mjgreen81

Thank you, hopefully I will get some time today to have a look at your suggestions. Much appreciated

I guess it doesnt have to be web based, but I like the idea so that we dont have to faff with any installs etc and everything is centralised. It also makes things easier with regards to mobile devices etc if that is possibly an option. Nowadays I just presumed a web based option would be readily available.

Hi all, I am looking for a very simple to use, web based AD account management tool which can be used by certain users (i.e. teachers) to unlock accounts/reset passwords for other users (i.e. pupils). I have come across several small applications which will probably do the job, but I am really looking for something web based if possible. I have also found several self-service tools, but I don't really want to provide the self-service option. I would like it to be as simple to use as possible, doesn't display to many options (basically I just want the ablity to select/search for the user, reset password and unlock account). Does anyone have any suggestions? Many thanks!

Hi all, I just wanted to report back that I have been looking at ManageEngine's Password Manager Pro since yesterday. Its been really easy to setup, integrates with LDAP/AD and looks to do exactly what I want with regards to sharing different passwords with different users/groups. I am waiting for pricing, but I believe it will cost about $495 a year for the standard version which includes 2 x admin users and unlimited regular users. There is a premium version which allows you to directly launch/logon to RDP/ssh etc sessions and do a lot of clever stuff, but its a lot more expensive and I am not really bothered by those features.

Thanks for all the suggestions.

Just had a quick look at the Keepass features, but I dont think it will be able to do what I need (with regards to providing different access to different users). I see what you are saying about having more than one file, but presumably if I was to change a password I would then have to update the details in each different file for each set of users. Does that make sense?

Thanks guys, I will check those out.

Hi all, I have asked to research and trial a password management tool and I am looking for recommendations. Currently we have passwords for various different accounts stored in many different locations and methods and we would like to gather them up and store them centrally. I think a feature that allows us to conrtrol user access to permit different people to see different passwords would probably be useful. Other than that, I am open to ideas! Many thanks

Hi all, First of all let me say that I am a UNIX newbie, so I am learning as I go! I have recently been getting some samba shares to work on a new Solaris server. This new server is replacing a retiring server with the same setup, so I know this can work! Now that these samba shares are working (and browsable), I move on to the next hurdle! We have a few externally hosted (Windows Server 2008 R2) web servers which are not on our domain, but can still communicate with our network. I can successfully browse to the samba shares on the existing (soon to be retired) solaris server from these webservers, so as I said a bove, I know that this can work. These web servers can successfully ping the new solaris server, but I cannot browse to the shares whether I use the server name or the IP address. This morning I turned on some deeper Samba logging details and the problem looks like an authentication issue: Example log when connecting as me from my PC (on the domain) [color=#0B374D][font=Courier][2014/09/30 09:37:50.140615, 2] auth/auth.c:309(check_ntlm_password)[/font][/color] check_ntlm_password: authentication for user [myusername] -> [myusername] -> [myusername] succeede Example log when connecting from the webserver (MYWEBSERVER) while logged on as user WEBUSER [/font][color=#0B374D][font=Courier]check_ntlm_password: Authentication for user [WEBUSER] -> [WEBUSER] FAILED with error NT_STATUS_NO_SUCH_USER[2014/09/30 10:12:21.161315, 0] auth/auth_domain.c:331(domain_client_validate) domain_client_validate: unable to validate password for user WEBUSER in domain MYWEBSERVER to Domain controller MY.INTERNAL.DOMAIN.COM. Error was NT_STATUS_NO_SUCH_USER.[2014/09/30 10:12:21.161877, 2] auth/auth.c:319(check_ntlm_password) check_ntlm_password: Authentication for user [WEBUSER] -> [WEBUSER] FAILED with error NT_STATUS_NO_SUCH_USER[/font][/color][font=Open Sans] So the problem is quite obvious, Samba cannot authenticate the user as they are not on the domain. As I understand it, on the existing Solaris server the webservers 'bypass' the authentication and connect to the shares as the guest user “web”. However, this doesn’t seem to be working on the new server. I did read about adding the line “map untrusted to domain = yes” to the smb.conf, but this doesn’t seem to have made any difference. Is anyone able to help - I am tearing my hair out over this!

No, I didnt have the option to shutdown from CTRL+ALT+DEL. We also didnt have the "reason" box so presume this must be a GPO that also needs enabling if you want to use this feature. I have also been asked to move the Log Off button from the small arrow onto the start menu. Anyone know if this is possible?

To partly answer my question. If I have updates waiting and I run shutdown.exe /r - it does install the updates.

Can I ask - if the server is awaiting updates you would normally get an 'install updates & shutdown' option as well as a standard shutdown. What happens if you don't have the shutdown button?

Ok, great, thanks guys. Just tried it out on a server and its working. Surprisingly, even after a GPupdate/force it seems like it was necessary to reboot the server, a log off/on didn't suffice. The the option has now been removed after a reboot. Shame there is not still a way to enable a shutdown/restart button a couple of clicks in. Oh well! Thanks again

As we found out yesterday, its quite easy for someone to accidently click the arrow then shutdown by mistake :-/ We have quite a few users who need to log on to various servers for applications that they look after. We want to make it a bit harder from them to accidently shutdown.

Ah! Loopback processing, that's what I am forgetting What about shutting down after I remove the button? What's the best way?

As that's a user setting, can I assign it to the OU containing my group of servers? Or do I have to assign it to the OU containing the user? Sorry if thats a stupid question, I am having one of those days where my brain just is not functioning.

Hi all, any help appreciated with this one! I would like to remove the shutdown button from the start menu from our various servers (mixture of 2003, 2008, 2008r2). The idea being that we prevent accidental shutdowns. Ideally I would like to do this with group policy. We would still like a shutdown option available, but just so it is a lot harder to accidently trigger. Thanks in advance

I think you can close this. I ended up going with this: http://www.edugeek.net/forums/windows/91837-java-msi-deployment-fun-2.html Thanks

Hi all, I use to have a really good script for installing Java that I have unfortunately lost. I have also totally forgotten how I did it!. Basically the script checks for which version of the software is installed by looking for the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83217045FF} DisplayVersion It then compares this version to the version displayed in the script. If these versions match, the current version is up to date and the script ends. If they do not match, the script silently installs the .exe. When a new version of JAVA needed deploying, I would update the script version number to match the reg key I would appreciate any help with rewriting this! BTW - I know you can extract the MSI and install this via GPO, but I have had quite a few problems doing this in the past. I remember using this method of checking the version number in the registry much more successfully.

Hi guys, Thanks for your help with this and apologies for the delay in getting back to you. After trying to recreate the profile, the user logged back on this morning and some other stuff was messed up. With all this in mind I bit the bullet and replaced the PC and its now working.

Hi all, Really strange one this. We have a user on a Windows7 PC. I will call her Irene. When Irene tries to launch a remote desktop connection to an XP virtual machine they are disconnected as soon as they log-on (when they see the 'applying personal settings' message). It seems fine until the moment that they logon. It doesn't matter what username Irene uses to remotely connect to this XP vm, they are disconnected as soon as they log on. If Irene logs on to another PC and tries to remotely connect to the XP machine she can successfully remotely connect. If a different user logs on to the Windows7 PC that Irene is using, they can remotely connect fine. It just seems to be a problem with one particular user on one particular PC. I have tried disabling Firewall's/AV but still get the same problem. I have tried reinstalling NIC and GFX drivers on the W7 PC. I have even tried recreating the RDP certificate on the W7 PC. I have even tried renaming Irene's profile and recreating a new profile from scratch, but she still gets this problem on that pc! Can anyone think of anything that might be causing this?