manamaga2512

Hmm, won't let me upload my screenshot. - - - Updated - - - Sorry. Windows 7 and Server 2008R2

Hi all, I just need a little help with some GPO's, I'll post one at a time, as I find them. I'm in the process of locking machines down for students before we roll out the new image now. I'm hoping that we can hide the "Network" link found in the left hand pane in windows explorer:

Hi all, I'm working on an image for our IT suites and the teacher has asked for Microsoft Small Basic on the machines. The issue I have is that the 'Browse' button during install is greyed out and so I can't change the install location other than as the logged in user, and obviously I want to install for all users. So having done some looking up online, I came across this piece of command and decided to try it on my machine before our test machine: msiexec /i C:\Users\THIS IS ME\Downloads\SmallBasic.msi INSTALLDIR="c:\Program Files(x86)" The install seemed to go well, so I logged on as another user and the program was indeed there in the All Programs folder. I click it to run it and nothing happened. So I navigated back to the All Programs folder and it had disappeared. It's almost like it knew it had been installed in a none-default location and had removed itself. Sounds a but mad I know but it's the only explanation I can think of. Does anyone else use Small Basic and how did you deploy this to machines for all users? Many thanks.

Thanks everyone so far! Plenty of food for thought. Battle will resume on Monday.............it is Friday after all and I don't want to over exert myself on a Friday :-)

Good point, didn't think about the USB ports! I did go down the local GP route and disable anything I could, but I think that then had a knock on effect of stopping IE from launching at login! LOL (I had a .bat file in the startup folder to launch IE).

Hi all, I have had a request from our librarian who would like a PC available for students to use in order to search and browse available books. Supplying the PC is no problem, and I plan to create a local standard user with no password, but here are the other requirements: IE to launch at logon, loading a specific website No access to ANY other website No access to any other apps or software on the PC, including control panel etc. The PC is running W10 Edu. Please could anyone offer any advice as to how might be the best way to achieve this? I have been battling with GPO's and local GPO's and whilst I have managed to get some things done, I've not managed all of the above. Any advice would be much appreciated.

Thanks. I have ordered licensed digital radios ;-)

Fantastic, thanks. We've had radios for a number of years but never had anything in concrete, so to speak, in terms of use. We have a number of new staff too so it would be good for them. Many thanks.

Hi all, we will be taking delivery of our new radios tomorrow and I wanted to ask, of thoes of you who use them, did you get your staff to sign for them when handing them out? Much like an agreement when giving staff laptops etc. I was thinking of doing this so that they know and agree to what equipment they have taken, how to use it and radio etiquette. A peek at your agreements would be great, if you were willing to share :-D

Ah, that would make sense. Just hope that it's not needed in order to configure this GPO then?

H all, I'm trying to create a new GPO, scheduled task to shut down our PC's. Just testing at the moment in a test OU and PC. Under the Task tab, the 'Run as' check box is greyed out. I'm logged on as domain admin. Any advice will be most welcome. Many thanks.

Ah, I've been misinformed then. Obviously the new PC's we have come with OEM, but the couple of iMacs we have running W10 are now the next to be traded in! LOL

MS licensing works on an FTE basis, not machine basis. We are licensed for 65 Full Time Employees, which is more than enough. We can install our versions of W10 on 1000 computers (if we had that many) if we wanted.

Yeah, we have a couple of Mac's on bootcamp already. Our MS licensing runs out near the date when they're due to take over anyway, and from that point on the licensing is dealt with at trust level rather than each school

To be honest, I think that SLT have given up. When the NM left, I was told that I could call this here outside company for support when required (it's a big company who provide IT support for schools), but when I called, I was told that we didn't have a support contract with them. The principal had not responded to their emails and calls to setup a support contract!! I'm doing most of this off my own back in order to future proof the school for the next 3 years or so. The apple kit we have is over 8 years old. I've worked here for 10 years and in that time we've only ever had one IT refresh. Now that it's likely that SLT will be replaced in September, they've lost interest. I feel like I'm the only one who cares at the moment. They just don't know the implications of migrating from Apple back to Windows. They think we can just sell the apple kit and install PC's......easy! :-/ We didn't even have a server to host and deliver an imaging service until last week. I took it upon myself to purchase a new server for that (after trading in some iMacs) and had some great help from the tech guy at our supplier to set the server up. I would have gone back to him for help with the GPO's this week but he left the company on Friday last week!! Sometimes it feels like your pi**ing in the wind. I think I will just have to buy some support for a day or two, rather than trying to battle through myself.

Because they don't officially take over until the 1st September. And I have to get rid of all apple kit and roll out windows before then. For admin staff, we have just given them stand alone PC's for now, but I can't do that in classrooms, they have to be locked down to a certain extent.

I'm hoping that as we are taken on by the new trust, there will be career development opportunities for my technician and I. I know that there will be no network manager on site. Network stuff will be done by the 'cluster managers'. We may well become over paid toner changers :-/ But my loyalty to the staff and students continues, they need to be able to carry on working.

No, we are an apple school. We don't have any GPO's currently and no central store. I completely get where you're coming from but the situation here is quite unique in that, my network manager left recently. The current exec principal will not be promoting or employing another network manager. The school is in special measures and we have an exec principal who has decided to get rid of all things apple. As the school has no money, I have started to trade in our current apple kit in exchange for credit with a supplier, which we can then use to purchase PC's. I have about 50 PC's in stock now ready to roll out. We have also just learned that our current academy trust (whom our exec principal is director of) is to be handing us over to a new, very large Academy Trust. The process of due diligence is currently under way. This means that come September, we will be under a new Academy Trust, will be given a new name and have a new Principal. I have met with the IT guys from the new Trust, they came in to see our network setup. They are happy with our current setup on the server side, hardware wise, but when they come in September, they will be just wiping everything and 'doing it their way'. With all this going on, I am having to get rid of all apple kit while it still has value, and roll out the PC's........learning as I go. No time (and probably no money) for going on a course. The great people on here have been fabulous with helping so far. I'm just wanting a basic setup that I can roll out that will put us on until we break up in around 6 weeks time. Because at that point, everything I have done will be undone by the network guys at the new Trust :-/ Mearly just trying to keep the school going for the next few weeks. Oh, and there is only me and my technician. 12 months ago we were a team of four! Sorry for the head mashing reply :-)

You my friend are a complete legend! That has done the trick. Now all I have left to do is get my head around configuring the tiles and start menu. It's a very simple setup we have, there's no network storage as we are a GAFE school. All PC's just have office installed and google chrome. If possible, I'd like to try have the Office tiles only showing, and in the taskbar, and get rid of everything else.

Aaaaah, that makes complete sense! I think. So I've deleted the policy from it's current location, and linked it to our OU called Teaching Staff (this is where our test staff account is sat, along with all other teachers). I'll see if that does the trick.

So, the results are showing that particular policy is not being applied :-/

Cool, I'll check using rsop. I did clock that this particualr setting was supported on 'at least' Windows 2000 so presumed it should work. And no, I've not gone anywhere near the default domain policy :-)

So I thought I'd start with a simple one first. I've just been having a look through the settings in User Config>Admin Templates>Start Menu and Taskbar and I have enabled the setting 'Remove and prevent access to the shutdown, Restart, Sleep and Hibernate commands' but that policy does not seem to be working. I've set the policy in the OU in which our test PC is sat, and I've even done a gpupdate /force on the PC, to no avail. Have I missed something along the way maybe?

Classic shell?? Sorry, I really am very new to this. On a side note, where is best to be hosting GPO's, on the DC or our image deployment server?

Hi all, since the departure of my network manager recently I have been lumbered with the task of rolling out 50 windows PC's. Being an apple school for the past 8 years this has been quite a challenge, but.........I now have imaging setup and fully working. I now need to look at how to start looking at configuring the start menu and tiles, and the bottom taskbar. I'm thinking that this can be done via GPO but having read many articles since Monday of this week, I'm no further forward. I have managed to fumble my way through and create a GPO which maps our virtual print queue, and this is also working fine. So far so good. But I can't for the life in me, get my head around configuring the start menu and tiles. I'd also like to remove some of the features such as the xbox (why would you have that on the edu version of W10 is beyond me anyway!), groove music, 'Get Office' etc etc. I'd also like to limit access to some of the things in 'Settings'. Probably a big ask but I would really appreciate any help in getting this done. I've never worked with group policies before so I'm a real newbie. Happy to answer any questions if more info is needed. Thanks in anticipation.