timzim

Ah, you must mean 'the man i the street who earns enough to buy shares and/or afford a decent private pension'. I was thinking of 'the man in the street who works hard all his life, pays all the taxes & NI he owes and is looking forward to his meagre state pension & free healthcare, mainly funded by tax paid by large corporations'. Wrong man, wrong street, silly me.

Yeah right. So have a look at Vodafone Annual Report 2012 - Directors' Salaries and then tell me that the £6bn tax they avoided - sorry, I mean 'were let off' - in 2010 went to the man in the street.

Sounds like it's your ISP then - I have a vague memory of a similar thing happening here and turned out their mail relay DNS was hooky.

You say you changed reply address globally in half-term - does this mean your mail domain name's changed? If this is the case you'll have to change (or add) the Authoritative domain address in Organisation Config -> Hub Transport -> Accepted Domains, otherwise your Exchange will assume it's being asked to relay and give you a 550 5.7.1 error.

OWA is just another way of looking at the contents of the mailbox. Since you're not delivering mail to 2 different mailboxes for each user (i.e. 2003 & 2010) why would you want to view the 2003 mailbox when the mail is going to the 2010 mailbox? Enable both OWA versions and, as soon as you move their mailboxes, tell people to move to the 2010 version. Pointless reconfiguring the 2003 OWA client to look at mail in the 2010 mailbox.

It does but that same information is still used if you remove the client - the user uses SecureNAT to access the internet. The client gives you more control over certain apps than SecureNAT but, for most intents & purposes, you can use SecureNAT, which will still use AD group-based rules to control your users' access. Here's another article to give you a bit more info: Forefront Threat Management Gateway (TMG) 2010 Firewall Client Features and Benefits

But you can do the same with your firewall policy rules - you can apply them to specific user groups without using the firewall client. RTFM...

TMG Client is good if you want to do HTTPS inspection otherwise you probably won't miss it. In any case I don't think ISA 2006 does HTTPS inspection and, even if it did, there are data privacy issues with it. I removed the client from our network about 6 months ago (as it interfered with anything else using an LSP, e.g. Sophos, NetOp, etc) and I've not really noticed any difference. For more info try this page: Microsoft Forefront TMG - installing and configuring the Forefront TMG client.

In particular, Internet Options - Connections - LAN Settings - Automatically detect settings (untick). This will cut out your startup delay.

Likely needs raid card drivers when you get the 'Press F6 to load drivers' message, early on in the install process. If you don't want to open the machine up you can usually find the type of raid card when the server boots to POST (should get a message to press CTRL+A or similar to configure RAID). Download the v2003 drivers for your RAID card using another PC, unzip them onto a USB stick, then make sure this already in the machine when you boot from the install CD. Press F6 when prompted at the start of the install process & server should find drivers & load them.

Split your DHCP scope 80%/20% across your two DCs. That way if one server goes down the other will still be available to dish out IPs. Saves you from a whole lot of pain if the IPs start expiring but you haven't yet sorted out your DC loss (or if the DC goes down over the weekend).

Should be fine. In Tools - Folder Manager you can choose what you do & don't want it to scan.

Could you fix this with the Heimlich Manoeuvre?

Have you added credentials to your DHCP servers to allow DNS dynamic updates? Create a user called e.g. DNSupdate & add them to the group DnsUpdateProxy. Open DHCP and, for each server, expand the server, right-click on IPv4, Advanced, Credentials, then add the authentication details for the account DNSupdate. You might need to restart DHCP.

Get yourself on a FITS course.

You can get SSL certs for .sch.uk sites for free through JANET. You have to go via your LEA (and mine didn't even know about it until I told them) but it will save you the hassles you are having right now. See Obtaining a Server Certificate for a school

25? I don't think I got past page 5. I think the main danger with the book was that it was so dull you lost the will to live before you got all the way through.

There's plenty on the web about this - look up 'time server'. You could start with this: Configure the Windows Time service on the PDC emulator in the Forest Root Domain Beware if you're using virtual DCs as it's easy to get into a loop if you sync your virtual host from your virtual DC (I know as it happened to me).

That explains the surname.

I used ISA 2006 for a long time previously and thought TMG would be an easy step up but, TBH, it's been a bit of a long haul as it's vastly different & far more complex. I also like the idea of all that lovely packet inspection etc and tried it for a while, although you need to install the TMG Firewall Client on PCs for it to work. However, since I updated Sophos to v.10 I can't use the TMG Firewall Client at all and have had to remove it from every machine (& turn off inspection as it's no use to me). The rest of TMG works well though but be prepared for a bit of a steep learning curve.

Can you log on as a different user, e.g. local administrator or does it never get to the point where you can actually logon?

@AdamMe - I've PMd you.

You can use Item-level targeting to apply policy preferences only to specific user groups or else change the security filtering on the policy to make it only apply to certain user groups (e.g. Students). You might need to split your policies into smaller parts first if you've got large, all-encompassing policies.

Closes this Friday, 22nd June 2012.

Save you the trouble: http://media-cache-ec8.pinterest.com/upload/83175924337901513_CFqJrVXL.jpg