starscream

FIXED IT! Being the numpty that I am I didn't realise that Ranger has a setting for this under computers. I think that when I set this as a GPO setting it triggered the ranger setting to kick in. When I took the GPO away the ranger one stood.

I am already ysing GPMC on server 2003 It is just strange how it has suddenly gone to some sort of a default network usage message after I removed my custom one from the policy. Do you think it will go in time then? I have rebooted many times and it still stays there. I have checked everything to check that there are no policy settings elsewhere that could be doing this and there isnt. My only other thoughts are like plexer said, to wait or if ranger has decided to put this message on and there is an option to remove it in ranger, but I dont think there is.

OK I checked the logs and all is good. It even says that the security policy was successful. I have even removed the GPO completely that defined the setting. The setting I am having trouble with is the message at log on. I put up my own message warning people of an e-safety policy agreement. I decided I no longer wanted this and removed the policy but I still get the windows up when the computer has booted but this time it seems to have defaulted back to a one I did not write but is similar and says network information: logging onto this workstation indicates an acceptance of the network usage policy.... I did not write this and I have done everything I can to remove it. I have completely removed any policies with logon policy changes. I have forced the update and rebooted the machines many times and it just wont go away! HELP!!!

Actually I have just realised that offline files are enabled for staff accounts. Does anyone know if it is possible to disable this feature for pupils? Is there a policy entry for it as I can't see the option in ranger

What are your solutions for this? For example, you have a staff laptop that logs onto the domain (ranger) when in school but you need their work to be available when not connected to the network. Ideally the my docs and settings need to be synchronised when the computer is logged onto or logged off the domain. There work would then be available in their docs folder logged on as a local user on that laptop. Surely people have set something like this up. Is it possible without 3rd party software or do I need some synchronisation software to run when the user logs on and off the domain?

So do I need to turn off DHCP and assign static ip addresses to each MAC? Cos surely if I just add reservations for the mac addresses of allowed computers other computers can still connect to the dhcp server?

It dosn't look like ranger allows you to uninstakll packages you have deployed either! That is a nightmare! I installed the iTalc client and it was fine ont he first few machines but on the rest is crashes badly and needs to be removed. Guess I need to manually do it!

as in work experience person or something? heh

noooo! Thought I sorted all DNS issues.... will check the logs

I suppose this would be sufficient. It is only a primary school and it woudl just be so that non prepared machines would not have network access until I allow them. I would have to rely on my wireless security to prevent external machines connecting

direct in AD as they are changes ranger doesn't allow such as log on options etc... 1 DC

darn. Know any other way to mass remove software that wasn't installed using ranger or gpo?

Ah it took longer to refresh, didn't work first boot but the machines were rebooting as I did it. Will reboot em all again...

i don't! Should I? I'll try it now...

Couldn't find an answer to this when searching but my searching techniques leave a lot to be desired so if anyone could point me int he right direction to a post or offer some help it woudl be appreciated... I have my domain controller (server 2003) set up as the DHCP server. Now in an attempt to lock down our network I wanted to somehow set it so that the DHCP server only assigns ip addresses to an allowed list of MAC addresses so no rogue wireless or wired computers can access the network unless added to this list. This would protect us from anyone hacking into wifi points and any rogue machines plugged intot he netowork. Also means all machines connected to the network have my permission to be connected and nothing that hasnt been virus checker or prepared for the network will have access. I am positive that most of you will have a similar solution set up and I wondered if it was possible without 3rd part software. Again apologies if this is a repeated post as I swear I have seen a post like this before but can't find it. Any other suggestions for locking down our network would be appreciated also! Many thanks! Busy busy monday!

After I make a GPO change i run gpupdate in cmd and then reboot the machines affected, however, it can take up to 5+ reboots before the policy changes take effect. This is especially annoying when deploying software. Is there a way I can speed this process up? All my clients run SP2 and other updates, I heard firewall settings can affect this but I have used a GPO to disable the firewall so it shouldn't be a problem anymore. I also use ranger. Server 2003 Standard as DC Any ideas?

cheers for the reply mate. I think I will try that and see if it has any effect. I don't understand how ranger applies it's policies as it doesnt seem to affect AD at all. So far changes I make in GPOs override any ranger settings so I don't see why this wouldn't work.

Is it safe to use ranger package builder to remove previously installed software? I have a lot of software on machines that was installed before ranger was installed so it can't be removed from ranger. As ranger package builder creates an image before an install and then creates a second image after the install and then using the differences in files and registry entries etc to install software, can the same be done to uninstall software or is this bad practise. In theory is seems fine to do this. Am I correct or is there something I haven't thought of that could mess things us if I use this method to mass uninstall software? If I went ahead with this and was to run the package on all computers to remove a piece of software and one computer didnt have the software would it simply make no changes or could I end up in a mess? Any advice is greatly appreciated!

Does anyone know how to change it so that pupils get the XP theme rather than the legacy style theme for the start menu and windows? It is annoying and looks pants. I much prefer the XP blue style one or even the add on royale one but I can't find an option anywhere to enable this. Should I bypass ranger and define it in a group policy? Can this be set in a gpo?

We're talking 50 machines. I have used method E. Our LEA recommended this. The first method would have been to just list all software ont he network for all users and they would just find out the hard way if software was installed or not. I felt this might lead to a little confusion so I sorted it into folders. Problem is I know reception kids are going to find it difficult to navigate to the software as they are used to shortcuts on the desktop. Is there a way to have a log on script or something just ont he computers in the computer room that only allows the start menu folder for computer room to be displayed or is this too awkward to configure?

Try checking the log files of a computer in the OU you are trying to depoy to. I had some issues and checked the log file and it said some errors deploying the software, then I found out that I had to reboot the machine a few times for the policy to take effect and then the software installed ok.

This didn't work. I don't know why it woudl suddenly block clipart when I enable user access rather than anonymous. When I test the URLS above they come back as PASS but still don't work in office on any computer.

oh. I have never seen this before. Is it a new feature of hard drives? You could perhaps get an indentical hard drive without the password feature and transfer the electronics across? I heard it isn't THAT difficult to do. But I suppose then you're at a forensic level.

I feel that Lanview has bit too much control over the clients. Can't remember why I came to that conclusion now....

Oh I think they do sometimes. I have been bought wine and all sorts if I have done a project for someone.