Stuart_C

Hi there, Just about to start Migrating my SIMS DB and I have a question. Do I need to use the Redirection Service. I'm loath to have things running I don't need. All my local Connict.ini's point to a server one (which I can easilly edit). What else do I need it for? Or should I turn it on to be on the safe side?

You think that's bad, I'm doing my SIMS migration to SQL 2008 today! *Duck's and Cover's*

Yeah got that. It steps you though the SQL Express install and it's about 95% the sames as SQL Server but as there are a few more options of what to install I wondered if there was a SQL server specific version. Just being a little overly paranoid to be honest but better safe than sorry. If I have to wing it I have to wing it.

Is there a Capita Guide on how to install SQL 2008 Server? I've got the guide that leads you through the SQL 2008 Express install and to be honest I can make a reasonable educated guess however... Given it's SIMS and I want to make sure I don't miss something I was wondering if there was a guide on how to install SQL server so SIMS is happy.

Cheers, However having a look at ICALCS it seems to specify everything in the special permissons rather than the generic Read/Write/Modify boxes. Is there a reason for this? Shouldn't it highlight the default ones?

I just use RM. But that's becuse they are our IPS and it ties everything up in one place. I just fax them anything I need doing (they need DNS changes on headed paper) and it gets done. A bit pricey but hey....

Has anyone used Subinacl.exe on their servers to script file security changes? 2008's not listed as a supported OS so I thought I'd ask. Or is there something else hidden in 2008 R2 to make security changes from scripts? (I'm creating users home directories on the server).

Whilst there is staff accomodation on site it's prety much "teacher only". The only exceptions are the site manintenance forman and caretaker who have properties on site (for obvious reasons). Having said that I don't think I would want to live on site. OK the commute to and from work is shorter but I like the seperation between work and home. Also can you imagine how many calls you'd get if you lived on site and could "nip in"?

I've got a re-directed start menu to a location they can see (though can't write to). That works OK. I wouldn't want the students searching the C: drive at all.

Doesn't the "net stop wuauserv" need to go first?

Simply share the top level folder ending the share name with a $. That hides the share. Name the subfolders something usefull like the users username. For each user then simple add a line to their login script to map a drive to the folder. e.g. net use x: \\servername\sharename$\%username%

You can create UDF's in the Applicant, Application and Student area's and Vik is correct it does pull through. (And I'm sure we do it and I'm sure the above statement is correct but the way my luck is running at the minute I wouldn't be supprised if someone pointed out that whole sentense is wrong!)

Could be refering to the Subnet mask, as in 192.168.1.0/32

Cheers. For soe reason I didn't look in the Computer Config!

There is this which I have suffered from in the past on XP machines. Not sure if it's worth having a look at in your case.

How to I get media player NOT to go through the setup screens when each user logs in? Presumably there as some reg keys that need sorting as I can't see anything in Group Policy.

I don't have a particular problem with the libraries, there are a few niggles that I was wondering if anyone can help me with. 1: The document Library shows the users documents and the public ones. Some GP based security chnaged means I can prevent access to them but I'd prefer it not to show the shared library. Any ideas how to remove them? 2:It would be nice if the if the users couldn't create more libraries, can they be prevented? 3: Is it possible to remove the "Share Folder" item from the context menu? I've been trying to break it and I am not sure they can actually share anything due to other restrictions but I'd like to take away their ability to try. Oh and is there an easy way to remove "Restore Previous Versions" context menu item. I've found a bit of a reg hack that might do the job but I'm not convinced by it and I was wondering if anyone KNEW. Cheers.

Has anyone used the Windows Diskmanagement to shrink a volume? Did it go well?

My users have no access to the root of the share only thier own folder and my redirection (via GP) seems to work fine.

OK I've sorted my first problem and got the icons to appear. My problem is that it's possible for a user to pin/unpin files by going to the shortcut and right clicking and selecting the appropiate option. It there a way to stop a user from being able to pin/unpin stuff to the start menu.

Not enough disk space in the user area crops up occasionally with disk quota enabled.

I've been doing this through the registry which I found here. When I copy the keys and files to the quicklaunce filder then log in the icon's are white squares, though when I click on them Windows refresh's the icons with the correct one's and proper shortcut menu. Anyone tried doing this in a siilar way and got it to work properly?

I think it might be to do with your step two as when I did it worked fine (ish). Couple of things, I assume that you have installed the client side extensions so that the XP clients will pick up the preferences. I have my users and computers in seperate GPO's. I set up the preferences on the PC GPO with the power settings I wanted when the computers were switched on. I then set user preferences om my student and teachers OU's with the power settings I wanted for them and it worked reasonably well. As preferences are applied at startup/login each setting overrode the previous one and it meant that my computers shut down the monitors quickly when the machines were not logged in or the students were logged in and stayed on for a bit longer when the teachers were logged in. I didn't bother with looback mode. The only problem I had was that occasionally XP would just decided it didin't want to update the with the staff preferences. This tended to be random or at best PC specific (certainly only a couple of people ever complained, and it tended to be the same set of 3 people).

Hi there, I have a bit of a problem and I'm wondering if anyone can help. I'm running VSE8.7.0i, patch 3 and the latest DAT's and Engine. I have set up a number of user defined rules in access protection policies to prevent the student in my school running files from a number of locations. I am blocking all processes the the folder/file name "h:\**\*.bat" This stops users creating batch files from their home area (see attached Image). I have an almost identical one for their destop, removable drives (E:/F:) and a couple of other places. This has been running fine for years on my XP machines however I recently purchased some Win 7 Machines and hit a problem. I noticed initally when I suddenly lost all my network drives. A little research showed this in the access protection log. 03/08/2010 14:10:43 Blocked by Access Protection rule \ C:\Windows\system32\userinit.exe \Device\Mup\l\netlogon\lginscrpt.bat User-defined Rules:BAT From H Action blocked : Read 03/08/2010 14:12:55 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Windows\system32\gpscript.exe \Device\Mup\\SysVol\Domain>\scripts\PhotoStory.bat User-defined Rules:BAT From H Action blocked : Read Now for some reason the rule is blocking access. If I disable the rule then the next similar rule will block the file. If I disable all the rules then the batch file works. The thing is that this works on XP machines, I also cannot see how this location has violated the rule condtition. If I exclude those two processes then the flie is still blocked but the process is changed to cmd.exe which I didn't want to exclude as I want to make sure I stop the pupils running the batch files (rather than just gamling they are all run under the explorer process when in windows. I also noticed that my exe blocking rule is stopping me copying files even though the source and destination locations don't violate the rule. Anyone had anything similar or any ideas?

Have you got one for the control panel icon?