Irazmus

We don't have any mobile access points but for our statics we use Cisco 1240AGs and have found them very reliable. At ~£250 they're not the cheapest around and I don't know how they'll take regular powercycling, but we've been running 10 for the last year and they've given us no problems at all.

Damn, that's a better price and a better warranty than I'd managed to find. * Runs off to eBay to see if they have any more *

I'm looking to get one of those. If you don't mind my asking, how much did that set you back?

@rvdmast: Very well spotteed and wholly correct, those quotes shouldn't be there. Looks like I still have some more proof reading to do ^^; @kerrymoralee9280: Does that happen for all users or just specific ones? And what format of usernames are you using?

That error is from adminreset.asp, it comes from objUser.SetPassword in the ResetPass function. For some reason it's not getting the type of value it expects. A couple of things before I go hunting further: Is it only the admin reset that fails or does the self service part fail also? | EDIT: Beaten by Ben again ^^; Can you post the password section of your config.asp (The section including PwdType)

Doh, I've just rechecked the file I uploaded and it seems I included an old copy of auth.asp. I've updated the zip file but if you want to update manually, change line 33 from: Set UserObj = GetObject("WinNT://" & FQDN & "/" & CurrentUser & ",user") To: Set objLogon = Server.CreateObject("LoginAdmin.ImpersonateUser") objLogon.Logon ImpersonateUser, ImpersonateUserPass, FQDN Set UserObj = GetObject("WinNT://" & FQDN & "/" & CurrentUser & ",user") objLogon.Logoff Set objLogon = Nothing I don't think there are any more surprises in there anywhere, but I'll double check my live copy when I get to work in the morning.

@rvdmast: 1 - You're quite right this isn't the last version, I'm already planning some new features/modifications for 2.3. I did give consideration to language files when prepping 2.2 but opted to leave it out as I didn't think there would be much call for it (more fool me it seems), and it would have delayed the release which I didn't want since the main point of 2.2 was to fix a serious fault in 2.0/2.1. I will definately look to implement it in 2.3 or 2.4. Also, since 2.2 was mainly a bug fix release and 2.2.1 is to allow tracking of which kids use "forgotten" passwords to waste time, if you're running SSPR on a DC and it's working fine for you, you'll probably not see enough difference between 2 and 2.2.1 to warrant re-translating the text strings if you've done it once already. 2 - As for the installer, it's something we're looking into, but havn't as of yet found a suitable (read free and easy) way of achieving this. Although a couple of ideas do spring to mind.

@Plexer: You beat me to it ^^ One slight correction though, resetGroup and usersGroup are only used by the admin pages, they don't control which users can use SSPR's register or reset pages. There is currently no restriction on who can use these, although there probably should be. * Adds to ToDo list for 2.3 *

The 'Error: unable to bind to container' is caused when SSPR can not connect to Active Directory. This is most likely due to a problem with the FQDN specified in config.asp, the logon credentials in cred.ini, the IIS server's ability to find/contact a DC or insufficient access rights for the impersonation user. Yes, easily. Simply setup a new website in IIS with a custom folder (I run my dev version from c:\SSPR) and substitute that folder for Inetpub in the instructions and config.asp The two security groups are for controlling who can reset passwords using the admin pages, and whose passwords they can reset. They have no bearing on the register, update or reset pages. These groups are specified in resetGroup and usersGroup in config.asp, and are defaulted to SSPR_PasswordChangers and Students. I'll update the screencast to make this clearer.

@rvdmast: Good point, but it shouldn't be too difficult to tag that setup on the end of BDD. I'll have a go when I have a few minutes. And if anyone wants the 2.2.1 install screencast it's now up @ http://www.filefactory.com/file/9e8f3b/ Comments and criticisms are welcome.

@boomam: No worries, no need to hurry on my account @rvdmast: Cheers for that, I'll have a proper look at that tomorrow. Also, do you use that on all machines or just selected clients?

That's at least part of the problem then. Give 2.2.1 a try and see if that solves things for you.

New SSPR release Plexer and I managed to get out of line with our version numbers so this release is rather oddly version 2.2.1, and no you didn't miss 2.1 and 2.2 as they were superceded before I released them ^^; This release includes Plexer's changes in 2.0.1-b1, which in my timeline fall in 2.2 ** Change Log v2.2.1 ** -------------------------------------------------------------------------------- * Added admin reset counter & last admin reset date to user details in admin console * Added new table userdata to database to record last admin reset date and total number of admin resets per user * Added Password Last Set to administration console ** Change Log v2.2 ** -------------------------------------------------------------------------------- * Modified admin\auth.asp to convert all group names to lower case to prevent case sensistive errors. * Fixed problem where password cannot be changed if IIS is not running on a Domain Controller * Added impersonation settings to config.asp for use with above fix * Added LoginAdmin.dll for use with above fix * Corrected error where update_details.asp was ignoring setting of HashAnswers * Replaced all occurances of Response.Redirect "/register" with Response.Redirect "/register/register.asp" * Removed evil hacks from reset_pass.asp and adminreset.asp, replaced with proper error checking ** Change Log v2.1 ** -------------------------------------------------------------------------------- * Added option for user answers to be held in plain text rather than hashed [ Information for those updating an existing install ] * Important config changes * Pages in the reset directory no longer need to be run with elevated privileges in IIS as 2.2 uses inline impersonation to modify AD Members of the resetGroup and adminGroup no longer need privileges to reset passwords in AD There is a new file cred.ini which needs to contain logon credentials for an account with AD premissions to reset passwords A new dll, LoginAdmin.dll, needs to be registered to allow SSPR to impersonate the user detailed in cred.ini when changing passwords in AD The database has a new table which is needed by the admin pages. If upgrading an existing install this table will need to be added to the database manually Table : userdata username text resetcount int resetdate text Alternatively you can rob it from the included reset_db.mbd * New files * LoginAdmin.dll cred.ini wwwroot/iniread.asp * Changes to config.asp * CredFile = "c:\Inetpub\cred.ini" Location of credentials file for impersonation. Located outside web directories for security HashAnswers = False[code] Are user's answers stored hashed or plaintext? Hashed increases security, plain text helps with admin authentication when kids forget how they spelled their answers [code]%> <% ImpersonateUser = ReadINI(CredFile, "Main", "ImpersonateUser") ImpersonateUserPass = ReadINI(CredFile, "Main", "ImpersonateUserPass") %> Reads contents of CredFile [ / Information for those updating an existing install ] I'm pretty sure there are no major bugs, but please post back if you find one. EDIT: File updated to fix error in auth.asp SSPR 2.2.1 Final v2.zip

It's been quite a while since I last posted so be warned this may be a long one. I can't believe I overlooked that, I've updated update_details.asp and the installation instructions to fix that. I've made quite a few changes to the admin pages, hopefully that should have solved the problem, if not let me know and I'll see what I can find. I would love to see how you did that, it would make the system so much easier than having to run it from a separate logon. I'm working on a screencast of a basic deployment as a more descriptive install guide which I hope to post in the next few days. One question though, are you running SSPR on a DC or a member server? Until recently I've only tried SSPR running on DCs, but I've just moved it to a member server while reorganizing the network, and have found that SSPR breaks rather badly if it's not on a DC (it can't reset passwords due to the 2 hop limitation inherent in NTLM). The fix for this bug is in the latest version below.

First off, a thankyou to everyone who's volunteed, I will be replying to you all over the next few days. Secondly, we could still do with a couple more devs, not necessarily PHP devs, we have some tasks for which Perl or Python would be equally useful. That will differ between modules. Some need to be written from scratch, while others just need testing and modifying to work with Joomla 1.5. Whatever amount of time you can spare, I'm sure I can find tasks to fill it

Hello Jeremy I can see your point, but I disagree. We didn't create global warming, that would be egotistical to think. What we have done is speed up the process of global warming via our emissions. There are other theories regarding the causes of Global Warming: Not that the quote makes a great deal of sense without reading the link ^^;

OS-TAN'S!!!! Can I nick those desktops / any others you have? Cheers Sure, I'll even include a couple of videos too (Possibly NSFW). And a link I found recently, havn't had chance to give the site a good look yet though ( http://ostan-collections.net/imeeji/index.php ) http://files-upload.com/332644/OS_tan.zip.html In return, can I nick any you've got? While I'm posting, I may as well include my home desktop too.

I'm sure it's listed elsewhere in this thread as that's where I nicked it from, but I'll post a copy of one of my RIS setups (The others are identical apart from the .cmd files which deploy different applications) which will deploy on damn near any hardware. This setup uses the flat XP Pro SP2 image created when originally setting up RIS. The 3 .cmd files should be placed in \\RIS_Server\REMINST\Setup\English\Images\Image_Name\$OEM$\$1\Install Hardware drivers should be placed in \\RIS_Server\REMINST\Setup\English\Images\Image_Name\$OEM$\$1\Drivers Applications with silent installs added to ictsuite1-0.cmd will be installed automatically. You can even install applications without silent installers by scripting them using AutoIt. ICTSuite1.sif [data] floppyless = "1" msdosinitiated = "1" OriSrc = "\\%SERVERNAME%\RemInst\%INSTALLPATH%\%MACHINETYPE%" OriTyp = "4" LocalSourceOnCD = 1 [setupData] OsLoadOptions = "/noguiboot /fastdetect" SetupSourceDevice = "\Device\LanmanRedirector\%SERVERNAME%\RemInst\%INSTALLPATH%" [unattended] OemPreinstall = yes OemPnpDriversPath = Drivers DriverSigningPolicy = Ignore FileSystem = LeaveAlone ExtendOEMPartition = 0 TargetPath = \WINDOWS OemSkipEula = yes InstallFilesPath = "\\%SERVERNAME%\RemInst\%INSTALLPATH%\%MACHINETYPE%" LegacyNIC = 1 [Components] AccessOpt=Off chat=off deskpaper=off freecell=off hearts=off hyperterm=off media_clips=off media_utopia=off minesweeper=off msnexplr=off OEAccess=off pinball=off solitaire=off spider=off templates=off WMAccess=off WMPOCM=off zonegames=off [userData] ProductID = "Your Windows Product Key" FullName = "Authorised User" OrgName = "Your School" ComputerName = %MACHINENAME% [GuiUnattended] OemSkipWelcome = 1 OemSkipRegional = 1 TimeZone = %TIMEZONE% AdminPassword = "Local Admin Password" Autologon = Yes Autologoncount = 2 [GuiRunOnce] %systemdrive%\install\ictsuite1-0.cmd [Display] BitsPerPel = 16 XResolution = 1024 YResolution = 768 VRefresh = 60 [RegionalSettings] LanguageGroup=1 SystemLocale=00000809 UserLocale=00000809 InputLocale=0809:00000809 [Networking] [NetServices] MS_Server=params.MS_PSched [identification] JoinDomain = %MACHINEDOMAIN% DoOldStyleDomainJoin = Yes [RemoteInstall] Repartition = Yes UseWholeDisk = Yes [OSChooser] Description ="Microsoft Windows XP Professional - ICT Suite 1" Help ="This will install Windows XP Professional as a Curriculum station with the global software set." LaunchFile = "%INSTALLPATH%\%MACHINETYPE%\templates\startrom.com" ImageType =Flat Version="5.1 (0)" ictsuite1-0.cmd cmdow @ /HID @echo off SET KEY=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx REG ADD %KEY% /V TITLE /D "Installing Drives And Applications" /f REG ADD %KEY%\001 /VE /D "Mapping Network Drive" /f REG ADD %KEY%\001 /V /1 /D "%systemdrive%\install\curric1.cmd" /f REG ADD %KEY%\004 /VE /D "KB899409 XP - Logon Delay" /f REG ADD %KEY%\004 /V 1 /D "\\THOR\REMINST\MSIs\kb899409\windowsxp-kb899409-x86-enu.exe /passive /quiet /norestart" /f REG ADD %KEY%\010 /VE /D "Microsoft Office 2003" /f REG ADD %KEY%\010 /V 1 /D "\\THOR\REMINST\MSIs\Office\SETUP.EXE TRANSFORMS=\\THOR\REMINST\MSIs\Office\Setup_Office_18_05_06.MST /qb-" /f REG ADD %KEY%\015 /VE /D "OpenOffice.org 2.0" /f REG ADD %KEY%\015 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\OpenOffice\openofficeorg20.msi ALLUSERS=1 /q" /f REG ADD %KEY%\020 /VE /D "FireFox 2.0" /f REG ADD %KEY%\020 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\Firefox\Firefox2.0.msi /q" /f REG ADD %KEY%\025 /VE /D "IS Script 11" /f REG ADD %KEY%\025 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\QuickTime\ISScript11.msi /qb" /f REG ADD %KEY%\030 /VE /D "Quick Time Player 7" /f REG ADD %KEY%\030 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\QuickTime\QuickTime.msi /passive /norestart /t \\THOR\REMINST\MSIs\QuickTime\QuickTime_MST.mst ISSETUPDRIVEN=1" /f REG ADD %KEY%\035 /VE /D "Windows Media Player 10" /f REG ADD %KEY%\035 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\WindowsMediaPlayer10\wmp10setupedp.msi /passive /norestart /quiet" /f REG ADD %KEY%\040 /VE /D "Java 2 Runtime Environment 1.4.2.11" /f REG ADD %KEY%\040 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\J2RE\38075a31.msi /passive /norestart /t \\THOR\REMINST\MSIs\J2RE\J2RE_1_4_2_11.mst" /f REG ADD %KEY%\042 /VE /D "DirectX 9.0c" /f REG ADD %KEY%\042 /V 1 /D "\\THOR\REMINST\MSIs\DirectX\dxsetup.exe /silent" /f REG ADD %KEY%\045 /VE /D "Macromedia Flash Player 8" /f REG ADD %KEY%\045 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\Flash\install_flash_player_active_x.msi /q" /f REG ADD %KEY%\050 /VE /D "Macromedia Shockwave" /f REG ADD %KEY%\050 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\Shockwave\sw_lic_full_installer.msi /q" /f REG ADD %KEY%\056 /VE /D "Google SketchUp" /f REG ADD %KEY%\056 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\GoogleSketchUp\GoogleSketchUp.msi /q" /f REG ADD %KEY%\057 /VE /D "Audacity" /f REG ADD %KEY%\057 /V 1 /D "\\THOR\REMINST\MSIs\Audacity\audacity.exe" /f REG ADD %KEY%\063 /VE /D "The GIMP" /f REG ADD %KEY%\063 /V 1 /D "\\THOR\REMINST\MSIs\Gimp\gtk.exe" /f REG ADD %KEY%\063 /V 2 /D "\\THOR\REMINST\MSIs\Gimp\gimp.exe" /f REG ADD %KEY%\063 /V 3 /D "\\THOR\REMINST\MSIs\Gimp\gap.exe" /f REG ADD %KEY%\063 /V 4 /D "\\THOR\REMINST\MSIs\Gimp\gimp-help.exe" /f REG ADD %KEY%\085 /VE /D "Microsoft .Net Framework" /f REG ADD %KEY%\085 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\DotNet\1.1\netfx.msi /q" /f REG ADD %KEY%\085 /V 2 /D "\\THOR\REMINST\MSIs\DotNet\2.0\install.exe /q" /f REG ADD %KEY%\120 /VE /D "Adobe Reader 7" /f REG ADD %KEY%\120 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\AdobeReader\AdobeReader7.0.msi /q /t \\THOR\REMINST\MSIs\AdobeReader\reader.mst" /f REG ADD %KEY%\125 /VE /D "AVG 7" /f REG ADD %KEY%\125 /V 1 /D "\\THOR\REMINST\MSIs\AVG7\AVG\avgsetup.exe /script_file \\THOR\REMINST\MSIs\AVG7\avgsetup.ini" /f REG ADD %KEY%\135 /VE /D "OCS Inventory" /f REG ADD %KEY%\135 /V 1 /D "MSIEXEC.EXE /i \\THOR\REMINST\MSIs\OCS\OCS.msi /q" /f REG ADD %KEY%\150 /VE /D "Cleaning Up" /f REG ADD %KEY%\150 /V 1 /D "%systemdrive%\install\curric2.cmd" /f REG ADD %KEY%\200 /VE /D "Restarting" /f REG ADD %KEY%\200 /V 1 /D "shutdown.exe -r -f -t 5 -c \"Windows will now restart....\"" /f shutdown.exe -r -f -t 5 -c "Windows will now restart...." Exit curric1.cmd cmdow @ /HID @echo off :: Create an authenticated connection to the server by mapping a drive. net use q: \\THOR\RemInst /user:DOMAIN\UserName /persistent:no UserPass :: Change to the Q Drive q: exit curric2.cmd CMDOW @ /HID @echo off :: Start >> set AUPSM=%ALLUSERSPROFILE%\Start Menu del "%AUPSM%\New Office Document.lnk" del "%AUPSM%\Open Office Document.lnk" del "%AUPSM%\Set Program Access and Defaults.lnk" del "%AUPSM%\Windows Catalog.lnk" del "%AUPSM%\Windows Update.lnk" del "%AUPSM%\Microsoft Update.lnk" :: Start >> Programs >> set UPSMP=%USERPROFILE%\Start Menu\Programs del "%UPSMP%\Remote Assistance.lnk" set DUSMP=C:\Documents and Settings\Default User\Start Menu\Programs del "%DUSMP%\Remote Assistance.lnk" set AUPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs rd /s /q "%AUPSMPA%\Java Web Start" rd /s /q "%AUPSMPA%\GTK+ Runtime Environment" rd /s /q "%AUPSMPA%\AVG Anti-Virus 7.0" rd /s /q "%AUPSMPA%\AVG 7.5" del "%AUPSMPA%\GIMP\Uninstall.lnk" rd /s /q "%AUPSMPA%\SMART\Board Software\ Check for Updates" set AUPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\Startup del "%AUPSMPA%\Adobe Gamma Loader.lnk" del "%AUPSMPA%\Java Web Start.lnk" :: Start >> Programs >> Accessories >> set AUPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\Accessories rd /s /q "%AUPSMPA%\System Tools" rd /s /q "%AUPSMPA%\Communications" set DUSMP=C:\Documents and Settings\Default User\Start Menu\Programs\Accessories del "%DUSMP%\Tour Windows XP.lnk" del "%DUSMP%\Program Compatibility Wizard.lnk" del "%DUSMP%\Synchronize.lnk" del "%DUSMP%\Command Prompt.lnk" :: Start >> Programs >> Administrative Tools set AUPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools rd /s /q "%AUPSMPA%\Component Services.lnk" rd /s /q "%AUPSMPA%\Computer Management.lnk" rd /s /q "%AUPSMPA%\Data Sources (ODBC).lnk" rd /s /q "%AUPSMPA%\Event Viewer.lnk" rd /s /q "%AUPSMPA%\Local Security Policy.lnk" rd /s /q "%AUPSMPA%\Performance.lnk" rd /s /q "%AUPSMPA%\Services.lnk" :: Start >> Programs >> QuickTime set AUPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\QuickTime rd /s /q "%AUPSMPA%\About QuickTime.lnk" rd /s /q "%AUPSMPA%\Uninstall QuickTime.lnk" set UPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\Accessories del "%UPSMPA%\Tour Windows XP.lnk" del "%UPSMPA%\Program Compatibility Wizard.lnk" del "%UPSMPA%\Synchronize.lnk" del "%UPSMPA%\Command Prompt.lnk" del "%UPSMPA%\Address Book.lnk" set UPSMPA=%ALLUSERSPROFILE%\Start Menu\Programs\Startup del "%UPSMPA%\Adobe Reader Speed Launch.lnk" set AUD=%ALLUSERSPROFILE%\Desktop del "%AUD%\Java Web Start.lnk" del "%AUD%\Adobe Reader 7.0.lnk" del "%AUD%\SMART Board Tools.lnk" del "%AUD%\SMART Notebook.lnk" del "%AUD%\Notebook Software.lnk" del "%AUD%\AVG 7.5.lnk" del "%AUD%\Google Earth.lnk" DEL "%systemroot%\*.bmp" DEL "%systemroot%\system32\dllcache\*.scr" DEL "%systemroot%\system32\*.scr" RD /S /Q %systemdrive%\Drivers RD /S /Q %systemdrive%\Install net user aspnet /delete EXIT This setup has worked happily for at least 12 months, however I've now moved over to WDS & BDD as I can get away with a smaller number of configurations.

Bump

Here's this week's, but it'll probably change again soon.

In order to get the new site up and running, we're looking for a few (5-6) developers to write/modify/integrate some of the most important features of EduGeek 2.0, and 1 HTML/CSS guru to take care of the new design. If you know your way around PHP and/or HTML and would be interested in helping out, drop me an email at secundus @ dragon-designs.org

I've been asked this by our ICT Coordinator this morning, but only so we have a response for partents. My reply was to quote the World Health Organisation, as our local paper did this morning. I havn't got the exact quote with me, but it's along the lines of: The WHO sees no adverse ettects from low level long term exposure.

You could always use Electric Sheep. I'd deploy it here if I had the time to build a server for it so I don't get 200 machines trying to download sheep from the internet.

Now the braincells are firing again I've got a few other ideas too. 1/ When I was in high school I was planning on becoming an architect, but I didn't have the patience for University. Baka. 2/ I used to race Formula TKM Karts, but unfortunately I was never very good so couldn't get any sponsorship and retired due to lack of funds (and patience) when I was 14. I'd love to go back to that, only not suck so much this time. 3/ Like others I have an insatiable desire to fly, and I almost obtained a glider pilot's licence a few years ago. But after trying a helicopter, I think that's the way I'd go if I had the money for lessons. 4/ Of course being an Evil Genius trying to take over the World always looked like fun too :twisted:

If I read the rules right (Not a given), the OP can tag it with {{hangon}} and expand it to make it fit within Wikipedia's rules, they just can't remove the {{db|[[WP:NOT#Wikipedia_is_not_a_dictionary|Wikipedia is not a dictionary.]]}} tag.