burgemaster

advanced installer is really easy to use, i think you can create working MSIs with the trial also

Check for entries here: HKEY_USERS/.DEFUALT/Software/Policies/Windows/Control Panel/Desktop Dont think they should be there, i removed the desktop folder and it sorted our crazy screensaver problem. http://i39.tinypic.com/2r7pk03.jpg

well after hours and hours i think ive found the solution.... The settings were correct in: HKEY_USERS\.Default\Control Panel\Desktop BUT there were also some extra registry settings entered in: HKEY_USERS/.DEFUALT/Software/Policies/Windows/Control Panel/Desktop On any of the working machines, there were no "control panel / desktop" keys at all. I deleted these and the locking seems to have stopped !!! phew.. It had built up from 2 to 7 machine over the last 2 months. http://i39.tinypic.com/2r7pk03.jpg

Cunninghams will be fitted here over the summer

WE use Print Limit Pro, which I believe is the same (but with UK support?) been really good, but recently the client has been crashing and staff then cannot print as their work is left paused!

When you say hidden you mean windows hidden with the tick box not the $ shares ? Thanks for all the help. This could be a solution

Ive sorted the creation of new shortcuts, but they could still edit others or bring them in.... Ive setup "Access-Based Enumeration" and it works great. but when they browse to say DC1, they can see SYSVOL, NETLOGON, LostHome etc. ABE only works by hiding folders and files that they dont have access to, but all our folders and files have READ for Authenticated users. Is this the same for your servers? Here are the security settings for our NETLOGON folder on a domain controller: http://i43.tinypic.com/hwilmw.jpg I obviously dont want to mess up any settings here before the mass logon tommorow 9am!!

Thanks for this, here is my working code: Dim objShell, RegLocate, RegLocate1 Set objShell = WScript.CreateObject("WScript.Shell") On Error Resume Next RegLocate = "HKEY_CLASSES_ROOT\.lnk\ShellNew\Command" objShell.RegWrite RegLocate,"","REG_SZ" Cheers all

Thanks for the replies... No "Entire Network" in My Network Places - is already enabled "This setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box. "To remove computers in the user's workgroup or domain from lists of network resources, use the "No "Computers Near Me" in My Network Places" setting." No computers near me is also enabled.... but no good I will have a look at ABE or the reg hack next cheers is there an easy way to bulk edit a HKEY_CLASSES_ROOT entry ?

15min here for 4 years now... Regular complaints from the science staff that when playing a 30min movie they have to move the mouse once in that time ! The wmp disable screensaver doesnt seem to work here, if it does that would be great !

Not sure if the students are doing this but its possible for them if they wanted, to create a shortcut to say \\DC1 in there home drive. From there they can either then go up a folder and see all the computers/servers/printer/etc on the network, or more worryingly they can then go into NETLOGON folder and see all the scripts etc... ive tried blocking .lnk in there homedrive using software restrcition policies, but this doesnt seem to work for shortcuts to machines. Is there a way for me to stop them browsing the network? Is there a way to stop them creating shortcuts? What happens when you try and create a shortcut to \\server ? What do you guys do pleas? Thanks in advance !

"if the account details were given to a number of members of staff (as is the plan), then we would somehow want to 'proof' tweets before they are sent as the spelling and grammar of some leaves a lot to be desired - a very valid point." Exactly - the staff cant be trusted in their spellin` and the tweet content. What they are sending out could not only be deemed incorrect but could also not correctly portray the image disired by the school. I liked the idea of the "Headmasters daily tweet", but I doubt our head would find the time, but i may be wrong. To all the schools that have unblocked "tweeting" internally, do you not have a huge problem of students tweeting and reading tweets other than the intended school tweet? While I can see its benefits, is it not just unblocking another social networking site?

thanks again, Im pretty sure this is our problem, but the suggested registry settings are already there, and the (default) screensaver selected is working fine. I will try disabling the default screensaver...

YOU ARE A STAR !!!! :) Not tested yet, but this is exactly this behaivour. Just out of interest how did you search/come across this? I googled all sorts to no avail? Thanks again.

http://i39.tinypic.com/osbtc8.jpg http://i43.tinypic.com/30kt5ja.jpg Getting a little worried now, its happening on a few more computers. I have tried removing all the local profiles and also the teachers server profile. Is there anything else you can suggest that i delete please?

"I'm sure you can afford to buy one of the commercial VNC monitoring apps too" Is there one that does fullscreen vnc slideshows? I dont mind paying for an application, but would rather pay MST software...

Thanks guys. But no, you need to press c,a,del first to enter your credentials... Im thinking that it may be shutdownatron trying to shutdown a locked computer.. Will look into it

A Strange problem has occured around the school... Teachers are going back to there computer that have automatically locked.. When they look at the screen is gives the message "this computer is locked to user..." but there is no username? Also if domain admin trys to unlock the computer they get the message: "only an administrator can unlock this machine" Has anyone come across this before? Thanks in advance

Gutted !!!! Just bought a LCD screen for the office wall ready for VNC Slideshow..... "Never put off until tomorrow what you can do today" Does anyone please know of an alternative?

User Configuration/Administrative Templates/Windows Components/Windows Explorer/Prevent users from adding files to the root of their Users Files folder.

This new release is now tested and working on our IIS server. I have also used a deligated normal account and this also works fine. Only one question, would it be possible that the "Change password when next logon" could be unchecked? I can see kids getting confused, just a thought Cheers all

im 99% done on our vista setup, but have just noticed that student will have access to save files to their "user folder". If they click on theier "My docs" and then go up one folder they get the vista "user folder" i think MS call it (as there is a GP to "remove link to User Folder from start menu" as below: http://i43.tinypic.com/24n4kjl.jpg I have played around with permissions and hunted for GP settings but no luck. This area is local and does not get synced backed up to the server, so if a student saves their work to this folder it will just sit there on the computer. Have I maybe enabled access to this area somehow? How have you guys allready deploying vista got around this one please? Or do i simply put a notice up letting students know that any files saved to this area will not be saved ? PS. Students do not have a network saved profile Cheers

thanks for this, I think for now i will just block "outlook.exe" for students

Sorry i should google this but, does the vista defualt user profile use the same default as the XP one? Currently located in the netlogon folder? or is there a .V2 profile or something special Cheers for the help

Thanks for the fast reply! OK forget changing the links, how about just unchecking the "E-Mail Link" box in "Cusomizer Start Menu" Any easier? Cheers Tim