rob998

I changed a student password and they were given the option to create a new keychain upon login. I will just need to inform staff of this to prevent support calls every time they use it.

I've just sat through a class using Yosemite and have had no keychain messages so far. Fingers crossed. Rob - - - Updated - - - I've just sat through a class using Yosemite and have had no keychain messages so far. Fingers crossed. Rob

I've rolled out Yosemite to a room where the teacher was having major Keychain issues - hopefully this will stop with Yosemite. I followed - https://sites.sas.upenn.edu/jasonrw/blog/2013/03/create-custom-default-user-profile-os-x-107108 when creating my base image....fingers crossed.

Thanks for your replies guys. The main reason I asked was due to the keychain and all the problems i've had with it. I thought I might have been missing a step where a sysprep equivalent might have cleaned it up. Do you guys get any problems with the keychain? My machines are bound to OD and AD. When users log in and use GarageBand they sometimes get Keychain messages which when they enter their password doesn't go away. It is so random that it is giving me huge headaches (not to mention the teacher). I've heard that students get a message to 'update' or 'create' a new keychain on login but i've never seen that. Am I missing a config step? I'm using workgroup manager to roll out settings as I haven't got my head around profile manager yet. Thanks1

Hello - how do you guys prepare an image of Mavericks or Yosemite. Do you run any sort of sysprep like with windows? I have a deploy studio server ready - just wanted to get some info on how to prepare the image. Rob

I'll have to get my profile manager setup. Do you still have the keychain issue @abillybob

I like the sound of: If you have the "Force local home directory on startup disk" unticked it then saves their profile (keychain) on their homedrive\Libraries. From that post. I am not using roaming profiles. Could be something to try when i'm back onsite tomorrow.

I use Workgroup Manager to restrict the Finder so students cannot search for Keychain. Do you not do this?

So I have a class of 30 students and say 18 of them get the keychain pop up. I have to log them out, log on as admin, delete all entries and have them log back on? There has got to be an easier way?

Hello, I have a lot of Mac's joined to my Windows domain. Users from my AD can log in to the Mac side fine and get their home drives etc mapped. The problem I am having is that they get a Keychain message popping up all of the time for CalendarAgent and Messenger. It asks them for their password but when they type it in it says it is incorrect. If you cancel it, it doesn't disappear. You have to move it to the bottom corner to work but sometimes this crashes the program i.e. garageband. It is very annoying. Has anyone come across this issue? Rob

Hello, I have NTLM Auth set up on the smoothwall box. Groups are mapped from AD to Smoothwall eg. AD group 'pupil-user' is mapped to Students etc. When a student logs on they seem to be able to access everything!!! When I check on the smoothwall under Services > User Activity the students haven't authenticated. About 10 mins later they then auth and sites get blocked! The time is in sync with my domain and DNS tests prove things are working. GPOs set the proxy settings and running a RSoP shows that the policy has applied properly. The guy at smoothwall said my GPO wasn't applying and students were going out on port 80. I have since removed the port 80 policy so theoretically if no proxy is set then they would get no internet. They still get internet including Facebook!! Any help would be much appreciated.

Hello, I have 2 sites which contain a number of games I wish to block: https://sites.google.com/site/punblockedgames https://sites.google.com/site/millseagles Does anyone know the procedure for this using smoothwall? I can't just block sites.google.com as our IT dept have made a computing site using it. So far I have added a Category called 'Block Google Sites' and added the above. I created a HTTPS Inspection Policy and set it to 'Decrypt and Inspect' and added the 'Block Google Sites' category. I then added the 'Block Google Sites' to a web filter list to block for students. This doesn't seem to have worked. Thanks!

Looks like they do - ours are out for all the cash they can get!

Thanks for the advice - did you migrate it yourself?

Hello, I have Equitrac installed on a Windows 2003 x86 server. It is causing all kinds of issues when deploying printers to my Windows 8.1 x64 machines. I know that I need to update it anyway due to server 2003 no longer being supported. Has anyone had any experience of migrating Equitrac from one server to another. I've connected our provider but it will cost us £600 a day (3 day job apparently) for them to migrate it. I'm not willing to pay that at the moment and would rather have a go myself hence my reason for asking on here. It would seem the hardest part is releasing the licences from the old server and installing on the new. The print server is a VM so I can Veeam backup it before doing anything so I know I can just roll back. Any help would be great!

Hello, We are using 4.1.26. Rob

Hello, I have a slight problem with broadcasting with impero - specifically ending the broadcast. When I teacher broadcasts sometime it misses out the odd machine even though it appears and is selected within the console. When the teacher comes to end the broadcast it sometimes leaves the machine with a black screen with just the cursor. The machines are all hardwired running at 1Gbs as is the teacher machine so speed cannot be the issue. Any suggestions? Rob

Hello, Feel free to move this to a correct forum. I have a video embedded from YouTube in a website for students. It works fine in IE but when they load it via Chrome is just shows a sad face. Using the Developer > Network utility in Chrome i can see it stops on the embedded video with (failed) net::ERR_INSECURE_RESPONSE We have a smoothwall box do you think it is a setting on that which is causing it? Works fine for staff in Chrome and IE. Rob

The idea was that the iPads would use 10.X.X.4 as their gateway and allow restricted unathenticated access (for apps etc) which is why port 2 is in use. I have an authentication policy setup on smoothie for 10.X.X.4 The main network has the default gateway setup as 10.X.X.3 and the proxy is setup to 10.X.X.3 which is setup as NTLM authentication. I can't see why my main network would want to jump to 10.X.X.4 when everything is setup to 10.X.X.3. I also can't see why unplugging port 2 10.X.X.4 it will knock the internet off for everything when the main network should be pointing to 10.X.X.3 for internet!

Both smoothwall port 1 and 2 are connected to the same switch. I am connected to that same switch. If I unplug port 2 it knocks the internet off for all devices (it should only knock the iPads off!)

Will check tomorrow

Hello, Here is my story: Smoothwall box, x3 connected interfaces: 1 - 10.X.X.3 - default gateway for network 2 - 10.X.X.4 - used for iPads 3 - 192.X.X.X - BYOD My machines are all set to use port 1 10.X.X.3 as their default gateway. When I run a tracert from a machine the first hop is to port 2 10.X.X.4. How is that happening? Please help? Rob

Location: North East Number of Pupils on Roll: 400 (small school but primaries make up for it) Do you offer Support to Schools in Pyramid: Yes, 5x primaries with weekly visits to each What Support to you buy in?: SIMS only. Scale of Network: 500 users, 400+ devices, 13 Servers (various functions), Managed WiFi network with BYOD devices, IP Telephone, CCTV, Cashless Catering No of IT Support Staff: 1 x NM, 1 x IT Apprentice

It is 10.9. Wouldn't that give students the access to snoop inside other users home folders?

Hello, I have an OD-AD integration. The only thing not working is when students log on they get an error message (attached) which causes their home dive to show as a ? on the dock. The home drive is taken from AD. When logging on to windows it works fine and maps but not on the Mac side. Staff don't get this problem as their home drive maps fine from windows and mac sides.