sukh

Hi Can you check to see if the domain computers or at least the computer you are deploying office to has at least read and execute permission where your office 2010 source files are on the network. Also, if the folder is shared out, make sure everyone has full control on share permission Sukh

You can try TreeZise Pro

Hi Are all of your staff split at each site, i.e will staff at college 1 only be located at that college? Also, say for example, staff member 1 only allowed to print to their own college site? Sukh

np, glad it is resolved. Sukh

Hi If you can modify locally, at this stage I assume because a domain GPO is enforcing this. You can try to run a gpupdate /force after you have made the change on the GPO. Sukh

Can you check under Security Settings | Local Policies | User Rights Assignment for the below and ensure that the local service has these rights? If not add them in. Bypass Traverse Checking Impersonate a client after authentication Profile system performance Also, is this issue on all PC's or some, if all, then you may have to make the change for the default domain policy rather than the local one on the PC. Sukh

@Willott - It does depend on a number of factors. If inbound emails are screen by your county, then you have one layer of defense. To route emails from your Exchange Org to Smoothwall and then do address-rewrite, can cause issues. I know you say you have this running, but I haven't seen this type of set-up before, except for relays within your AD which may be relaying from a SMTP server with no AV/AS. Having AV/AS on the Exchange Server can also provide additional checks/scans on the mailstores themselves. What if an email in your mailbox is effected with a virus, or in your store? What if you use PF databases are infected? When one specs servers for Exchange, I would expect one to spec the server with AV in mind. And AV on Exchange servers isn't as intensive as one may thing, it depends on a number of configurations, engines used. I suppose one can save money with your config but the cost for say FPE 2010 under the EES is not much. Also, in my opinion, this is not best practise for internal email scanning. But your solution can work. Sukh

@Willott - This may work, extra routing just to get internal email screened, and extra overhead on all servers and devices along the route. I'd recommend using a product with your Exchange org rather than route out the Smoothwall and rewrite addresses. Sukh

Hi Does it tell you what service is having the issue n event viewer? Sukh

@FN-GM - Is this resolved now? Sukh

@CyberNerd - postini are good and did really well in the US. They have a fairly good market in the UK too. I have used them in the pass for many customers and are a way cheaper than ML, however, when it comes to AS/AV, they use engines like most tier 2 AV providers, whereas ML actually (well now called symantec.cloud) have advanced engines and create and distribute potential AV to tier 2. Another intelligent product is Brightmail which is really good. Sukh

For internal email scanning, products such as FPE can catch emails with profanity and custom keywords etc as well as performing AV and AS. This will probably be a cheap option if your have some MSFT agreement. As for external emails coming into your gateway, or from your gateway to your exchange server, I'd recommend a subscription like messagelabs. You ideally want to catch as much spam/av before anything gets to your gateway/exchange org and then have anm additional layer at the gateway/exchange. For gateways, I'd recommend Ironport or clearswift. If you do decide to go with clearswift then do go for the CSEG's, I.e appliances rather than the software. However, using these products can be expensive. Sukh

Hi Let me know the outcome. Sukh

Hi Does the machine actually shutdown or reboot? Have you run AV to check for viruses? Is it up to date with SP and updates? Can you reproduce the issue? Sukh

You can try creating a contact instead for the sharepoint account and setting the rule to -1. At the moment we are only looking at this issue from an Exchange view, if the message is actually being deliverd to Outlook, which it seems like it is. Then Outlook has it's own mechanism for SCL thresholds and uses it's own engine to determine mail message SCL. If this is the case the you made need to add a safe senders list via a GPO for everyone for Outlook. Sukh

I was suggesting a possible workaround, as emails on the GAL should be trusted. You can test by creating a contact and see if that works. You can then also use this contact and use this contact when you create your rule. For the condition you can choose "from people" then search for this contact. Then you can continue with the actions and set the SCL to -1. Sukh

Hi You can use a transport rule ONLY for this specific email address. And yes 1 is least spam. As a test can you create a user account in your AD and a mailbox for this user. Make sure you assign the email address for the sharepoint to this user and then test. All email within your is is set to -1 which means it's trusted and wil bypass the agents. Sukh

Hi Error code 0 means it's installed or there's another error. Can you also run the Windows Installer Cleanup Utility and ensure any previous versions have been completly removed? Sukh

Hi Glad you solved it. Group Policy Results wizard in ‘Group Policy Management’ (GPMC ) 2.0 will show GPP. Sukh

Hi This is exactly what I wanted to test. To see if the batchfile worked, this would rule out the script. As you have tested using local admin then and confirmed that all works, then I assume there are no errors with the actual scrip and therefore points towards the GPO. Can you ensure that your Office 2010 Deployment Script Policy has domain computers applied to it for security filtering and then test. If you are using the MSFT script on technet, have you also checked the log files for that computer? Have you also, tested this GPO on another PC (to rule out a 'messy pc')? Sukh

Hi Is old policy which has the setting configured. Is this still being applied to the users? Check gpresults and see if both policies are being applied. Sukh

You can use FPE 2010 for Exchange 2007/2010. Probably get a discount if you have some MSFT licensing programme you're committed to. Sukh

Hi When you mention a manual install, did you execute the "Office2010startupscript.bat" ? Did you run the actual bat file used by the startup script? login as a user, try a domain user with sufficient rights to install application (power users may work) and execute the file? Does this work? Sukh

Hi Can you see if the GPO is actually being applied? Run gpresults /z >c:\policy.txt on a PC joined to the domain and post/pm Sukh

Hi Have read here. Deploy Office 2010 by using Group Policy computer startup scripts Sukh