Shiny_Guru

It has nothing to do with Palm OS, I'm just slightly old fashioned and use the term 'palmtop' to refer to hand held devices. To avoid typing when setting up binary registry settings I shortened this to just palm. The effort I expended was to make our DHCP server recognise the hand helds as different to our desktop machines and offer them different network settings. To achieve this I set a custom class id in the DHCP request - the word palm was used for the reasons I have just noted. I'm sorry if I made things sound more confusing than they already were

I have read back my description and I think it might be a little confusing. To try and remove any ambiguity I have exported the registry key in regedit format and copied it before. As in my previous example I have used the Class ID palm - if that suits your environment you can import the key 'as-is'. REGEDIT4 [HKEY_LOCAL_MACHINE\Comm\Tcpip\Parms\DhcpSendOptions] "77"=hex:4d,04,70,61,6c,6d

Well, having had my arm twisted to finally document something here we go... Using whatever your favorite method to edit the registry navigate to HKEY_LOCAL_MACHINE\Comm\Tcpip\Parms\DhcpSendOptions in our case their was already a entry called 60 which is the option code for Vendor Class ID - the binary string that is the value matched the Vendor Code we sniffed off the wire - I guessed that this might be a generic store for options to send in the DHCP request The option for User Class ID is 77 (sniffed from one of our workstations - I can never remember the numbers) so I created a binary value called 77 and entered the binary data I sniffed from our workstation DHCP update. I saved the change and renewed the IP and Voila! it worked. Well, the second time it worked when I had typed the binary in properly - which was the stage where I decided to choose a short Class ID for the hand helds. The format of the binary value is 4d xx xx xx xx where the xx pairs are the hex values that match your class ID, is the number of hex values and 4d is hex for 77 decimal. A concrete example, I created the class id palm to use on our handhelds which gives us the binary 4d 04 70 61 6c 6d We are working on Dell Axim X51's which are fairly new - I do not know how far back this mod would work, but I guess you should be safe on all WinCe Version 5 stuff. As with all these things, once you know how it takes about 30seconds to do - finding out how has taken me several days and a few false starts. Hope that helps some of you.

Does anyone here know of any firm guidence about the PAT testing of network switches installed in cabinets? I have opposing views being expressed around the school, some say yes, because if you take out the 4 face plate screws you can continue to use the equipment in a portable manner (like on my test bench) some say no because with those screws in it becomes 'fixed' equipment and thus exempt. Sadly our schools pat testers have just turned off our entire science block after pat testing the cabinet - having refused the keys when offered they took the mains lead that went into the cabinet and then failed the unit because the earth connection was not up to scratch. Grrrrrrrrr :x Any guidence gratefully recieved

We have successfully implemented this using loopback processing and user policies, our arrangment goes like this All non teaching staff have passworded screen saver after 5 mins applied by the NonTeachingStaff OU group policy All teachers have the screen saver after 45 mins (our lesson length) applied by the Teacher OU group policy then we use loopback processing on all machines in non teaching rooms to enforce a passworded screen saver after 5 mins This means that all non teaching staff have a 5 min delay wherever they are, teaching staff have a 5 min delay out of the classroom where they are most likely to have sims open, but are allowed a full period of inactivity if they are in a teaching room. this works for us and has shut up the teachers who put a projection on the board for the class to copy down and don't touch the machine for the rest of the lesson - it is a bit of a compromise, 45 mins is far to long, but it is leaps and bounds ahead of the state we were in a couple of months ago with no screen saver at all - we now have a big red screen with a padlock through it and instructions to press Ctrl-alt-del to continue. We now even have people logging off when they are not using the machine because it locks the rest of their department out anyway :twisted:

I've had this link in my favourites for ages meaning to do something with it, perhaps it will help you Solid state linux recording studio

we use http commander from here Http: Commander works well enough, is stable (has been running without problem for a few years) and is reasonably cheap in the grand scheme of things

Only partly true, if it is a system dll then I agree, if it is a dll put there by a 3rd party app then probably not - I have not seen many of them go to the bother of protecting their dlls. However our school is mostly w2k and the age of most of the software reflects that environment so I may well be wrong about this specific case. If the file is under the protection of sfp then I agree that the job becomes a little more problematic than the would be addressed by the simple script that I offered but it does what was asked for (I think) and if more is actually needed we can look at that after Tosca has tried it in his environment.

Me again, there are lots of word wrap issues in that code, copy and paste seems to make it OK but just in case I have attached the file to this post. You will need to change the extention to cmd - but you knew that anyway (I just can't upload .cmd files)dll_copy.txt

Try This ::____________Start Script______________________ :: check if oldfile.dll exists, if so script has already run if exist "%windir%\system32\oldfile.dll" goto :EOF :: if oldfile.dll does not exist and file.dll does exist then we need to act if exist "%windir%\system32\file.dll" rename "%windir%\system32\file.dll" oldfile.dll :: now copy the new file from the server copy "\\server\share\file.dll" "%windir%\system32\file.dll" @echo Job Completed ::____________End Script______________________ beware of the word wrap, the orphaned oldfile.dll on line 6 belongs on the end of line 5

I seem to be monopolising this thread a bit - sorry - but I remember seeing the answer to this problem a few years back on the web, do you think I can find it now though? Addressing the original problem of differing password policies for different users, I have found the following (paid for :-( ) product which on the face of it does what you are asking for. It might be worth a look Password Policy Enforcer I am going to keep trying to find the free solution I know was out there - I may be some time...

It appears to just drop a token in the users pen drive that contains an encrypted username password combo - the existing username & password work as before so lost keys and external access have the same restrictions as previously. Having installed it at home this PM (yes sad I know) I think the interface is clunky and might not be very scaleable - it might make a good way of creating a token for users to reset theit own password on an unmanned unlock station though. I have to get my daughter to let me install it on her machine now so that I can see how it works across the domain. One quick downside - as written it seems to only allow the local admin account to unlock the machine (other than the logged in user) I like the idea though - makes me wish I could program at that level - a bit to low level for VBS to cut it I think :-)

Some idle googling trying to find the site I remembered revealed this site http://www.rohos.com/welcome-screen/usbflash.htm Which seems a very interesting idea - I shall probably play with it later but it might be worth you taking a look - if the user does not have to remember a password it can be as complex as you want with no worries

You can lock out an administrator but the account can take the rights back again - it has built in permissions in the ACLs that overide all sorts of restrictions, so non priv. account uses run as citing the 'special' admin account to grant prvalidges and away you go. Sadly we het the problem, although we have the students set up to be not able to lock workstations in their GPO settings, the lock button on Logitech keyboards (and probably others) overides the setting Doh! The kids in our school hit reset so often to 'log out' that we are normally only asked to unlock machines in the room next to us so the problem is self limiting in our environment (until next years roll out when I am going to have all the reset buttons disconnected :-) ) There is a custom GINA floating around the web that has been modified to to remove the lock functionality all together but that has always seemed a bit to much like open heart surgery for my liking - it may suit your needs though.

Hi, I like the idea, although childrens inability to be original means that we may have to think carefully about the questions or they could become guessable. A cursory look at the code shows that you are passing the user name in the form and trusting that to be correct, where I can see some of our more able hackers spoofing the form data (I have one - thankfully on the side of the angels - who would do it just for the challenge) Given that you are trusting ASP to return the user and then submit that as a hidden field, could you not make that calculation in the register_user.asp so that it need not be passed? Also, it would be nice to have the student need to bring something physical to the equation. If you made the system generate one of the answers perhaps as a long random number you could have the confirmation screen display it as a bar code to be printed and used as an unlock ticket - your reset terminal would need a bar code reader but it would mean that physical theft would be involved to steal someones password which is a reasonable deterent. You could force a re-registration after every unlock to make the key one time only which would also enhance the security. I will try & install it on a machine somewhere that serves ASP and play with the functionality later so these are only initial thoughts. Keep up the good work

Policies are per domain if you stick to the pure microsoft aproach. You can however install a custom GINA which will intercept password changes and allow you to apply your own policy based on whatever criteria you see fit. It is mildly frightening, but there are even open source projects. Google for custom gina and check out sourceforge for the open source stuff. It is also used as a method of synchronising password changes with non MS systems by notifying them of password events. One of the big projects is called pGINA which seems stable and reputable, but beware, there are trojan GINAs out there which will just capture passwords (fun to play with though)

We get it as well, students have non-mandatory roaming profiles with redirected application dats folders and redirected desktops. I have had one student report they had the same problem at home on her own PC where she probably had full admin rights. Sadly I know that does not help much with fixing the problem.

The ATS software has been a bit flakey in our school, suffers from internal timing issues that 'only effect a very few systems' which included all of ours. The interface for administration is so intuitive that the teacher administering the course has zero'd the database twice so far, and the install process is very automation unfriendly (a fact that they freely admit, we advised would be an issue given our automated build system and which was ignored by the above teacher - when challenged she just said 'I know, but I thought you'd cope' - and people wonder why I have no hair left) If you go down this route then make sure to install the demo fully using whatever system you use to roll out software network wide. Like most of these shiny progs a manual install works flawlessly but automation can be problematic.

try this in a cmd file, I tend to run this sort of thing as a shut down script (nobody time shutdowns but they scream if startup takes more than 1.5 seconds) IF NOT EXIST "c:\windows\system32\interesting.dll" COPY "\\server\share\interesting.dll" "c:\windows\system32\interesting.dll" beware of word wrap, that is all on one line and obviously you need to change file names to suit