TheMinister

If they are the only users of these computers, then I would look at redirecting the 'Programs' folder to a network drive. Then it's easier to update if you need to add shortcuts.

It sounds like group policy is 'updating' during the day. Have you set the refresh time on group policies?

Are you looking at just adding shortcuts to the 'Programs' menu or looking to give 'Students' an entirely different 'Program' menu?

It sounds like there's an incorrect program association. I'd have a look in the registry: HKEY_CLASSES_ROOT\

If you are pushing wallpapers to Windows 7 machines, take note that you do have to make a Registry Entry change. Otherwise the group policy will not take effect.

Check the permissions on your SYSVOL folder.

Well that brings the age old question. To patch or not to patch. With this 'server', we've gone down the route of not patching. It's a simple service server, has been firewalled from the rest of the network allowing only the necessary ports and can only log onto it by physically standing infront of it. Fortunately, it's never had any issues.

DHCP / DNS Replica Server. OS Redhat Enterprise Version 4 Uptime: 1029days 14hours 13minutes. First time I've logged into this machine in months. Gotta love set and forget servers.

Considering this is a wireless issue. How are you deploying your wireless profiles and are you 'Slow Link Detecting' ? <- Can be a major cause of 'intermittent' issues.

DNS? When you ping your domain server from the 'MAC' server, does it resolve correctly?

It sounds as if you aren't removing cached profiles. ie. Computer Configuration -> Policies -> Admin Templates -> System -> User Profiles:- Delete user profiles older than (days)

Say one teacher is away. You don't have the option of allowing another teacher to view that away teachers 'Class Lists'. Therefore the away teachers classes aren't monitored.

It also doesn't allow 'substitute teachers' and is prone to crashing if viewing more than about 30 'students'

Even easier, put each line in inverted commas. As long as your path is correct it. "c:\program files\Microsoft Office\Office14\cscript ospp.vbs /inpkey:xxxxxxxxxx" "c:\program files\Microsoft Office\Office14\cscript ospp.vbs /sethst:xxxxxxxxxx" "c:\program files\Microsoft Office\Office14\cscript ospp.vbs /act" The issue you'll face is that everytime the computer starts, it will want to run this. This can have disastrous effects on your licence usage.

J_Worth: Probably shouldn't have let it get that bad to begin with (hind sight is always 20/20). Once you've shrunk the folders to a reasonable size, look into disk or folder quotas. Stops anyone being able to fill up a share.

How long are you waiting before logging on? Software Installations via Group Policy are run when no one is logged onto the machine. If you're logging on too soon after start-up or a restart, you may not be giving the machine enough time to perform the installation.

Oliver, The depends on what the end-users' requirements are. We use: Adobe Acrobat Pro. That way the end-user can scan a document, run it through OCR and then make and changes to the document they deem necessary and then save it in any number of different formats.

H Drive 'Domain\User' - (Modify) 'Teachers' Group - (Read Only) 'Domain Admins' - (Full) This only gives that user particular user access to their own documents. Even if they traverse 'up' the UNC path, they can't see any other folders as they don't have the rights to.

Why not change the local admin password via Group Policy?

Check the 'Security' on your deployed printers. I've found that 'Manage this printer' needs to be allowed.

Are you using 'Roaming Profiles' or 'Mandatory Profiles' ? Settings like these become a little more difficult to control if you're using Roaming Profiles, as the roaming profile only gets update periodically. Whereas a Mandatory Profile gets updated everytime the user logs on.

Depending on your licensing: KMS -> Setup a KMS server MAK -> Startup script: cscript \ospp.vbs /inpkey: cscript \ospp.vbs /act

It appears as if the printer has been installed via the users profile. To remove the printer out of the users profile automatically, you'll have to run a script.

Have you tried icacls ?

We went down the route of Live@EDU. We added a subdomain live.. The DNS of which is pointed to Live@EDU as provided within the start-up instructions. We simply added a contact within our Exchange server to redirect all student emails to Live@EDU. All emails are routed through our exchange server before being sent off-campus.