AngryITGuy

Have what seem to be a really strange issue with a new server whch has been setup for testing purposes. Problem is really starting to annoy me so I am hoping someone on here can help since Google hasn't come up with much. The server is running 2003 R2 with SP2, it's part of the domain and sits in the Members Server OU within AD and has been setup as a File Server with a static IP. When loggging on with the built in domain Administrator account or in fact any domain admin account the user can access shares on the network but can't run any applications or scripts. Opening files isn't an issue as I have found out the the user can open up text files it just seems to be an issue with running applications from network resources. There haven't been any changes to any permissions on the school network at all. The issue happens when accessing the netlogon folder and any of the server drivers (\\servername\c$) keep getting an error message about not having permissions to the resource even though the account is a domain administrator. Don't get any of these issues when using the same accounts on any other servers in the school, the server in question was configured using a standard 2003 disk so I'm not sure what has gone wrong!

Thanks for the advice guys it was in fact a permissions issue, thought I was logging on with a user that had the access to run the routine. Quick login with the right account and like magic the option appeared. Thanks again.

We have an issue with Lesson Monitor where random marks are apprearing in registers for students. Have spoken to the LEA Support who have suggested we run the Validate Memberships routine on the SIMS server. Only problem is I don't know how to run the routine or where the option even is to run it. Anyone able to point me in the right direction, have checked the web and all references to the routine point to Tools | Validate Memberships or something like that, however we have no such option on our SIMS server... Any help would be much appreciated.

Nov 19th - 23:11

Apple MacBook MA472B/A (Black) 2GHz Intel Core Duo Processor 2GB DDR2 RAM 80GB 5400rpm Hard Disk Intel GMA950 Graphics 13.3" display (1200 x 800 resolution) SuperDrive Built in iSight Camera Apple Remote Apple Might Mouse Bluetooth AirPort Extreme Wireless Networking Original Power Supply along with Manuals and Original Packaging Restore Media for OS X 10.4 Tiger 5 User License Pack for OS X 10.5 Leopard InCase Slip Cover Getting rid as it has been replaced by a shiny new MacBook Pro. Unit is in excellent condition with no cosmetic marks on it anywhere. Battery has no issues with holding charge and I think its about two and a half years old. Any questions, just let me know. £425 ono + Postage Thanks for looking.

The job list so far is: Clean and reimage all 66 staff laptops Clean and reimage all 142 student laptops Replace all curriculum workstations and monitors with new ones all 258 of them Virtualise student file servers Install 10 new managed Cisco Access points Clean all school projectors Setup 20 new workstations for staff Dispose of old kit Rewire all network cabinets Tidy office Implement file screens and disk quotas for staff New whiteboard and projector in two rooms

We purchases 5 of these last term from ICT Direct and are very happy with the machines. We are also in the same position and are currently looking to replace our current machines which are all running a Celeron 2.6GHz and 256MB of RAM with refurbished kit. IMHO the machines offer excellent value for money especially in our case as the performance is blistering compared to the old rubbish we have here. Only gripe is with the screwless case which is just an open invitation to some of the students here. ICT Direct have them at a decent price with a 2 year warranty, if your not too bothered about the warranty you can get them alot cheaper as I have found out. Hope this help.

We have a couple of the RM MiniBus units here to house our 60 netbooks. Looking at the size of the Go Power unit the RM version is smaller and will hold 30 devices. See here for more info.

If the members of staff who need to use the printer always use the same computer and you know the name of the computer you could use Alagus Printer Installer more info here. It won't assign the printer to the user profile but will let you remotely install the printer to the workstation, have used it a few times myself and its really easy to use.

There have been some interesting points raised here however, I don't think there is one answer to fit all schools, I believe the reasons for giving staff access to student data depends on the individual school in question. At my school the read/write permnisssions were already in place when I started and as we all know to well teaching staff are not always keen on change! These are primarily the reasons why staff have access to student data here although these tasks only really need read permissions, I suspect that write permissions are needed by staff when they need to tweak student coursework Plan to implement changes where staff no longer I have access to student data at all. Where departments need read access to implement the issues mentioned above by jcollings I plan to map network drives to each departmental ICT Suite. Students will have write permissions to these drives and will be only allowed to save files of a particular type to them, copies of any work that needs to be machines over night or printed in colour can be placed in here for staff to access, the files will probably be deleted every so often to stop the drive from being used as a dumping ground. Its still not ideal but possibly a step in the right direction and atleast staff will no longer have direct access to student home directories.

I use DesignPro Limited Edition from Avery think the current version is 5.4, you can download it here Find it very useful as it has all the Avery Templates installed and gives you the ability to create you own templates too. Have just tested it on a machine without local admin privileges and it seems to work fine.

No joy here also. Can view all the adverts before any of the videos fine, once the ads finish the site just sits there attempting to load the video with no success.

We recently purchased some refurbished HP dc7600 units from ICT Direct and I can confirm that the units are all PAT tested before being sold.

I use LogMeIn to control my school servers from home. Its free and work really well, details of it can be found here

Thanks for that already had the port set to monitor traffic on another port. But after reading you post I decided to double check the ports and it turns out I was monitoring the bloody wrong port Made the necessary changes and its all running fine now, thanks.

It has also been told what it's local subnet is which I thought would have been enough for it to distinguish between local and remote traffic. Looking through all the options there isn't anything that jumps out at me to get the box to see remote traffic.

Have just setup NTOP on a spare workstation in the office to monitor network traffic as the network has been under performing this week and I want to know why. Software is installed on a machine running Ubuntu 8.04.1 the version of NTOP is 3.3.7. Now on first glance it looks like its working it shows all the graphs and charts for network traffic and the network load. But it doesn't seem to be tracking or monitoring remote traffic. When I go to All Protocols - Traffic to see remote traffic data I was expecting to see a list of all websites access by clients but see nothing, I also get the same result when I try to check the Last Contacted Peers of a particular host on our network. Anyone got any pointers please? The box is plugged directly into the core switch which is a HP 4108GL. Many thanks

Just seen this and am shocked to say the least. Considering the Child Care and Child Protection issues in this county it's crazy they let something like this be available from their store considering each app is vetted by Apple first it's truly MADNESS!

HP dc7800 - Core2Quad @ 2.4Ghz, 4GB RAM, 320GB HD, GeForce 8600GT running on dual 22" Samsung Monitors, 2 Gigabit NICs and a fancy Logitech MX 5500 Revolution keyboard and mouse.

I assume they are bringing in the software on USB, if so you need to implement a software restriction policy which will stop them from runninng executable apps from a USB device. If you head down this route check out this post here I found it useful when I implemented software restriction policies. You will probably also want to deploy USBDML across the network so you can control what drive letter USB devices are assigned making it easier to lock down the drive using your software restriction policies. You can also apply software restriction polices to profiles and home directories stopping them from instaling and running programs from these locations. Hope this helps.

I agree with contink seems like your provider is full of **** and is trying to palm you off with lame excuses. You haven't said who you provider is or how it you connect to the internet. Does your internet gateway/modem provide you with any traffic analysis? You may want to check this out and see how much traffic is running across its external interface, if its very little and the internet is slow then its more likely to be a problem with your provider and not any of the equipment you have on site. Hope this helps.

Thanks for the replies, there have been some interesting comments submitted here. @kmount we do have a AUP but it doesn't state anything about access to student data, may need an update me thinks. @jamesb interesting you compare it to searching a students bag/locker. Didn't actually see it from that point of view. I suppose to some extent the students do need their privacy. @rj_mayer tried the BECTA site but didn't find anything helpfull, will need to look a little harder. Didn't realise it was going to open such a can of worms, but there are clearly issues here with privacy and data protection that I didn't even consider. Just not sure how staff would react if access was removed totally!

Staff here currently have read/write access which I am not happy about as staff could possibly be using this to modify student coursework and possible inadvertently delete work amongst other things. Spoken to a few colleagues here and they all allow read access only and that’s how it has been at their schools. I also want to change staff access to read only here but need something to help me deal with the fallout once it has been implemented as there will be plenty of that! Is dealing with this problem a matter of individual opinion of the school or is there something like a formal document out there that can tell me what access staff should have? Please HELP!

Sounds to me like this is a problem with Ranger for Networks and not Ranger Remote Control. As richard has rightly pointed out Ranger closes illegal windows by reading the contents of its title. @Tony_Mc your friend could try and get Ranger to close all windows that have the word 'Proxy' anywhere in the title. Alternativley the tedious method would be to add the IE Title of all proxy sites the students have been accessing into Ranger although I think with this particular method he will be fighting a loosing battle. Hope this helps.

By default Domain Administrators are not granted access to a users roaming profile folder. There is a GPO Setting that grants Domain Administrators access. The setting can be found in Computer Configuration > Administrative Templates > User Profiles, the setting is called Add the Administrators security group to roaming user profiles. Think it should do the trick.