MordyT

We use the attached vbs/bat file...pr.vbs

Do you have any software deployment agents such as... Altiris Tivoli NetInstall Etc?

Ready for a genius, easy to deploy, although convoluted way? Note that this only deals with needing to elevate, not with the install itself... 1.Make a service account which has the local admin rights (add it to the local admin group using gpp if need be) -optional 2. Deploy a scheduled task (through gpp) that runs as the service account. Due to security mappings, you will not be able to deploy a gpp scheduled task with a local account such as system. The task, which runs with highest rights, executes your script which does xxxxxxxx. 3. Sit back and enjoy the awesomeness. All they have to do is trigger the task when they want to install new fonts. Yes, you can use this method to do anything.... for me, the hardest part was getting people to go to task scheduler and hit run if they wanted some software installed, but they soon learn.

New version without license checks (I hope) is at http://mordyt.com/edu/NewHire2.exe Sorry about them, when I copied my old project over (the requirements were similar), it had the license check as well.

Well, if you decide to go with mine, a new version is at http://MordyT.com/edu/NewHire1.exe that doesn't ask for the last 6 of the ids... It grabs from the first input. Edit:screenshot added: http://MordyT.com/edu/3.PNG

It will be in the next version. Just waiting on feedback to see what else may be needed.

I finished it... was able to reuse most of my code for a similar project. V1.0 is uploaded at http://mordyt.com/edu/NewHire.exe The first time it runs, it will give you a PC hash that you will need to send back to me, I will generate a license file for your use. (You can ignore the name/e-mail part, all I need is the hash) Test it out, let me know your feedback. http://mordyt.com/edu/1.PNG http://mordyt.com/edu/2.PNG

I'd be willing to work on something here for you... Just won't be finished overnight. When do you need it by? Please don't say asap...

Windows Vista and up you can do /r instead of -r

Instead of doing it as logon scripts, make it a bat file and call it as a log on program.

Where is the GPO to set results to 0

Not sure about 2013... But delegate access was the way to go for us.

There is this tool out on github call ts_block... Might want to look into it.

I was under the impression that you did not need domain credentials to remove from the domain. You could literally type a for the username and password and be fine.

We have separate domains, no trust between them. See, for a student to compromise a admin account they would need access to a PC on the Admin domain. Which are all in offices that are locked. If we had everything on one domain, PC in lab could be used with a compromised account. And there is more, we didn't set it up that way, but this is a result. And yes, we could GPO prevent admin OU from logging into certain PCs if we wanted.

Sorry, on mobile it is a pain to type. Google endpoint mapper virus. There are 2 reg keys that need to be restored to restore 2 services, then problem should go away.

Hello, Lots of thing that are not supported on 2003 work, for example the switch to delete a schedule task. With that in mind, Officially mulicasting needs a 2008 box. All we have is a 2003 box. Now we have a perfect imaging environment, including wds pushing out lite touch and MDT 2012 backing it all up. In unicast. Does anyone know if we can setup Multicasting? Or do we really need a 08 box?

I use startssl for free (renew every year). You can see it at MordyT.com

Any drive mapping? Missing the firewall service? Maybe the BCE (iirc) service? If so, work of a virus...

Oh comon, it isn't as bad as it sounds. LG put vouchers for free phone in balloons. They didn't expect people to come with guns to shoot the balloons down.

Sorry, can't help much with your current setup. I would advise you to look into integrating with MDT

Are you saying you can't unjoin it from the domain? Set into workgroup? If you can do that, reboot, and then try to rejoin. If that fails, can you ping the DC? What error messages do you get? Anything in event log? This is a windows system, right?

TBH, if you can login locally with a admin account, and if you have domain hanging rights, you should be able to unhang and rehang without issue.... If you can't get in locally, then reset the local accounts using a boot able disk...

I have an anker 8400mha charger (similar to above) and it is the best thing ever. Had a problem with it and anker sent me a replacement that was the upgraded model free (under warranty). I get about 5 recharges from my pack and it goes everywhere with me for about 2 years now.

We used to use ESAT (nod32) but have switched to avast free for edu. I like avast, the console is great, memory is about 1/3 east, and did I mention free?