rvdmast

Oh i see. Any idea when 1.4 will be ready? And yes, the documentation is very clear and i found using the ADM is almost self-explanatory.

uhm...So where do i find the force shutdown option? can't seem to find it in group policy...

Just set a very busy, colorfull screensaver, like Beziers, and let it run continously for at least 24 hrs, or better 2, 3 days. I have 3 screens here on which i monitor server statistics, network load etc... They're a cheap quality and sensitive to burn-in. Obviously i dont want to set a screensaver on those as to be able to see the network status at a glance. What i do is set the beziers screensaver to 1 min. when i go home on friday, and disable it again when coming in on monday. That works well so far.

it could be that your DNS server is set through GPO (or directly in the registry) which will override settings assigned through DHCP. see New group policies for DNS in Windows Server 2003

by far the most effective method to disable bypassing the proxy is to make sure your proxy is the only possible route to the internet. You could achieve this two ways: 1: Use a transparent proxy, one with two NIC's one facing the internet, one facing your LAN. Any data traveling from or to the internet HAS to go through this proxy. 2: If your proxy server has only one NIC, then configure your firewall (wich, i assume, is a separate box) so that outgoing HTTP(S) connections are ONLY allowed from the IP address of your proxy. deny clients direct outgoing connections. This way, if they somehow disable the browser's proxy setting, they'll simply have no internet at all. That'll take away the fun very soon...

If i have 2 exchange servers, one of them making the actual connection to the internet, the other just hosting the student mail boxes, will i have to install this on both servers? Or, the other way around, if i just install this on the staff exchange server will it append the disclaimer only to staff email?

I'm guessing here, i think what he means is that SSPR itself works just fine, but the trick to get a password reset button on the login screen ( the C+A+D screen) doesn't work, because in a terminal server/thinclient environment there is no C+A+D screen. Because the login screen is handled by the thinclient OS. Just as there is no C+A+D screen when you use mstsc.exe to connect to a remote server: the login is handled by mstsc.exe If he used my application to get a reset button on the login screen, it probably displays only on the login screen of the server's console.

In your first screenshot it shows a proccess ''system.exe' using 82% CPU. Except, there is no Windows proccess called system.exe. ( there's an account called system, yes, but no proccess!) My guess is a trojan, probably Backdoor W32.Spybot.OBB. System.exe spreads by e-mail and via network shares, so get rid of it immediatly or your whole network/other servers will be at risk!

error 80005000 usually indicates an invalid path. Which to me suggests that there is something wrong with your FQDN variable (in line 35). Did you modify the FQDN= line in config.asp to reflect your domain name? Are you sure it's correct?

Just out of curiousity, what brand/type switch do you use? Doesn't happen to be Dell, does it? edit: And the PC's ? Dell optiplex 755 by any chance?

Open port 80 in your (Windows? ) Firewall.

We had the same issue recently with a bunch of Aironet 1130's wich turned out to be light weight access points rather than an autonomous access points. From memory, these are the steps to convert it to an autonomous access point: -download the correct firmware image from Cisco. (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point. -Install a TFTP server on a PC. Cisco has a tool, but any TFTP server will do too. -The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30. -Connect the access point's LAN interface DIRECTLY to the PC, using a normal Category 5 (CAT5)Ethernet cable., NOT a crossover cable. -Step 3 On the PC where the TFTP server is located, perform these steps: a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others. b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View > Show hidden files and folders. -Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point. - Disconnect power from the access point. - Press and hold MODE while you reconnect power to the access point. - Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release. - Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green. - After the access point reboots, reconfigure it using the web-interface or the CLI. Here's the complete article we used: Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode - Cisco Systems

use the MD command to create folders and the CACLS or the XCACLS resource kit utility to set the permissions.

Here's another method that also doesn't need batch files, delprof, GPO's or commercial utility's, but i haven't verified this method myself: If you want cached profiles to be deleted automatically, add a REG_DWORD value named DeleteRoamingCache to HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon. Give it a value of 1 to enable removal, or 0 to allow cached profiles to stay around.

You can get windows to automatically share CD-ROM drives, usb drives and floppy's. Two keys under HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon implement these settings: AllocateFloppies and AllocateCDRoms. (AllocateCDRoms works for usb sticks as wel) Both are of type REG_SZ. Value Meaning 0:Administrators in the domain can gain access to data on the compact discs in the CD-ROM drive. 1:Only the user logged on locally can gain access to data on the compact discs in the CD-ROM drive.

One really doesn't need to use batch files, delprof, GPO's or commercial utility's, the answer is really simple: make the users member of the group "Domain Guests" or the local Guests group, and their profiles will be deleted immediatly after logoff automatically. This functionality is built-in by design. They can still remain in the domain users group too, so it won't affect their rights.

be very carefull with this! I have tried this same procedure in the past. It did work, in that the "creating personalized settings" dialog at logon was gone. It also broke Windows Media Player 11 (and possibly other windows components) for every new user that logged on to those workstations after that. Users would get a message that WMP11 was not correctly installed, and to log off and log on again. Ofcourse after doing so, they'd still get that message...

I believe the rule of thumb was that the sum of the DNS refresh- and no-refresh interval should equal the DHCP lease duration.

sounds like your DHCP and DNS server(s) are "out of sync", possibly due to aging and scavenging being configured incorrect. Check this kb article: How DNS dynamic updates work together with the DNS "aging and scavenging" process in Windows 2000 and in Windows Server 2003

One doesn't even have to deploy some script or utility to delete profiles. By design, windows deletes profiles of users who are member of the domain or local Guests group, immediatly after logging of. Even if these users are also member of users, Power users or even (domain)admin's. And it will leave the default profiles alone.

Thanks John. Some weeks back i've spent days googling and searching for a preferably free/open source solution for this and all i could come up with was a commercial product called Unlock Administrator. Good thing i havent already bought it, as this looks quiet promising.

Is your test account a domain user? In IIS manager, did you set the register, update and admin folders to Integrated Authentication and the reset folder to Anonymous ? Are the other fields in the database being filled in?

@irazmus & plexer: in reset_pass.asp you use: oUser.SetPassword( NewPassword ) whereas in adminreset.asp you use: objUser.SetPassword ("NewPassword") ??? (notice the quotes) So i changed the code in adminreset to ( NewPassword ) without the quotes and guess what: it works!

resetting a users password by using the reset pages works fine, its just the admin page that fails. here is the part from my config.asp: '----------------- 'Reset password can take 5 forms: '1) a static password used for all users '2) a list of user/password pairs '3) a random alphanumeric srting '4) a random password chosen from a list '5) a password chosen by the user 'Set PwdType to the number of the method desired PwdType = 5 'Modify the variable which corresponds to the PwdType chosen above DefPassword = "paradise" 'Static password for all users PasswordList = "C:\Inetpub\userpasslist.csv" 'Path to csv file containing user/password pairs RandomPassword = 10 'Length of random password. Set to 0 for variable length using the min/max values below RandomPasswordMin = 6 'Minimum length of random password RandomPasswordMax = 20 'Mazimum length of random password RandomPasswordList = "C:\Inetpub\passlist.txt" 'Path to file containing password list, 1 password per line '----------------- 'Location of database Eg: C:\Inetpub\wwwroot\databases\reset_db.mdb DataBase = "C:\Inetpub\wwwroot\databases\reset_db.mdb" '----------------- 'Database Access Credentials. 'Only set these if you have protected the database. The standard database does not need these to be modified 'UserID DBUID = "" 'Password DBPWD = "" '-----------------

Actualy, there were differences in adminreset.asp too (looked like impersonation stuff too) so i updated that file too. The original issue is solved, thanks!. I can now open the admin pages from other computers too. However (you saw that coming didn't you? ) now i get another error when trying to reset a users pasword: Resetting password for pwtest ... An unexpected error occurred in the execution of this page Please report the following information to an Administrator Page Error Object Error Number: 450 Error Description: Wrong number of arguments or invalid property assignment Source: Microsoft VBScript runtime error LineNumber: 0 Allowed Attributes: I suppose this error is in adminreset.asp but since the error message doesn't where & which line i dont know where to search.