jmair

Ahh, that will be a little more work (only because of some of the schools picky software), but it's something that needs to be done. Thanks for the much needed info, I didn't know that the masks needed to unique from eachother on each side for this to work. I'll give it a crack again next weekend and will post with problems then. Thanks again for the info!

Ok, I've been trying to tackle this problem on the weekends, but am running into a snag. I'll try and be as detailed as I can, and if anybody could give a hand, that would be great! I would like to setup my ISA 2006 server between the firewall and the domain. This will force all network users to join the domain to have the proper proxy settings put in place to have access to the internet. This is how I see it should work. I'll start from the outside and work my way in. Firewall: 10.1.1.254 . This has been our gateway and the LAN port on the firewall has been directly connected to out internal switch. ISA server. With two NIC cards, I would like to utilize both cards. I have named them Internal(10.1.1.10) and External (10.1.1.11). When the user access the network, it uses the Internal 10.1.1.10 and passes the internet request threw 10.1.1.11 (with a gateway set to 10.1.1.254) that is directly plugged into the Firewall. The User. The user attains the gateway and proxy setting via group policy. Without it, and NON authenticated domain user will not have direct and easy access to the internet. http://www.parkcountyre2.org/images/stories/techtip/031608/isaquestiondrawing.jpg To me, it seems as though it should work fine. But I must be missing something. The firewall doesn't have anything "special", just a few NATs going to our network, but that should be resolved threw the ISA automatically because it's on the same domain I would think. I'm at a loss and I'm open to any suggestions on where I may be goofing up. I need to get this thing going and want my weekends back =)

sorry guys for not being clear. We have an all wired network, nothing wireless. I have an ISA setup and a group policy that creates a proxy that directs to the ISA to track where the kiddies are going. But, if a student connects to our network (just plugs in) with a laptop, they have direct access to the internet with no filtering etc. Between our T1 line and our intranet is a Sonicwall (super basic firewall). I've tried adding the ISA server between the Sonicwall and the Intranet, but all gateway and configs fail that I have tried. So instead of tackling the question this way, I was wondering if there is another way of solving this problem (the problem being, anybody able to connect to our network, unauthenticated and still having internet access.)

I know this question is also suspect to my topology. But I'll ask incase there is a general broad solution for this common problem. Is there a simple method of only allowing windows authenticated users onto the network?

Thanks for the reply guys. We're a pretty small district in an area that isn't very well developed. Many students don't have internet at home. But this doesn't meen it will always be this way. It's good to get examples from other districts. Thanks for the feedback, it's what makes these forums priceless.

Plock, here's a quick Step by Step for ya. This is how I do it with Exchange 2003 and Outlook 2007. I'm sure there are other ways to do this. If this is what you are asking it may help. How to add a users Mailbox to your own in outlook. 1: First, log into your Exchange Server and open up Active Directory Users and Computers. 2: Open up an account you would like to add to your Outlook. Properties then under the tab Exchange Advanced Click Mailbox Rights. If you aren’t part of the Exchange Groups that have Full Mailbox Rights, add yourself to that group. Or just add yourself now and give full mailbox rights. With Outlook 2007, this is how I add another account. 1: In Outlook, go to Options, Then the tab Mail Setup. Click E-mail Accounts. Highlight your account and click Change. Then More Settings. 2:Under Advanced, click ADD and add the user of the Mailbox you would like to add. Simple.

We're considering the Pro's and Cons of adding students to our schools email. Here are our concerns, please give feedback on how these are addressed? 1: Students use it more for talking to eachother and not the teachers. 2: Monitoring the student Emails. 3: Spam (Incoming) I currently have a mapped drive for all teachers to an individual ftp folder on our web server. The web page for each teacher directs to that folder. This allows Teachers to share anything they want with the students now. If this is in place, is there any reason to give each student an Email?

We're currently using an older version of Deepfreeze on our student machines that run XP. Our next batch of machines will be Vista, and this will force us to either upgrade Deepfreeze or to look at alternatives. Does anybody have feedback on Persystent, the new Deepfreeze or an alternative? I've tested Steadystate already and it isn't going to work for our setup at this time. Thanks

Thanks SYSMAN_MK, I'm going to take a look at that for sure.

My website currently is IIS with .NET with SQL. I've read about the difficulties adding PHP after .NET has been installed. I've already built my new site using the portable Reactor Server (mysql, PHP, Apachy wrapped into one) without even thinking that I shouldn’t be able to have Apache and IIS on the same server. :oops: I'll figure something out.

First, I'll admit I didn't search too hard for an answer yet on this, I wanted to get the Edugeek opinion first on how to solve this. I'm currently using IIS for our web server but plan on moving to Joomla. Can anybody recommend a Joomla mail module that syncs with Exchange?

I run a simple AD network and am able to just run a series of .bat files from my dns server via Task Scheduler. example shutdown -s -m \\midlab01 -t 200 -c "Nightly Shutdown in Progress." shutdown -s -m \\midlab02 -t 200 -c "Nightly Shutdown in Progress." shutdown -s -m \\midlab03 -t 200 -c "Nightly Shutdown in Progress." etc etc. If the machine is on, it pops up a windows with a countdown and a message. If the machine is off, the script delays a few seconds, then skips to the next line of the scipt. Free and easy for my situation.

I'm running a rule that blocks students from "x" sites as a group. I was wondering if there is a way to add an exception, so students can check email etc from selected machines in the library, or by computer. i.e. If a student logs into a library computer, they may infact avoid the ISA rule all together. Any suggestions on how I can do this while leaving the machine on the domain? Thanks!

I was wondering if anybody has tried this or might have any suggestions. Our Isa server blocks the music streaming, not because the teachers disallow it, but because it takes up too much of our bandwidth. So, I'm thinking of offering an internal streaming station that is updated by the students, with the students music. (all low bitrate audio that isn't going to impact our network speed.) Any suggestions?

I created two batch files. ........................................................... time1.bat time /t > timetest1.txt time2.bat time /t > timetest3.txt ........................................................... time2.bat time /t > timetest2.txt pause ........................................................... When the time1.bat runs, it stops all together once it calls time2.bat. I don't know if VBS in a batch file would act the same way or not, but in case, I moved my printer vbs script to the bottom of the batch file and so far it looks good. hope this might help somebody in the future.

I was noticing a delay in running the script when it tries to mount a drive already mounted. Unmounting them and Mounting again increased the speed quite a bit. It seams that the script doesn't even get triggered at all. Either it's all or nothing. Would the Printer portian of the script have to finish running before the rest of the Batch follows threw ? (I shoudl test this with two batch files recording time.)

Before I had my ISA server I had the same problem. I got around this by creating a new OU and added two rules to the group policy of that OU. 1: users in the OU go threw a proxy set to an ip that does nothing. 2: denied users to change the proxy settings. We also use Deapfreeze, so directly after a machine restart all setting are put back to normal, so I'm unsure of this proxy change will impact other users who log into that machine. But this may be a start! good luck.

I have a login script that fails sometimes. It is a batch file that calls a VBS script and it unmounts and mounts drives. below is the script. \\como\SYSVOL\parkcounty.int\scripts\PrinterScript.vbs net use w: /delete net use s: /delete net use l: /delete net use l: \\alma\Lab net use w: \\webserverdelta\ftproot\%username% net use s: \\alma\students It is fairly direct. I'm unsure why it fails completely randomly. Any ideas?

Excelent, thank you. For furture searchers, the AMD Template kit for IE7 is http://www.microsoft.com/downloads/details.aspx?familyid=11ab3e81-6462-4fda-8ee5-fcb8264c44b1&displaylang=en

Sorry to have to bump this up. I've been looking for the "Turn off Managing Phishing Filter" and am unable to find it from the Domain Controller. It does not have IE7 and I can not install it on that OS. I've Installed Administration Tools on my pc, and still can not find the option. perhaps my version of Group Policy is not current? Could somebody share the path to Disable the Phishing Filter. Thank you kindly!

Sorry to have to bump this up. I've been looking for the "Turn off Managing Phishing Filter" and am unable to find it from the Domain Controller. It does not have IE7 and I can not install it on that OS. I've Installed Administration Tools on my pc, and still can not find the option. perhaps my version of Group Policy is not current? Could somebody share the path to Disable the Phishing Filter. Thank you kindly!

No, only because it works on internal pages, such as our school web pages. And other softwares are not updating, such as our anti virus and our Online class programs, neither use the browser. It acts as though the DNS was not working. But I can get type in google and I get an IP resolve.

The browser does load our intranet page with no problem. I've switched the cabling with a server that does work fine. I talked to our ISP, packets are being sent and returned. So it is something on my end, and almost certainly on the server itself.

I wish. But there is currently no proxy on our network. I've also tried 8: power cycling the server (nothing like a good-ol reboot sometimes.) 9: praying. The server has no built in firewall or any kind of filtering that I know of. Unless there was a recent 2003 patch that added one without the admin's ok.

The subject says it all really. We have a fileserver that does updates over the internet. For some reason, it has lost connectivity to the internet. What I do know is. 1: the gateway is fine. 2: I have severed and reconnected the static ip. 3: It works fine on our network without a problem. 4: I can ping google.com and get an ip back, but the browser hangs and no images are displayed. 5: This is not a firewall issue. I've disabled the firewall to test it. 6: DNS and DHCP services have been restarted. 7: arp cache has been flushed. I'm tapped out of ideas. No idea why it can not connect to the internet. Any suggestions will be welcome. Thanks all!