ChrisMiles

My understanding is that you should need this: 9 Windows Server Licenses, 2 for the DPM servers, 2 for the HyperV servers and 5 for the physical servers. 2 System Center Data Protection Manager 2010 Server ML Enterprise licenses to back up the DPM servers (license for the software is included). 2 System Center Data Protection Manager 2010 Server ML Enterprise licenses to back up the HyperV servers. 5 System Center Data Protection Manager 2010 Server ML Standard or Enterprise licenses to back up the physical servers depending on what they run. (Standard is fine for BMR/Files but Enterprise is needed for SQL/Exchange etc). HyperV requires no additional licenses for 4 of less VMs per host.

Some things to try: - Remove it from the domain yourself (ie don't wait for it to break) delete the computer object from AD (it only disables it) and then re add. - Change the server to DHCP breifly thereby clearing any static IP settings and see if it works. - Move the server to a OU in AD which has no or minimal group policies applied to it. - Log on as a local user and see if it does it. You dont use something like FOG do you? and the server doesnt have the client installed for some reason? I know this can happen with the FOG client.

Probably you could do this with ISA but the easiest way is using locally hostesd DNS zones for your external dns names, assuming you have any ofc.

You unfortunately cannot revoke MAK activations, however, assuming you have a software assurance agreement with Microsoft they will usually give you more if you have run out, at least, they did for us until we moved to kms.

You wont be able to stop it completely, there are system files in this folder that the user must be able to read/write/create, this is just how windows 7 works. This was always there on windows xp and it was the same problem then, the only difference is that it wasn't presented to the user in quite such an obvious way. To that end, I think your best hope now is to just hide it so the user cannot ever browse to it. You can remove it from the start menu and desktop using the usual group policies and you can remove it form the file save dialogs by doing this: Hide User Folder on Save as Dialog Box - TechNet Forum Windows 7 Support Team - Site Home - TechNet Blogs

The group policy setting prevents you from saving into the "user" folder, but not into the actual folder which the user folder points to. So that means you can save in c:\Users\joe.bloggs folder but you cannot save into the "Joe Bloggs" user folder even though it points to the same place.

Well I don't think that is true, I have this issue as well, but sometimes there isn't an easy solution. If you want a non-easy solution, make a user log-off script that checks the local profile folder for files which shouldn't be there and move them to their shared area instead.

The redirect to users home folder setting causes the pictures/music/videos etc folders to be redirected to folder inside where the document folder is (ie the way XP did it) instead of them all being in seperate folders (like vista and windows 7 do it). This has absolutely no affect on how vista and windows 7 display the user's profile folder. The folder's listed in the user's profile folders are simply links to the redirected folder. It is still recommended to redirect to a folder inside the user's server folder to prevent the desktop.ini file from preventing you seeing the true folder names.

This is intended behavior. When you click the username from the start menu it shows the root of the local copy of the user's profile folder. This root folder is no longer hidden from the user, but is instead available for use. There is absolutely no way to prevent this with roaming profiles. You cannot do it with folder permissions or group policies. Creating files and folders in this root profile folder instead of one of the redirected folders will cause them to be syned to the server copy of the user's profile.

This is the reason recommended practice and the default for folder redirection is for my documents to be redirected to a Documents folder inside the user's folder rather than the user folder directly. This will prevent the issue.

Any chance there is a DC Replication problem?

The problem with VNC is that everyone can see what you are doing while you edit it and who knows how long that will take. It's not particularly professional to see someone tinkering with a power point presentation, and maybe images and stuff broadcast all over the place for ages. If it was me, I would do something like have a script on startup that checks a folder (be it local or network based) for the presentation file, copy it to a local temp folder and run that automatically. Then all you have to do is update the original document and force a reboot quickly. Assuming the machine is set to auto logon you can update the presentation with minimal downtime.

Whilst that might be somewhat true for file storage servers in certain environments, with I/O intensive applications, especially those that pretty much exclusively require random disk access such as SQL and Exchange where cache really isn't going to help much, raid 5 is significantly slower and while I have seen exchange servers running on raid 5 before with no noticeable slowdown, this is usually in small networks where the server is normally overspeced anyway. The most optimal setup for exchange imo is raid 10 for databases and either a raid 1 or raid 10 depending on your budget for logs. Since the logs are pretty much only accessed sequentially, high random access is not really necessary unless the server is usually under extremely high load and extra write performance is needed. Raid-5 doesn't really suffer from any read performance issues, however, when it comes to disk writes, the parity calculations and what is effectively a minimum of 3 physical disk writes that is needed, it leaves a lot to be desired. And with the price of storage these days anyway, it really isn't worth sacrificing the performance to gain some extra storage, especially on an exchange server. Anyway, that's just my opinion.

I assume this is because during the setup you are crating the 2 partitions in order and leaving the 2nd one selected. When configuring partitions in Windows 2008 R2 setup, windows will install to whichever partition is selected when you click next, not the first one on the disk.

If the problem is the partitions are simply the wrong size, you should be able to expand it using Disk Management. If windows shows the actual disk (not drive/partition) as the 240gb then you will probably need to destroy the array and make a new one from within the raid controller bios and re-restore the backup.

Normally you would have a folder called Programs within the folder where the Start Menu is redirected which contains your shortcuts.

One thing to note is that I have found in my experience that unless the setting to prevent users changing the proxy is set to true, the group policy settings wont overwrite any manual settings applied.

In Exchange 2010 you could achieve this by setting up a Transport Rule under Organization Configuration > Hub Transport > Transport Rules. Im not sure if it is the same for 2007.

A quick search find this: zsddmui.dll is a process belonging to the SuperPrint program . "zsddmui.dll is a ZSDDMUI" "belonging to SuperPrint" "from Zenographics, Inc." Maybe see if there is an update for this SuperPrint?

Try this: How To Change Windows 7 Logon Screen Easily [Without Using Hacks & Tools]

If you have windows 7 or server 2008 r2 you can add owner as a column to the normal explorer view and use it to sort. Easy Just rick click on the headers in detail view and click more, select owner and click ok. You can then click the owner header to sort.

Hi! You are quite welcome! Now, as for this list, I think there is some confusion. You don't need to use sysprep audit mode at all, just log into the computer as normal (as local or domain admin or some user with permission to add drivers), install drivers, re sysprep and upload: The list should look more like this: Install Windows 7 Install all updates / drivers / software. sysprep /oobe /generalize /shutdown /unattend:unattend.xml (with your unattend.xml file in the c:\windows\system32\sysprep folder) Upload the image to the Fog server Deploy the image to a new machine type (and let it sysprep) Install all updates / drivers sysprep /oobe /generalize /shutdown /unattend:unattend.xml (with your unattend.xml file in the c:\windows\system32\sysprep folder) Upload the image to the Fog server and so on... I've never use audit mode for this process, although I'm not saying you cant Hope this helps I am considering writing up a step by step guide to setting up fog, installing and creating a windows 7 image in a domain environment. There is the a lot of cool stuff you can do to make it easier.

Are you sure you copied the whole script including the last End Sub line?

That is correct, yeah. As for this public network issue, if your DC is virtual then my guess is your hosts won't be members of the domain and therefore they will not recognise the fact that it exists, as far as they will be concerned they are just stand alone servers sat on a network. In a live environment you would want a physical domain controller and for the hyper-v servers to be member servers on the domain. This would solve this issue. In the mean time you should be able to use the Network and Sharing Center to change the network type to "Work" or something.

If your students can update other peoples user accounts then either your AD permissions are completely and utterly borked in a way that could only be caused by buggering about with adsiedit or your students are somehow in the Domain Admins or similar group. Try useing the vbs script below to recursively check a specific user to see what groups they are in: Command: cscript script.vbs "" Dim objGroupList, objUser, strDN ' Check for required argument. If (Wscript.Arguments.Count < 1) Then Wscript.Echo "Required argument missing. " _ & "For example:" & vbCrLf _ & "cscript EnumUserGroups.vbs cn=User2,ou=Sales,dc=MyDomain,dc=com" Wscript.Quit(0) End If ' Bind to the user object with the LDAP provider. strDN = Wscript.Arguments(0) On Error Resume Next Set objUser = GetObject("LDAP://" & strDN) If (Err.Number <> 0) Then On Error GoTo 0 Wscript.Echo "User not found" & vbCrLf & strDN Wscript.Quit(1) End If On Error GoTo 0 ' Bind to dictionary object. Set objGroupList = CreateObject("Scripting.Dictionary") ' Enumerate group memberships. Call EnumGroups(objUser, "") Sub EnumGroups(ByVal objADObject, ByVal strOffset) ' Recursive subroutine to enumerate user group memberships. ' Includes nested group memberships. Dim colstrGroups, objGroup, j objGroupList.CompareMode = vbTextCompare colstrGroups = objADObject.memberOf If (IsEmpty(colstrGroups) = True) Then Exit Sub End If If (TypeName(colstrGroups) = "String") Then ' Escape any forward slash characters, "/", with the backslash ' escape character. All other characters that should be escaped are. colstrGroups = Replace(colstrGroups, "/", "\/") Set objGroup = GetObject("LDAP://" & colstrGroups) If (objGroupList.Exists(objGroup.sAMAccountName) = False) Then objGroupList.Add objGroup.sAMAccountName, True Wscript.Echo strOffset & objGroup.distinguishedName Call EnumGroups(objGroup, strOffset & "--") Else Wscript.Echo strOffset & objGroup.distinguishedName & " (Duplicate)" End If Exit Sub End If For j = 0 To UBound(colstrGroups) ' Escape any forward slash characters, "/", with the backslash ' escape character. All other characters that should be escaped are. colstrGroups(j) = Replace(colstrGroups(j), "/", "\/") Set objGroup = GetObject("LDAP://" & colstrGroups(j)) If (objGroupList.Exists(objGroup.sAMAccountName) = False) Then objGroupList.Add objGroup.sAMAccountName, True Wscript.Echo strOffset & objGroup.distinguishedName Call EnumGroups(objGroup, strOffset & "--") Else Wscript.Echo strOffset & objGroup.distinguishedName & " (Duplicate)" End If Next End Sub