bicky

Hi, We have applocker policy with following rules. EXE: Allow - Builtin\Administrator - Default Rule All files Allow - Everyone - Default Rule All files located in the Program folder Allow - Everyone - Default Rule All files located in the Windows folder Allow - Everyone - \\domain\SYSVOL\* Allow - Everyone - \\domain\NETLOGON\* Allow - Everyone - \\dc-0*.domain\SYSVOL\* Allow - Everyone - \\dc-0*.domain\NETLOGON\* Deny - Staff/Students - %WINDIR%\regedit.exe Deny - Staff/Students - %SYSTEM32%\cmd.exe Deny - Staff/Students - %SYSTEM32%\WindowsPowerShell\v1.0\powershell.exe Deny - Staff/Students - %SYSTEM32%\WindowsPowerShell\v1.0\powershell_ise.exe SCRIPTS: Allow - Builtin\Administrator - Default Rule All scripts Allow - Everyone - Default Rule All scriptslocated in the Program folder Allow - Everyone - \\domain\SYSVOL\* Allow - Everyone - \\domain\NETLOGON\* Allow - Everyone - \\dc-0*.domain\SYSVOL\* Allow - Everyone - \\dc-0*.domain\NETLOGON\* None of the .bat/PS1 scripts applied via GPO logon-scripts runs. I also have one .VBS script which runs fine. System event log says: Logon script failed - Script name: logon.bat Applocker event log says: %SYSTEM32%\CMD.EXE was prevented from running. How do you guys block access to the CMD/PowerShell but allow GPO logon scripts, any help on this would be much appreciated, thank you.

Just found out that I have "Enable UEFI Network Stack" for the UEFI PXE to work. thank you Minimoo.

When I enable the UEFI on the Bios, there are no boot options like PXE or Windows Boot Manager, resetting BIOS to defaults is not helping either.

Dear all, I am not sure if anyone has come across this issue and knows the solution. We just got 20 x Dell Optiplex 5060 which are trying to install Windows 10 via MDT. Computer successfully does PXE boot and goes through the task sequence/OS/App selection, then goes through the installation, but when it reboots after the OS install completion the POST screen shows "No bootable devices found". All drivers for this model has been installed on the MDT & WDS. BIOS has been configured to Disable SecureBoot, Enable Legacy Option, Disable UEFI, Disable Deep Sleep Control, Enable WOL with PXE Support and Boot Sequence with internal HD & Onboard NIC selected. This is the first time we have across this issue and in the past we had no problem MDT Win 10 on Dell Optiplex 3040/5040/Surface Pro/HP Desktops. Any help on this will be much appreciated, thank you.

+1 for GNS3

OD Files on demand is what we have (screenshot below)

It will sync/make it offline when opened. At the moment we have Cloud Drive Mapper that simply maps the drive to the OneDrive & SharePoint for the students. For the staff we are using both CDM & One Drive NSC (soon we will phase out CDM)

staylor1972 We have deployed CDM on all the staff & student computers and we have not come across any technical issues, the only complain we have so far is if the user's device has no internet connection (school trips, on flight, on train etc) then they cannot access the contents from the Onedrive/SP. All the staff here has a Surface Pro and they take the devices outside the school. We are now deploying OneDrive New Syn Client, which gives an option to make the files offline so that it is accessible when not connected to the internet and will sync back once connected. Are there any speed issues? I have tested opening same files from both CDM & OneDrive NSC, and OneDrive NSC seems to be much quicker to open/save the files. How did you set up the Sharepoint site to map for departmental shares? From CDM admin portal choose select SharePoint site (https://mycompany.onmicrosoft.com) and assign a drive letter. This will generate a license code (.reg) which needs to deploy it via GPO. Our SP has been setup like this: mycompany.onmicrosoft.com - site root where CDM maps the drive (s:) mycompany.onmicrosoft.com/biology - subsite for the Biology (s:\biology) mycompany.onmicrosoft.com/physics - subsite for the physics (s:\physics) Each subsite has two documents library: default documents library where both students & staff has read/write access (s:\biology\Shared Documents) staff only document library where only staff has read/write access, student no access (s:\biology\staff Documents) feel free to let me know if you need more info

We have moved 70% of the on-premise file server data to the Office 365 (user's desktop/document to OneDrive and existing departmental shares to the SharePoint). IamCloud Cloud-Drive-Mapper is installed on all the computers, it will map O: drive to user's OneDrive and S: drive to the root of the SharePoint site (https://mycompany.onmicrosoft.com).

we use Zendesk for two schools, each school has their own support address i.e. [email protected] and [email protected]. Zendesk has triggers/rules to allocate ticket based on which address it has received.

We have Aruba 3600, our guest network are restricted via ACL on CORE-Switch.

We use Xibo and every department has their own screen with the login details.

List all the groups the user is member of Get-ADPrincipalGroupMembership -Identity username | select name, groupcategory, groupscope | Out-GridView Count number of users in an OU (Get-ADUser -Filter * -SearchBase "OU=staff,OU=myusers,DC=mydomain,DC=com").count Search DHCP by Mac Address Get-DhcpServerv4Scope | Get-DhcpServerv4Lease -EA SilentlyContinue | Where-Object clientid -match '00-1a-2b-3c-44-5a' Following will list all the devices whose Mac address starts with "00-1a" Get-DhcpServerv4Scope | Get-DhcpServerv4Lease -EA SilentlyContinue | Where-Object clientid -match '00-1a'

Hi, All our servers runs on on-premise VMware cluster. We have Active Directory with multiple child domains. We have recently migrated from on-premise Exchange to the Office 365 for the emails. Few departments use SharePoint to store the teaching/learning resources (Site-Pages/Documents library). We use Veeam for the backup; DR site has critical servers replicated by the Veeam. Do you guys use Azure VM/Storage or any Azure services for your school ? If you do then could you please share your experience on what do you use it for ? Thank you

Hi, does anybody use Teradici Management Console to manage the PCoIP devices ? It seems like Teradici has removed the download link for the free version 2.5.1 from their website after October 2017, if you have a downloaded zip file, will you be able to share it please ? thank you.

I have used following in a batch file then ran as Startup Script via GPO start "" /wait %systemroot%\system32\msiexec /package {90160000-0011-0000-0000-0000000FF1CE} MSIPATCHREMOVE={A36375BB-E79D-411D-BF1E-C7E8120A08A9} /qn start "" /wait %systemroot%\system32\msiexec /package {90160000-001A-0409-0000-0000000FF1CE} MSIPATCHREMOVE={A36375BB-E79D-411D-BF1E-C7E8120A08A9} /qn start "" /wait %systemroot%\system32\msiexec /package {90160000-001B-0409-0000-0000000FF1CE} MSIPATCHREMOVE={A36375BB-E79D-411D-BF1E-C7E8120A08A9} /qn start "" /wait %systemroot%\system32\msiexec /package {90160000-012B-0409-0000-0000000FF1CE} MSIPATCHREMOVE={A36375BB-E79D-411D-BF1E-C7E8120A08A9} /qn

dear all, I have latest version of iTalc 3.0.3.0 and I am using key file authentication method, Is there a script to deploy the iTalc client to multiple computers ? I have seen this and I am not sure whether this is still valid for the iTalc 3: http://www.edugeek.net/forums/network-classroom-management/73985-italc-2-installation.html#post659734 on step 5 there is a batch file to create c:\program files\italc folder and copy exe,dll,xml to the client computers, does this mean I dont need to run the iTalc installation file ? Any help on this would be much appreciated, thank you.

we rang them and they no longer make the particular product, and we were given this address Server & Data Center Monitoring Systems | Geist

+1 for iBoss We were using Smoothwall appliance for last three years, now moved to iBoss which is much better. We used to use proxy when using SW, now with the iBoss no need to push the proxy settings. Few application had issue connecting via proxy.

Dear all, I am looking to purchase Climate CM-2 monitor (CM-2, The Original Climate MonitorÂ::ÂClimate MonitorsÂ::ÂThe Climate) to monitor the temperature in our server room. Do I also need to buy the additional remote sensor Climate MonitorsÂ::ÂThe Climate ? Remote sensor: their remote sensor seems to have RJ45 port on one end, can we connect this to the existing patch panel or the CAT5e cable run from the other part of the building ? Any help would be much appreciated, thank you.

use Bulk Rename Utility (bulkrenameutility.co.uk) On Windows Explorer, Open root folder then do a search *.doc (top right) Select all (ctrl A) from the search results, then drag them to the Bulk Rename Utility and rename the extension

We use this via MDT TS. # List of Applications to Remove $AppPackages = @() $AppPackages += 'Microsoft.3DBuilder' $AppPackages += 'Microsoft.BingFinance' $AppPackages += 'Microsoft.BingNews' $AppPackages += 'Microsoft.BingSports' $AppPackages += 'Microsoft.Getstarted' $AppPackages += 'Microsoft.MicrosoftSolitaireCollection' $AppPackages += 'Microsoft.Office.OneNote' $AppPackages += 'Microsoft.People' $AppPackages += 'Microsoft.SkypeApp' $AppPackages += 'Microsoft.Windows.Photos' $AppPackages += 'Microsoft.WindowsPhone' $AppPackages += 'Microsoft.XboxApp' $AppPackages += 'Microsoft.ZuneMusic' $AppPackages += 'Microsoft.ZuneVideo' $AppPackages += '9E2F88E3.Twitter' $AppPackages += 'king.com.CandyCrushSodaSaga' $AppPackages += 'Microsoft.Music.Preview' $AppPackages += 'Microsoft.BingTravel' $AppPackages += 'Microsoft.BingHealthAndFitness' $AppPackages += 'Microsoft.BingFoodAndDrink' $AppPackages += 'Microsoft.BingWeather' $AppPackages += 'Microsoft.WindowsMaps' $AppPackages += 'Microsoft.MicrosoftOfficeHub' foreach ($App In $AppPackages) { $Package = Get-AppxPackage | Where-Object {$_.Name -eq $App} If ($Package -ne $null) { Write-Host "Removing Package : $App" Remove-AppxPackage -Package $Package.PackageFullName -ErrorAction SilentlyContinue } Else { Write-Host "Requested Package is not installed : $App" } $ProvisionedPackage = Get-AppxProvisionedPackage -Online | Where-Object {$_.DisplayName -eq $App} If ($ProvisionedPackage -ne $null) { Write-Host "Removing Provisioned Package : $App" Remove-AppxProvisionedPackage -Online -PackageName $ProvisionedPackage.PackageName -ErrorAction SilentlyContinue } Else { Write-Host "Requested Provisioned Package is not installed : $App" } } #Remove OneDrive C:\Windows\SysWoW64\OneDriveSetup.exe /uninstall

thank you Rob

Hi, I have created a category group (Guardian » Policy objects » Category groups) called Student-Test-Category-1 which has following being ticked Financial Services Online Banking Payday Loans I also have a policy (Guardian » Web filter » Manage policies) called Student-Test-Policy-1 and which has who- All student users what- Student-Test-Category-1 where- Everywhere when- Always action- Block Now when student access the finance/online banking or pay-day loan sites they get blocked page. What will happen if I untick the "Online Banking" in Student-Test-Category-1 ? Will they be allowed to the Online-Banking sites ? Any help would be much apprecited, thank you.

Hi, We have a main site with Smoothwall UTM 1000 as the internet gateway. Miles away we have an office with 6-8 computers behind BT ADSL broadband. I would like to link this office to the main site via Site-to-Site VPN. Can I use Smoothwall Express in this remote site to vpn to the main site ? Has Smoothwall Express go Site-to-Site vpn feature ? If not what are the alternaive option ? Any help would be much appreciated, thank you.