NetworkGeezer

indieGirl: I hope the names in the screenshot were fictitious or else you may have broken the law. Now I know you didn't give away phone numbers and addresses but you have to be careful these days.

@Geoff and CybNerd Your advocacy of FLOSS is commendable and in an ideal world it would be nice to have Python or C/Z/BA/SH installed by default on everybodys favourite monoply OS but if you admin a Windows network then knowledge of VBS is probably more useful. Out of interest does anybody here run Python login scripts?

Hello ?? Where did you get that from. Microsoft have not ditched VBS. Visual Basic 6 has been ditched in favour of VB.net but these are compiled languages not script interpreters. Yes, before someone says it, there is the new MONAD scripting enviroment on the horizon but it will debut on Exchange 12 and then on the Black Comb server. Perhpas there will be a standalone install for 2003 Server and XP. The main thing is VBS will be with us for sometime. Before then you could also try KiXtart which is a very popular VBS alternative. It has been customised for system administration so avoid some of the more cumbersome constructions found necessary with VBS.

Hmmm doesn't this create too much replication traffic. Also it's best not burden application/DB servers with the DC overhead. This also makes your AD more robust as there are less variables to conted with.

Are the reistrictions being imposed in the Computer section or User section of the GPO? Application restrictions in the User section only apply to th eapplications launched in the Explorer GUI shell i.e. by clicking on a shortcut or executable file icon.

The problem with this approach is that soon the users become used to just clicking Enable or yes. Any tried signing macros or other files?

Check out MS Paintbrush as this is another vector beloved of the little ones

Yeah, .exe blocking will help with warez borne malware but VBA and other script viruses are a little more to deal without on-access scanning. You can't block users from opening Word documents can you.

How many car designers or other industrial designers do you know who have engineering degrees. Anyway it all depends what you mean by good design. If you just after eye candy with lots of showy Flash animations and convoluted navigation then yes perhaps eduGeeks are lacking.

EduGeek conference, in the south? Ambassador you are really spoiling us

Updates for what? I presume he/she meant the os/app updates that are barred by a default squid configuration.

and where are they held? Is this why you were asking for a London venue?

Hang on, surely if the PCs are on a domain then the logon box times out to leave the press CTRL+ALT+DEL to begin mesage which would only show a valid username if the next user presses the required key combination. What indieGirl suggests is more a help in preventing deliberate failed login lockout. Kids of today despise anything that requires effort such as repeatedly typing in a username

Yes, in particular does the wonderful new version 5 not slow the start up of SIMS.net quite as much.

If using a fully fledged CMS as above is too much like hardwork why not create a guest account for your VLE. This appears to be what some schools in xGfL are doing.

Share the secret

To be fair, a large part of the problem is that there is lead from goverment to get al schools wired up and using IT in lessons and so lot times people just chuck technology in particular situation and hope something happens magically. Computers are tools; not magic wands. Staff should be properly trained before using IT. There may come a time that CLAIT or ECDL becomes as a mandatory a qualification as GCSEs or first degree.

Nice setup but doesn't the local proxy+firewall and LEA/Count proxy+firewall lead to a slower internet connection?

The balance of comments seem to point to SmoothWall+DansGaurdian as the preferred Web Filtering tools for inappropriate material for minors. Does it work as well for shockwave games but without disabling much of bbc.co.uk/learning which has seems to have to gone swf mad.

It's a page from a site based in south east asia (but in English). It's got links for design of computer suites/labs and management software thereof. Might be of interest to eduGeeks

Any one tried Impero? It's on the wiki but no reference to it on the forums.

There are number of ways of doing this. If you are just using vanilla AD then you can use admin templates in the user section of a GPO to run only a permitted "whitelist" of applications. Also in the computer sectrion of a GPO you can use path rules in Software Restriction Policies to block certain applications or wildcards for network drives or UNCs.

Chris, Have you had a look at KB 231308 It involves registry editing so caveat emptor

How about blocking certain MIME types with ISA or Squid

The only thing that may not have a smooth failover is FSMO. I haven't tried but can roles be seized post mortem, as it were? Has any onr tried using FRS to create redundant file storage?