Geoff

Open source to the rescue. The Register have pointed out a piece of software called 'Classic Shell' that can give you back various versions of the 'old' windows shell. http://regmedia.co.uk/2012/08/23/classic_shell_options.jpg Welcome to Classic Shell

yeah the issue is, your daughter can make a suid binary that gives her root and transfers it over to her home on the nas. Without nosuid and noexec she can run it and get root on the nas. nodev stops users making device nodes, for example firmware devices or memory and storage. Much fun can be had with a hex editor!

It doesn't matter if root owns the top level directory. As long as the username/group to uid/guid mapping is correct on both systems then the passwords don't matter. This is why you mount removable media and /home noexec, nodev, nosuid!

File permissions and ownership should be preserved. Your backup machine wont know what they are supposed to mean (you'll probably just see numeric uids,gids or they may map to another user/group on your backup machine). If you want to fix this you'll have to muck about with the passwd, shadow and group files and make sure all the relevant numeric ids match up between the machines. On larger site installations it's better to use NIS or LDAP though to keep it all synced up. If they own the files, they have access to them. You cannot prevent this, no matter where the files are stored (unless you disable their login on the backup server ofc). I would suggest you consider some offline backup and do some incremental snapshots of the data. That way you can roll back. I usually only have a root account on servers that do a single task. On more generic systems like my home Linux server I have a root account for doing sysadmin stuff with and then a personal account for doing more mundane things with.

Flatten and reimage with my own image. Laptops I put a clonezilla partition in with the image file so it can be recovered offsite if needed.

That's a little confusing. I thought Exchange 2010 was only 64bit?

People problems are not the kind of hardware issues we should be discussing here surely?

I think at a minimum you should expect it to double, but somewhere in the x5 to x10 range is more likely over a five year period.

Also the old school method of having a front end relay running Linux + Postfix + SpamAssassin is still valid.

You can also use the Connection Filter Agent along with various DNS Blacklists. Understanding Connection Filtering: Exchange 2010 Help

I'm sure the pirates will know how.

Generally mobile nets set the Parental Controls on by default. You have to have them disabled by customer services via proof of age (CC number usually). This is especially true on PAYG, but hit and miss on Contract phones (where it's presumed that if you are old enough to have a contract you can have mostly full interweb access). Obviously there's issues with the implementation, but it's better than nothing.

Children can't opt into an AUP on their own, so something like a captive portal wont work. You need the parents permission.

Have multiple ports stopped getting PoE? Or just the one? There's a chance if the above doesn't fix it that one of the rails has died in the PSU if it's mutiple ports. If it's just the one port, the module with the port might have a fault, rather than the PSU. Do you graph any switch snmp info with Cacti or Nagios? Errors will show up there too..

Try reseating PSU1. It might just be loose, or oxidised connectors.

In a school environment I suspect it would be a legal requirement.

Its not available on their website, but you can get Xlite 3 elsewhere on the internet.

Xlite is cross platform and works great. For linux look at either linphone or sparkle. On windows you also have the option of Zoiper Lite. Not sure what the deal is on Mac OSX as it's something I've never had to tackle.

If anything, I think valve might be lining itself up to enter the console market with a PC running Linux/steam in a pretty box. As mentioned already there were rumors of something like this being developed back in march. These were hotly denied by valve at the time...

Then your best bet is probably one of the HTC Desire or Wildfire variants?

Orange San Francisco with Cyanogen 7. Proxy settings on Wifi on Gingerbread. ICS possible at glacial speeds too.

There might be a proxy running transparently. Alternatively do you have an internal proxy? Perhaps that's misbehaving or is misconfigured somehow?

I presume you're talking about HTTP 504 errors? It means "gateway timeout". If you are getting on a single site it means the site is having issues (usually a load balancer problem). If you are getting it on multiple sites then there is an issue with your internet connectivity. I've only ever seen this in the context on overloaded proxy servers. Does your new leased line involve going through a proxy?

Chucking an Avaya IP Office 450 in the near future here. FreePBX is doing a much better job.

The Sandoma A101/A102/A104 cards I use make it a doddle with any asterisk based PBX. All you need to know are what the line is set to (BT is E1,EuroISDN,CRC4,HDB3,D-Channel 16). Beyond that the CallerID can be a bit fiddley, but only if you need to send a custom CID.