Byford-Rew

Hi, we've just installed a Windows Server 2012R2 RDS Session Host server [x6] and am about to look at locking access down using group Policies. Initial things that come to mind are hiding the C drive but there are many more. To save reinventing the wheel is there a 'best practice' or 'white paper' document available with this in?

What do you do in your school to control access to you tube? Some schools ban it completely for students while others leave it completely open. Is there any detrimental effect to having free access to YouTube or is it a myth?

Thanks to the wonders of Server 2012 R2 and its granular password policy, I am now in a position where I can force regular password changes on our staff to tighten security just that little bit more. Before I do this I want to be aware of the things that may go wrong by doing this. I am really interested in the experiences of anyone else that has enforced a password policy. Did your users experience frequent locked out accounts because their phones or iPads were trying to log in to retrieve email using the old password and therefore locking the account? Were there any problems with exchange access using Outlook becoming problematic? If I know of as many of these types of things now then I can forewarn users so that they are at least aware of the issues which may arise. All feedback gratefully received - thank you, >end!

Are these still available? PM me with more details please. Thank you.

Check out ADAudit it does ALL this and more. I've found it so beneficial that I've purchased a years subscription. http://www.manageengine.com/products/active-directory-audit/

Our login times went down from 2 minutes plus to 40 seconds. Here are the list of folders currently excluded: Application Data\Macromedia;Application Data\Sun;Application Data\Adobe;Application Data\U3;Cookies;Application Data\Citrix\PNAgent;Application Data\Skype;Application Data\Dropbox\cache;Application Data\Mozilla\Firefox\Profiles;Start Menu;NetHood;Application Data\Google;Application Data\Macromedia\Dreamweaver 8\Configuration\Menus\Cache\Menus;Application Data\Macromedia;Downloads; Scratch Projects;pnlinks;AppData\Roaming\Dropbox;Desktop;PrivacIE;Application Data\vlog;Application Data\Google;Application Data\CodeRush for VS .NET;Application Data\VisualStudio;Application Data\Dropbox;Application Data\Microsoft\VisualStudio;Application Data\LogSys;Application Data\Mozilla;Application Data\Dropbox

Which server OS are you using? There are Group Policy settings which can be applied to the local computer to prevent profile bloat at log off. Also check out the 'exclude from profile' group policy settings as there are MANY files in group policies which don't need to be there as they are copied from the local machine at login if they are missing / required which is much faster than moving them around at login. This link will help here:http://support.microsoft.com/kb/814592 doing this and folder redirection can reduce the size of your profiles to less than 20mb.

Yes it does - has done for many years. It requires a licence but I believe that this is bundled as standard now. If you're under support with AdvancedLearning they will defiantly be able to assist you here. Regards Martin

We are minimising the number of accounts in our AD with Domain Admin rights. One account that has it's rights reduced is the account used in the ePortal controller for SSO to set properties in AD for PortalUser and PortalPassword. Now the process of mapping Resource passwords/users to AD accounts fails with insufficient rights. We want to give the appropriate rights to the SSO user to make these changes but are (so far) unable to do so. Can anyone help me out? It seems that the advice from AdvancedLearning is to use an account with elevated rights but I want to avoid this if I can. What rights should be given to the user to enable them to make the changes necessary? Thank you.

Hi fellow edugeekers. I have an issue at present where a user called ANONYMOUS LOGON is randomly making changes to an Acrive Directory objects. I want to limit the availability to make any changes to specific users, it's the first time that I've come across this.

Is there a way of monitoring a NetApp SAN FAS2240-4 that gives more detailed performance statistics than the OnCommand System Manager? The SAN HQ tool provided by Dell gives excellent performance / diagnostic information and I can't see a comparable system for the NetApp.

So today I was asked to do the update to fix the census error associated to Free School Meals and 6th Forms students. When I click the relevant links I don't see a patch to apply - instead I see the entire install file for Facility and ePortal. Am I missing something? Surely I don't need to do a full install do I? I have many customisations and SSO to set up. The last time the process took three hours. Meny here appear to have applied the fix - am I missing something? HELP!!

Thanks James, I've spent the best part of 1 1/2 hours on the phone with them today trying to get to the bottom of the mystery. They were very helpful. It's still not solved but at least it's a step in the right direction.

Thank you, That's a job for tomorrow. Regards, Martin

Updata are the ISP. That address is ours but the hostname is incorrect.