Gaz

My results looks the same as yours but you are missing some Powershell links. Sorry I can't be of more help. I assume you have tried gpupdate /force %SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe Security Level Disallowed %SystemRoot%\syswow64\WindowsPowerShell\v1.0\powershell.exe Security Level Disallowed %windir%\sysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe Security Level Disallowed C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Security Level Disallowed C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe Security Level Disallowed

At this stage nothing, its all theory. Through my research 8.1 Enterprise and 10 Enterprise are the way to go, however we are likely to be getting Microsoft Surface Pro tablets which will probably be happier on Win10 So I think you have answered my question thank you. When you says cached logins are those for Direct Access or WiFi?

I've had a quick Google but I can only find really complicated answers. What I want to know is how does direct access, access the remote server over wifi connections that will have different auth methods and passwords. For example, the plan is that our new site will connect back to our HQ via direct access over a wifi network that will be protected via WPA or such like. However if the user then connects at home it will then be a different method, WEP for example. Is there a way to sign onto the wifi network before logging on using direct access?

Yeah iLO is like DRAC (Dell Remote Access) HP SSA looks like it does the job. Heres a link for anyone looking in the future, providing HP don't change the location Drivers & Software - HP Support Center.

With Dell servers they come with the Dell Open manager software which allows you to run tasks on the raid array and see the health of the server. Does HP have similar software? I have looked and found something called HP Sim but it looks very complicated to setup involving databases and it refuses to install. Thanks.

Anyone still playing this? I've been playing for quite a while but it would be nice to play with some of you guys. My Uplay account name is mad1336 or add me on steam. https://steamcommunity.com/id/mad1 make sure you are in the Edugeek group or I may not add you. xD

Not strictly a computer manufacturer but when I was building my first systems years ago EPoX was a big brand for motherboards as was SOYO who made some of the first motherboards aimed at the enthusiast market.

Are the prices comparable for similar models?

I did that recently and never consulted anyone, however a teacher did ask why a student couldn't logon to the classroom computer when they tried, I told them they have no need to use the computers and its opening them up to abuse, if they need to use the board for a presentation you can log them on under your supervision. Sounds like you are under the thumb. You seriously need to quash this person! Going forward into the future she will make your life miserable and get away with it, it doesn't need to be like that. I applied for that job but didnt even get to the interview stage, sounds like I dodged a bullet, but I certainly wouldn't let her walk over me.

They employed you as their Network Manager, such a role (imo) means that you should lay down the law of how the network is managed. You are the expert in this instance and thus are qualified to do the job. They wouldn't be happy if you go into their classroom and scrutinise their teaching. Have a word with the headteacher and make them aware of the pitfalls of not following your lead, don't sugar coat it, lay it on thick.

Glen, put your foot down! You need to be the alpha male so to speak, not in a bad way, but because you do know whats best in this instance. You're still relatively new to the post so they may still be getting to know you. A shortcut (depending how its made) is the best way to achieve what you've done, so good job!

OK so it looks like its a viable solution then. This is going to need extensive testing in a virtual machine. I was just reading this article. http://blogs.technet.com/b/canitpro/archive/2013/03/19/step-by-step-enabling-directaccess-in-windows-server-2012.aspx What does it mean when it says. Are they for the remote devices to talk back to the DA server? Why 2 of them?

I used to shave then decided to save money buy just keeping it really short using a beard trimmer keeping it a couple of MM. Now I've gone back to shaving but in the more traditional wet shaving using a double edge razor which takes a bit of getting used to but having a nicely shaven smooth face feels quite nice. I'm just trying to perfect my technique now to avoid razor burn, preparation is key.

OK so after a 5 minute Google, Direct Access looks like it would do the job but could you realistically run a college using just direct access?

Maybe a little more background is in order. We provide FE/HE courses for a business who have a managed services provider who dictate to them what they can and cant do with regards to IT. The business isn't happy with that however they do need to use their secure network but they agree that isn't flexible enough for college use. The WiFi will be managed by the service provider which will effectively have 2 SSID's a secure one and an open one, we (the college) will only have a access to the open one. The 3 cabled rooms will be on a secure connection again not under our control. At the meeting I was asked to come up with a solution to deliver what they wanted, a network without restrictions (this doesn't mean unmanaged devices/network) that allows them the flexibility they need. The problem is that I don't have enough control to deliver what they want. The only way I can see a solution is to do something remotely but thats very messy and as has been mentioned has lots of security implications. The meeting went something like this.

I was in a meeting today centred around internet and network access at our new site we are due to move into later this year. The site will have WiFi site wide with only 3 rooms being cabled for CAD suites. The WiFi will be installed and managed by a 3rd party and I won't have access to it, I've been told that there will be 2 wireless networks a secure network and a BYOD type open access network. It was raised at the meeting that that may not be the most flexible solution. The 3rd party as we shall call them was going to buy all the tablets for the students, but that would mean they would need to control them and that is costing too much money. They proposed that we buy the 70 devices but when I asked if we could have access to install a server or access to the WiFi I was told no. So the jist of that is that they thought we could buy 70 devices and have no means of centrally managing them. We do have 2 remote networks that they could be linked back to, to be managed but thats the bit I'm clueless on. I could use remote desktop so they could access all the applications on the remote server but I don't know how thats mean't to work over the internet as its an application that gets loaded once you log into Windows. So I guess what I need to know is how do I link these devices back to the remote network. Sorry it sounds like I'm waffling but this is unfamiliar territory to me, I'm used to a server onsite that I can use to centrally manage the devices. If anything needs explaining better please ask and I'll try. I'm a bit miffed at the whole thing because at one point this wasn't anything to do with me and now its just been dumped on me with no time left to do anything properly.

How are you applying that policy? To groups of users or computers? I'd also want to restrict executables from pen drives however we do have some encrypted drives that has an executable that runs the decryption program, could I disallow executables from usb drives but allow the decryption executable to run on the drive?

So this is something I should be doing but I'm not. Its about time I set it up but I was wondering how it works exactly. I know it will work on a list of applications I specify such as word.exe ie.exe etc etc but what about all the applications that windows uses to work surely I don't have to whitelist everything such as csrss.exe explorer.exe svchost.exe etc etc. Also for software which uses multiple executables when running do I have to allow each one? Sorry for the silly questions, does anyone have a dummies guide for setting it up too, we have a vanilla windows network with 2008 R2 and 2012 R2 servers Windows 7 Pro and Ent desktops.

Just seen in the admin console they are appearing for us too. Does ESET know about this? I'm sure it'll be corrected in the next update.

Well for me they are all good and I trialled both Ruckus and Meraki but the clear winner was Meraki as I have 3 sites to manage, being able to setup and manage the 3 locations from the same web page and the easy to understand with no technical jargon to decipher language they use I find refreshing. I also liked the visibility it gave over the network too, the device fingerprinting and layer 7 application control is very useful too, it gives you good insight into what your users are doing and how much they are using the wifi. Ruckus was sparse in that regard.

If you need mounts for just about anything RAM Mount make very high quality mounts for just about anything. They are expensive but I needed something strong and not built in china that would take the abuse from the vibrations and off-roading that the Defender gets. RAM Mount UK I use this for my Nexus 7 RAM Mount UK And for my smartphone RAM Mount UK

I'm afraid not, however I've still got the vga cable and gps receiver in place as its routed up a door pillar to the windscreen. However I'll be removing the roof off my defender this weekend so I'll make sure to remove the cables then. The PC was an Antec ISK 300 with an Asus P8H61-I an Intel i3 2100T so it was nice an small and quite low powered. For the monitor I had a lilliput 7" touch screen. Also connected was a Microsoft HD webcam for recording driving but thats also been replaced by a GoPro 3 and a wireless adapater for hotspotting.

I've had a full blown PC in my car, I had a mini-itx system in my centre console (Landrover Defender) and used it for a good while running ordinance survey maps. I just hooked it up to an inverter and turned it on manually via a switch and then had a 7" touch screen monitor on my dash. It was a great little system but has now been superseded by a Nexus7 2013 7" tablet which is a much better solution. Why not just get them tablets instead, you can pick them up pretty cheap these days. You'll need some form of power supply that has a battery (for when cranking the engine) and you'll need to wire it up to the ignition live and also something to perform a clean shutdown when the ignition is turned off.

Sophos UTM or the new XG if you are feeling keen.

Can they do Layer 3 routing?