kingswood

Yeah- loopback is generally a bad idea. We actually use a loopback policy for applying proxy settings to users based on location (for our new filtering solution rolling out soon)- but the logon time have increased (only slightly) that I am now considering using a VBScript to apply the settings instead at logon (much faster). So generally, loopback is a no for most people. Using one all encompassing "monster GPO" (I liked how you put that) is what CSE have been doing for our school for years, and I don't like it. It's harder to detect where GPOs are going wrong and makes changing them a nightmare (GPO inheritance). Splitting them up is OK, but you have to make sure that if you are applying a Group Policy setting in (say) the Users portion of the setting you disable the Computer section- that way you aren't wasting processing/logon time sifting through it all to find settings that should be applied. And it's actually best practise not to set both Computer and User settings in the same GPO. Have a look at http://www.gpanswers.com for some valuable info on these issues. Enjoy!

We are looking into this now. It would be great to have one convenient hardware type for both operating systems...

We have loads of Dell kit now- and I have to say that I share some of Tony's experience with their "helpful" support. We got a new batch og GX 620 Dual Core machines (30 of) with flat panels last month. One was DOA (not too bad). We have the NBD warranty for education. So I call Dell. Bod on phone wants me to strip the machine bare- I told him that I had already tried new PSU from working model, new cable, moved to different power point, unplugged non essentials etc etc. Nope. Got to do it by the book. So I spend two hours(!) on the phone to Dell so that he can finally book an engineer to visit next day with a replacement PSU. Mmmmm. Engineer turns up at eleven next day. I watch him (like a hawk). Scruffy git too- has one screwdirver in his pocket and more creases in his shirt than the san andreas fault line! He tells me that it isn't the PSU- it's the motherboard. I ask him why he thinks this- he isn't sure. Anyway, he tells me that he will have to bring a new motherboard next day. I agree (it's only one system after all- and a spare too). Next day the engineer arrives and fits the new motherboard. Doesn't work! Now I'm starting to look as scruffy as he does. He apparently finds out (after escalating the issue now) it is the CPU. OK. Take one CPU from known working system and test. It works. Voila! Next day we get new CPU and get to keep (woohoo) new motherboard too. What a fiasco. What happened to carrying around some FRUs? Dell's support isn't excellent but their systems are great value. So we're ordering more off them next week (30 more actually)- let's just hope none of those come DOA. But yeah0 it can be frustrating- and that was just one system. Tony- hats off to you sir!

http://support.microsoft.com/?kbid=912309&SD=tech http://blogcastrepository.com/blogcasts/37/windows_server/entry490.aspx Hopefully they will help. Schema: http://www.comptechdoc.org/os/windows/win2k/win2kadschema.html Because of DFS extensions etc., your existing 2003 Server schema will need updating to reflect the new features found in 2003 R2. Don't know if any of that will make more sense- sorry for being vague! Paul

http://www.linuxjournal.com/article/8822 Good article there from a great journal. :-)

If you have a 2003 server with SP1 you could simply extend your schema so that you can introduce 2003 R2 onto your LAN, and then pop the second CD into your server's CD drive....voila. An "upgrade" from 2003 SP1 to 2003 Server R2 doesn't really exist as far as I know- it's more a case of making sure you make schema changes to reflect the new AD things MS have included and then adding their "feature pack" ;-)

I agree with Tony about Vista- there's nothing there that I can see that would improve learning or lessen the workload of staff or technical support bods. It's just...got a nice GUI. Some of the interface touches are very good- but then I'm a Mac user so it's hard to please me (and even Ubuntu with Xgl whips Vista into the next century--and that's without comparing features and security). Office 2007 is a nice product though. The use of contextual ribbons and the blogging integration with pretty good HTML output are very good ideas. Used on XP the interface doesn't seem as "bland" though as when you use it on Vista. Strange. It could just be that Vista black theme... Oh- and we use Select :-)

Yeah- I would perhaps look at request tracker or even just the BECTA FITS spread-sheets and forms and get some way of logging your support calls and responses. I would think that implementing something like FITS here would be far better than the hoops you are going to jump through now. Take a look at FITS (if you haven't already) and ask your Head to do the same...might clear up some channels at least.

We have been using R2 for about 2 months now- it's pretty good. The file/storage management features are pretty good improvements over 2003 SP1- worth the investment alone for the file screening ;-)

I would go with option 2. :-)

Oh yes. I was speaking to someone with an MCSE in NT4 yesterday, and he has failed all of his MCSA 2003 exams so far and is having to take six months out to re-study for the tests. He got hit hard on terminal services and security in the first test, and clustering in the second. In a mock test I got 897 (using Transcender) but haven't bothered with the actual exam yet. Scares the life out of me 8O Paul

Not reading (although there is a manual with each) but Trainsignal do some excellent MCSA/MCSE study DVDs. The advantage is that it isn't dry facts you are picking up but also getting to *do* what is being taught. And I know you said not the MS Press stuff- but the MCSA training kit is actually pretty good stuff. Enjoy.

Yeah- that's actually best practise in a lot of Microsoft training courses now. In Server 2000 they had Everyone with the lot, and then in 2003 said "OK, how can we make the share safer from the get go" and came up with setting Everyone: Read by default. I actually think it's a good idea. And normally (no- most all the time) I use the Share MMC to handle things like sharing folders and the GUI for setting them. Now MIcrosoft are telling everyone to set the share permission to Everyone: Full Control and advising the use of NTFS to further restrict. Again, a good idea. Share permission are messy- they don't replicate, and backing them up is a futile exercise in pain-filled living. NTFS permissions all the way! But personally- I would use the GUI if it's that much of a time consumer. Enjoy!

We use Prism Deploy. Never had any problems with it, though it can get a bit pricey. On the admin side of things I use MSI- and it's part of the Intellimirror services in Windows Server so costs are rolled in. It isn't perfect and not all applications can be pushed out easily, but it's worth a look at both options. Paul

"The powers used properly, necessarily, proportionately and never unnecessarily or arbitrarily should not cause anyone any concern....." Yeah. Just like they always are ;-)

perhaps it _is_ the _manner_ in which these laws could applied be that concerns us? There's nothing like a quite like a government for creeping featuritus. ... and the second part of that sentence is the standard "if you've got nothing to hide" FUD. Defending your right to privacy <> criminality. I totally agree. It's getting annoying listening to folk who argue for the dissolution of more and more privacy using the argument that "if you haven't got anything to hide don't worry". It's crap, that's what it is. Paul

Not to me- but then I have *only* asked about their PDA connection software, and we have been working with them on that basis. I could dig around if you like. Paul

We are actually costing this now for the PE department. Using Dell Axim PDAs (624MHz) and QinetiQ software. Looking good so far. More portable, good battery life, good wireless and the ability to carry office documents and browse the web etc. Seems like a nice balance between laptops and desktops. Paul

Oh the pain! I share it! Group hug... ...maybe not........ ..............but I liked the animation too 8O

LOL!

I thought that geeks knew nothing about football?? To be fair however, I've been to Liverpool a few times (to see friends) and found it to be a top place with the friendliest people I've ever met! Its a Capital of Culture and all that too! (Is that enough to escape being hunted down!?) :twisted: And the best football team ever....

Didn't say it wasn't possible- it's just not something you should do. On a network with 40 clients it may not be that bad- especially if updates occur off-peak and in the background. If you run a medium to large sized network in a school and let WSUS do its thing during the day- and most days are busy- you're probably going to notice some performance degradation. Not to mention the fact that if let WSUS download updates to the local HDD for distribution you will be taking up *lots* of space... Hey. It's your party :-)

Ah yes. Great stuff. That's in my regular podcast subscribe list from iTunes. Love it. :-)

Go for it!

Good document Russ. Really. I think there has to be an informed balance in this particular debate between making sure that schools have adequate and sound ICT support (and if they have none then managed services are a God-send), and also providing fast response and personalised support locally (enter technician and NM). Personally I think BSF will fail to deliver centralised support services- and probably in a big way. What it's looking like is a massive knee-jerk reaction to the way ICT in education is heading without any kind of framework of skills or consistent policy. And that ties in with BECTAs framework (FITS), Competencies, and the NAACE discussion nicely doesn't it? All in, I think what you have put forward in the document is a sound appraisal of where we- ICT staff in schools- are at with regards to BSF and offer a balanced look at where BSF or managed services could benefit and where localised support could augment or supplant that. If I'd read it correctly. Which I may not have. It's been a long day at the school and I'm knackered! Paul ;-)