djameson

I believe I have the issue worked out now. As usual, user error!! On to the next issue. Thanks again for all the suggestions.

As far as I can tell through my testing, everything works fine until the teachers attempted to download and install a program, app, or a printer. Also, during a training session they found they didn't have access to the PC Settings to change lock screens and home screens. Have not tested as a power user. Will test more Tuesday. Synack...I sincerely appreciate your help and understand your opinion. However, we have allowed teachers to be the local admins of their machines since XP. The boss expects Win 8.1 to operate the same way for teachers so I have been tasked to "fix it" as he likes to say! Thanks again for all the comments and help.

We have allowed teachers to download and personalize their laptops for years (from Xp to win7). Yea we have some issues but overall it's been fine. The issue is the new apps that curriculum wants them to explore and also the installation of printers and such. I don't want to install all apps and things for over 500 teachers!! Again, we would like to give them the rights. Any one know the gop settings we would need to adjust for win8.1? Thanks.

We have just received new HP 810 G2 Revolve laptops for our teachers. We are moving to Win 8.1 Update 1. We've had several issues but the one I am dealing with right now I can't seem to get a handle on. When a domain user logs in, everything works fine. But if they try to access PC Settings or make any "changes" or attempt to download and install an app or program, they are prompted with a log in box asking for the administrators credentials. How can I give domain users the rights to make changes and install apps and programs? Preferably, I'd like to accomplish this through Group Policy. Any help would be greatly appreciated!! Thanks in advance for you time.

We have been using Backup Exec for several years and although it works, have not been satisfied like most of you. We are currently on BE 2012. We are looking to move to something new that handles virtual servers better. What do you use and what suggestions might you have for this? We have looked at Inmage, Dell Appassure, and VRanger. Has anyone had any experience with these? Majority Windows 2008 R2 servers, 3 Linux servers Only about 5 physical servers now and roughly 30 virtual Thanks for your time and suggestions.

Thanks for the continued responses. I mentioned the max above but currently I have things set as below: Enforce password history: 2 remembered Max age: 45 days Min age: 1 day Minimum length: 5 characters Complexity and Encryption disabled The way I understand, and please correct me if I am wrong, that the 45 day setting meant that a password was good until 45 days expire...then it had to be changed. Not that it couldn't be changed before 45 days. With the minimum age being 1 day, it should be able to be changed the next day. I was thinking more on the lines of Group Policy not being applied correctly..... Thanks again.

Yes, we have tried other machines...with no luck. All looked "ok" when running gpresult but I will take another look. Thanks.

The Domain Policy Age Restriction is 45 days. I have looked at these two and see nothing of any difference between them and all other users. Two different locations, two different OUs...heck, one is a computer teacher and the other a shop teacher! The only common scenario is both gave their username and passwords to another teacher to use....then wanted to change the passwords to "new" passwords when the teachers were finished.

I have 2 users who all of a sudden can't change their passwords. They get the message that the password they are attempting to use does not meet complexity. Issue one, we have complexity turned off with our domain policy....and two, I have made up passwords that far surpass the complexity requirements and they still get the message. We've tried on different computers with no luck. I can change their password myself with no issues in AD. Has anyone seen anything like this before? Thanks in advance for any suggestions.

Thanks for the suggestions. I guess we will have to look at multiple OUs under our current laptop OU. Thanks again for the help.

I've read dozens of posts but haven't actually seen my situation. If anyone has any thoughts, they would be greatly appreciated!! OS: Win7 Server: Win 2008 R2 Goal...to deploy different network printers to different laptops through GP or Printer Management. Situation: We have up to 15 sets of laptops in mobile carts at our schools. Different carts are in different locations, therefore, they want to print to different printers in the school. ie.. ML1 wants to print to Lab 100, ML2 wants to print to the Media Center, etc. Our computer OUs are one for Desktops and one for Laptops per school. What is the best way to accomplish this? I'd rather not create 15 OUs under laptops but this is the only way I can think of. Thanks in advance for your time.

I appreciate all the suggestions. I have checked everything I can think of. Even tried doing this as domain admin rather than my username. Nothing makes a difference. I have no idea what changed but obviously something has. I'm at a stand still. I'd love to be able to use my script but.... Thanks again for all the help and suggestions.

Not intentionally. I used a variation of the script a couple months ago to move elementary students to the middle school and middle school students to the high school. No problems there. The script does several things: 1. imports users from a csv file 2. create user 3. adds user to the correct groups 4. creates home directory 5. sets home directory rights. 1-4 are working as always. The only thing I can come across that is "different" is we added a new District Instructional Tech person and gave her rights to see the existing student home directories. I guess it is possible that over wrote something. I'm sure it is something stupid and simple I ma just over looking. Thanks again for all your suggestions.

Thanks. I'll take a look but again, no changes on my account since last year (or ever actually) and it ran fine. I'll let you know if I am able to solve this. I really hate losing the use of the script as it really saves me a good bit of time in creating new student accounts. Thanks again.

Thanks for the quick response. It happen on 7 servers x 7 home directory folders. The code to set the home directory permissions: ## Modify Permissions on HomeDir $userSID= (Get-QADUser -samaccountname $USERNAME).sid # Write-Host $userSID $directory = $HOMEDIRECTORY $inherit = [system.security.accesscontrol.InheritanceFlags]"ContainerInherit, ObjectInherit" $propagation = [system.security.accesscontrol.PropagationFlags]"None" $acl = Get-Acl $directory $accessrule = New-Object system.security.AccessControl.FileSystemAccessRule($userSID, "FullControl", $inherit, $propagation, "Allow") $acl.AddAccessRule($accessrule) set-acl -aclobject $acl $directory Write-Host "============ Home Directory Rights Set ============" -foregroundcolor Cyan Thanks again.