danmoly

Have you tried location blocking of .exe's? That what we have deployed. In Group policy there are Software Restriction Polices, and we've specified everything to block, but allowed via Paths specified. So allow %PROGRAMFILES% etc. and then restrict read/write to the C: so students and staff alike cannot access, write and run their own executable's. So when they chuck in a USB as we havn't specified the path nothing can run from there. Likewise if they copy it to their user spaces.

So the culprit was the WMA file types! MP3's burn fine, very odd. Thanks for all the help as ever guys. Shame it wasn't anything more exciting then file types!??!

Funnily enough you might be right. I assumed I would be able to burn them, as I've done so in the past. But no it won't do it, on my own machine and test PC. The files are WMA's which should be supported. I'm just in the process of converting them to MP3 now, see if that helps at all.

...encountered a problem... really helpful as always!

So I've tried this, gave user permissions to the temp folder which is something like "%USERNAME%\Appdata\Local\Microsoft\Windows\Burn\Burn" and no luck? Maybe because its a variable? In the test environment I did give full permission to the C: ?! We don't have the libraries disabled, so that shouldn't be the issue?

so just took of the restriction in a quick test environment, and it still errors??? Any clues to why this is happening?

Not tried that yet, will do and get back to you. I would say we would do the same but here I feel the staff would do more damage then the students to the C drive!

Hello all, So had a request form a staff member trying to burn an audio CD, claiming it errors. Me thinking it was a user error it seems they were correct. Looks like due to our C drive restriction, the audio files get put into a temporary user folder before the burn. Anyone else had to deal with this? or am I wrong in the error? I've tried adding in permissions to the folders but doesn't seem to work for the roaming users. Thanks, Dan

Good morning all, So I am at my wits end with a certain user and our Digital Signage. I very painstakingly set up 3 screens last summer, one in particular for our Canteen (which was requested). Now its taken some time to show and guide the user how to update the screen with new menus each day. Now they've finally cracked it, they are ruining it... clip art, font changes, colour schemes, its just hideous. The way I've got it setup is I've designed a background applied to a publisher doc, and formatted all the necessary boxes with the right looking fonts, colour etc. The problem is, the user can edit this, which is fine, that's the point, but i only want them to edit the text, not the aesthetics of the thing, especially adding in clipart and horrible snippets form the web. So my question is does anyone know how to restrict editing on a publisher file? I see it can be done in Word, but need it to be in Publisher really, unless someone has a way of exporting a Word doc to an image file that's not PDF...? (requirements of the digital signage, need jpeg/png etc.) Apologies for the rant, it just frustrates me, the hard work one parts into something, getting it all working and looking nice, for someone to come along and effectively poop on it... Thanks, dan

Just an update. Its now working. Went through a load of troubleshooting this morning again, and decided to restart the server. it did two little updates in the process, but now all is well! Maybe as I hadn't restarted from the first install or something in the update fixed it, whichever I don't mind now its working! Thanks again for everyones help! very much appreciated.

Gave it a go, disabled firewall on both the wsus server and the client still nothing?!

what would the firewall settings be? Theres no obviously options to add WSUS or similar into it.

Right so, the VM WSUS server (Win 2008r2) needs proxy details in to get internet access. It then has the proxy details entered in the WSUS options (which run on :8080). GPO side of things I've entered the server name http://HTTP://SERVERNAME with and without :80 (as it is WSUS v3.2...) and the IP of the server. All to no avail. Still the same error when trying to run on the client, after performing a gpupdate and wuauclt. Oh and wsus server name is in the internet exceptions list. Thanks for all the help so far. I'm sure its something silly somewhere, but for the life of me can't figure it out.

Am i running this on the client? doesn't seem to do anything?

Okay so added it into exceptions and still nothing. Can I clarify some things. This may sound dumb but this is my first WSUS server... So WSUS, does the server itself need the proxy settings entered? As in on the internet options? And in the WSUS options I've entered the proxy info in there as the guide suggested, and this runs over port 8080, so on the GPO side would the server address be *:80 or :8080? Also, another dumb question perhaps, but I'm currently testing it if its working but manually going into Windows Update on the client machine and hitting update? Should this still work when using a WSUS? Thanks,

Hello all! So we've recently setup WSUS in our domain following Michael's guide. But must be missing something as no clients are syncing with WSUS and updating. Now in WSUS it had picked up all the clients and has synchronized the updates ready to go, but they are just all stuck on "not yet reported". Client side of things I get error 800B0001, and have tried the hotfix which hasn't resolved anything. I've also tried in group policy specifying the port which then gives error 80072EE2, but i believe this is just a timeout error. So what may I have missed? Also tried disabling the Firewall on the client, no luck. May or may not be relevant; we have a proxy in place, WSUS is running on its own VM not on a DC. Any help would be grand! Thanks, Dan

Sorry do you mind explaining where abouts? SW is a little confusing with all the settings.To my understanding we don't have anything in place associated with the unauthenticated IP group.

Good morning everyone! Wondering if anyone has had the same issue we're experiencing? Smoothwall seems to be all fine and dandy,,, except! A student made us aware their Mail app on Mac wasn't working. Now I presumed they had made some changes to their settings and mucked it up. But on closer inspection it seems to be a filtering issue. The email in question was a @iCloud account (and a hotmail but one thing at a time). Now they are able to receive mail but not send. Checking the web filter there is no obvious block, so I proceeded to log in myself on the Macbook (this is a BYOD by the way, not a device hooked up to our system), and found it worked fine, with my account allowing full unrestricted access. I then tried adding the SMTP domain that apple uses, to different filtering policies but to no avail. I also tried my own iCloud email when logged in as the student and it has the same issues. I've tried a few other options I've found trawling the interweb but nothing has come up trumps?! The only thing I believe is at the root of the issue is when monitoring the webfilter whilst trying to send, logged in as me it identifies the group I'm associated with. But when logged in as a student it shows 'Unauthenticated IP' group. Which seems odd as can browse and do most things normally as expected. Anyone else found this? I have opened a case with SW but feeling impatient, its Friday, wanna get on with it! Hope that makes sense. Thanks all, Dan

Did the trick. Thanks for the help. We'll look into why it was the AV, see if we can prevent it in the future.

Hey peeps. We're having an issue with one particular outside sender. A member of public is sending in an e-mail on a @btinternet.com email address, and for some reason it never reaches any of us. We've only found out due to said person using a partners e-mail address (which is a @hotmail, (may or may not be relevant)) and a phone call. Now we've looked through our email AV PureMessage, and nothing has been quarantined. Using the message tracking center in System Manager, we can see the email came in, but for some reason never delivered. It states: "SMTP: Message Submitted to Advanced Queuing, SMTP: Started Message Submission to Advanced Queue, SMTP: Message Submitted to Categorizer" And thats all we have. Cannot find it anywhere. The said person has sent a few e-mails since the first and all do the same thing. I can confirm other @btinternet.com senders are recieved fine. Odd and stumped. Any one else experienced this? Thanks in advanced.

No worries! Let us know how you get on!

I believe its trying to access the internet to help build the OS. Seen this once, from what I can recall, if you have any authentication needed for your network you are going to need it bypassed with its IP. But you should, seeing you have a OSX disc be able to access disc utility, and repair the HDD from there? Sorry bit vague, trying to remember from my experience of that screen. edit: Yea I does look from that Apple guide its being prevented internet connection somehow. As said before if you need authentication, try and get the IP bypassed, otherwise, take it home and use home network??

No worries buddy, glad to help! Good idea on pointing it to their own profiles!

@RobD Just deployed via GP, update reg key of HKEY Current User\Control\Desktop\Wallpaper, type REG_SZ value pointing at the default Win 7 background for us -> C:\Windows\Web\Wallpaper\Windows\img0.jpg. It should work pointing to a network location, but haven't completely tested that. Profiles may still be having issues somewhere but nothing we've noticed or taken any impact on. This just fixes that darn black wallpaper!

We get the same issue. As you say active files still open that prevent the deletion of the local files. Very annoying. We only found setting the desktop via registry works the black background fix, but annoying you can't set their desktops! Sorry not much help, but I feel your pain!