jsnetman

The script has a basic flaw, what if the pupil just powers the machine off instead of logging off. In a school I would suggest it is a requirement to provide some sort of logging via a proxy. We use ISA but there are many available using a linux distro.

Download xcacls.exe and use something like the following command on the server c:\xcacls d:\homefolders /T /e /p theusername:rw /y Make sure you use the /e option as this edits the acl rather than replace it. This will give the user read write access. But a big warning here, TEST it on another folder first before you apply it to the root of the home folders. Screwing up these permissions will give you a very big headache.

Easy enough, just add the user to the NTFS permissions at the level where the share is, this will be propogated to all folders/files below the share. So if you are on the server right click the folder, choose properties then security and add the user with the permissions you want. I'm not sure if this will solve the problem of allowing shadow copies to be restored though. That should be done through group policy.

My original post should have read: copy /y \\jschs2\public\apps\bginfo\sysbgi\bginfo.bgi c:\windows\bginfo\sysbgi del %systemroot%\bginfo\bginfo.bmp /q del %systemroot%\bginfo.bmp /q %systemroot%\bginfo\bginfo.exe %systemroot%\bginfo\sysbgi\bginfo.bgi /timer:0 /silent For the original machine startup script. Try similar in your machine start up script and it should work.

You can set folder and file permissions using the file system object in AD. Create a folder on the operations master domain controller exactly how it would appear on the workstation i.e. c:\Program Files\SIMS then use the file system obdject to apply permissions to that folder. You do not have to actually place all the files in the folder as you can set the permissions to propogate. But I use simsperm because it sets up permissions for some registry paths, this can also be achieved in AD though.

There is probably a script that will do it for you but by the time you can get one working it's probably better to just export all the users from your domain into a txt file then import that file into excel. First of all run the "allusers.bat users.txt" on a DC to get the user list. Then import into excel and add a column before the userlist md \\server\sharename, after the user column add \foldername. Then you concatenate the 3 columns and you will end up with something like this. md \\server\sharename\jbloggs\foldername md \\server\sharename\mmouse\foldername Copy and paste the concatenated result to another sheet using the paste special command and use values. Once done copy the result straight into a cmd window. Or you can save the result as a csv file and then convert it to a batch file. allusers.zip

Have to agree with the previous post. The only redeeming feature I can see is that it can be used to control another PC, maybe useful if the teacher wanted to be mobile around a classroom while controlling an interactive whiteboard. However I have seen pupils at my school with software on their mobile phones that can do that.

Would agree that the IP address is not the best one to choose for a DC and changing it will be best practice. However you need to look at what can happen or go wrong to the DC if it's the DNS and DHCP/WINS server if you change the IP. http://redmondmag.com/forums/forum_posts.asp?tid=3828&pn=1 http://technet2.microsoft.com/windowsserver/en/library/80e432f2-10b6-4768-8a3e-54e357e8fc441033.mspx?mfr=true

We used to use the USB method and worked quite well, but on the last upgrade I was determined to get all PCs to boot from lan. I was already using ghost and never got my head around how you integrated all the drivers for different PCs onto a RIS image so I stuck with ghost. So now use boot to RIS, RIS then loads a ghost image. Takes about 15 minutes to rebuild 30 machines to the OS stage. I spent a lot of time getting a ghost image to cover all my PCs so didn't find the need to pursue the RIS image, I may change my mind later when having to repurchase ghost licences. P.S. The driver packs website looks good contink, glad I read this thread.

It is possible to use WinstallLE to make the MSI and was very straight forward. Just run winstall, install the prommisor administrator package then run winstall again, and deploy the MSI.

Yes you can run it from a share, I don't think it really matters where the exe is.

Certainly not! I created folders in c:\windows called bginfo and sysbginfo and set the permissions for students to allow write access in the file system object in AD although they cannot actaually see the C drive. The script in my last post copies the .bgi to all the machines. Also deployed the exe by creating an msi using Winstall Le.

I got BGInfo working after some long trial and error. Basically I produced two .bgi files one for the system and one for the user and used the lines below in the startup, shutdown, user logon/logoff scripts. Userlogon Script copy /y \\jschs2\public\apps\bginfo\bginfo.bgi c:\windows\bginfo c:\windows\bginfo\bginfo.exe c:\windows\bginfo\bginfo.bgi /timer:0 /silent User logoff Script %systemroot%\bginfo\bginfo.exe %systemroot%\bginfo\sysbgi\bginfo.bgi /timer:0 /silent Machine Startup Script copy /y \\jschs2\public\apps\bginfo\sysbgi\bginfo.bgi c:\windows\bginfo\sysbgi Machine Shutdown Script del %systemroot%\bginfo\bginfo.bmp /q del %systemroot%\bginfo.bmp /q This way it shows detail for the current logged on user and also when the machine has no user logged on to it.

We use a utility which originally came from a download from Didcot Girls School and free to use. It has an I agree button and I disagree, if they press I disagree it logs the user off the system. You can place your own computer use policy in the rtf file that you deploy through an msi. A copy can be downloaded from: http:/www.johnspence.n-tyneside.sch.uk/AUP-Logon.zip

You can also download the IE7 Administrators Toolkit which is used to set all the required settings and branding before you deploy IE7. http://technet.microsoft.com/en-us/ie/bb219543.aspx

You can get a whole room or even the whole school to logon by modifying the registry in a start up script as follows: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "DefaultDomainName"="JSCHS" "DefaultUserName"="sysrebuild" "LogonType"=dword:00000000 "AltDefaultUserName"="sysrebuild" "AltDefaultDomainName"="JSCHS" "AutoAdminLogon"="1" "LeakTrack"=dword:00000000 "DefaultPassword"="*****" save the text as logon.reg and include it in the machine policy start up script with a batch file with the following command: Regedit.exe /s logon.reg To reverse the process just set autoadminlogon to 0 and save the reg as logonrestore.reg and include in the batch file rather than the logon.reg file