boomam

Ah. Ive set the SSPR_SERVER login to domain admin and it goes through fine. Odd. Just need to find the lowest login level i can give it for SSPR to still work.

Right, ive gone through the process of setting it up on our DC. Now i get to the same point as before, just with a different error: Resetting password for test2008... An unexpected error occurred in the execution of this page Please report the following information to an Administrator Page Error Object Error Number: -2147024891 Error Description: General access denyed error Source: Active Directory LineNumber: 0 Any ideas? I'd also like to thank Ben for the dialogue yesterday between us. .

What console? There isnt one. To further the problem, our LEA have a deal with McAfee where they can get the AV for half the price. Only problem is, that the only way to install it is via a web browser, on each machine! Considering the saving that it has, it looks like the school might be going for it, even if it does increase my workload significantely.

Hi. After finally getting somewhere with our supplier, i have the downloads for McAfee v8.5. Now, a few questions: Am i correct in thinking that all i need to install server side is VirusScanEnterprise, Spyware module & Alert manager? And how do i use the MSIs that are packaged with the installers do roll out to workstations? I know how to do MSIs in GPOs, ive been doing it for ages, what i mean is, how do i install the software in silent mode, so that when its running theres no indication of it running at all?+ with the licencing stuff on it also. Thanks in advance all. .

Ive just gone through the install video again, and checking what i already did. Everything is how it should be.

Check your PMs. .

It was set as 'student', so i changed it to the group that we use 'pupil', and it still doesnt work. .

Tryed. Still no luck..

Ive noticed, if i log into the admin pages through the IIS manager and look at my test user, it can see everything about the user, like his home folder locations, what OU its in, etc; So SSPR does seem to be seeing/accessing AD? Very odd this is.

Ive checked the FQDN, it is set correctly. The login credentials are correct also. The IIS can see the domain controller as well. The impersonation user ive set as a staff user. Staff users can reset pupil passwords normally though MMC. The annonymous security thing on the reset folder, does that need setting to the user i set up? Or leave at default? So if i dont want admin access on it, as i'll just use AD myself, the program will work fine without them?

Those errors were fixed. Its just the bind container error now. I understand the user, as thats needed for access to passwords. But the security groups: why are the needed? The guide/video said set make them, so i did, then nothing else. They literally are just two security groups, with no special options, no special gpos, just two blank groups?

Friendly errors? Its not an error that IE generates, like a generic HTTP one. Its one that is part of the page that looks identical to the rest of SSPR.

Fair enough, i'll have a play having it on its own website when i redo the IIS in the summer. Any idea on the error message? Thanks. .

Odd. Ive added the SSPR_servername user to those two security groups, and then proceeded to test again, nothing but HTTP500 errors now? And removing them still makes the error happen. ##EDIT## Fixed the problem. I replaced the config.asp and the Db with the originals. The 'Error: unable to bind container' error still happens though. + Whats the point in the two security groups ive had to create? I havnt had to specify them anywhere in of the configs?

Just tryed it with the video guide. Ive gotten a bit further now, now i can register, and it does show the questions on the reset screen correctly. Problem now is that when it says enter new password, i enter it, then it errors with: Error: unable to bind container Ideas? + for future reference, is there a way to have this self contained in its own folder, rarther than the default system one, as if theres other apps that need to use that folder for installation/usage, conflicts will arise. On another note, might be worht adding, at the top of the tree in IIS, i had t set 'default website', its IP and port to something less generic, in my case, 172.17.0.50 & 9000 for it to display the pages on remote machines. .

Im not sure i'll have time at the moment, so it'll be a while before i get the chance..

I have it installed on a seperate IIS to the DC. .

Brillient. Thanks. Take a while for it to load the quota folders that its doing, but otherwise, it appears to work. . The only thing ive noticed, is that it lists the root folder of one of the quotas that ive setup as being 8500% over?.

I tested it a min ago and it appeared to work correctly. I take it that i can create extra quotas under that master quota for custom ones? So if i want Folder X to have more space, i just assign that folder its own template?

So, step-by-step: Create Quota template. Apply to, for example, \\server\home$\pupil05 That then applys to all folders underneath that too one level? So anything in for example \\server\home$\pupil05\test is limited to the 100Mb limit that is put on 'test'. Or does it propogate down to all folders, so even folders under test get another X amount of Mb? Do i need to enable quotas on the properties of the volume? As there is no mention of it in the guides i see? Plus, I was under the impression that i could edit each users quota manually too? To bump up another X amount as needed?

Just looking at USBDLM now. Is it possible to use a software restriction policy to block the drive letters that i set for usage for USB drives by default? Or is it more of a global thing?

They are in a sensible folder structure. So basically, im gonna have to go to each users home directory, and add a quota to each one manually!? I dont think i'll bother if thats the case, theres hundreds to do! There must be an automated/quicker way of doing it?

Each year has its own folder with all the users in, as does the staff. So if i apply a quota to, for example, the Pupil100 one to \\server\home$\intake05. Would that mean that every user in intake05 would be bound to the pupil100 quota rule? + does the paths in the quota management have to be UNC, or local paths? Thanks.

Yes. I can see a way to add the quota templates to folders, but im unsure if that does it per user or not, any guides i find are very vague? At the moment i have 4 templates: Pupil 100Mb Pupil 100Mb Staff 500Mb Staff 1Gb

Hi. Im in the process of tightening the security/restrictions on our network to make it as water tight as possible. Ive already done some file screens to prevent executables being put on the network. Next, i want to implement per-user quotas. With the kids limited to about 100Mb and the staff 500Mb. Problem is, i cant quite work out how to do it on a per-user basis, or, en-mass. Any guides around? Ive googled to no avail. . Thanks in advance all. .