Bad boy Warrior

I have a strange problem here. A bit of a background: 10 PCs joined to a domain no DHCP (router handles it) with each of the 10 PCs having a STATIC IP address then in DNS has a forward and reverse lookup with the static IP address respectively. I configured a firewall policy which ive done before but when i apply it it doesnt allow me to use File and print or ping. I have set the access level to * (so any pc can connect) and configured ICMP to allow ping requests. Enabled the firewall log and it shows that its dropped the connection. When i turn it off its all fine. Im sure its set up correctly as ive done it before but anyone know how i can pin point to where the problem could be? Thanks jpeg included to show the overview of my policy

Ok - would this degrade performance? as its a 300GB har drive Its at work (may try it at home if i succeed ) Its just got files on there. Not high in demand but we have about 20 people who can use it at any one time. I was checking the definitions of RAID at http://linux.cudeso.be/raid.php#raid5 - I think im looking for something with decent performance to mirror but your telling me RAID 1 will degrade performance so which one is suitable? Cheers

Yes i only want to have it incase one hard drive goes down. We have backups but just want to ensure if one drive does go down we can use the other one until the original gets replaced. Should i therefore buy an exact same type of hard drive that i currently use? or a cheaper version of it but with the same space? Thanks

Could i buy a Hitachi SATA to do this? How do i know if theyre dynamic disks? If i use Disk Management to do the mirroring is it straight forward or is there a tutorial i can follow? thanks

Is it possible for me to copy/sync EVERYTHING from a Windows 2003 server to another hard drive in case the original becomes damaged. If so how can this be done? Thanks

It finally worked. Everything was ok except for one problem..........psshutdown -r should have been psshutdown.exe -r. Thanks for all your help

Thanks everyone!! @Jaclaz I tried that but still didnt work In my tasks directory i have pdh.dll psshutdown.exe testshut.cmd StartTask.bat Doubleclick startask.bat and runs fine - adds the entry to task scheduler. But when the time comes it shows up an error "could not start" with the same error as before. Changed testshut.cmd to a .bat file - same error changed both files to .cmd and although they run by the command line without a problem they dont run as they should by a task and both run with a .bat extension if i double click them. The directory is in a test directory for now it does have full admin rights and im running as a domain admin. thanks

Well, actually that line in a batch: echo shutdown -r at 01:00 /every:01 does not make much sense, the first line will ECHO to the screen the string "shutdown -r", and the second line is missing the actual COMMAND that needs to be executed, besides the missing "\\computername" See here the correct syntax for the AT command: http://www.ss64.com/nt/at.html As reported there, AT is an old command, the "new" one is SCHTASKS: http://www.ss64.com/nt/schtasks.html And shutdown.exe has more options, doing a shutdown of remote computers without checking them can lead to either a "not performed" shutdown (i.e. the user stopped the countdown) or a "bad" shutdown, where services or applications are not closed properly, that could lead to data leak: http://www.ss64.com/nt/shutdown.html Personally I would use PSShutdown: http://www.microsoft.com/technet/sysintern...PsShutdown.mspx that has more options, including one to shutdown every computer in the Domain (\\*). With all due respect, judging from your questions, here and on this other thread: http://www.msfn.org/board/index.php?showtopic=88691&hl= you might want to study a little bit more about batch language and more generally commands in NT/2K/XP before attempting using them. The two already referenced sites: http://www.robvanderwoude.com/index.html http://www.ss64.com/ are very good starting points. jaclaz Ok Mr Jaclaz, i see what you mean after thinking about it and reading on it i have come up with the below code: Schtasks /Create /SC Daily /RU System /MO 7 /TN TestReboot /TR "\\server\share$\task\psshutdown -r" /st 00:40:00 /SD 15/12/2006 This works i.e. adds the task in the scheduler but the status comes up as Could not Start. Im logged on as administrator (for testing) and have copied relevant .dll and exe to the same folder. If i type psshutdown -r via the command line - it works. Thanks edit: I have also tried to replace \\server\share$\task\psshutdown -r with C:\windows\system32\shutdown -r with the same issue. I checked the Schedlgu.txt file and have 0x80070002 The system cannot find the file specified. Try using the task page browse button to locate the application, but reading on this error

Is it possible to reboot all PCs whether a user is logged on or not using a group policy task scheduler? i know how to set up the task via policy but cant workout how to restart all pcs.....so far i have: echo shutdown -r at 01:00 /every:01 this is in a batch file that runs when the system starts. I would like to restart everyday at 1am thanks

Thanks for that but how do i add my text file to this code (PC.txt). Im guessing to replace 192.... with my text file name, but that didnt work???? I didnt know about Powershell so thanks for the link and ill look into it.

I copied ping.exe to a root drive on a domain controller. Along with this i created a text file called PC.txt (which lists all the PCs in our domain) and a batch file with the command ping.exe pc.txt >> answer.txt When i run this batch it doesnt return any ping results in answer.txt- how can i ping all pcs in a domain? thx

I have an .ini file and it works without problems but doesnt do what i would like it to. I would like to have a batch file to execute then a registry file BEFORE it runs the .msi file. So if i had a batch file called Tweak and regsitry file called regi what could i do so these run first and then continues to install the msi as normal? Also the two files need to be done silently without notifying the user anything. Thx sorry forgot to add the ini file: [MSI] MSI=data1.msi [MST] MST1=test.MST ;[Options] [Display] Display=Basic CompletionNotice=Yes [Logging] Path=%SystemDrive%\Office Logs Template=Office.txt Type=piwae

Sorry if this is in the wrong forum but im trying to create an ins file which when double clicked will install a dialup connection to use for our network. Ive got this to work but have some issues with it i.e. It sets this connection as default which i dont want. So wondering does anyone know where i can find the attributes for the file so i can add it to the file or any other techniques you guys know? Cheers

Is there an easy way to monitor our network in terms of any bottle necks etc? Thanks

I want to restrict everyone from using their system drive © as its annoying me with the crap they put on there. Ive removed everyone out of local admin groups via policy and i had to put them into power users as a certain program they all use ceases to function correctly. I found out if i gave modify rights JUST to that folder the i can remove them from power users but the question remains is there a way (other than manually) to set the security rights for a folder within program files folder i.e. c:\program files\application - needs to be done via GPO if possible or if you ahve any other ideas? Cheers guys

Hello All Ive set a GP up so everyones desktop is the same i.e. company logo. If enable the setting to disable desktop which stops users from saving to the desktop - the logo disappears - am i doing something wrong? I have setup a firewall policy using a GPO. If i try to remotely shutdown a PC it doesnt due to the firewall. I realised it uses port 139 TCP so wondering do i set this up manually (using the define port exceptions policy) or does this come under any of the ICMP exceptions list? Thanks

Our PCs are setup with static IPs. We now want to change all PCs with static IPs to use automatic IPS from DHCP. Is this possible to do via a GPO? Thanks

Yes but would this bypass some normal users policy for making certain changes? One of the things we need to do i emove the Accessories folder from all users. I managed to do this with all new users that are created in the machine but if this script runs as the user it fails - something where it gives them access then removes the access.....

Im trying to create a RunAs script which is used for future scripts for standard (non admin) users. So if i create a script i dont need to tie the runas portion to the script i want running (i know i asked something similar like this few weeks back but i think itll be worth knowing how to do) So heres the script set WshShell = CreateObject("WScript.Shell") WshShell.Run "runas /user:administrator@domain" "cscript.exe \\server\share$\Script.vbs""" WScript.Sleep 100 WshShell.Sendkeys "Password~" To me this looks corect but can anyone give me their opinions if this is incorrect or a security risk somewhere? Is it possible to run batch files with this script too if so how if not how could i allow standard users to run certain .bat scripts when some methods coudl be tied down by policy? Cheers

I enabled Winodws Server 2003 firewall i noticed clients had an age to log on, so wondering what ports do i need open to allow users to log on without a 2-3 minute delay? or do i not need to enable the firewall on a domain? (we do have an external firewall which is based on the router) thanks

I tried googling for this but nothing obvious came up for me to read on. Can you explain a bit more please? cheers Remember theyre not part of domain admins. I know you can remove users from groups created on the domain. Theyre local admins.

Hello all My daily question Over our network som users were made local admins in order for them to do their work. Now we found the way around and dont need these lot to be in the LOCAL admin group. I want to remove them using a script but not sure where to start. Coudl you guys please advise? thx as always

Whats security filtering out of curiosity?

Guys Just wondering i have about 50% of users running office 2003 and 50% running Office 2000. I have one OU which has all the users in. I then created 2 policies one for 2003 and other or 2000. Can i run both of these policies under one OU without any problems? I dont know which users are on 2000/2003 and that would be a huge task to find out. thx

Back again. Just trying to create an ADM fil eto remove printers and faxes via GP on WS2003. I have: CLASS MACHINE CATEGORY CustomADM POLICY "Remove Printers and Faxes" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" VALUENAME "Start_ShowPrinters" VALUEON NUMERIC 0 VALUEOFF NUMERIC 1 EXPLAIN "Hide printers and fax on start menu." END POLICY END CATEGORY It works and displays CustomADM but nothing below it - any reason why? thx