Ryan

Just to chip in... To the hijacked sub-thread: all staff from head to cleaners all get same permissions here, and are subject to the same pc and network restrictions and web filtering. And relating to admin permissions: Some staff (that i trust) get local admin on their classroom machines, and that's it.

I'd be diving in the Caymans, so no sitting about. If you're bored, you're spending it wrong!

lo miller

I've seen myself politely ignoring repeat whiners (more so if i don't like them), but on the whole stuff gets prioritised on how serious it is / how badly it affects people doing their job. Homers are graded on the size and quality of the whisky on offer

What are your criteria for the level of support you give to a problem, or the speed at which you attend to it?

lol, some of ours have started doing that, and had a phone call about one this morning! Maybe it's built in to encourage periodical upgrades

application/pdf ? handy MIME types list for reference

I set up the exact same thing for our teachers to reset pupils passwords (mostly to stop them bothering me to do it) Works perfectly, but yep - the hard bit is setting the rights and permissions correctly. I think your query seems to relate mostly to your AD setup though - how is it structured in relation to the groups you mention? - Students |_ Year 1 |_ Year 2 etc ? Edit: If noone can help, i'll do you a little walky-through for how i did it. See if you can get a quick answer first though.

All useful stuff, thanks guys. I'm leaning towards using this for domain-wide broadcasts because, as we know, very few people actually check their chuffing emails regularly!

Think i'll give that a bash before enabling it across the board Incidentally, i remember using and abusing 'net send' from the command prompt at uni as a sort of rudimentary messenger service between mates Until the uni cottoned on to it, that is.

I can't believe he's not thinking of the kittens

Anyone use Net Send broadcasts to inform users of stuff (reboots, issues, etc)? I'm aware that enabling it causes (or used to cause) problems with malicious popups from the internet and other sources. Just wondering if anyone has it enabled and uses it.

http://www.fototime.com/542B6E1C606F69B/standard.jpg THE US ARMY - PUTTING THE "FRIENDLY" INTO "FRIENDLY FIRE"

Caching is on yep. It's all local, nothing's mapped.

Righty ... First proper error after a reboot this morning is: Timeout (30000 milliseconds) waiting for the Microsoft ISA Server Storage service to connect. Then: The Microsoft ISA Server Storage service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. Then: The Microsoft ISA Server Control service depends on the Microsoft ISA Server Storage service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion. And then: The Microsoft ISA Server Job Scheduler service depends on the Microsoft ISA Server Control service which failed to start because of the following error: The dependency service or group failed to start. Then: The Microsoft Firewall service depends on the Microsoft ISA Server Control service which failed to start because of the following error: The dependency service or group failed to start. Seems to point in one direction...

Holy crap. That is uber-geekdom right there. In truth, i suppose i'd be running a mini network at home for learning too if i had the space and dolla to spare

Slightly OT, but you have 2 DCs at home?

Tried many firewalls over the years, from the bloated Norton IS, to the easy-to-hack older versions of ZoneAlarm. Kaspersky seems to be the best though. I recommended it to my dad and he loves it, and i know a dude who works for them and they seem to be really on the ball. Kaspersky gets my thumbs up.

I'll go have a poke about in the logs. (and i can do it without moving my arse now!! ) Was trying to don't worry For anyone else's info: Using FF 2.0.0.12 - the Thanks button, she no worky. In the end, it seems a middle mouse click on it (launches a new FF tab) made the Thanks stick.

Gulp, you don't wanna see what i've got on server 1 then *runs off*

It's set to start automatically, yep (even though it won't). Once it's up, it runs as normal, and does it's job. As in, "the box is a firewall". I just can't get into it remotely. Hang on... ...Well i'll be damned. I gave my PC a static IP, and manually added it to all the remote options in the policy. Works as normal now. What baffles me is that none of this was changed when it stopped working. Bizarre. Thanks ZH, Glenn and plock Now i just need to figure out why the chuffing thing won't run on startup. Any takers? ;-)

lol? backup is no interweb Or do you mean a backup of the settings/config? I can spend a Sunday reinstalling it all without causing too much hassle due to lack of interweb, not too many people in on a Sunday (we never close).

All that would have been changed in the period that it stopped working is Windows Updates. There's also a few pending. I'll go and let those happen and see if it helps. If not, a reformat might be on the cards (which should be fun, 'cos i didn't do all of the installation first time round!)

tis ISA 2006. Is the error about not being able to start the firewall to be expected if ISA is installed/running then?

Yep, it's the Microsoft Firewall service, sorry for the ambiguity. This service has to be started manually on boot. Once it's up it operates as it should, sans RDP/ping into it, which is why i think the broken Windows Firewall is blocking access. I can't even get in to configure the bugger. The Windows Firewall is off, but cannot be started (which i'm not too fussed about obviously, but if it's causing these problems...). The error dialog i get when starting it from Services is: Could not start Windows Firewall/Internet Connection Service (ICS) on local computer. Error 123: The file name, volume name, or directory label syntax is incorrect. Everything was fine access-wise until a few months ago. Policies aint been fiddled with. Thanks lads.