icecube

Thanks, have some ideas to play around with now.

How do you manage users for exams? Server 2016 AD Just add a new group with users used for exams specifically? User needs to login with an "empty" desktop - almost like clean install except with all needed software. Can this done with AD or GP?

Was hoping for more scripting type solution, would help me learn more as i go on.

Thanks will look into this

Need help deploying exe (unable to create msi) to install on workstations. Should be able to read current Product Version of file & compare to one to be installed. If the same then stop if newer then install. Write to log file etc... Any help pointing in right direction would be appreciated.

Came across this, will try in the morning. Step 1: Create new group and apply the policy 1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet. 2. Right-click No Internet and press Enforced to check it. 3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying. 4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy. 2. Right-click Internet Explorer Maintenance and press Preference Mode. NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode. 3. Navigate through Connections and double-click Proxy Settings (Preference Mode). 4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. 5. Type 127.0.0.1 into Address of proxy and 80 into Port. 6. Press OK. 7. Close the No Internet group Policy.

How would you go about restricting internet access to certain Groups & granting access to other Groups? Server currently has 2 network connections - 1 going to switch where all clients connected to - 1 going to DSL router for internet access

Thanks, will read up a bit more on it & test on my virtual setup before deploying on actual system.

Wont that save to Profile folder? Or can I redirect to Home Folder? Im a bit new to MS Server, sorry for the many questions.

But you still get users who will store most documents/files in there. How do you curb this? Or would you apply a quota of some sorts? Other than trying them to save in Home folder? Also can one have AD auto create Documents, Pictures etc.. folders in Home folder?

Yip knew that one. But they can store documents in Roaming Profile as well, or am I wrong?

Im currently playing with setup in virtualbox to test whatever I learn & then implement on server. Don't quite get you when you say home directories - I have c:\Profiles\%username% set as Roaming Folder. Im guessing its the same.

Can I also create another security group for roaming profiles?

Have gone your route, thanks. Created a Shared Folders OU > Shared Grade Folder (Specific Folder For Each Grade) Then create a Security Group for each specifying access. Am I correct in going this way?

I Will try this setup & give it a test run. Now to search for easy script to add multiple users

Lets see: Staff (OU) Students (OU) > Grade 10 (OU) > username (Users withing this grade) Students (OU) > Grade 11 (OU) > username (Users withing this grade) Security Group > Grade 10 (Addusers from above OU) Would it then be possible when they move to next grade just to drag & drop usernames from one OU to next grade OU? Or am I over complicating things?

So do you right click domain > new group > Student Users That correct? 2016 = OU? Then a security group controlling each. Hope im understanding, been a busy day...

This sounds more like what we have in mind. Thanks, will read up on it. If I do not get it working, hope you can help show me where I went wrong.

Thanks I will look into this now & see if fits within plan.

Currently only lisencing available for 2008 & Win7, so will have to work with this. Want to have users in specific grades access only needed folders for that grade.

Hi, Ive been thrown into the deep end so so speak. We intend setting up or in process of setting up new network for IT Class at school. Server with Windows Server 2008 R2 AD 30 Workstations Windows 7 Will accomodate 3 classes/grades with learners. Need some help/advice with reagrds to initial AD setup. What I would like to do is have: Users > Grade 10 > 2016 Users > Grade 11 > 2016 Users > Grade 12 > 2016 etc... Also each grade would have access to specific grades shared folder to assignments/tests etc.. Shares > Grade 10 (Only Grade 10 Users Access) etc... for other grades as well. Anyone can give some advice on how to go about settings for permissions etc?