jsnetman

We have win7 and some xp clients and if the profiles are setup correctly they are backward compatible. Students log on here from win7 to xp and back again no problem. Not sure about vista in the equation as I do know in early days there was a problem between vista, xp and profiles but I presume that had been fixed.

This is a question on the 70-640 practice test in the MS press book which I'm currently studying, according to the study notes you have to create an attribute for each password policy within AD and apply that attribute to the policy. Don't really know how to acheive this as I have not tried it yet but searching for adsi edit and password policies might find something on google. http://technet.microsoft.com/en-us/library/cc754461(WS.10).aspx They seem to only apply to security groups rather than OU's as mentioned previously

You can do it through group policy in computer or user, its in network then offline files. Having said that just looked at the policy and I'm not sure it applies to win 7.

I have done this recently with hp procurve to segment my network into two vlans. The default one and an extra one to split the network as we were approaching to many devices on one network segment. You can set up the basic vlans via the web interface but have to use comand line via telnet to setup the routing on the 5406zl. Here is my config. vlan 1 name "DEFAULT_VLAN" untagged A1-A24,B3-B24,C1-C24,D2-D24,E4,F2,F ip address 172.16.64.2 255.255.248.0 no untagged B1-B2,D1,E1-E3,F1,F3 ip igmp exit vlan 2 name "testvlan" untagged B1-B2,E1-E3,F1,F3 ip address 172.16.72.1 255.255.248.0 ip helper-address 172.16.64.10 ip igmp exit vlan 3 name "Admin" untagged D1 ip address 172.16.80.1 255.255.248.0 ip helper-address 172.16.64.10 ip igmp exit ip route 0.0.0.0 0.0.0.0 172.16.64.1 ip multicast-routing router rip exit router pim exit vlan 1 ip rip ip rip receive V1-only ip rip send V1-only ip pim all exit vlan 2 ip rip ip rip receive V1-only ip rip send V1-only ip pim all exit vlan 3 ip rip ip rip receive V1-only ip rip send V1-only ip pim all exit You will have to dig through the HP documents to find out how to do all of this.

We have 2 domain controllers here and both have DNS. You can have one or 2, 2 being you have more redundancy if the other fails. It won't do any harm to install the second as a DNS server and is recommended.

I would also think at the moment you would not be able to join a workstation to the domain.

The middle link is what you have to follow. You do not perform this on the old server, you do it on the remaining server. Also there are sections which deal with what service pack you are currently at on the remaining server. Although you saying you have tried to join with a different name suggests a DNS issue, or you have not seized the roles needed. Have a look on google about how to seize roles on a 2003 based domain. If you have seized the roles and performed the meta data cleanup it will definately be DNS problems.

Yes you can, you just have to follow the advice already given to you. MYK-IT even provided the links for you.

I think this problem may be the fact that you had a second server before you installed the server 08. Did you do a meta clean up of the old server i.e removing all mention of it in sites and services and seizing all roles onto the remaining server. If you have not done this AD will be saying you can't join the domain as server2 name already exist in AD sort of speaking. I don't think you have to run adprep if you are just joining the domain with server 2008, yes if you want to make it a DC.

Very handy my wife is Turkish and sometimes we get stuck with language conversion. Translates "am ganin doon the pub" perfectly

My part time boss bought one a couple of weeks ago and promptly sent it back as it does not come with native printing ability. What's the point of anything that can't print.

Done the 70-685 on Friday and just passed. Booked it on the wrong week, being the first week back, and all the headless chickens asking for support phased me, but I suppose thats my job Was torn between the 685 and 686 but went for the easier option.

Windows server can do all that for you through group policies. If you need remote monitoring any of the well known ones will do that, my preference being ABTutor.

We have them setup on the domain. We ask the pupil or staff member to logon once before taking the netbook/laptop off site. Their profile and logon is cached so they can logon when away from the domain. We also have file sync activated on their my docs folder so all their usere area is available offline. This worked well on XP although file sync was a bit troublesome but ok. On win7 it works like a dream.

If you work with Windows 7 and server 08 on a daily basis you should not need a course like the OU or a fastrack. Get the MS press books do the practice tests and see where you need to learn as it will diagnose areas you should study. But also the OU course would be helpful if you are not exposed to a win 7 environment. I'm currently on the MS cert path and it's working out at about £120 per cert. Of course I recognise the differing learning styles and some people are not motivated by self study and are more comfortable on a structured course. The 70-680 configuring windows 7 will get you MCTS and with a little brushing up on some of the key points of win 7 and 08 is pretty easy. I have also found they heavily test you on the new technologies introduced by these OS's like BranchCache, IPv6 and Direct Access. Never used them myself but found I had to learn the operation of them for the exam. Would love to have MCSE or A but cannot justify the time effort and money for what will become an outdated cert perhaps in 5 years time

Hi all, seeing how its the summertime and people are ditching some old hardware, I'm after the ram named in the post title, I've got loads of 256mb of the same type but need 512mb sticks in order to upgrade some old machines to 1 gb (they only have 2 slots). Anyone got any that they could sell to me. Thanks

I have heard of these bootcamps and they are expensive, maybe a couple of thousand for a week intensive. If you have that amount of time to spare just do it yourself with the MS press book and maybe some extra exam tests from any of the main companies that do them. But without a fair bit of knowledge on any of these subjects it would be difficult even doing it the bootcamp way. If you don't have any real hands on experience get a fair specced PC and install some virtual software, Create a network and then tinker with it until you know it inside out.

This sort of discussion belongs in the pub on a Friday night, and you all know where it will lead to

But why would staff and pupils in a school need to be on different networks. I could understand the admin/accounting office perhaps being on a different network as we had before.

We have a similar amount of machines but have never explored the use of VLANS, we have one flat physical network. To me security can be accomplished especially in a school via permissions to resources. All my switches are capable of vlans and have recently merged the admin and curriculum network on to the same physical network but don't really see why I should use a vlan. I can understand in a business environment where you say have a group of different companies sharing the same physical network you would want to implement a vlan infrastructure for security reasons.

Mandatory for pupils but may change to local for the following reason, staff local as it fits in well with using same logon for lan and mobile computing.

Maybe I am wrong but have never enabled any firewalls on an internal lan clients or servers. Instead I have relied on firewalls at the edge of the network to protect the entire lan. Of course if you get an attack from within your network the external firewall won't stop that. Fair enough if you have a server which is open to access from a public facing IP a firewall is a must. It would be interesting to hear from other people what they do with firewalls on clients and servers in a protected lan envionment on 2003 or 2008.

I always thought it was best not to tinker with the default domain policy apart from on 2003 to set the password policy. If you want to control servers by group policy then I would make a new OU and link it to a new set of group policies and move the servers into that. After all the default domain policies affects all machines there will be certain times when you don't want any type of group policy control. On any network I have set up I have never altered the default domain policy apart from password control. The default domain controller policy should already exist on any network with active directory.

The only things you would have to check is the motherboard and the wireless card. Go to the website for those items and look for windows 7 drivers. Sorry misread the post.

We don't create extra accounts, we just change the path to their home folder move them to an OU setup to heavily restrict the desktop and apps. Only word can be executed as thats all that is required. A shared area also for research docs. When switched back to their original path and OU they don't have access to the home path for the controlled exam.