sahmeepee

Congrats on the design - very pretty and uncluttered. I particularly like your flash video clips in the MFL section. Getting information from staff is a real uphill battle - we have Performing Arts status as well, but getting anything out of the department for the website is amazingly difficult. I'd have thought they'd want to show of the success of their shows etc., but obviously not. You've more than kept up your end of the deal though! Bad luck on having MyInternet - I guess you can't win 'em all!

I forgot to mention my hatred of "software" which is really a couple of word docs, pdfs or powerpoints that some numpty's chucked together in 5 minutes that require an ANNUAL LICENCE FEE. ?!!? You want me to "subscribe" to a directory of static files?! Ack.

Agree completely. There's a wiki entry with one possible secure authentication method. If one of the smart cookies using PEAP in a completely vanilla Windows 2003 network could post their method in there too, I'm sure that would save a load of people time (not just me!)

Uhm, err.. we've spent a lot more than that on Powerpoints with the magical eLC beans. :oops: Not proud of it, but as the budget holder eLCs put me in a difficult position: I have a professional responsibility to get as much as I can for the school with the funding available (value doesn't come into it as we've tried hard and never managed to spend the lot), yet on the other hand I have a moral responsibility not to waste taxpayers money on software which looks like it was made by a 7 year old in a couple of hours. The Gov't are tackling this problem now by turning off the eLC tap. You're know that for sure?! It was originally set up as a sweetener for publishers of educational content that were mewing about the BBC giving equally good educational materials away for free. See editor's note 5. Never mind the fact that some people had and are giving away free stuff without public / tv license funding. You will notice the bizarre timing: they eLCs are tailing off just as the BBC materials they were bothered about start to come online. Some of them do, and if the government was interested in saving taxpayers money, they would promote: :arrow: :arrow: The Teacher Resource Exchange in every staffroom in the country. Do a strawpoll in yours - I bet less than 1 in 20 staff have heard of it. ](*,)

And our lot use both. There you go.

Are you saying that someone is using your mail servers to send spam? If so, I'd make sure you aren't inadvertantly running an open mail relay.

blimey! All that vb seems a bit longwinded to me! Mine's a windows batch file: for /f "Tokens=*" %%i in ('dir /b /ad "E:\year7\"') do subinacl /subdir "E:\year7\%%i\*.*" /setowner=mydomain\%%i (one line per parent folder) to do the ownership. It could be tweaked easily to take an argument on the commandline, but I feel safer using hard-coded values. You need to use a recent version of subinacl (mine is 5.2.3790.1180) To give the folder's owner NTFS full control, I do: for /f "Tokens=*" %%i in ('dir /b /ad "\\myserver\year7\"') do @cacls "\\myserver\year7\%%i" /E /T /G "mydomain\%%i":f Having them separate is handy because it can take a long time to run these through.

We have a nice canon one here... only cost about 40 quid, runs off USB power, nice scans, does everything we'd expect really.

(not that I have, just that I know you can!)

You can do it with WS2003 R2: http://www.windowsnetworking.com/articles_tutorials/Implementing-File-Screening-Windows-Server-2003-R2.html

If you just want a simple tool you could do with rmtshare.exe which sets everyone full control by default. I think it's a resource kit tool. Obviously check the version that you have sets the correct permissions as Microsoft may have "updated" it in later versions. As the name suggests, it will set a share on a remote server. I much prefer using everyone - full control on shares. It's recommended practice because trying to administer access controls in 2 places is always going to lead to oversights. Seeing as NTFS permissions give much more precise control than share perms do, NTFS is the obvious pick.

On ours pressing the power button wakes them up from screensaver, so pressing the power button twice in quick succession initiates shutdown.

We use kixtart for our logon scripts here. It's pretty good in that you can do simple things easily and for complex things people have made ready-made functions that you can bolt together easily. That's how I made the chunk of script which audits user logins to a sql database. Another nice feature of kixtart is that it logs the user out if they manage to close the login script while it's running. Send me a pm if you want to see our printer management script - it adds printers based on user, group membership and room in just about any combination from an easy-to-edit ini file. Yes, pride of batch files is a bit sad. @plexer you just have to run kix32.exe from netlogon, so there's nothing tricky there.

They block non-UK IP addresses

We have a letter signifying their admission year, their surname (and initial of forename to solve duplicates) then their form letter like: B-SimpsonB-T I strip out all spaces and wacky characters from surnames and chop off half of double-barrelled names where necessary. My last place used admission number followed by admission year: 012342005 but that yielded roughly double the number of kids with logon problems coming to see us vs the scheme here.

And for making audio CDs, "Burrrn" is king. With some burning apps you need to change the burn mode off SPTI because XP won't usually let standard users burn in that mode.

OK, if you run any batch file such as: echo hello pause from a location on a UNC path you will get that message. I assumed that you could get around it by cd'ing, but that apparently isn't the case (i've just tested it). Have you tried adding a "pause" at the start of the script to make sure that it isn't doing it really quickly on the others. Is the login script setting completely identical in all user accounts you've used?

I'd be interested to know if my suggested tweak actually made a change to your IE settings or not - does the site become a member of the trusted zone etc. after you apply the GPO. Obviously it didn't fix the problem :/ , but it'd be good to know at what point it was failing.

It does that if you try to make a UNC path the working directory. e.g if you type "cd \\server\share\" into a command prompt it will error. Try cd'ing to a local path as the first line of your script to stop it doing that. FYI the script will still run, but will change to your windows directory as its working directory. This is an incredibly dangerous design choice by Microsoft considering the damage some scripts could cause if they were run with c:\windows as the current directory.

We use public folders a bit for shared calendars because everyone is on Outlook Web Access here so they can't share calendars a la Outlook. Ric_'s right about them doing away with public folders - hopefully this new Sharepoint has better calendaring than the cr''p that comes with the current version.

Or get the fancy-dan addons for SIMS (are they out yet?) to let you do that stuff via a web browser. That'd probably end up more expensive than your client OS licenses though and certainly more expensive than a LART for your teaching staff.

You can do that with WMI scripting, even from a remote computer if necessary. If you want to do it that way, the basic info you need is at: http://www.microsoft.com/technet/scriptcenter/scripts/misc/events/default.mspx

We've had this problem on a similar model of HP printer. Our techie sorted it out by removing all printer drivers installed on the computer (from server properties, drivers tab in "Printers and Faxes") then installing the latest one for that printer from HP.

We use Websense integrated into ISA 2000 and it works pretty well. It's not really capable of blocking individual rooms (or I haven't tried hard enough) but that's not something staff here really ask for. It blocks all sorts of protocols as well as sites, so you can turn Skype off for kids but leave it on for staff for example. It also has fancy options for stopping streaming media if you reach x% of your bandwidth. The logging/reporting is also very impressive. Downsides? Probably expensive, but ours is part of an LEA bulk-buy. There are filters for blocking malware etc., but they cost extra. Again, I'm not sure how much exactly.

You can also set the security on the printers' ACLs so they can't print to them via Windows.