PiqueABoo

Is the address she's sending to the right one behind the pretty display name stuff? You can troubleshoot with SMTP logging which should show you any mail delivery conversation between your server and elsewhere - for E2K3 that's turned on in the SMTP virtual server properties somewhere.

Agreed, but I was addressing "any capacity" not "aimed specifically at". Regardless, this appears to be a relatively unique scenario, I don't see the risk to children and I don't think it's worth throwing truckloads of dwindling public dosh at making some new law for it. Wouldn't it be better to chuck it at something like CEOPs education/awareness stuff instead? How so? I don't recall anything in the post-sentencing media reports about that.

I'd still fully encrypt laptops, but that approach definitely has my sympathy and also because it helps with another risk i.e. the data might get backed up if it's still at the school. I work like that a lot and the issues for me (which may depend on how you configure it): * I'm exclusively on the Cisco VPN network i.e. it messes with the local routing tables so I can't send something to a printer on my local network. * Similarly I can't fire up a local browser to go check someting on the net (unless I'm RDPd into a box). For me this turns out to be quite a pain, so I often have Laptop-on-VPN and home PC-not-on-VPN going at the same time. * RDP works fine then just freezes sometimes... could be anything between me on contended 10Mb ISP link typically talking to a target on 100Mb. As ever, you do have to think about bandwidth and bottlenecks at various times and places.

No, but I'd like them to be portable so haven't been tempted to try that. Still a bit curious over the second format and why wshell doesn't grok them, and wondering if the 5.8 script host you get with IE8 is any different, but as long as I've got that one method to make LNKs that wshell understands then I'm happy.

Oh sorry I missed that angle .. I don't think there is a specific Exchange Agent for Exchange 2007. IIRC it was just an Exchange Agent serial number you add to the BE Media Wotsit server - and the software that goes on the Exchange server is just the usual BE Windows Agent. Might be BE version dependent though (i used 12.5) so check this out before purchase though. Note: You do have to install the Exchange 2007 Management and any pre-reqs that has on the BE Media Server.

Yes. Backup Exec AOFO appears to break restoring to recovery storage that for E2K3 (don't know about E2K7) i.e. do not backup an E2K3 in a multi-server job that needs AOFO switched on for other servers/parts of the backup.

What do you do when you've been kicked out of teaching, probably the only profession you've known, and have served time for a sexual offence? Sign on for long enough until they send you on a fork-lift truck driving course (be very lucky to get a job, so repeat ad infinitum)? Or use a transferable skill and employ yourself? OTOH perhaps there was some wicked motive as well, but I don't have a clue about that. Does anyone? This could be a big extension e.g. SB produces stuff that people go and get then put on school walls, so does a paint factory. No one will be harmed by an SB resource. The actual problem as I see it: When some people see an SB logo in a school they will unavoidably be reminded of this story and whatever associations that brings them, which is absolutely not what you want happening in a school, especially when a small fraction of those people might get a bit aggravated. I agree with GD that it's not a good thing to be seen to "endorse" it either. So fine, filter the site and at the very least get the stuff with the logos off the walls.

Money can be generated in a zillion ways, so should we stop people like this ever earning any? A more satisfactory answer to this predicament was given by the police in the video. This is just the concerned truth AIUI not deliberate argument: What you said next in that sentence looks a teensy bit defamatory and you don't have any evidence for a defence.

Me too.. you've had one of those IE upgrade disasters or maybe just a CC3 system where RMMC stops working, haven't you? -- Or the other 100 zillion unblocked web-sites out there. Yes the use of this one is quite prevalent in schools and obviously of more immediate concern, but I strive for a world that's a bit more logically consistent: Will any of the "rules" rounded up for this one ever be applied to the rest, or will they just be reserved for sites people want rid of? Eh? Why is that the responsibility, rather than a voluntary kindness, of any site where you can upload stuff? I think it's the teacher's employers jobs to warn them against doing that (plus take action if ignored, well assuming they can squeeze that in before the parents torch the school). -- Act in haste, repent at leisure. I think we've had enough rushed/open-ended-law for a while, and unless someone can put up a compelling argument explaining how this scenario puts kids at risk, I don't see the case for it. There's some serious ethical issues in play here and I don't think the answers are clear cut. Did you catch the comment in the video about the Home Office not commenting? Could be wrong, but I guess that's about the ECHR challenge to a couple of folk (who want off) being kept on the sex offenders register. Perhaps we'd better see which way that goes before inventing more post-time-served conditions for people.

It sounds like it would, but the bit I don't get is how you trained the teachers to do the set up..

Yes, but it got bumped down the priority list before I finished. I'll pick it up again sometime, but not for a couple of months. XIA Links looks like a potentially handy product, but the video doesn't show me some key bits e.g. I take it you do this centrally and you can add domain and/or local groups in the Audience bit?

That parallel is wonky because you've missed out one level of indirection. AIUI Sparklebox is/was a site for adult teachers, not children. Dunno about anyone else's but the chances of my Y2 Sprogette spending more than a second on that site as opposed to club penguin, barbie.com, polly pocket, CBBC trying to circumvent the TV rationing, somewhere with Scooby Doo games and so on ... is nil. What was it that media report said? Something about a risk that he could get "intimate" with teachers? If that's a route to kids in their classes, then someone really ought to have a word with the teachers: About good old confidentiality first, and the new-fangled e-safety stuff if they're too stupid to correlate the latter with what they do on the net. If I were an RBC/whatever and thought that toolbar was a problem then all Conduit toolbars are a problem and the very first thing I'd be doing is explaining how I'd just blocked the ability of any of them to call home.

Perhaps I'm a Vulcan or something, but AFAIC it is completely different from someone routinely working with and thus being in a personal trust relationship with real children.

Yes, but if it hasn't been working since last September you would have a lot of those transaction log files e.g. a three figure number. How many are there? If it's just a few old ones they may have been orphaned somehow. Plus, the easiest way to make a scheduled ntbackup task is with the ntbackup GUI. At some point after selecting the right bits for backup you get the option to schedule it instead of running the backup right now.

By-and- by: a) Map X: to a share, create a shortcut to something on X: and you get a LNK file that doesn't work with the WShell shortcut functions. b) On the server SUBST X: to the shared folder, create a shortcut to the same something on X: and you get a smaller LNK file that does work with the WShell shortcut functions. Both shortcuts work from anywhere when drive X: is mapped to the right place.

I've got lots of .LNK files and a jscript running on XP using the standard wsh stuff (same as used in VBS) can happily read the TargetPath from them i.e. "c:\Program Files\SomeApp\some.exe". Except when it can't Early days and I'll have to make another teensy script to test this, but I think it breaks if the shortcut was created on 2008 (and it's over twice the size in bytes of a similar one created on XP). Does anyone know anything about this?

Developing one isn't *that* hard - I've got an ace one I prepared earlier right here which has more attention to detail that most people have had hot dinners, but with no bloat whatsoever. The reason I'm not sipping cocktails on a beach between typing sentences is all the other stuff: To make your fortune with that system you need the document writers, the graphics designers, the marketing, sales, support blah-blah-blah and those things put costs up. Meanwhile RM get to amortise their costs across quite a large customer base i.e. charge a lot of people less than they would if it were a few. RM are obviously expensive compared to d-i-y (subject to your daily cost), but I don't think the system alone is that expensive. It's the other factors like the CC4 workstation hardware requirements i.e. they all need to be pretty good, the support that you really do need because yes that bloated software isn't "there" yet, the too-much-time you spend managing the management software instead of just using it. RM made something called "Client Connect" ages and ages ago so you could run Vista on CC3. Don't know how well that worked, but you can find it on their web-site. Quite. I had an interesting time considering the options last summer, but left that above system at 2008+XP. Now is still too early, but by the summer it's probably got to be 2008R2+Win7. But if I was a school with a happy, meets-the-requirements 2003+XP right now, then I can see sense in wanting to stick with that until 2013 and moving to the next Windows (repeatedly rumoured to release in 2012). If nothing else, more of that really crap old curriculum software might have gone away and thus make the change less traumatic.

I swore I wasn't going to touch this topic ever again, but can't walk past that: How many useful to school sites out there with maybe a bit of interactivity have operators without a CRB clearance (bearing in mind the rest of the planet doesn't have CRBs)? Are YGHfL blocking them? Similarly are we worried anyone else's toolbars? What is so wrong with just telling it like it is instead of doing this kind of stuff?

Well it used the word: "Management". With TrueCrypt you have to be very organised e.g. keep initial recovery ISOs to ensure IT folk can get access to some encrypted drive after the user has changed the password to suit themselves etc. One assumes these products help with that side of things.

Did that a bit earlier for me, but .. before you start packaging anything like this it's usually worth a quick trip to FileHippo to see what the latest versions are. Alternatively I sometimes fire up Secunia PSI on my home machine which tells me about out of date and/or insecure (with details) stuff.

I don't think browser plugins are that good in an image because they change a *lot* and usually, amongst other things, to fix actively exploited security vulnerabilities: Acrobat 9.0 = vulnerable, it's 9.3 this week... does that Shockwave version end in .606 coz that's now the latest.. and so on.

There's a 'backup' copy on this page together with a walkthrough wrapping Firefox

Yes, but I'd make it a Mail server forum i.e. not just Exchange.

I reckon there's a high probability that he was just one of a long line of "visitors" and he got tagged for it because he was the "lowest hanging fruit", so to speak. I note that trespassing is of course a civil offence i.e. no prison.

Hmm.. can't help wondering how those costs break down, because the way I see it sooner or later (perhaps as a consequence of the bad news delivered by a decent authorized pen-test) they were definitely going to have to spend quite a bit of money. If you take your security seriously there shouldn't be much difference in what you do to those systems when: a) Some Good Guy[tm] tells you they are hopelessly vulnerable and *may* have been compromised in the last couple of years. b) Someone like McK. blunders around enough that you know they have been compromised.