Michael_84

Hi I've been using Win7 RTM on my system now for a month or so but I've got an issue with my system writing any data that is over 200k to a DFS-R share (Error appears with the code of 0x8007003B), I can write to a DFS share just fine so it seems to be something to do with the replication of data. I can also write the file to the DFS-R folder if I go through the administrative share. My participating servers in DFS-R are Win2k3 R2 based with the latest service pack, WinXP and Vista clients are totally fine in writing data to the shares which leads me to think this is a bug. Anyone having issues with DFS-R with a Win7 client? Cheers P.S Forgot to mention I've tried this on a totally different system with a clean build of Win7 (just registered to the domain no patches whatsoever) and today I received a brand new laptop with a HP image of Windows 7 which is exhibiting the same issue as above.

Thanks for you reply! I've managed to crack it with searching through the security logs on the domain controller, one of the entries shows that the source is from the Linux box but the workstation is my DC, I've added the domain controller to the 'log on to' section and it is now working. Thanks again

Hi, I've setup Joomla 1.5 with AD authentication which is working fine for users without 'Log on to' specified in the account tab in AD, however for our teachers cannot logon (run a single domain and use 'log on to', to prevent students from watching a teacher enter their password). I've tried entering the IP, name of the webserver (though this is a Linux host so no netbios) and tried entering the address of the joomla site, I would try and place the system's FQDN however it doesn't fit in the box :| Anyone else ran into this problem?

Hi, Am currently tweaking our VPN that is powered by ISA 2006 from a preshared key (not given to staff, has been deployed via CMAK), however I am wanting to switch to a certificate based system due to the added benefits, namely kicking a system off the VPN without having to change the preshared key. However I've come to a stop at the most basic part... Getting the template I've created in certtmpl.msc into my certificate authority, below are the steps I've taken (referenced from SAMS Microsoft ISA 2006 Book): Creating the template I've opened up certtmpl.msc on the CA and duplicated the template named Computer, from there I enabled the option to have the private key exported and given the template a name (VPN Clients). Importing the template Now this should be the easy bit, I open the CA console and navigate to Certificate Templates, right click New, Certificate Template, a window now appears listing all my templates I can import, however my template isn't there! So am hoping someone has done something similar, my CA is running Win2k3 R2 SP2 and is setup in Enterprise mode. Thanks

Hi, Am currently creating some pages that are dynamically created so am wanting apache to map an address to the correct URL that is needed to create index page for the domain. So for example, when the user goes to foo.com I want apache to rewrite to render/index.php?id=4 So far in my vhost conf I have the following: ReWriteEngine On ReWriteRule ^index.php$ render/index.php?id=4 [L] Anyone got any ideas? Cheers **Solved** Place the item in a .htaccess file instead in your vhost file :-/ Just incase anyone is interested I obtained the functionality with: RewriteEngine on RewriteCond %{HTTP_HOST} ^FQDN\.TLD$ RewriteRule ^index.php /render/index.php?id=4

Hi, thanks for your responses, I found an article on Microsoft's Technet that describes how to get images hosted on DFS but I have to say I don't quite understand how you tell WDS to point clients to the DFS share.. then again maybe it's just for WDS on Win2k8 server, anyone got any views on it? Here's the link to MS' technet article: Storing and Replicating Images Using DFS If not workable then I'll probably have a look into upgrading our application server to Win2k8

Hi, Hope everyone is enjoying the summer hols always easier to work without the kids Now am trying to speed up WDS when pushing an image out to a classroom of computers, I was wondering if anyone has managed to successfully configure WDS to make use of DFS so that images can be held across multiple servers in the hope to boost speed. Cheers

As in the previous post the time is synced with the domain controller (the first one created in the forest I believe) so when you change it locally on your system it will just sync back with the domain controller at some point. So the way to get around this is either keep setting the clock on the domain controller to match the correct time or simply use NTP this is configured on the domain controller by using: net time /setsntp:<> I recommend you use pool ntp servers, also make sure you have NTP open on your firewall otherwise it won't sync. Once you've set the NTP server on the domain controller you can resync the time by doing w32tm /resync Good luck

Hi, I was wondering if anyone uses a program to screenshot as we have a problem in the school where students use the print screen button and then paste straight into Word/Pub, the end result is a document containing a series of screenshots totalling 70mb which is a pain on quotas, computer running the file and printing. What I would like to do is obtain a small util that will screenshot the screen, convert it to JPG and hold it in the paste buffer, that why I can bind it to an alternative key. Cheers

Hi, am running just the base level of Win2k3 R2 with SP2 no other patches and it's been running great, configured replication, no errors from the diagnostics which is great, going to also run DFS on my WDS images as doing a classroom of rooms slows down to a crawl on one server, hoping to power it with three servers which should be awesome.

All fixed Turns out there is a couple of fixes made to WinXP from SP2 to SP3 to the way it handles DFS. Since installing SP3 onto the client everything is working perfectly . Can now move onto the task of setting up replication and trialling that

Hi Am hopefully going to use DFS (Win2k3 R2 ver) next year for student documents, however right now am just testing it on two servers I've just setup to gain some experience, here's the layout: Server1 (Win2k3 R2, Primary DNS, Domain Controller, Global Catalogue, Holds all roles) Server2 (Win2k3 R2, Secondary DNS, Domain Controller, Global Catalogue) Both have a share named stu_data, on DFS Management I have set both servers to be namespace servers and I added a folder pointing to Server1\stu_data and then selected "Add Folder Target" and added Server2\stu_data share. Now, when I browse the network it works fine, I can see both shares in the DFS tab on the share and switch between the two, however here comes the frustrating part: I decided to down one of the servers to test the fault tolerance DFS gives, however I noticed that DFS seems slow to respond on initial connection and when creating folders pauses before allowing you to create a name, at first I thought it was due to the Primary DNS server being down with clients waiting before trying the secondary DNS server. However I then took down the Secondary DNS server (with primary back online) and the DFS share responded exactly the same. Now here is the interesting part : The DFS share was accessed via the UNC, when both servers where running it was running beautifully, with one down (either one) it runs slow with the issues described above. Now if the share is mapped to a network drive it works fine even when a server goes down you wouldn't know which is exactly what I want to happen. Now for the pupil data I will be using folder redirection which to my knowledge goes off UNC only, so I need to get UNC browsing speed to be fast. So if anyone has any ideas why that will be great

I've set a Scheduled scan at 12 so it won't affect everyone using the network as some with be on lunch:D (clients only), on server I disabled onaccess scan. A performance saving option is to disable onaccess scanning on remote drives, Sophos was killing loading SIMS quickly with that option enabled, oh and I made sure that if Sophos finds anything suspicious on the students systems to disable access

NTLMaps is an awesome tool to get a Linux box to speak with a server using NTLM authentication, got mine working nicely through ISA2006. If it is NTLM authentication stopping you then that will work for you.

Thanks for all the replies We run Win2k3 R2, I've been reading some the documentation by Microsoft to gain some knowledge about DFSR, am going to hopefully set up a test rig tomorrow and start throwing some random data in and see how it replicates. @azrael78 thanks for that tip! Just saved me some time, pretty sure I would of walked into that one

Hello Am planning a network redesign in the summer hols, basically the school has always been running three domains with a single domain controller for each domain, apparently they didn't want kids logging in using staff accounts so a separate domain was set-up to do that. But anyways, I plan to do away with that model and have a single domain powered by two domain controllers, am just wondering whether it's possible or if anyone has decided to use DFS to load balance the request for work over two servers. Basically from my understanding of DFS (yet to set-up one) I can have a the student data on both servers and then have DFS sync data over at set intervals, so when a student logs on and requests their files it will automatically choose the best server to obtain the data from, therefore load balancing. Am I correct in thinking this? I plan to just use folder redirection alone next year instead of having a roaming profile as well, in the hope to speed up logging on, so am just after speed to access files and of course should a domain controller go down the students can still access their work from the remaining DC. So if anyone has any views on this whether it's possible or am using DFS incorrectly.. Thanks:)

I hardly ever ban computer access out right but just internet access, I use ISA server to create a safe list which then allows students to surfs sites I allow them to, so if a teacher comes to me saying a student needs to access site X I can grant them access so the student can do work. Teachers also tell the students they can check their history be calling me.. a quick grep of the web log takes seconds and gives the teacher instant evidence

Hi people I've been tearing my hair out over this so hoping someone can give me a hand before I go bald! I've setup my Microsoft ISA 2006 server to allow remote access via VPN, I can connect via VPN locally within the network however when I try external it fails, my ISA server is behind another ISA server which has apparently be select to allow traffic from port 500, 4500 and 1701 however when I look at my firewall log it only shows requests coming to port 500 and 4500 as shown below, none to port 1701. VPN Setup: L2TP Protocol IPSec Preshared Key (for now.. will update to certificate based auth later on) Network Layout: Internet --> 1st ISA --> 2nd ISA (the one within my building) --> Internal Network Snippet from ISA Firewall Log - Note IP address have been removed BLACKHOLE 2008-02-19 07:57:02 UDP <>:61079 <<2ndISA IP>>:500 87.194.101.102 External Local Host Establish 0x0 [system] Allow VPN client traffic to ISA Server IKE Client 0 0 0 0 - - - - 184502 2249727 BLACKHOLE 2008-02-19 08:05:14 UDP <>:61079 <<2ndISA IP>>:500 87.194.101.102 External Local Host Terminate 0x80074e20 [system] Allow VPN client traffic to ISA Server IKE Client 2400 2400 7280 7280 492000 Am guessing that the 1701 (L2TP Client) port has not been opened on the first ISA server that is causing this problem however when I confirmed whether it was open I was told it was... but with the fact I am not even seeing L2TP client hitting the firewall nevermind being even allowed or disallow I still think its blocked. Anyone got any ideas? Thanks