Arcolite

Our console is v3 I've pushed out the client to some machines manually, that part is working. Just for ease of administration I've setup a startup script to do it for new workstations. From what I can tell, there are no upgrades for the EMC yet, although I'll get in contact with Sophos.

I've just inherited the task of looking after the Sophos deployment on our network. The actual Client has been deployed without a problem using a script provided by Sophos, however, things do not seem to be working as expected on the Enterprise Management Console. I have setup rules and scanning jobs, but once results are found, I can't seem to do anything with them from the EMC. For example...if there is a Virus on a machine, clicking on Full System Scan (which appears to do nothing) or Clean Up Detected Items (which brings up a empty window) appears not to function. I've got my daily scan setup to autoclean/repair infections and quarentine items that can't be cleaned, but the EMC still say's the machine is infected.

Anyone have any suggestions on this? The method I'm using works, but it's ALOT of work. I'd ideally like one shortcut bank, which i can then throw out to people based on groupings, but i would also like it to hide shortcuts for programs that aren't installed on that machine.

I spent the last half term putting in a WDS server to replace our bloated Ghost images. Well worth doing. I've now got a fully automated XPSP2 deployment. Just press F12, boot to Lan then walk away...the scripts and gpos do the rest. I can build an entire lab of 30 PC's in about 10mins. We also have a program called DeepFreeze on the workstations that refreshes the build on every restart (without a startup time hit). As for MSI, Universal Extractor and AppDeploy are my best friends.

Horrible software - it pains me to have to deploy this over the network. As yet however, I've only ever deployed this by creating my own MSI capture using InstallSheild. Probably against the licence but it's either that or Real Alternative, which would they prefer?

If I take away all the unattended files I get the GUI to select the image on the clients, but it says there are no images available

I've been using one image on my WDS server for a while now, but the time has come where I need to add a second image to the server. My current image is fully unattended and uses a autounattend.xml to do all the tricks. The trouble I have is that the unattended file is on the main server config. If I try to attach it to the image itself I get a "This image version doesn't support adding an unattended setup file using this method" error. This means that to use the other image, I have to tell the server which .xml to look at BEFORE I start to build those machines. I'd like to be able to have multiple images, all with Unattended files which can be selected from the workstation via te PE Image Selection (which I have yet to see!) not the server. Any ideas what I need to change? Here is the unattended that is attached on the server...

I've been using one image on my WDS server for a while now, but the time has come where I need to add a second image to the server. My current image is fully unattended and uses a autounattend.xml to do all the tricks. The trouble I have is that the unattended file is on the main server config. If I try to attach it to the image itself I get a "This image version doesn't support adding an unattended setup file using this method" error. This means that to use the other image, I have to tell the server which .xml to look at BEFORE I start to build those machines. I'd like to be able to have multiple images, all with Unattended files which can be selected from the workstation via te PE Image Selection (which I have yet to see!) not the server. Any ideas what I need to change?

I wouldn't go near K-Lite.....anything that suggests it was related to Kazaa should be avoided. I agree with the above poster, ffdshow it great.

Don't you need to tell SyncToy which "job" to run? Like... C:\Program Files\Microsoft\SyncToy\SyncToy.exe –R "MyFolderPair" There is also a file installed with SyncToy called SyncToyEngine.dll. This does all the logic for SyncToy which is .net 2.0....so all you funky coders out there can call synctoy with with .net apps.

I'm looking to put in a central shortcut bank for our workstations with the ability to update on the fly. I've already got folder redirection turned on, but at the moment I have got Shortcuts displaying for programs not installed on that machine AND shortcuts displaying that I do not want the Students to have access to. After a bit of searching on here I found the following script: http://techinfo.cnwl.ac.uk/Windows%20Scripts/default.asp?dest=Launching%20a%20program.htm Which does pretty much what I want, however I just wondered if there is another way to do this?

You can do that via a vbs startup script. There's a registry key that controls it, but you need to find the registry address for the soundcard on your machines, I don't think it will be the same for all. Here's the one I use on our workstations. Item 0 through to Item 6 are the 7 Inputs under the Sound Control Panel. Setting Item 1 to 1 makes Mic the default.

Fantastic. Thank you!

Ah perfect. That'll do the job. I've had a look at the commands but I can't see one to Select which input. By default Line In is the selected Input, would be great to script Microphone.

In our language lab, the little blighters keep playing with the Mic and Sound settings. Is it possible to control these within a GPO so that on machine rebuilds we don't have to spend ages per machine reconfiguring it all? I've not run Regmon just yet to capture, but if anyone has the key i need to look at I can work from there.

Perfect, thanks for the pointers. I've now got it sorted. We wanted certain User specific data shown on the desktop (Logon Server, Username...) so we've created two profiles. One for the desktop and one for users. On Startup it applies the Desktop and on Logon it applies the User one. When the user logs out the Desktop one is re-applied.

It works from it's current location, I can see everything I have set on the login screen, but when I log in as a user, I get nothing but the usual Blue Desktop.

I'm having a bit of bother with this. It works and looks fantastic. But once deployed, it doesn't always appear for users. I've created a MSI which deploys the .exe my config and a wallpaper to a folder on the C Drive. I've then got a startup batch file that runs the .exe (as a Startup via GPO) Is there anything wrong with that?

Perfect, thank you. Must have been in a rush, I searched but found nothing.

I've just spotted that a lot of our new starters didn't get permissions set on their Home Directory and Work areas, meaning they can't log in or save work. The problem is, I don't know how many or what boys this effects without a lot of manual work. The few I've had so far I've added the permissions manually. How can I script applying permissions to their Profile and Home directory? We use DFS so the Profile is... \\domain\root\StudentProfiles\Year\Username and Home is mapped to N: and points to \\domain\root\StudentWork\Year\Username All the boys actually have accounts and the folders are in place for most of the boys I've checked, they just have no permissions. I don't fancy going through 1500 accounts manually :'(

I've got my WDS working perfectly at the moment, it will pull down the image and kick off the install with just 2-3 button presses. The machines are Pre Staged so they should pickup the machine name on it's own. The problem I'm having is that I can't seem to make it join the domain. I've got the Server setup with the following Unattended.xml OnError 1 Primary true true NTFS WinXP C 1 1 0 true HABSBOYS administrator adminpassword OnError Windows XP with Service Pack 2 Windows XP Windows XP with SP2.wim 0 1 I then have a sysprep.inf in \RemoteInstall\Images\ImageGroup\$OEM$\ This contains... ;SetupMgrTag [unattended] OemSkipEula=Yes [userData] ProductKey=00000-00000-00000-00000-00000 FullName="ICT Support” OrgName="HABSBOYS" ComputerName=%MACHINENAME% [GuiUnattended] AdminPassword="localadminpassword" EncryptedAdminPassword=NO OEMSkipRegional=1 TimeZone=85 OemSkipWelcome=1 [RegionalSettings] LanguageGroup=1 SystemLocale=00000809 UserLocale=00000809 InputLocale=0809:00000809 [Display] BitsPerPel=32 Xresolution=1024 YResolution=768 VRefresh = 60 [Networking] InstallDefaultComponents=Yes [identification] JoinDomain = %MACHINEDOMAIN% MachineObjectOU = "%MACHINEOU%" CreateComputerAccountInDomain = No DoOldStyleDomainJoin = Yes With this setup the machine will build fine without user interaction, but when it's finished it wont have joined the domain. I've tried adding the Domain Admin and Password to the [identification] section of the sysprep.inf, but this made no difference. Can anyone point me in the right direction?

I'm currently experimenting with WDS to replace our current Ghost Image builds but I'm having problems getting it to be 100% unattended. While I was playing around with RIS I prestaged my test machines which then meant that after the F12 boot setup I just entered my domain password and the image started. However, I don't know if it's how i've sysprep'd my machine or if it's how I've captured the WIM, but everytime it asks me for the Machine Name. Here is my curreny sysprep.inf ;SetupMgrTag [unattended] OemSkipEula=Yes [userData] ProductKey=ourvlk FullName= "ICTSupport" OrgName= "HABSBOYS" ComputerName= %MACHINENAME% [RegionalSettings] LanguageGroup=1 SystemLocale=00000809 UserLocale=00000809 InputLocale=0809:00000809 [GuiUnattended] AdminPassword="ourpassword" EncryptedAdminPassword=no OemSkipWelcome = 1 OemSkipRegional = 1 AutoLogon=Yes AutoLogonCount=2 TimeZone=85 [Display] BitsPerPel=32 Xresolution=1024 YResolution=768 VRefresh = 60 [Networking] InstallDefaultComponents=Yes [identification] JoinDomain=ourdomain DomainAdmin=administrator DomainAdminPassword=ourpassword Is this still the correct method or have things changed with WDS?

Where would you like me to start? We're a Private Boys' School and aren't reliant on a ELA for our software items. One of the benifits of this also means that was have a larger than average IT budget. As a result, the ICT Department is 6 men strong, all of which from a corperate IT environment. We feel that RM offers us nothing over a pure Vanilla XP/Server 2003 system. Infact, we find it causes more problems than it solves. Dont get me wrong, for smaller sites and perhaps schools with lower requirements RM is great, but our school has out grown the need for it now.

I'm trying to sort out VNCon to replace RMTutor when we remove RM from our network this summer. Now on most machines VNCon works perfectly, but on others I just can't ge tit to remote install. It will install the program, import the registry settings but will fail when it trys to start the service. Uninstalling then reinstalling doesn't solve it and neither does a restart. BUT, if I log into that same machine using Gencontrol (which also remote installs a VNC Client) everything works fine, Gencontrol deploys everything perfectly. The only thing i can think of is that is' my VNCon configuration/remote install setup. Anyone has any ideas how to solve this?