link470

I see that question a lot too. I haven't found a confirmed answer yet but versions of the software have continued to be distributed for free and advertised as freeware. I don't use Quicktime Alternative cause I actually like Quicktime, but Real Player I find is awful for the amount of stuff it installs. Older versions of the software even broke certain windows components lol.

Hahaha, beat me to it! I saw the title of this thread and was going to come to post exactly what you just said. WinDirStat is absolutely a must have tool. I use it either for trimming down my default profile sizes, or for scanning the root of our student shares folders to see who has the most stuff. The greatest part about it is you can SO easily pinpoint things like games that students have tried to hide in a folder like Student>Science>Assignments>Homework>1>2>3>4>5>6>..... and then their "game.exe". Pop open WinDirStat and no more playing with "combination" folders or whatever they want to come up with that took them hours to make. You see the file in less than a second as a big blob on their home drive Busted I prefer not to use Real Player at all. I use Real Alternative which embeds the Real Player codecs into your system for playing things like .rm files and creates either file associations for Windows Media Player or Media Player Classic from what I remember [comes with Media Player Classic]. Fantastic program, fraction of the size, fraction of the issues

Hey guys, So I've got a Dell PowerEdge 1400SC server here that I've been trying to get going on RAID 5. It's been a great server, but it's running with only a single 20GB drive at the moment [i know]. I have a second PowerEdge 1400SC that has RAID 5 running on it beautifully and the performance is fantastic. So I popped open the single drive 1400SC today and removed the 20GB drive and set it aside [so if I don't finish by the time schools back in after spring break I can put it back in and continue using it]. I have a PERC card in there and 3 x Fujitsu MAN3367MP's. I have a cable I've connected between them, and I've done my best to match the jumper settings to the other server to make it identical. The other server actually has the third drive as a Seagate drive, so I matched that and got a Seagate drive out [that I happened to have] of the same model and set the jumpers the same as the other. The two are identical now. When I first fired up the server, I went into the configuration utility [CTRL+M] for the PERC card and had a look at the drives, there were 3. That's fantastic. I cleared the configuration of the card [since I'm not sure what it had before, and was going to build a new array anyways]. Now, when I scan the drives, theres only 2! I can't get the other one to appear. I rebooted, switched position on the cable, no matter what I do, only 2 drives appear. So now I try to figure out which it is. With the server still running, I pull one the Seagate drive and rescan. Only 1 drive appears. I plug the Seagate back in, pull one of the Fujitsu's. Only one appears. Plug it back in, pull the OTHER fujitsu, and 2 drives appear. So I guess it has something to do with that one fujitsu. Thinking it must be dead, I got another fujitsu of the same model, and configured it the same way. Fired the server up, still only picks up the first 2. Tried placing the newer fujitsu on another location on the chain, still 2. ID 0 and ID 2 shows a drive. ID 1 shows blank no matter what I do. Assuming I use all 3 Fujitsu drives, could someone please walk me through how to configure the jumpers correctly and where to place the drives on the chain so this actually works? I've been referring to this: The Drive : Fujitsu MAN3367MP - A Gentle SCSI-Runner Thanks! ::EDIT:: After a lot of trial and error, I've finally got it. The jumpers were shipped to me wrong, so following the guide provided by fujitsu didn't help. Appears I've got it working, although now I know I have 2 bad drives and 2 good drives. 2 of the Fujitsu's were actually good, the third Fujitsu and the Seagate were both bad. Thanks anyway! Now to find another Fujitsu of the same model...

Hey guys, My apologies first if this is in the wrong forum. I've been trying to find a freeware web based inventory software package. Something in PHP, asp, etc. that works with a back end database. However, this has been much more difficult than I imagined. I can't find a single package that's good. I need to be able to have at least 2 locations, and to control inventory at both locations. So location 1 can look at locations 2's inventory and see what they have in the way of parts so location 1 knows how many parts to order or send to location 2. Surprisingly, I found no web based freeware download solution for this. I've got the servers for it, just need the software to install and don't have the time to write it myself. Almost EVERYTHING I've found, is for IT related inventory. That's not what I need. I need ANY item to be able to be entered with a quantity and location and to view by location. Thanks for any advice!

We're deploying Linux thin clients throughout the district at the moment. Rollover project is 2 years long or so for about 20 schools. 3 Secondary schools, 3 Middle schools, and the rest are Elementary. The elementary schools are nearly complete. I'm the network administrator for one of the secondary schools though, each one of the 3 secondary schools have dedicated Network Admins. We're not so sure how the Linux conversion is going to effect us though... Elementary and Middle is easy but we at the secondary schools have so much custom software and builds and everything is streamlined and running nicely. The elementary and middle schools though don't have someone dedicated there, so I can see how Linux thin clients would be the way to go. The distro the district has chosen is Edubuntu with one server [Xen Server] per school and 200 or so dummy boxes per school. So far, things are working well. But it's easy for the elementary and middle schools, they need simple applications. Where as at least my location and another location both have full site/volume licenses of Adobe Creative Suite 3 Master Collection and drafting software with customized builds depending on where the machine is deployed in the school. It will be hard to virtualise a lot of our stuff. Let's just say I have no plans on running a lab with Premiere Pro CS3 on a thin client configuration with a single server.

I just got a machine I'm in the middle of creating an image behind me. I logged in as a teacher and student, everything is how it should be. The other machines in the school though are all frozen via Deep Freeze. I would have checked the security tab but didn't think about it because policies are applied at the moment to prevent the security tab from showing up. But I'll go try to log in as a local administrator and see what's happening. I'll post back within an hour. It's possible it's a policy but I don't know what kind of twisted policy I would have set to make them have that kind of permission. Also, policies are applied equally to the computer behind me that I'm building an image for, and everything worked properly. Thanks guys! ::EDIT:: Oh wow...delete this thread right now. lol. I MAY...or MAY NOT....have set my test accounts to be administrators on every machine a long time ago...for something...and forgot about it....MAYBE...I won't confirm or deny that... AH HEM... So! How's everyones daaaayyy? *slips quickly out the nearest conveniently placed door*

I'm not sure if this is normal behavior or not for a Windows Domain. All clients are running Windows XP Pro and servers are 2003 Standard/Enterprise. All users are configured as standard users with no elevated privileges. For whatever reason, yesterday I was playing around in my teacher clone account on a student computer and was testing to see if something worked, but noticed I could also delete folders and add folders to the Windows directory and Program Files. That shocked me, I wasn't expecting that. I tried a student account too, and to my surprise, I could do the exact same thing. These systems were deep frozen so I wasn't concerned about data loss, but I'm concerned that they have that level of privileges. I've already gone into Active Directory and double checked that no users are Administrators and no groups the users are a part of are Administrators. Policies are being applied, I still can't access Computer Management and everything else that should be locked down according to policy, is. But is this normal?! Have they been able to do this all along? One of the things that made me clue in before I tried the Windows dir and the Program Files dir, was that I could go into documents and settings, and open another user profile folder that I had just logged in as. Correct me if I'm wrong, but those should all say Access is Denied upon trying to access a Documents and Settings folder that isn't yours. Any thoughts of how to stop this? I'm puzzled. Students and staff obviously don't know they have this privilege but I'd rather fix it fairly quick. I don't want to band aid fix it either, I'm curious as to what actually made this happen. Thanks as always

Sounds good, thanks! I'll give that a shot. Now here's a question of security. Does leaving subinacl in your netlogon folder pose a security risk if say, a skilled user [and this is highly unlikely, just thought I'd throw it out there as a huge IF] managed to open the netlogon folder, view the exe in there, know what it was for, and use it? The command line and registry are restricted, as well as running your own bat and vbs scripts. I don't think it can be used in any way by a user to edit permissions. Would it even be able to run as a user? This is a startup script at the moment to make those changes.

Fantastic, thanks! That worked Only thing now, and it's not huge, I can edit the few entries below it, but is there a way I can use this exe to place the Users=F permissions down to propagate to internal entries? If not, I THINK I can work without it. Just thought I'd ask while I can.

I'm trying your suggestion BoX, using that tool, and I'm getting error 1337 [lol] The security ID structure is invalid. The software I'm trying to edit is by a company called Kuta software and I'm trying to modify a key to make it writable of course. Here's the batch file: regedit /s %logonserver%\netlogon\KUTA.reg %logonserver%\netlogon\subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth /GRANT=MY_DOMAIN\Users=F This outputs the following: >regedit /s %logonserver%\netlogon\KUTA.reg >%logonserver%\netlogon\subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth /GRANT=MY_DOMAIN\Users=F LookupAccountName : HKEY_LOCAL_MACHINE\SOFTWARE\Kuta:MY_DOMAIN\users 1337 The security ID structure is invalid. Current object HKEY_LOCAL_MACHINE\SOFTWARE\Kuta will not be processed Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=MY_DOMAIN\users=f : Error when checking arguments - HKEY_LOCAL_MACHINE\SOFTWARE\Kuta ::EDIT:: I tried adding quotes around HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth making the command: %logonserver%\netlogon\subinacl.exe /KEYREG "HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth" /GRANT=MY_DOMAIN\Users=F Still no luck.

Thanks for the info! So, the only problem with that is the registry key will be pushed down at computer startup, should I set the permissions with a batch file at login? The registry keys will have to be there first. So if I make them both startup scripts, and the permissions one happens to execute before the registry add one, then the keys will be added but no permissions will be set because the permission script already came and went because there was no keys to edit the permissions on. Is this right? If it is, is that the best way to do it? Startup script = add keys. Login script = edit permissions?

Our library purchased a few last year and expected them to just work. Unfortunately, as some of you have already mentioned, the editing software isn't easy to work with on a network. No student on a restricted user account can just plug in the camera and fire up the editing software, you need to be an administrator, because while the camera says that all the software is on the camera, really, the installer is on the camera, and the installer installs to your local hard drive. Students obviously can't install software, neither can staff. The only work around I've found for these devices is that while I'm making my images for each of our labs in the school and system sets, I plug in the camera into a computer that will be able to edit flip videos, and let the camera prepare the system by installing the software. I then remove the camera, finish the image, and seal and deploy it. After that, students can edit no problem because the software is already installed. I still haven't even done this though since the cameras were purchased right after I did a new image deployment school wide for all of our labs. I have them sitting in my desk drawer as I type this, but our new images will have support for these devices. For the average home user though who is an administrator over their own machine, I see no problem with them, I think they'd be fantastic. With an enterprise network environment with restricted policies though, that requires more administrative overhead.

Alright, I've got some applications here that I need to install. Instead of installing them on each individual staff machine that needs the software and have to worry about which one has it so when I re-image the staff machines they all get the software they used to have back, I've been creating an application network drive. I have a script that maps the appropriate desktop icon from each program within the network drive to the user's desktop. So far, this works great. I'm just in the testing phase. However, we have some of these smaller applications that need to activate the first time the application is ran on each computer, or every time the application is ran for the first time that day [if the machines have Deep Freeze]. So I found out that if I export the key from one machine's registry that I need for the application to work [like my own desktop in my office, the one I used to install the software on \\server\applicationshare], I can push that registry file down and install it into the systems registry with a startup script. That's great, and it works for some apps. However we have one application that needs to write back to the registry and edit the key that I push down when the computer starts up, to say the activation completed successfully on that particular machine. [This is all allowed by the way, it's a site license]. I get an error along the lines of "your key was sent [the key I pushed down in the registry] and was successfully verified, but the application cannot write to the registry". Obviously the user is a standard "user" and not an administrator, so my question is, how can I push down a registry key AND set it's permissions so users can write? I found this: Does that work? If so, I'm confused. What exactly does that do? If I were to follow that on my desktop here, the way I see it is that I would choose a registry key that's already on my system [like the keys from the activated software I installed to the application drive], and I'd set permissions for who can access MY key...is that how it works? Or does that extract my key and embed it in the policy somewhere and then deploy the key with those permissions? Or does it take the permissions only, and apply it to the identical keys if they exist on the machines that the gpo runs on? I may in fact be very close to my end goal if those instructions are correct and that's all I have to do. I just want to make sure I understand what's going on completely and that I'm doing things right. Thanks in advance

Hey SYNACK, normally I'd change the subject of my post to [ANSWERED] or [sOLVED] at the beginning, but just wanted to let you know you were a huge help and I really appreciate it. Relieved a ton of stress from me with your info. Not only did I fix the one problem, but I fixed about 10 others inadvertently So thank you very much. What I ended up doing was simply uninstalling AVG Network Edition after I figured you know what, this box is already insanely secure, it's running ISA...duh. Only access to it is on specific ports for me for administration and from me only. So that's all fixed, and I also adjusted the TCP limit within ISA to a higher number. I notice a HUGE improvement already. The other major issue it fixed is I could NOT run Windows/Microsoft update on ISA, or any machines behind it, and a download over 10MB or so would crash ISA. All seems great now, I'll update with more information if there is, but for now, thank you very much! ::EDIT:: No way...it fixed my webmail as well. That was ALSO broken. Logs in perfectly now, lol. Was testing something and expected it to fail as usual and it went in right away. I've NEVER been successful at logging into to my webmail service since I tried launching it. Very happy, thanks! ::EDIT:: WOW...lol, WOW, and now my other issue is fixed, only one person used to be able to connect to VPN at once, that's resolved as well. That's EVERY issue I had on my network here, resolved. Things are going excellent so far!

This will pick up all sorts of stuff, for instance with ISA you must have TCP acceleration switched off on the network cards and have certain TCP windows for it to run at the max speed. If i recall correctly there are also certain processes that benifit from being excluded from lag inducing realtime AV scans. Thanks for your reply! You guessed it, I've already tried running the BPA and I have it installed and run it now again after making changes. It doesn't pick up anything significant. I have a weird range 10.0.0.1 to 10.0.0.10 and it always flags that saying that anything out of that range in that subnet will be marked as spoofed. But I know that, I made it 10 IP's on purpose, I only have 3 servers behind it Otherwise nothing else out of the ordinary. I couldn't find the TCP acceleration, is that inside ISA preferences or Windows Networking preferences? I couldn't find it in either but I must admit I didn't look very long, because I noticed what you said next and saw that AVG Network Edition was installed on the server. I actually completely uninstalled that because I think I don't need it after reading around some. The server is locked down enough as it is, it's ISA and only specific protocols are allowed and the 2 or 3 that are allowed are heavily monitored. So I'm not worried anytime soon. The web server has antivirus software itself so if something is uploaded that is dangerous it will be flagged at that point and not bog down ISA. It's so weird, at times it works, at times it doesn't. Were you successful in viewing the site? It's either incredibly fast, or lags our or gives incomplete pages. Very unpredictable.

Hey guys, I tried the ISAserver.org community for this one but nobody has replied in several weeks. I recently configured a new network with ISA server 2006 as a web publishing reverse proxy. I have 3 main servers behind it. No clients, literally a network of 4 machines. 1 ISA server firewall/reverse proxy, 1 web server [server 2008], one database server [server 2003 with MySQL], and 1 mail server [server 2003 running hMailServer with RoundCube as a webmail client]. I originally configured this setup because I wanted to have webmail on the mail server and the websites on IIS 7 using host headers, using the same port 80. Previously I always had to have a different port number on the webmail interface. What I may do if I can't figure this out, is ditch ISA, and then go for something like smoothwall and just use port forwarding and have the webmail client installed on the main web server and point to the mail server. The webmail interface isn't integrated into the mail server software so I should be able to do that. Thanks for your time in advance, here's the copy paste from ISAserver.org, really hoping someone can help me figure this out. --------------FROM ISASERVER.ORG---------------- Hello! I've been running ISA as a reverse proxy in production now for a few weeks and I have to say it's done an excellent job for the most part. Nice and fast. I do have one concern however. [note to edugeek, this is getting far far worse...] For the most part, EduGeek.net runs quite nicely and very fast. However, once in awhile when you click a link, the browser taskbar will say "Waiting for...." or "Loading...." and the page won't ever load. We are running the latest version of the phpbb forum software [3.0.6] on our website. Not all of our users know to just reclick the link or hit refresh, so sometimes if they come across an endless loading screen they'll just sit and wait. My guess is that there's something wrong with ISA and that it's not passing through the request. Why, I'm not sure. Again, it's very fast, and works very well for the most part, but clicking the odd link will yield "Waiting..." and nothing will happen unless you re-send the request by clicking the link again or hitting refresh. Worse, I've had this happen once where I sit down at my computer, and instead of a few clicks in until I see "Waiting...", it's the first time I visit the site, so right after I type EduGeek.net into the web address bar and hit enter. To me, that's not good because it would make people think the website is down if it doesn't come up right away. Anybody else noticed this? Again, it could be the web server [Windows Server 2008 running IIS and PHP with FastCGI installed by Web Platform Installer] or it could be something else, but I'm curious to know if this IS ISA or not. I also have my web server and database server on separate boxes. I have skip-name-resolve enabled on MySQL's my.ini config file and that speeds up the processing to what it should be, but I'm not sure if that would be the issue either. My bets are still on ISA but I can't be sure. Please let me know if you need any more information from my web publishing rules or network configuration and I'd be happy to share that information to get an answer. ----- EDIT ----- Still trying to figure this out. It was working great, and now I'm having difficulties with all websites on the system. I can't track down whether it's ISA or whether it's the new server [2008 running IIS]. I'm at work at the moment so I can't go restart them, but I'm thoroughly confused. I couldn't access the website at all this morning when I woke up and I tried to check the ISA logs, but when I started a logging session, all I could see was each time I clicked a button on the website [which of course yielded an endless loading page] all the log would show was "Initiated connection..." from what I can remember, and Allowed, and nothing else. Just initiated connection each time I click a link on the website. Anybody else have any ideas? I'm really confused and can't seem to pinpoint where the problem lies. I think it must be ISA. I'm tempted to just try smoothwall in front and use port forwarding instead of a reverse proxy and see if it's any better. My home router and port forwarding with an old 500MHz server worked more reliably than this. Thanks so much! ------------------END------------------

Congratulations ZeroHour! Nothing more rewarding than becoming a parent! I'm only 22 but I know my parents say non stop how proud they are of me all the time and I know they must be stoked. I can only imagine what it's like from your guys' perspective as parents.

Thanks for your replies so far! I read that article I quoted, and it makes sense. The issue I'm having though I don't think is related to network security. Just related to the fact that as soon as one person opens the Access FE, a lock file is created and nobody else can open the FE from the share drive. Any workaround for this? A few google results recommended checking that Shared was the radio button selected in Tools>Options>Advanced under Default open mode, but it already is.

Hello! I've been configuring a Terminal Server for the last little while, and I've come across an issue that I thought I'd bring up with you guys. The Terminal Server is Windows Server 2003 R2, and I'm configuring the Terminal Server because I'd like to have multiple users access a Microsoft Access front end database application that talks to a SQL server on the network. At the moment, each user has the database front end in their local C drive, and they just launch the front end which acts as a client, to access the data on the server. Now, with the new setup, I'd like each user to be able to log into the Terminal Server and to only be able to run Microsoft Access and that database front end file. Here's what I did. I moved a copy of the front end Microsoft Access file they use onto the Terminal Server, placed the Access front end in the root of C, gave authenticated users modify permissions on the folder, and then tried logging in as 2 or 3 test terminal server users. You may figure out pretty fast if you're familiar with Access that the first account that opened the access database worked, and subsequent accounts couldn't open the database because of the database lock. My question is, can each Terminal Server user share one front end database file? Or do I have to update a front end database on each users configuration each time there's an update to the front end? I'd end up having something like C:\Documents and Settings\Username\Database\FrontEnd?? Then I'd have to log in and replace the files in each \Database\FrontEnd folder of each Terminal Server user on each update of the application [which doesn't happen often, maybe every 2 to 3 months we receive an updated front end]. Thanks for any information!

Just updating everyone here. I still haven't found a solution to the FTP issue, to define accounts who can access FTP and what each accounts home directory is and map any virtual directories to their accounts they have access to. I've had 1 reply on IIS.net, and that was someone saying "just use WS_FTP", which yes, it worked, but I'd like to know how to use FTP 7.5 if this is possible to do. There doesn't seem to be nearly enough options in it though. Thanks!

Believe it or not, I use Net Meeting [LOL]. The reason I chose Net Meeting is it's integration with our Active Directory accounts. So the person in the office who edits the PowerPoint simply logs into the remote computer hooked up to the TV's around the school from the server room with Net Meeting, and logs in using her existing network credentials which are passed via SSL thanks to Net Meeting supporting that. Yes, it can be a pain to set up since getting the machine to start up with desktop sharing support can be a lot of reboots and trial and error since the option is always grayed out until you do something magic [which even I totally forget what it was, a lot of tinkering back and forth], and the colour quality when you connect is like 16 bit or something terrible, but it works since all she needs to do is open PowerPoint, hit show presentation, and exit. She edits the PowerPoint document locally.

Copied from my post at IIS.net Alright so here's the deal. I've been slowly migrating to Windows Server 2008 and IIS 7/FTP 7.5 here. I have just a single IP address, and I host all my websites using Host Headers within IIS. It worked great on Server 2003 and IIS 6 and I think it will in IIS 7 as well. I host websites for about 15 different clients, and then give them FTP access to the root of their website. The file structure is like: wwwroot >Website1 >Website2 Not too difficult. What I used to do on server 2003 was run WS_FTP server, and link each FTP user account I made that resided inside the WS_FTP user database to one of those folders. It worked great. I could also create a virtual directory of another website they may have ran so when they logged into their FTP account they would get a folder saying Website 1, and say, Website 7 as a virtual directory so that they could have a folder that linked to the root of each of their websites. So very simple. I thought hmm, I'll try FTP 7.5. So far, I'm left a little confused. I'm trying to understand User Isolation, but from what I can see User Isolation creates either a home directory, or a directory under the ftproot folder with the same name as the user. Normally that would be great for just a secure FTP file server, but I want to link users straight to the root of each of their websites. Webmaster1 is going to need to log in and see one folder called Website1 Root, Webmaster2 is going to need to log in and see one folder called Website2 root, which are pointing to wwwroot>website#. Also, I can't seem to figure out how to define user accounts for who can log into FTP and who can't. It's all either set to Basic Authentication or Anonymouse, which obviously I don't want since NOBODY should have anonymous access. That's great, but how do I know if a user has an FTP account or not? Or do ALL users on the domain have an FTP account by default? I'll be creating each user in Active Directory. This was a very easy setup with WS_FTP, is this possible with FTP 7.5? Thanks!

At the moment I'm using PCL, should I be using PS? I never really knew the difference between the two and when to use them to be completely honest. :: EDIT :: Tried using PS, everything seems to be working except for the printer asks for glossy paper every time in the manual feed tray even though I disabled manual feed and set the paper type to plain in all trays. But hitting the select button on the printer seems to get it continuing in the mean time. Could be an InDesign print setting somewhere. Thanks again!

Hello! Got a bit of a strange issue here. I've got a LaserJet 4050tn or n, can't remember which off the top of my head and can't head down there right now to check, and it prints every single type of document I throw at it whether it be Word, Excel, a test print, a webpage, or other document, but it does not print Adobe InDesign documents. I've tried printing InDesign documents on every other printer we have in the building. They print perfectly, but they do not print on the 4050. The error on the Windows print server is that the paper size is not supported. However, the size is letter. I open a new InDesign document, choose letter as the paper size, and hit print, and it prints on every printer except the 4050, where it says paper size is not supported. It's letter, it IS supported because I can print anything else in letter, adn InDesign prints letter to any other printer. I've adjusted the settings within the printer driver on the server to indicate that a duplexing unit is installed, tray 2 contains letter, and tray 3 contains legal, and I verify the trays are all set correctly so the sensors trigger properly. The print jobs from InDesign still do not go through. Any help would be greatly appreciated. Thanks!

The only issue I've ever had is Premiere Pro not capturing, but I don't redirect application data for students. I've found that after a system running Premiere Pro CS3 is imaged, and copied to another system, something in that process corrupts the ability for Premiere to capture. You get "capture device offline" all the time. Never had an error similar to yours though. I usually capture the footage here in my office and then transfer the raw files to the Art share drive we have here for the students to pull down to a local drive, at least, until I can rebuild each lab computer manually without imaging. The only answers I ever seem to get from Adobe is that Premiere Pro is not meant for a network environment and works best on a local computer with administrative access, which for obvious reasons we can't just dish out to students and we can't have the systems not on a domain for centralized management.