stanwell

Just a quick update to say that worked.

No we don't have anything specifically restricting Program Files. I was just referring to default permissions and UAC. I've done a bit more testing and I'm hoping I may have found the problem. The stack trace I posted above references various interop methods for the Windows clipboard, so I started thinking about what else may be accessing the clipboard on those PCs. We have Veyon classroom management software installed in that room which uses UltraVNC. As you probably know, VNC is able to sync the host clipboard with a remote client so I tried disabling the Veyon service and was able to open Secure Client several times in a row without it crashing. I've only tried this on one PC so far but hopefully that's the answer. I'll try some more in the morning and see how I get on. Thanks for the help, I'll let you know what happens.

I've just installed it in Program Files (x86) and still get the same crash if I run it as an admin. If I run without elevation I get an update loop due to the write protection on Program Files.

In response to dfergusson: Thanks, I've done that too. The full error message looks like the issue occurs when they try to clear the clipboard: Application: Surpass Secure Client.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.Runtime.InteropServices.ExternalException at System.Windows.Forms.Clipboard.ThrowIfFailed(Int32) at System.Windows.Forms.Clipboard.SetDataObject(System.Object, Boolean, Int32, Int32) at System.Windows.Forms.Clipboard.SetText(System.String, System.Windows.Forms.TextDataFormat) at System.Windows.Forms.Clipboard.SetText(System.String) at BTL.Surpass.SecureClient.Clipboard+<>c.() at BTL.Surpass.SecureClient.Clipboard.(System.Action) at BTL.Surpass.SecureClient.Clipboard.ClearClipboardText() at BTL.Surpass.SecureClient.Clipboard+<>c.() at System.Threading.ThreadHelper.ThreadStart_Context(System.Object) at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at System.Threading.ThreadHelper.ThreadStart()

I've installed it in the default location "C:\Users\Public\Surpass\SecureClient_WJEC". The local users group has write access, but it crashes when logged on as a domain admin too, so I don't think it's permissions.

Hi, I'm just wondering if anybody else is having this issue with Surpass Secure Client and if anybody has found a solution. When we open the software it immediately crashes (most times). The screen flashes white (I.e. the background of the Surpass app) and it just closes with no error messages etc. on screen. This doesn't happen every single time, but it does happen a lot. The Windows application log shows a .Net Framework error (see below). I've been speaking to WJEC who are communicating with the developers and so far they've just told me that it's because we don't have .Net v4.7.2 installed. However, we're running Win 10 22H2 which already has .Net v4.8 which is backwards compatible and it won't allow us to install an older version. I've sent the screenshot below (along with logs etc.) to WJEC/Surpass and I'm waiting for a response, just wondering if this is only affecting us? We've been fighting with this software for the last few weeks, but we have an exam on the 11th so I'm getting concerned. Even if we can get the software to launch, it doesn't fill me with confidence that it will be stable throughout the exam. Thanks, Dan

Hi, Our network is running Windows and macOS clients all of which are joined to Active Directory. The Macs are all running Windows via Bootcamp. We were having issues which were being caused by our macOS clients because they were not registering PTR records. We were also having issues with stale records. I spent a lot of time researching DNS and DHCP configuration to try to resolve these problems and ended up thinking I had solved it with the following configuration. But I have now realised that we still have problems which I will explain after the configuration. Servers 2 x Windows Server 2016 VM's Both Domain Controlers Both running DNS Both running DHCP DHCP Config Failover mode: Load balance Enable DNS dynamic updates: Always dynamically update DNS records Discard A and PTR records when lease is deleted: Enabled Dynamically update DNS records for DHCP clients that do not request updates: Enabled Disable dynamic updates for DNS PTR Records: Disabled DHCP name protection: Disabled Lease duration: 2 days Dynamic DNS credentials are configured. Account is only a Domain User DNS Config Active Directory Integrated Zones Dynamic updates: Secure only Replication: All domain controllers in this domain No-refresh interval: 1 days Refresh interval: 1 days Scavenging period: 3 days Group Policy Computer\Administrative Templates\Network\DNS Client\Dynamic update: Set to Disabled Current Problems My aim was to get the DHCP servers to handle all DNS registration to solve the problem of macOS not registering PTR records. The PTR records are now being created but it looks like the macs are still creating their own A records as the permissions list the client instead of the DNS registration user. The macs obviously use the same ethernet or wireless card in macOS and Windows so the MAC address won't change. I assume when each OS requests an IP it will be given the same IP due to the MAC address and the DHCP server will update the client name. I'm not sure about DNS though; Will the DHCP server create a new A record because the client name is different? resulting in duplicate records for a single IP; OR will the the DHCP server try to change the client name on the A record with the matching IP in which case it will fail if the mac has already registered its own record. I don't know if/how I can tell the mac to let the DHCP server register the records for it (Our mac technician decided to pursue a different career path leaving us Windows tech's scratching our heads ). The second problem I'm having is that for some reason even the Windows clients aren't always registering correctly. I have a Windows only device which has received an IP from DHCP but has no A or PTR records. This device is affected by the Group Policy mentioned above, so it would be relying on the DHCP server to register the records for it. But I can't see anything in the DHCP-Server or DNS-Server logs in Event Viewer on the our servers which relate to this client name. The third problem, albeit minor is that any clients with statically assigned IP's don't register in DNS due to the setting in Group Policy. There are only a handful of these and we occasionally assign IP's temporarily for various tasks (as DHCP clients require proxy for Internet) If I have missed any important information please ask. Any help would be greatly appreciated.

I was told it doesn't work in IE but when I tried it myself (logged on with the same privileges as a member of teaching staff) it worked fine :S

Hi, We have exactly the same problem as you and we are also using Smoothwall. I've noticed in the real-time web filter report that some of the URL's for Bright Cove are showing multiple 407 responses (see below) so it could be caused by authentication not working for those domains. Creating an authentication exception for brightcove.com may solve the problem. I'm going to do some testing, I'll let you know what I find. 08:22:59 407 https://secure.brightcove.com Audio and Video, Staff allowed content 08:22:59 407 https://f1.media.brightcove.com Audio and Video, Staff allowed content 08:22:59 407 https://secure.brightcove.com Audio and Video, Staff allowed content 08:22:59 407 https://secure.brightcove.com Audio and Video, Staff allowed content 08:22:59 407 https://f1.media.brightcove.com Audio and Video, Staff allowed content 08:22:59 407 https://f1.media.brightcove.com Audio and Video, Staff allowed content EDIT: Shortly after posting this the videos started working again before I could start testing. So maybe Bright Cove have undone what ever changed. Has it started working for you? GCSE Pod also gave me this list of URL's which they recommend whitelisting: *gcsepod.com *.brightcove.com *.sharethis.com *.analytics.edgekey.net *.cloudfront.net *.jquery.com *.newrelic.com *.google-analytics.com *.googleapis.com *.akamaihd.net *.akafms.net *.llnwd.net *.llnw.net *.brightcove.net

Hi psydii, Sorry for the delayed reply, I was on training yesterday so wasn't able to get on here. Very interesting that you had the same printer! They are on the same Ethernet broadcast domain, but it appears that the Meru controller is responding to the ARP request for the printer rather than the other way round. Thanks, Dan

Hi, We have 2 Brother HL-6050DN printers both connected to the network via Ethernet. One of the two printers suddenly stopped working back in November. You couldn't access its web interface, couldn't get a ping response and couldn't print to it. We started with all the usual troubleshooting for connectivity problems, but happened to notice that when you ping the printer instead of getting the expected response e.g. "Response from {Local IP}: Destination host unreachable." we were getting this: Pinging {Printer IP} with 32 bytes of data: Reply from {Printer IP}: bytes=32 time=3ms TTL=60 Reply from {Meru Controller IP}: Destination host unreachable. Reply from {Meru Controller IP}: Destination host unreachable. Reply from {Meru Controller IP}: Destination host unreachable. Ping statistics for {Printer IP}: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss) Every time you ping the printer you get one response and then the Meru WiFi controller responds with "Destination host unreachable". If I check my ARP cache I see the MAC address of the Meru WiFi controller for the printer's IP address. I contacted Meru support who asked me to send them some logs. I was told that the Meru controller has an ARP proxy feature but they were confused why it was responding for the IP of the printer (which is wired, not wireless) and were going to look into it further. Meanwhile we couldn't leave the printer out of action and got it working by changing its IP. As a test we then went to the second printer and temporarily put the "broken" IP address on it; It instantly stopped working with the same symptoms. For the next 3 weeks we carried on as normal and totally forgot about the problem. Then all of a sudden both of the printers stopped working again with the same symptoms. Meru support did some more investigating and eventually said that the IP addresses of the printers were being registered with the controller from the wireless interface (I.e. for a wireless client, not a wired client) meaning another client must be using the printers IP. They did mention that the controller should be flushing its arp cache to remove any invalid entries which it wasn't doing. They manually deleted the entries to get the printers working again for now. To give you a bit of background information; Our network used to be entirely DHCP with the exception of one small scope for servers, switches, pritners and iPads etc. Due to a requirement for a configuration we wanted with a previous web filter we then split the network into DHCP and static addresses. The 2 printers in question had their IP addresses changed so they were using one of the new static IP's. We have now recently changed our web filter and decided to go back to DHCP. As a temporary solution we left the printers on the same IP's and then created DHCP reserves for them (even though they are still statically addressed) to stop anything else using their IPs. One of the printers stopped working again yesterday morning. As usual we pinged the printer but this time got: Pinging {Printer IP} with 32 bytes of data: Reply from {Printer IP}: bytes=32 time=3ms TTL=60 Request timed out. Request timed out. Request timed out. Ping statistics for {Printer IP}: Packets: Sent = 4, Received = 1, Lost = 3 (75% loss) So I'm not sure if Meru have changed anything to stop the controller replying. Based on Meru suggesting a wireless client is using the same IP we then looked at the associated devices list on the Meru controller and actually found a client with the printers IP. The MAC address of the client told us that it was an apple device, and the associated AP told us roughly where in the school the device was. So thinking there was a problem with the DHCP reservation or something we checked all of the Mac Books and Apple TV's in that area but couldn't find anything with the MAC address we were looking for. This morning we noticed the MAC address was using a static IP which belongs to a staff iPad. We have checked the iPad and it's configured with a static IP; The teacher said the Internet stopped working on it yesterday (our DCHP addresses don't have direct internet access) but he hasn't changed any settings. So we are now confused why an iPad which has a static IP would suddenly decide one day to use a DHCP address (more importantly a reserved DHCP address) and then the next day go back to static. When you switch between static and DHCP the iPad forgets all of the static IP address settings, so the teacher would have had to re-enter them if he had changed it and he said he didn't. We're also confused why it only appears to be happening to the IP addresses used by these two identical printers and to our knowledge nothing else. Any help would be greatly appreciated.

Problem solved by setting VLAN 1 and 2 to untagged. I also decided to move VLAN 3 on to a separate interface.

Hi, We have just moved our Internet connection from our LEA to Virgin Media but have encountered a problem. When we connect our network to Virgin Media's co-managed firewall (which is on site), the firewall reports a lot of errors on the 3 interfaces connected to our network but 0 errors on the interface connected to their router. We have connected a laptop direct to the firewall (in its own VLAN) and there are no errors. We've changed the patch leads, disconnected everything else from the switch (just leaving the firewall and laptop connected to it) and plugged the laptop and firewall into a different switch but cannot work out what is causing the errors. Virgin Media are saying that their firewall is configured correctly and because the direct connection to the laptop works without errors it must be our network. We have also tried turning off auto negotiation and setting the ports to 100Mbps Full Duplex which didn't seem to make a difference. We want to keep the ports running at 1Gbps however as our Internet connection is 200Mbps (The Netgear switch won't let us force 1000Mbps Full Duplex). The firewall is a Palo Alto PA2020, our switch is a Netgear GSM7328S v2 (Layer 3) and we have a Meru MC1500 wireless controller. We have 4 VLANS (lets just call them 1, 2, 3 and 4 to make it easier). Firewall Port: 2 Switch Port: 1 VLAN Membership: 1/T, 3/T PVID: 1 Firewall Port: 3 Switch Port: 2 VLAN Membership: 2/T PVID: 2 Firewall Port: 4 MERU Port: 3 VLAN Membership: 4/T PVID: 4 The only configurations I have made on our switch is its IP, NTP, IGMP Snooping + Querier, 1 x LAG and VLANS + Memberships. Routing is disabled and so is STP. Any help/suggestions would be greatly appreciated. Thanks in advance, Dan

Hi, I have created an XP image with a single partition on a virtual machine. I then capture that image and deploy it to Dell systems using MDT. I have configured the "Format and Partition Disk" section in my task sequence as follows: Disk number: 0 Disk type: Standard (MBR) System (Primary) 50% of remaining space on disk. NTFS file system. Data (Extended) 100% of remaining space on disk. The Dell systems have 250GB hard drives. The task sequence is creating the primary partition with 100% disk space instead of 50%. Then when I open Disk Management on the deployed machine it shows an additional 100GB (approx) partition with no drive letter assigned and tells me that the drive is 350GB. If I delete this partition it then realises that the drive is only 250GB... Thanks in advance, Dan

I think I've finally solved it! It appears to have been caused by Authenticode Settings which had been left in an old policy. According to the description the Authenticode Settings only work with IE 6. Thanks for the help, Dan