ChrisMiles

You need to give an alias to the subqeury: SELECT COUNT(DetentionID) AS CountOfDetentions, UPN, Forename, Surname FROM tbldetentions WHERE UPN IN (SELECT classUPN FROM tblclasses WHERE classClass LIKE '%11R2') UPNS GROUP BY tbldetentions.UPN However, this is a bad way to do this query. Try this instead: SELECT COUNT(tbldetentions.DetentionID) AS CountOfDetentions, tbldetentions.UPN, tbldetentions.Forename, tbldetentions.Surname FROM tbldetentions INNER JOIN tblclasses ON tbldetentions.UPN = tblclasses.classUPN WHERE (tblclasses.classClass LIKE '%11R2') GROUP BY tbldetentions.UPN

We use Visual Studio to create an install package msi which just installs the fonts and deploy it via sccm. Can you do something similar nwith your fonts?

You could easily do this by re-blocking the students from changing their password through Ctrl-Alt-Delete and using a 3rd party application which can first filter their data entry for bad words. i could knock something up in half hour to do that. I do however agree with the above comments that it is a futile exercise, and anyway if you block the word bastard they will simply type b4sta4rd instead, it makes no difference to them.

Can you elaborate on that? I've been using offline files for laptop staff for a year now and haven't noticed any unusual problems.

# Nice! Good one m8. I assume it blocks the windows message chain or something? Probably need to run this 1st?

Im not a kix expert but im sure you can make the kix script wait for the program to finish executing when you run it somehow.

No, it is not. Alt-F4 is the windows shortcut key for closing an application, it is handled by the application and can only be disabled by a specific application. What I suggest is instead of running your "exams" software directly, create a batch file that runs the exams software using start /wait and then afterwards run logoff.exe to log off the user. Oooor you could write a batch file with a never-ending loop which runs the application again if it is executed. The run this batch file instead.

No I don't have a script, since we use some special software I wrote to control the local profile cache. However, if you search my post history I have previously posted comnplete working vbscript for deleting profiles and for reading user/group data from active directory. You should be able to combine these to produce something to do what you want.

You can script deletion of user profiles using vbscript or powershell and WMI.

I assume this: "The certificate with thumbprint FC95F9670B0951D27A2CF686458754CBCFC015EC was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing)." Plus a quick google search suggests that wildcard certificates are not fully supported on exchange and can cause problems with a few areas.

The only thing wrong with your query is that the value of Database should be the display name not that path. Get-Mailbox -Database "MCA Staff" -ResultSize Unlimited |Select-Object DisplayName,ServerName,PrimarySmtpAddress, @{Name=“EmailAddresses”;Expression={$_.EmailAddresses |Where-Object {$_.PrefixString -ceq “smtp”} | ForEach-Object {$_.SmtpAddress}}} | Export-Csv c:\mailbox_alias.csv For example.

Pretty sure you can't do it. They're part of Windows 7 profiles and Windows expects them to be there. If i was you, I'd just accept you have to embrace the new profile format rather than trying to hide it (which you wont 100%). Theres nothing to be gained by providing a different experience to what people will have at home. Use Folder Redirection and you can forget about those folders, no need to worry.

Also, obviously, the room needs to be enclosed, make sure no doors or windows are left open.

Seems to me that the problem could be your racks are backed up against the wall. This will cause poor circulation of hot air from the servers. I know its not easy (maybe impossible) but if you can move your racks to the middle of the room for better air circulation. Other than that the position of the ac seems optimal.

Well generally servers pull air in from the front and blow it out the back so having an air conditioning unit at the front will cool your servers better than at the back, however, you should get one powerful enough to maintain a suitable temperature for the whole room. If you are struggling with cooling in that room, check that any heating or hot water pipes are properly insulated as this can make a huge difference.

Is it a permissions/UAC problem? Truancy call updates require write access to the program files directory which requires elevated permissions.

Actually .internal is worse because it is not a reserved root. internal.myschool.sch.uk or .myschool.sch.uk is the correct way to do it. Having said that, .local never caused any problems in our environment.

Well before SP1 the advertised OS showed as installed, with a re-install button available. Now it shows as available with Software Center spamming the user about software being available all the time. In the end I tried changing the task sequence to PXE only which for some reason still didn't get rid of it, so I had to set an erroneous setting for "Run only on the specified client platforms" so it wouldn't show at all on deployed computers.

No one come across this issue? It's causing a lot of problems because Software Center constantly reports that software is available.

As tittle, after imaging a new computer Software Center Reports OS as Available instead of Installed after SP1+UR1, anyone come across this problem? Everything else seems to work fine.

The event log indicates that a service running under the SYSTEM account is forcing a shutdown. From what you said, its probably SCCM rebooting for update/software installation.

MD5 is broken, don't use it for passwords its not secure enough these days, you can use AES instead, but you should also salt the password using the username or some other known information. However if you care at all about security you should not encrypt passwords like this because in most scenarios this would mean the password being passed to your database in plain text and may even be logged in plain text. Assuming that you will use SSL to encrypt traffic between the clients and your server you should encrypt the password at the web server point and not pass the information onto a secondary service unencrypted.

Why not just create distribution groups? You can control emailing permissions easy enough to stop students using them. Plus what will you do when a student is moved to a different class? Or for the start of a new year?

Well you can only use it if that is the external DNS name of your gateway or the certificate has additional SANs which cover the gateway's dns name.

Yes, you use the Remote Desktop Services Gateway role to wrap the RDP traffic in an ssl tunnel.