Lord_Edam

W've been running Cacti with the weathermap plugin off a windows/IIS server for about 18 months. I haven't found anything that I can't do with it that I would be able to on Linux.

some versions create an LDB lock file in the same location as the database. If that doesn't work, grab filemon (or similar) and watch what's happening when you open the database on an unrestricted PC.

http://support.microsoft.com/kb/810591 any help? you can run setup /forestprep & (presumably) setup /domainprerp on the 2003 DCs fine. It's just having exchange itself installed on w2k3 that causes problems. nb: never tried it. Personally, I'd probably bring up a windows 2000 member server in the relevant domain to do what I want, then uninstall it afterwards.

Unless you're running hundreds of message / minute you don't need to worry too much about putting your transaction logs on their own RAID-1. partition the system drive into two logical drives and stick the transaction logs there instead. Databases would be better on a RAID-5, but it's more important to make sure your drives are large enough to handle the users you've got. 3x145GB SAS drives would probably be fine for your databases - it'll give you about 200MB per mailbox. go for a single dual-core CPU rather than two seperate CPUs, just to save money. core2Duos (or the Xeons based on them) would be best. 2GB memory will be fine. Our first exchange server was a poweredge 700, P4 2.8, 1GB RAM, 3x250GB hard drives in one RAID-5 set. It served about 600 mailboxes without ever breaking a sweat.

Policies can only be applied to storage groups so might not be suitable if you're only running Standard version. If there's some property you can use to identify students or staff you can run a script to set the following LDAP attributes (sizes in kbytes) mDBOverHardQuotaLimit - "prohbit send & receive" mDBOverQuotaLimit - "prohibit send" mDBStorageQuota - "issue warning" admod or a VBS script should do it quite easily.

Are the 12 seconds particularly important?

So, how does Half Life Team Arena help teachers?

Just been asked to install this in one of our rooms. This'll save me having to leave the officer, cheers

It's not just the global address list you need to restrict - it's the address lists under "all address lists" and "offline address lists" as well. Setting up custom address lists is quite easy, the hard part is working out what permissions you need so that people pick up the correct one automatically. google around "custom address lists" and "shared hosting with Exchange". All the instructions are aimed at organisations who host exchange for serveral companies, but the ideas apply just as well in schoole - each class/year/whatever is a seperate "company". you do know the global address lists only show what's in active directory? and it's almost impossible to block anyone who can log on to active directory from seeing other people's names? So if the students can't find the info from the global address list they can easily find it from searching "My network neighbourhood" or other places.

Is your default public folder store actually mounting, and can you access public folders from outlook/owa? make sure the permissions are right, even if they look right. http://hellomate.typepad.com/exchange/2003/10/the_pfdavadmin_.html The only solution I can find is to export everything to pst, delete your public folder store, re-create & restore from the PSTs. might be problemative if you have a lot of public folders.

you'd need to push a normal.dot file to each logon's profile configured to show the toolbars you want if each yeargroup has a single username that should be quite easy through logon scripts (and it also means if anyone changes the toolbar layouts it gets reset next time they reset the PC)

Probably your anti virus or filtering software on your server. the emails get eaten by the categoriser, where your filter would normally do its stuff, but since the filter is/was not working properly they just hang there until you restart the services, which kicks them back to the start of the process if you're lucky, or just deletes them entirely if you're unlucky. Particularly a problem with sophos puremessage if you're using it for anything more than absolutely basic virus filtering. and Surfcontrol's email content filtering (which seems to be missing 90% of the stored procedures it needs to work properly!) Not sure if there is an easy way to check for them. I've never found one - the first we know there's a problem is someone complaining they didn't receive a specific email, and when we do message tracking it shows as getting as far as the categoriser and vanishing.

Sounds like it's configured properly. you don't get the little IMF connector like you did with IMF V1. Just to make sure - change "when blocking messages" to archive and try sending yourself some spam. It should all be archived in \vsi 1\UceArchive (or your own SMTP queue folders). IMFArchive Manager is pretty useful whilst you're getting things set up because it'll show you the archived emails (if you dropped the SCL to 1 it should catch everything. once you're happy it's working again, re-set the "when blocking messages" back to delete. I'm not sure if SenderID filtering is particularly useful - not a lot of people actually have the relevant DNS records to make it work, and there are (IIRC) problems with it hanging Exchange in some circumstances.

yay!! been offered (subject to references etc.) a job as a network officer at conwy county council, so my IT Technician post at Coleg Menai should be available soon if anyone wants it (planned start date in my new job is February 1st) Don't know yet if they'll actually be advertising my job, though, or promoting our current trainee to permanent status and advertising for a new trainee.

sorry I didn't reply sooner - day off for a job interview at the LEA wednesday, and when I got back windows updates had broken half the staff PCs!! I'm getting a bit stuck on this. Presumably you are talking about local group policy settings on the PC with the certificate added. First of all, 'Enterprise Trust' can be found under the User configuration route, not the computer configuration route. I presume that it what you meant. This should be a domain policy, not a local one. I mentioned the PC with the certificate already added because it's easier than exporting the .cer/.crt file - you just search in the security container for the certificate you want. you can use user configuration if you want, provided the group policy is linked to an OU with users in it. The same settings are available under computer configuration as well. Ah, right. We didn't go this route for text help, the only time we did this was for some dodgy web submission software for the finance team. It might be that you can't actually do this with the certificate texthelp supply. If you do it as a domain policy, it will be picked up by any computers(for computer configuration) or users(for user configuration) in the OU you apply it to.

just turn security to "really stupidly low". that's what we did... ok, so that isn't an answer. Yes, you can set trusted publishers through Group policy. computer settings, windows settings, security settings, software restriction policies ->set "trusted publishers" to "enterprise admins". on a computer with the certificate added, logged on as an enterprise admin, go to computer settings, windows settings, security settings, public key policies, enterprise trust. add a new certificate trust list, find your certificate and add it to the list as a new "code signing" certificate. If you're using adobe acrobat, you might find that it's broken by Read/write 8 - the ini file it creates defaults to "always read aloud", which can be confusing if you aren't expecting it or don't want it. you need some way of rolling out a fixed ini file, see the attached rar which did the job for us. You might not need to do this if you've already made your own MSI that fixes this. installer.rar

sounds a lot like xplanet, which I have randomly scattered around with volcanoe, weather maps & satellite tracks.

if you turn the PC off during a software update it's supposed to start up again next time - infact, they're supposed to keep trying until they succeed to install the software. I'd look at other possibilities like network connectivity to your admin install, or something on the problem machines that's getting in the way & needed interaction you can't give.

Static addresses for anything which is crucial to your infrastructure - switches & servers. Things you want to be able to function even when the network is falling apart. Reserved addresses for anything which can't or shouldn't be dynamic, but you're likely to upgrade or replace regularly. Particularly printers, but I'd stick wireless access points here as well. The idea isn't so much "make sure they always get the same IP address" as "make sure it's easy to manage" - you use the reservations to make it easier to manage upgrades, so the printer in the biology lab is always going to be 814.23.544.15. If you replace that printer, you just update the reservation with the new MAC address. Saves having to print out configuration pages to work out what the settings should be.

Email addresses don't get added immediately, and if you're running Outlook 2003 the "global address list" is actually an "offline address list" that is typically only updated every 24 hours. Wait a day and see if it's fixed itself, or :to get the email addresses added, get the user to log on to the mailbox once (either in outlook or OWA) :to get them on the Global Address List (if outlook 2003), rebuild the offline address list. There's things you can reschedule in ESM to get both of those running more often, but I rarely see the point in changing the defaults. If people need email addresses urgently they should ask for them sooner If nothing's showing up after 24 hours, your Recipient update service or recipient policies are broken.

would you need to change the static devices though? On a properly configured network, if you try to talk to any device on a different subnet your packets are sent via the default gateway so the "old" (static) devices will just send anything for the "new" (extended dhcp) devices via the default gateway. Everything can still talk to everything else, provided your default gateway is configured correctly. or is friday afternoon addling my mind (which it must be - that took too attempts to type!)?

I've been digging through old emails to find how I fixed it, and came across http://msmvps.com/blogs/athif/archive/2005/09/06/65550.aspx so I don' think I ever fixed the problem myself, we just found a configuration that stopped people complaining! either that or SP1 actually fixes the problem - but if you've only just installed WSUS you should have downloaded the latest version, so that won't be it. We're holding off on IE7 as long as we can - we just now we'll be bombarded with "where's my favourites/search/home/weatherwatcher toolbar"

Had the same problem when we started with this. solved it eventually, see the attached image. I can't remember which setting cured the problem, though. not unless you configure the option to re-schedule scheduled installations. if that is enabled, WU will automatically launch the installation x minutes after the PC is turned on if there's any outstanding updates to install. the user-side settings are just the same as machine-side settings for "don't display "install now and shutdown" options, you can do without them if they're configured on the machine-side

depends on what browolf means by "listserv type functionality". Query based distribution groups don't offer automatic subscription / unsubscription - they need the user (or an admin) to manually alter the LDAP query or add the relevant attribute to the user's account. Fine for small groups of users who already exist on the exchange server, but if you're getting on to a decent sized list or want to include external recipients you need some way of automating the change.

the batch file I use to fire off sysprep includes these lines to cure the duplicate sophos GUID problem (it then goes on to copy the c:\sysprep folder depending on which mini-setup I want it to run when it reboots) net stop "Sophos Anti-Virus" net stop "Sophos Anti-virus Status Reporter" net stop "Sophos Message Router" net stop "Sophos Agent" net stop "Sophos AutoUpdate Agent" net stop "Sophos AutoUpdate Service" reg delete "HKLM\Software\Sophos\ALC Agent\Private" /v pkc /f reg delete "HKLM\Software\Sophos\ALC Agent\Private" /v pkp /f reg delete "HKLM\Software\Sophos\Messaging System\Router\Private" /v pkc /f reg delete "HKLM\Software\Sophos\Messaging System\Router\Private" /v pkp /f reg delete "hklm\Software\Sophos\Remote Management System\ManagementAgent\Private" /v pkc /f reg delete "hklm\Software\Sophos\Remote Management System\ManagementAgent\Private" /v pkp /f del "c:\Program Files\Sophos\Sophos Anti-Virus\cidsync.upd"