spc-rocket

Hi there, How about a hosted av and spam filtering. We use a company called email filtering system from Email protection agency. Basically they provide a hosted av and spam filtering which you can control to create rules etc for your domain. The way this works is that your mx records for your domain points to them and any email that comes to your exchange box is already scanned for viruses and spam filtered. Your exchange box uses the hosted solutions' MTA as a smart host to forward email and it recieved emails only from the hosted solutions provider's MTA so you only get screened emails which is virus and spam free. The cost is not too bad either and you also don't need to worry about installing anything on the exchange box other than the exchange solution and a file system AV to protect the file system. EPA - Email Protection Agency | Email Filtering Services They also do archiving as well so all emails sent to your domain is archived even if they are spam etc. Ash.

Hi, On your DHCP server you will need to create a scope for all your subnets i.e. vlans so when the dhcp is handing out address it knows which scope pool to provide ip address from. HTH, Ash.

Hi, Yeah firefox will still display the error because they (mozilla) have not yet put the global root CA for the IPSCA on their CRL list and hence you get the error. Both IPSCa and mozilla are working on it and it will be added soon, at least this is what i have read on the forums. Ash.

Hi, You need to install both the global cert into the Trusted Root Certification authorities and the Level 1 cert in the Intermediate Certification authorities on the servers where the certificate is bound to a site. This is detailed in the instructions but once this is done then the error you seeing with be gone and the cert will be fully validated. Ash.

Hi, The users don't need to install the root certs because if they have access to windowsyodate.microsoft.com or download.microsoft.com then when they visit the page that is encrypted the OS will automatically download the root cert automatically. In networks behind the firewall or proxy servers the *.download.microsoft.com could be added so it allows the browser to connect and update the root cert automatically. At the moment the IPSCA will work with IE but Firefox has not added the root certs on to their list and you will get cert error using firefox. Ash.

Hi, If you have AD then can you do the authentication using AD directly and not LDAP. You would only need to tag the group attribute this way to lock down access to certain AD groups if required. Ash.

It depends on how the school moves forward when migrating version of office etc. At our place we are on office 2003 license on select agreement. For the last few years we have been buying office 2007 pro licenses (because you can't buy office 2003 licenses) and using the downgrade rights to install office 2003. This does make it a tad easier on the cost side that when we do plan to upgrade to office 2007 we will probably more than half of the office licenses already there and will only need purchses the other to cover the site. It all depends on your scenario and how often you migrate to the version of office. Even if office 2010 comes out that we will not be upgrading to this i.e. too new, compatibility etc. For us it works because the bulk cost (i.e. £9-10K is every 4 years rather than annually which helps.; For the OS license the SA does make it easier but then again how often is this done? We will probably cop a fair amount of cost of upgrading to windows 7 but this will be one-off cost of few years anyways so it still works out cheaper. Again i should re-iterate this is for our school how we manage the licenses, all school's requirements are different and therefore you need to think about how it will fit in which what you want to do in regards to ICT strategy for HW and SW upgrades/migrations etc. Ash.

HI, You need to create a rule in isa which blocks access to flash sites using the content type tab and define flash content. (sorry dont know what it is exactly called). The in the To box have the External network. In the exception box create a domain set for sites you do want to allow flash content. This is how we do it here and it works fine. We created two content types called Flash Based video which has the following criteria. Selected Type: video/x-flv and Flash Content with the folowing type: application/x-shockwave-flash .swf The above rule will be based on a deny access option. Let me know if you want more info. Ash.

HI, You don't need to use machine authentication if you don't need to you can use take the tick off where it says "Authenticate as a computer when computer information is available" in the Authentication tab. In this case you would only need to create a policy for users who will be allowed to access the network. Just thinking about this if you not going to authenticate using machine you may find that some login or start scripts may not run. I've never tried this so i don't know. Ash.

Have a look at this thread. http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html Ash.

Does this get around the kids bringing in flash games on memory sticks and pen drives? I know that you can ban the flash games. The problem is that flash can't be completely blocked either because its needed for DIDA courses etc. An application called GameKiller2 is a package that has been developed for this and so far its worked well. What we do at our place is block flash usage for students use using ISA server 2004 (Flash MIME extension) and whitelist any sites that they need to have flash and this is working well. What i like to have is some kind of host based app that kills the games on signature and the only one is gamekiller. Still if the smoothwall web filter can sort out the real-time access of flash games sites then this is bonus as well. Ash.

I think the problem sometime with it is that the computer account's password expires and then it can't connect with radius. Plugging in on the network (wired) will correct this as the computer account's password is correctly update and then future wireless logons succeeds. This will happen in 802.1x authentication with radius server. Usually the password would expire in 30 days time or something. Found this links which states that by default the computer account's password expires every 30 days which may explain things. http://technet.microsoft.com/en-us/library/cc781050%28WS.10%29.aspx I'm not sure if MS did a patch for this not. Ash.

Hi, You can do this on Exchnage 2007 by using the ADmodiy tool to make bulk changes to each studen't mailbox. If you set the limit on each mailbox it will override the global limit. This is what we done at our school by setting the recipient limit to 1. You can find the setting by going to Exchnage Management console and then expanding Recipient Configuration | Mailbox. Double-click on the appropriate user and select the Mail Flow Settings and double-click on Delivery options and set the appropriate number in the box next to maximum recipients. If a there is no tick next to maximum recipient then put a tick it the box to make that setting active. The above is the manual way of doing this, but if you use ADModify, you can make bulk changes to all student accounts say. HTH, Ash.

Hi, Not that it answers your question, but can i ask how many users you are supporting? I would have thought one powerful server would be enough. We ahve Exchnage 2007 server serving around 2700 mailboxes (inc. staff and students) and it seems fine. It has 8Gb RAM, Dual Xeon ans SAS disks. Ash.

Hi Guys, On an affected workstation do the following. 1) Login as an administrator and goto Start | Run 2) Type in regedit in the run box and press enter. 3) In the registry editor navigate to the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl Now Create a key under the FeatureCopntrol key called FEATURE_BLOCK_LMZ_SCRIPT 4) Now click on the newly created key and on the right hand side click new item and name it iexplore.exe as a DWORD entry. 5) The value box for the new item should be all zeros. 6) Now login to a site and test as a normal user the flash site that is now working. If the above works then you can deploy the reg fragment onto the usertype if you're on CC3 or by editing a GPO onn vanilla. HTH, Ash.

I've tried it from home on my BB connection and its working as expected in FF so looks like its something at school. Can i ask how is the menu done i.e. does it go to any sites which may be blocked i.e. ads etc. Ash.

Hiya, I'm using Firefox v.3.5.3 and there are no yellow exclamation marks. I wonder if something is being blocked by the web filter. The URL is just http://www.edugeek.net Ash.

Hi there, I seem to be having issues opening the little sub menu that comes up wioth the edugeek icon is clicked on. When i click rather than the menu being opened nothing happens. Also when viewing the threads, and say i want to send a PM i usually click on the person's name and a sub menu appears with lots of options. This does not happen and it actually takes me to the person's profile. Any particular reason why this is happening. Thanks in advance. Ash.

Check this out --> How to disable power management for a network adapter when you deploy Windows XP Ash.

Unfortunately the patch didn't work. So its back to the drawing board. Ash.

Hi Guys, We are having the printer issues when using exams organiser. Our county support team have emailed us a patch (looks like a capita patch). The patch number is 13583 which we are going to installed today to see if it cures the problem. Ash.

Exclaimer is another good product that has good exchange 2007 support. Have a look here > Exchange Disclaimer - Email Disclaimer Software for Exchange 2003 and Exchange 2007 Fairly cheap for education institutions but do enquire about it if it meets your needs. Ash.

Is your BE configured to backup the individual mailboxes i.e. do you have the setting enabled that allows you to restore individual messages and mailboxes? If yo this is called GRT (Granular Restore Technology) then it may take more time to backup and also more disk space as well. Ash.

Hiya, Yeah we are getting this problem but with exams organiser. When the performance analysis is selected from the results menu and the user tries to print the whole exam organiser just crashes out and you're at the main sims page. We tried this as admin user (on the network) and also as a sims admin user its the same. Happening on all stations where sims is installed. Got to be a sims thing! Ash.

Hiya, Our exams officer has some issues printing at the moment from exams organiser. Not sure what it but one of my guys here have passed it to our county support team. Ash.