Jaan

Ok Thanks, i'm gonna look at this today......we are using 32bit office here so i'll grab the 32bit versions. Just another question...... Cani use subfolders in "PolicyDefinitions". For example, we are using office 2013 32bit.... so can i make a subfolder named office 2013 32bit, and one for office office 2013 64, one for IE, Chrome etc etc..... or does it all just get dumped in the root of "PolicyDefinitions"?

Cheers guys this helps a lot, i'm just gonna dump all the templates from my client (8.1 64bit) then into "policydefinitions" in sysvol. I have a few custom gpos from the windows 7 gotya thread..... will i stall be able to access these with the new admx templates. thanks again

So long story short, i'm looking to deploy Office 2013 soon. I downloaded to ADMX files from M$ and tried the "add/remove templates" option from GP Management Editor.....It can't see the ADMX files. After a little research i find i have to import the into our GP Polices central store.......However we didn't have this central store @ (\\domain\sysvol\domain\policies. So after following a M$ guide i created a "PolicyDefinitions" folder at the above path and added the ADMX files here. Boom!, could see them in GP Management Editor on the domain controller and via the admin tools on my workstation (8.1 with rsat installed). However i noticed that all the other GPOs like; Computer/User config----Polices----Admin templates---- were missing! My heart stopped! I couldn't see any of the policies i had set for the domain anywhere in any of my GPO Objects! I removed the ADMX templates from \\domain\sysvol\domain\policies\PolicyDefinitions let the dcs replicate then deleted the "PolicyDefinitions"...... Everything was back to normal? I'm totally confused....have i missed something? Any help would be great here guys/gals. Thanks in advance 8.1 64bit Workstation Windows 7 64bit Clients Server 2012 r2 site Below is a screenshot of just some of the options that went missing;

Hi guys, We have a Sophos UTM 425 and have it setup to allow guest wifi and internal wifi access for ad devices like win laptops. we want to add two more ssids, "Student" & "staff"..... and have the relevant filters applied to these ssids.... this is for ipads/chromebooks that can't authenticate via AD. We haven't received any documentation for the device and having had a search in there knowledge base have found nothing. We have a guest wifi (byod) setup which is separate from the network and has a different filter applied, and a standard SSID which gives the web filter polices out depending on which group the user is a member of in AD. Below is a listed of SSIDs we already have, and want to create. The ssid names have been simplified. "School WIFI" (already in use) Used for all AD compatible devices, the filter policy is given to the user via there AD membership. Staff/Student. "Guest" (already in use) Used for BYOD separate from the network works fine. "Student WIFI" we want to create this and force the "Student" filter to it......mainly for student chromebooks. "Staff WIFI" we want to create this and force the "Staff" filter to it......mainly for Staff chromebooks. Cheers guys/gals

Thread Zombie! I know this thread is almost a year old, However we are also trying to use FMS email with Google apps smtp. I can't get it to work. We also have paper cut the uses Google SMTP server to email report and that works fine (after adding a firewall rule). I can't get FMS BACS working to save my life! Just wanted to know if you guys found a fix to your issues.

worked a treat thanks a bunch!

That's awesome news..... we still have UAC enabled here.... i assume moving it to this location help with UAC also.....thanks for this....i'll give it a try and report back.

Hello all, I've been tasked with installing MinecraftEDU in a computer suite we have. Logging on as domain admin and launching the installer, i'm given the option to install Minecraft into the "appdata" folder. We don't use roaming profiles here, so i changed the install location to c:\program files. I received an error saying i didn't have permission the install into that location. i decided to login as a local administrator and once changing the install directory to my prefered location. I was able to install and launch MinecraftEDU. i was also able setup a server instance (once the firewall was configured). i repeated the process on a student machine (again as local admin) and unchecked the server tool option. i was able to install a join the minecraft server fine. The problem is that we have a windows domain environment. once a user (staff or student) logged into the computer using their domain account credentials, and tried to run minecraftEDU. The launcher would start.....but clicking start MinecraftEDU or Servertool would result in northing starting....... any ideas? we can't allow local admin access to our endpoint users.... if we can't get it working over the domain...that project will be scrapped! i have had 1 server and 15 clients working if i login using the local admin accounts. this is also the account used to install minecraftedu. I think its permissions problem of some kind. Computers are; windows 7 64bit quad core cpus 4gb ram 250gb+ hard drives how are you guys doing it..... surely i can install it as local/domain admin and have the domain users use it (just like the rest of the stuff we use) I've asked on the official forum. However the replies are; "make them local admin", "make new local admin accounts on every computer" "It would be a terrible shame for a teacher to give up on Minecraft as a learning tool, because of an IT policy". It's all very much from a teachers perspective, which i get. But it's a security policy, not a IT policy. Any help would be great, i really want to implement this for the Staff & Students. Cheers

It's happening again...... and this time no BIOS update available from the manufacture for this machine. (Lenovo) another MAK bites the dust....

Everytime i upgrade HAP, i have to reapply these settings.......can i get around that?

I Just used MAK Thanks for the help guys.

That's great thx guys....i'll report my findings tomorrow

Yep i have access to the MAK keys..... am i right in thinking that you can't use a KMS services on a retail/oem OS.

Ok i think i've been overthinking this. Here's info about the network; we have a 2012 domain with a kms server that activates windows 7/8 ent and office 2010/2013 VL perfect. we have a laptop bought from a "PC Planet" that has a window 8 home install (not pro or ent). it came with a trial version of office 2010 and various other bits of bloat. I have since removed the office trial. This laptop is unable to connect to the domain (its a home edition) but IS plugged into the network via cat6 and has valid IP and DNS settings. When i install office 2010 VL via a network share (\\server\clientinstalls\office2010) it installs fine. however it wont activate....... i have manually tried to enter the Client KMS key for Office 2010 but it says its an invalid key. Im sure (but doubting myself now) that in the past we have activated office install via kms to laptop not connected to the domain......... So i guess my question is.......... "Can i activate a VL edition of office, on a retail/oem edition of windows, thats not on the domain......but connected to the network".......... and breath

Just made a silly mistake....... I needed to recover a oem laptop using its built in recovery partition (toshiba c850) and selected "reset hard drive" option...... needless to say this 20min job has now taking most of the morning trying to find a win8 home oem disc.....it also nuked the recovery partition without a warning!..... i realized my mistake as soon as i clicked it......but it was too late we don't have to option to download them from volume licensing. anybody know where i can download a official win8 oem iso. the laptop has it's license install in bios still. any help would be great thx. EDIT win8 home

That looks awesome! i'll have a read thx

Oh Poo, thought it was too good to be true...... we have just gone google apps, and have set up brand new accounts for staff members and all is well. we use google AD sync which works great that it will only syncs info found in the AD (which it should). However, the student user accounts are historical, so some info is missing (or rather not in the right place). The first name and last name fields are not filled in AD however the info i need is in "display name" (see screen shot); This should be Bloggs Joe not Joe Bloggs without this info this is how the users appears in google; Is there a way, i can extract data from the "display name" field into excel, but have it split the "words" because of the space into different columns.....then somehow re-import it into First and last names in AD.........(and breath) I dont even know where to start with this..... and i've just sync'd 1100 accounts. there has to be a better way then one at a time. Any help would be greatly appreciated. Thanks

LOl thread Zombie! I was slightly confused when i got an email notification.......... they never did phone back..... MS support these days lol

mine's the same (within reason). can i ask you to have a look at your user/preferences/windows/registry to see if its a reg entry the removes the option... thx for all your help so far

yes is a redirected start menu, i'm looking at the ntfs file permission now...... just can't see anything out of place....

thanks for the speedy response, at least we now know its a gpo issue. Can you remember/or know which gpo causes this behaviour. Thanks

Hi Guy/Gals; I have a strange one here. i have removed "my network places" from windows explorer to stop students from snooping. This works fine but i've found another way in. here is a screen shot of what students see if the click start--my computer-- (you'll notice network places isn't listed) if i click the folder up button, i get as high and the desktop no further. if i click; start and double click "programs" on the start menu (or any of the categories in programs), it opens a windows explorer windows. you'll notice from here you can see the "my network places" and as a result the entire network; i've looked at GPO and checked my share/ntfs file permissions. this is only effecting the xp machines. Win7 is fine. If i could disable network discovery that would be great. but the best i've managed is to block the network discovery protoacal in windows firewall. and that only stops the issue on Windows 7 any help would be great as im really stumped.

Ok i've sorted this i had to update the bios from samsung as the SLIC table was invalid from the manufacturer. simple fix.

OOPS sorry guy i haven't been getting the notifications for the thread..... im back at work on monday, but im sure that all the above keys are installed on the KMS server. i know it can activate Windows 8 as the techi office computers run it. but these machine came with WIN7 pre installed not Win8. thx for all the solutions..... i'll post my findings next week.

I came across this on the final hour of the last day of term, so i haven't really dug too deep into it yet. however i'm back on monday so i thought id start to reseach. we have a microsoft volume license which allows use to install the OSs as long as the machine has a current OEM/retail license already. (as per t&cs). we have a batch of OEM/retail DELLs that came with Win7 HP. we've nuked these and imaged them with the in house image. no probs kms says hellow and welcome etc etc. We also have some IBM Win8 pro machines. i set the first one up on FOG and all went well.... image works etc etc.... however, we get a KMS microsoft volume license screen pop that says something along the line of; ......Invaild microsoft volume license make sure your have a OEM/Retail version of windows before activing with KMS. If not try using a MAK or retail serial key... Any ideas? the machine dont have a WIN8 oem serial on the them.... i assume its something embedded in BIOS?