actech

I'm having problems with getting my new 2008r2 server to do Windows Updates. It fails with the error 8000ffff. The best I can find on Google is that it is a permissions error and I need to have the builtin\users with read access to the system drive. I do vaguely recall removing this for security reasons when I first set the server up. Know I know you can use xcacls to fix this but I am unsure as to the syntax or even if this is the best idea. Does anyone have any suggestions or help with using xcacls? Cheers Rowan.

If you are using Server 2008r2 you can create shortcuts via computer or users with Group Policy Preferences. That is how I give users shortcuts for server based applications and it is easy to di and works well.

No, I never ticked that as I thought that if someone else logged in I may not want they same drives mapped. It seems that turning off the fast logon feature of XP has done the trick.

The PC is running XP sp3 and the drivers are up to date. I think I may have figured it out. It was only affected those users who had cached profiles. Basically the fast network logon was not giving the network time to ensure ALL the GPO's and GPP's were applied. I enabled the "always wait for network at startup and logon" GPO to make the logon synchronous. This MS kb article has the info

Hi, I am just about to roll out a new domain at school and am having problems with the drive mapping done through GPP. Basically sometimes when a user logs in the drives won't map properly. But if you log out and log back in again the appear. Has anyone else had this problem. I have tried changing preference to replace, create and update. Also tried a registry tweak that I found via Google. The pc's do have have CSE's installed and are up to date with all other updates

I get that problem from time to time with our ir5020. Just reinstall the Driver information Assist Service (DIASsetup.exe) on the server and it should come back fine.

I've used Group Policy Preferences for mapping drives and they work really well. Just need to make sure that Client side extensions are installed on the XP machines.

I reckon the pilot did well to recover if there was a crosswind, but I would hate to have been sitting in the plane at the time!

There is a need for the 10.x.x.x subnet. Eventually all of the schools in our diocese will be connected by a WAN so there will be thousands of devices within the range. The range at my school will be 10.208.48.0/21, which is excessive, but the reasoning for giving such big scopes for particular devices is so that if I had to go to another school I know roughly what the possible ip of a device could be. PS you're welcome to come and help, but you would have to pay your own way sorry

A similar event happened near me except the tech was downloading adult pronography using the work computer and internet connection. When the monthly internet usage bills went through the roof and he couldn't explain it, the school got someone external in to audit the system and found a lot of stuff that is not appropriate in a school. The tech was asked very quietly to leave very quickly.

Thanks for the feedback. I understand what you mean about scope nephilim, but this is the result of talking to all the techs in our diocese. The chances of anyone filling all of the ranges set aside for different functions is minimal (it went on the highest current numbers +75%). The chances of some schools having over 400 pc's is the more likely scenario at this stage.

Hi, My head office is looking at changing our IP address scheme to suit a proposed WAN rollout next year. I have attached a spreadsheet with the proposed scheme and I would appreciate any feedback. Thanks Rowan Site Block Template 1 3.xlsx

Webber's fault my backside! Kovalainen needs his head read thinking he had the pace in a Lotus to try and block a pass by Webber. He knew he was off the pace and should have yeilded to the faster car. Bring on the next race!

So long as the computers are named with the room in the string you could use a vbs script to map the printers at logon. There is a great script in the wiki to do this which I have used a variation of with great success.

Howdy, Need to get people's thoughts on a dilemna at work. We are running a vanilla windows 2003 domain and currently have funding available to upgrade servers. I am wondering whether or not we should be creating a new domain or just migrating the old domain over to the 2008r2 server. The old domain has problems like we can't log in on win7 or vista machines and the logon script and GPO's need a complete overhaul. But if we create a new domain it will take me months to change over the systems and get the users on the new domain. If it was you what would you do? Thanks Rowan

I would get your local Ruckus dealer do to a site audit and see if the gear will do it. I would be very suprised if it won't. I'm using two 7962 units to do a wireless bridge between the main building and the workshop which would be at least 50m apart. The workshop is a steel framed and clad building which doesn't help, but it still gives us reliable signal and good speed.

Thanks for the heads up!!

Try KillDisk. I use it to wipe old PC's at work before getting rid of them.

You could use wsname to change the workgroup first and then netdom to change the domain? Not sure if it would work but worth a try

I thought I would mention this at our morning briefing last week. No-one seemed to care so I had a little chat with the head teacher. About an hour later the internet was 'accidently' turned off . All the sudden everyone seemed to care that the internet didn't exist. Love irony!!!

DaveP, Have a look at this thread. It's basically the same vbscript as what we do here but a lot neater. There is also a bit on making an .adm to do it but I haven't got around to trying that yet.

This is a batch file that my predecessor left here. It comes in handy from time to time :: @ECHO OFF :: This batch file makes the last changes to the first stage of build. :: Changes the Workstation name and Workgroup IF EXIST C:\build\wsname.txt GOTO JOIN echo > wsname.txt c:\build\wsname.txt Copy "C:\Build\Start Build.lnk" "C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Start build.lnk" wsname.exe /WG:ACW /NOREBOOT wsname.exe /noreboot ECHO Windows Registry Editor Version 5.00 > C:\Build\Wks.reg ECHO. >> C:\Build\Wks.reg ECHO [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] >> C:\Build\Wks.reg ECHO "DefaultDomainName"="%COMPUTERNAME%" >> C:\Build\Wks.reg C:\Windows\Regedit.exe /s/i C:\Build\wks.reg echo phase1 > c:\build\phase1.txt Shutdown -r -t 15 -f EXIT :JOIN IF EXIST c:\build\phase2.txt GOTO GROUPS echo phase2 > c:\build\phase2.txt cd \build netdom.exe join %computername% /Domain:ACW /UserD:********** /PasswordD:********* echo phase2 > c:\build\phase2.txt ::Shutdown -r -t 15 -f It changes the name, reboots and then changes the domain. It is old and a bit clunky but works.

Not quite dismissal. The event that sparked it was a teacher was checking emails while supervising a study group. He got one of those joke ads for Durex and several students overheard it. While it was just a joke and a legit ad, one of the students told their parents (who just happen to be on the school board) who complained to the Head. It was a case of sh!t happens but we are now making sure that it can't again.

Thanks all for the replies. It was to do with configuring the proxy settings on ISA and within IE7. Bio - I did have it like but the boss told me to shut it down and teachers were looking at inappropriate material around students so all traffic now has to go through the filter. I have done up a cheat sheet for staff to show them how to change settings. If they can't be bothered learning then they don't get access. Simple as that!

The DHCP sets the ISA server as the gateway, but I just thought I have it set as a proxy on 8080. This won't automatically be configured will it? I have a feeling that the GPO for the proxy is set via user not machine. Will have to wait till I get to work to check this out.