computer's password does not expire so frequently, the default is around 30 days if i remember correctly. Ash.

Fair enough Ric but it would be would good if the conferances are rotated so next year it will be somewhere different and this gives the chance to people to attend more conferances - this again is entirely dependant on availability of course. Ash.

Hi, I'm sure this has been asked before, but why is the conferance always in the north? I like to have it central somewhere i.e. Birmingham where everyone can get to fairly easily via trains, buses or car etc. Please before anyone says that trains are cheaper and so are the hotels- STOP!, that is not the point i'm making. Ash.

You can use the 802.1x authentication with MSCHAP v2 and TKIP. This only requires a cert to be issued to the IAS (Radius) server only and does not need the certificate deploying to the client unless they are not part of the domain. More details and a step-by-step guide that i wrote. http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html Ash.

The only other way i think you may be able to do it would be to use the mac address filtering on the APs - yes i know its easy to forge these but at least it makes it harder. When this is done, the iphone's NIC's mac will not be in the list of allowed mac and therefore it won't present the cert and authentication prompt. on the side note, on my guide that i wrote for configuring radius with 802.1x authentication for ias the registry hack to only do computer authentication is there somewhere - i think its called machine authentication or something similar in the guide. Ash.

Hi, can i ask what will happen to funding for RBCs? will this be cut as well or is this a seperate thing. The problem i seem to have is that the Harnessing Technology grant is always taken up by LAs to fund the RBC cost etc. where as sometime people have to realise that there are schools who are not with any RBCs as such and therefore should be given their bit directly to the schools. The problem why the above doesn't happen in some LAs is the fear of many schools following the same model i.e. getting out of the RBCs and going elsewhere. The question to ask here is why do you think they will leave RBC and go elsewhere, is this due to the service reliability, features offered, cost or feeling of locked in? Throwing the question in the open. Ash.

I thought the very existance of Becta was at stake, the fact they have still give £15m seems a bit much, a £5m would have been okay. They did confuse some people and the one-site-fits all approach adopted by LAs after recommendation from Becta was a real bad one in my opinion as this really did not help but hinder things.

Hi there, If you want to restrict it to the domain joiend computers and users then you need to create additional security group on the domain which contains the users you want to be able to connect the wireless network and the same for the computers. You then use these groups in the IAS policy rather than domain users or domain computers. Ash.

Disk-to-disk-to-tape here. Monday to Thursday - differential (LTO3 tapes) 1 Tape required for all servers Friday Full Backup - 2 LTO Tapes in Dell PowerVault AutoLoader Tapes Stored on Fire-proof safe. We do it by weeks i.e. Week 1 to Week 8 for the full backups, after week 8 the tapes are used again in the full backup. The differential tapes are rotated as normal on Mon - Thursday. Admin server - seperate tape backup (in the same strategy of Defferential on M-T and Full on Friday) AIT3 End-of Term Backup (2 Tapes) - Full SIMS End-of tem backup (burned on to DVD) and retained for two months Software: BackupExec 11d (will be updating to 12.5 soon) installed on the backup server (3Tb) which is attached via SCSI to Dell Autoloader. Ash.

Hi, Are you backing up the servers to disk first and then on to tape? If you are backing the servers to disk at the same time it will slow down the backup because 1) it is multiple server writing to the same set of disks and 2) they are all pulling the data from san (if you have a san). It depends on what speed the disks are as well, SATA disks tends to be slower in RPM but offer larger disk capacity where as SCSI are faster but offer less disk space and SAS is similar to scsi although they are now starting to arrive in larger disk capacities. Ash.

Hi, Can i ask what connection to the internet does CLEO have? i.e. as CLEO provides connection to various schools so the fact the lines are 100mb or 1Gb does not really mean they are getting 1Gb of raw internet, this is to the termination point which is obviously helpful in accessing solutions based centrally but the main feed to CLEO and other RBCs will be shared by all schools even though they have 100mb connection. Ash.

Hi Mark, Yeah i think we may go down this route if its possible because this would make more sense really for us. Another pain is not know which hotfixes not to allocate anymore. Reading the cc3 sp3 documentation it mentions that certain hotfixes will not be needed as they are included in sp3 but does not go much into details of which are needed post sp3. Ash.

Its a shame they didn't slipstream the SP3 onto the build area, would have saved a lot of hassel with the HD audio drivers etc and also not having to apply it once the station is built with sp2. Can i ask is it possible to slipstream SP3 on CC3, has anyone give it ago or does this break things? Ash.

What are your policies like in radius server? Does it cover both the computer account and the user? Ash.

I agree with torledo, i would not see the interest rate rise until at the very least Nov this year and then it may be only to 1%. Personally i don't see the interest above 1.5% for the next two years at the very least. The country is in over £800bn in debt and so should have some cuts as the situation just gets worse if nothing is being done about it i.e. like labour is doing at the moment - nothing!.

This depends on how many users you are supporting on the exchange box as many roles can be installed on one server and replicated to another server. The prev. post by Domino seems very interesting that you need 15 servers to accomplish a simple replication seem really strange. I would have thought that you could combine the roles into one server and only have the edge transport installed on a seperate server which will be responsible for your outgoing and incomming mails and then redirecting them to the right server. Ash.

Hi, No probs. Yes it should block games sites as well, but obviously not games which are bough on memory sticks, in their my docs etc as these downloaded games. It should block access to flash sites that are on the net. The thing to do here is to create a domain name set and add in all the white listed sites which contains flash so they are not blocked by this. This will make it easier to manage the whole thing i.e. if you have a student saying that they can't get to display flash content on a site and the site is okay then you just add it to the whitelisted domain name set and it should be accessible. Ash.

It should be still possible to attach or reconnect the mailbox to another user so i guess you can create another user with the same info in RMMC with obvioulsy a different username and see if you can attach the disconnected mailbox to the new acccount. If this works then you can move the important message to your new mailbox by dragging the emails, contacts, calendar entries etc to the new one. Worth a try. Ash.

Hiya, When did you delete the account? i think the default configuration is 14 days i.e. you have 14 days or so to recover the mailbox. It may take some time to show up in disconnected mailbox. To force it it show carry out the below: Open up a powershell and type in the following command. Clean-MailboxDatabase "Database name" you may have to specify the full path to the database i.e. first storage group\ Give it a go and see if it shows up in disconnected mailbox. If it still doesn't show then try restarting the exchange mailbox assistance service. You will have to close the EMC and then reopen it after carrying out the above procedure. HTH, Ash.

Hi, Its strange because when they fail, it hasn't even completed putting the system (tools) packages on. The app agent would run as part of the build and would try to install the fix and then you get the blue screen in the background and app agent diaappears. The blue screen would stay there for around 30 min or so and wil return to the xp native login screen. very strange, on some station i have manually renamed the catroo2 folder and restarted and the fixes were apply correctly but it dosen't work on all stations that fail to install the fixes. This is really been a long call with rm now (since summer last year) and is really getting fustrating. Ash.

Hi Michael, I've built it many times and its doing the same, we have a few test laptops here and i'm building this many times and it gets stuck and you will get a blue back ground and after 30 mins or so it will return to the native xp login screen and will not continue. If you restart the station then it continues to build but any hotfixes don't go on. The application are fine i.e. the msi, office 2003 etc. Its really strange, i gto a call open with RM at the moment and last thing we did was to move the firewall client package to the tools section. Upon further research it seems to me that something is mucking up catroot2 by the looks of it so if i stop the cryptographic service on the station and rename the catroot2 folder and start the cryptographics service the hotfixes are going on by the looks of it. I know its a process or elimination but its been so illogical that its really is difficult to trace this to anything. Ash.

Try this guide for setting up IAS in 802.1x authentication. http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html Ash.

Hello all, We have a CC3 network and we're fiding that when we're building stations the MS hotfixes that have been allocated do not install on some stations. Some stations would install these fine other won't and the below error is located in the appropriate log file for the appropriate hotfix in c:\windows Its happening on some stations and not others even when they are the same model, spec, connect to same stations and same server! and has the same packages allocated to it. What we have found is that if we take the isa firewall client off then it works but this shouldn't be the case as it used to work before. The strange things is that the ini file will show it as installed when it hasn't so its not possible to rely on the ini file status. Putting them to install pending does not help either. Just wondering if others have had issues like this. Thanks. [KB956744.log] 0.547: ================================================================================ 0.547: 2010/02/04 17:49:00.562 (local) 0.547: c:\d17280f898306e1d1f65\update\update.exe (version 6.3.13.0) 0.547: Failed To Enable SE_BACKUP_PRIVILEGE 0.547: Setup encountered an error: You do not have permission to update Windows XP. Please contact your system administrator. 0.563: You do not have permission to update Windows XP. Please contact your system administrator. 0.563: Update.exe extended error code = 0xf004 0.563: Update.exe return code was masked to 0x643 for MSI custom action compliance.

Can you please elaborate on how this is all setup at the moment? are you using a radius server? what kind of authentication and encryption have you got set for 802.1x authentication? i.e. PEAP with MSCHAP v2? or TLS? Ash.