IanB

More than one game by the looks of it: http://www.sockandawe.com/ My best score is 9 so far...

More technical details here: MS issues brown alert over unpatched IE 7 flaw ? The Register

BBC NEWS | Business | Your credit crunch jokes Some oldies, but a couple I hadn't heard before.

I've just had a reply from Sophos as follows: I've done the update & rescan, and my utilities are no longer detected as malware. Hopefully that should also fix the problem for others.

I have had a number of virus alerts from Sophos v7 this morning of the form: Virus/spyware 'W32/Sohana-AR' has been detected in "file.exe", where the files in question are scripts I wrote myself and compiled using Auto-it. The suposed malware is a network worm not an .exe infector, so I am pretty sure this is a false positive. Sophos Linky Has anyone else had a similar experience with the latest Sophos update?

Have you tried using the domain\share path, in the form: domain.local\netlogon\script ? Because this accesses the domain through the sysvol , you don't need the actual server name. It will just connect to any domain controller in the domain. Hope this helps

sqdge wrote: Maybe you also need to leave them a copy of RFC3751 as well Linky- IETF- RFC3751 And I hope things work out for you in the land of the fee, sorry free.

.203 dead from here, but the others are fine I'm on the western edge of London

Are you using the line in your Sysprep.inf? It goes in the [unattended] section and should allow the driver to install during the mini-setup. Hope this helps

The answer is yes. I have a couple of machines on our workshop network in that position. Run a a manual installation on each machine over the network from the same CID that you use for domain machines. At the start of the install, you will be asked for account details to access the CID for updating- use the same domain account that you have set up in your Enterprise Console policies. When the install process has finished, you should find the machine listed in the Unassigned folder in EC, and you can manage it in the same way as other workstations. You should be able to script the install as well, if you have a way to remotely run scripts on the machines. The script details are on the Sophos website under 'Deploying Sophos Anti-Virus through Active Directory group policy' . Hope this is helpful.

Number 5 cracked me up So true. :twisted:

And as Mr_T points out, you can don the same for the Music and Video folders too.

Have you tried a line in a startup script for the machines that reads something like: This denies students access to the folder by NTFS permissions and should result in an 'Access Denied' message if they click on it. The 'echo y| ' at the front pipes the 'y' to the cacls command that it needs in a script.

We found that when the network cable is pulled out, the PC loads the a temporary profile based on the local Default User rather than the assigned mandatory profile. So we copied the logoff script to C:\Documents and Settings\Default User\Start Menu\Programs\Startup\ by GP startup script, and voila! Pull the cable and you get instant logoff. Genuine new users get their profile from the Netlogon share, rather than the local machine, so they don't get the logoff script. I hope this is helpful. ______________________________ Sit vis vobiscum.

Nice bit of code. I'm getting to grips with AutoIt - that has specific functions for reading / writing .INI files. I recommend it. Or you could use a separate initool.exe such as this:- http://www.jsifaq.com/SF/Tips/Tip.aspx?id=7373

:? IMHO the problem exists between the network managers chair and keyboard if he wishes to 'demote' you to the highest level of access in a domain- Domain Admins group is automatically a member of every local Administrators group on every computer, including the DC...

I could use this as well- please PM me when it is available. many thanks Ian

I think this is something that comes up from time to time, as our 'charges' experiment with the file system. I had this problem when the full file name (drive:\path\file) exceeded the limit, which I think is 260 characters under ntfs. It is possible to create longer names, much longer if you dump a folder tree inside another one that is near the limit. But you can't then get at the lower folders again. The fix I found was to use Subst to assign a drive letter to a folder near the bottom of the tree (on the server) which then gave me a shorter path through which I could get at the folders underneath and delete them. Hope this is helpful

You could try putting a timeout on it; this site may help: http://www.winguides.com/scripting/... Or using a system-modal message box instead of a popup. System modal means that everything else stops until the user responds. Hope this helps

My, how this thread has grown since I looked this morning! @plexer: Thanks for the clarification @Geoff Sorry I misunderstood you. I agree that obscurity is not the best form of security. I've carried out some further tests and found that our on-site firewalls seem to block the connection from Torpark to outside. Which is a relief Can still use it from the office though..

Torpark uses Firefox portable, so the IE stuff isn't relevant. This also means that you won't be able to control it by changing Firefox settings. It also runs its own proxy- you will find that the IP address of the proxy Firefox connects to is 127.0.01. It is the outbound connection from this proxy that you need to block, and I have found so far that the destination address is different every time Torpark runs. Torpark seems to configure itself on the fly to use a different destination proxy each time- the users don't have to do anything except run it. Dangerous. :angry1: BTW, I find cports.exe is a good utility to use to trace network connections. If I find where I got it from, I'll let you know.

We support a number of sites, not all of which can be restricted by software policies (Peer networks etc. ). I've been looking at network blocking:- It seems to set up connections though TCP 80 to a random address and then use TCP 9001 and/or 9050 to communicate. I will try getting those ports blocked by our network bods and see what happens. Will post here if I get any more info.

Now when it comes to programming languages, I don't believe: http://www.bbspot.com/Images/News_Features/2006/08/language/binary.jpg :?

http://www.bbspot.com/Images/News_Features/2003/01/os_quiz/debian.jpg Got it. Thanks

"You are Debian Linux. People have difficulty getting to know you. Once you finally open your shell they're apt to love you." Scary, but true enough.