JohnyV's questions

I have a windows 2008 r2 file server. It is setup so that users get there home drive mapped to it H:. It is at the following location \\servername\home\%username%

I have ben having issues with the mac users being able to see other users home drives (even with enumeration enabled).

I need to change the permissions on the directory and all the users subdirectories. Is there an easy way to do this in bulk there are over a thousand.

I have looked at Set-Acl http://helgeklein.com/setacl/examples/managing-file-system-permissions-with-setacl-exe/ however I dont see how it will do all users home drives that already exist. If anyone knows of a good tool that would be great.

I want to apply the following permissions to the %username% folder

SYSTEM - Full control
local\Users special list and read attributes
local\administrators - Full control
%username% = modify

Thanks

I wish to populate the local machine description (overwrite if already present) with the Model of the computer. Is there some sort of script that can perform this task for me? I have found a site that has some code but they dont have a solution. i have very little knowledge of vb script. but if there is anyway of doing this that would be great.

Thanks

I found a powershell script that creates folders (if they dont exist) and adds appropriate permissions. Below is the PS1 file (created by someone else)

##################################################################################
#
#
#  Script name: SetFolderPermission.ps1
#  Author:      [email protected]
#  Homepage:    www.powershell.nu
#
#
##################################################################################

param ([string]$Path, [string]$Access, [string]$Permission = ("Modify"), [switch]$help)

function GetHelp() {

$HelpText = @"

DESCRIPTION:
NAME: SetFolderPermission.ps1
Sets FolderPermissions for User on a Folder.
Creates folder if not exist.

PARAMETERS: 
-Path           Folder to Create or Modify (Required)
-User           User who should have access (Required)
-Permission     Specify Permission for User, Default set to Modify (Optional)
-help           Prints the HelpFile (Optional)

SYNTAX:
./SetFolderPermission.ps1 -Path C:\Folder\NewFolder -Access Domain\UserName -Permission FullControl

Creates the folder C:\Folder\NewFolder if it doesn't exist.
Sets Full Control for Domain\UserName

./SetFolderPermission.ps1 -Path C:\Folder\NewFolder -Access Domain\UserName

Creates the folder C:\Folder\NewFolder if it doesn't exist.
Sets Modify (Default Value) for Domain\UserName

./SetFolderPermission.ps1 -help

Displays the help topic for the script

Below Are Available Values for -Permission

"@
$HelpText

[system.enum]::getnames([System.Security.AccessControl.FileSystemRights])

}

function CreateFolder ([string]$Path) {

    # Check if the folder Exists

    if (Test-Path $Path) {
        Write-Host "Folder: $Path Already Exists" -ForeGroundColor Yellow
    } else {
        Write-Host "Creating $Path" -Foregroundcolor Green
        New-Item -Path $Path -type directory | Out-Null
    }
}

function SetAcl ([string]$Path, [string]$Access, [string]$Permission) {

    # Get ACL on FOlder

    $GetACL = Get-Acl $Path

    # Set up AccessRule

    $Allinherit = [system.security.accesscontrol.InheritanceFlags]"ContainerInherit, ObjectInherit"
    $Allpropagation = [system.security.accesscontrol.PropagationFlags]"None"
    $AccessRule = New-Object system.security.AccessControl.FileSystemAccessRule($Access, $Permission, $AllInherit, $Allpropagation, "Allow")

    # Check if Access Already Exists

    if ($GetACL.Access | Where { $_.IdentityReference -eq $Access}) {

        Write-Host "Modifying Permissions For: $Access" -ForeGroundColor Yellow

        $AccessModification = New-Object system.security.AccessControl.AccessControlModification
        $AccessModification.value__ = 2
        $Modification = $False
        $GetACL.ModifyAccessRule($AccessModification, $AccessRule, [ref]$Modification) | Out-Null
    } else {

        Write-Host "Adding Permission: $Permission For: $Access"

        $GetACL.AddAccessRule($AccessRule)
    }

    Set-Acl -aclobject $GetACL -Path $Path

    Write-Host "Permission: $Permission Set For: $Access" -ForeGroundColor Green
}

if ($help) { GetHelp }

if ($Path -AND $Access -AND $Permission) { 
    CreateFolder $Path 
    SetAcl $Path $Access $Permission
}

To run this script I use this command. ./SetFolderPermission.ps1 -Path E:\TestFolder\UsernameX -Access Domain\UsernameX -Permission modify

How can I make it so that i can just use one command and call it to create the folders from a CSV file?

I have a user whose home drive has only that user in the permissions. No administrators, etc.

I have tried to take ownership as a local administrator however I cant seem to apply settings to the child objects -- it still gives me a permission denied error.

I know there are some handy CLI utils that can redo permissions. Any ideas? Or even a way to do it through Windows?

The file server is a 2008 R2 server.

I have a VHD file that was created by a citrix provisioning server. It is specific to a computer model. I was wanting to transfer the vhd onto the physical disk. Can anyone think of a way to do this? I then want to be able to boot off the physical hard disk like it was before I converted it to vdisk (vhd) It is a windows 7 vhd. Thanks

I am looking for a NAP solution for a network. Either an Appliance or software to run on a windows server. I have played with windows server 2008 r2 NAP but i dont think this is going to be a good solution. I want to basically force users that connect to the wired and wireless network to go through a self check process that will check for AV, firewall, windows updates etc.

Also something that transfer users to a remediation network to be able to conform to the Access Policy.

any suggestions from anyone that has a solution in place?

thanks

We have a print server running Windows Server 2008. Clients that use Windows XP with a logon script to map have no problems printing. When I test printing to a network printer on a Windows 7 machine, it works fine up to a few machines. As soon as I get 12-15 workstations trying to print, when they log in, they get the yellow exclamation mark and need troubleshooting against the printer name. It is being deployed by group policy. I have tried to deploy it by group policy, group policy preferences, and using a script and I get the same error whatever I try. Does anyone have any suggestions to try and troubleshoot? Once again, Windows XP clients have no issues printing at all. It is only with Windows 7 clients. Thanks

EDIT

I have found that the spooler is not starting because you can't add the printer manually either.

I have created an image using this guide http://support.citrix.com/article/CTX119877. However this only works for virtual and the model that I made the image on how can i extend compatibility to another device? I am just using it for a vdisk that I can then also use as a virtual device but I wasnt the vdisk to be available over multiple devices. Using Win 7 on the client.

Thanks

I have found a way to load exchange 2010 powershell into powershell running on a windows xp workstation, however there are a few commands that need to run. I was wondering how I could load them into a profile somehow. These are the commands that I need to run before I can do any of the exchange things such as Get-Mailbox.

COMMAND 1 $session = New-PSSession -Configurationname Microsoft.Exchange –ConnectionUri http://servername/powershell -Credential $user

(it prompts you for a username and p/word then the next command)

COMMAND 2 Import-PSSession $session

Then I am able to run exchange 2010 commands such as Get-Mailbox. Anyway I can load these so that when I click on the powershell shortcut they preload the importing of exchange commands.

Thanks

We have recently replaced all of our 2003 server domain controllers to 2008 r2 and have tried to implement PSO's but have found that the domain functional level must be raised to 2008. We have a mac server in our environment that runs open directory and it is integrated into AD. Does anyone know if I do raise the domain functional level (which makes sense since we only have 2008 r2 domain controllers) what the repercussions (if any) there will be on the macs in the environment? Macs are running 10.6.2 and mac server runs the same. Mac server is running OD and also bound to AD.

I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates. The computers are getting the certificate and when a user logs into the device (that has previously logged in) gets put on the correct VLAN (according to there user access). However I cant get the computers to join the wireless network prior to logging in, so that they can log in with their domain accounts and authenticate through the wireless. The basic setup is Computer gets group policy which tells it to get a certificate the computer then has a seperate vlan to join just as a computer account however the wireless computer wont connect through that vlan. (this vlan allows login information only then once the users credentials are verified it puts them onto another VLAN).

So I am trying to work out why the notebook wont auto connect to the wireless network as a computer.

Thanks

forgot to mention Win 7 ent client.

EDIT: I got this to work however I am having the issue that if someone who doesnt have the certificate eg an iphone get prompted whether they want to accept the certificate once you select accept it lets you join the network. I have tried to make it that your device has to be part of a certain group however when this happens, even a valid computer that is in the correct group cannot join. Has anybody else experienced this?

I currently have a WSUS 3.0 sp2 in the environment. I have just installed SCCM r2 sp2 and want it to use the existing wsus server. Is this an option if so doesn anyone know how this is done. I have look in the site settings but it doesnt allow you to choose your wsus server. Am I missing something simple?

Thanks

I have just installed SCCM 2007 R2 and when I went to deploy an OS i found that there is a problem with the boot.wim...There isnt one in the osd\ folder on the SCCM server. I then tried to use other WIM files and they all failed with "Error: Errors You can not import this boot image. Only finalized boot images are supported" I even tried to recreate the wim with DISM and it still would not accept it. Any ideas.

I saw a question that was similar however the answer they got was in vbscript. (PowerShell/Command Prompt - Create folders from AD group members)

I need to create a series of folders based on the mambership of an AD group.

I would like a powershell script so that I can get the users out of an ad group then create the folders on the Fileserver. I will then like to put permissions on those folders (I believe this is using get-acl and set-acl).

If anyone has any good book titles for learning powershell could you let me know also please?

Recently we have moved our sharepoint 2007 db from sql 2000 server to 2008 x64 SQL server. All seems well, however there is a problem where the sql server stops running and the service has to be restarted. The errors mention insufficient internal memory etc. I have tried to start the db using -g384 which is the default in sql 2000 but 256 is default for 2008 I believe. This has not rectified the issue. I was advised that perhaps the issue may be rectified by upgrading to wss 3.0 sp2 however When I have tried to install this i get another error post sp2 update and have to refer back to a vm snapshot. The error after the service pack is Server error: http://go.microsoft.com/fwlink?LinkID=96177 So I guess I have a few questions How can I fix the first issue and the 2nd issue. I have checked out many forums and posts and have tried a few things and still get no joy. Any assistance would be great.

UPDATE I have fixed the Server error: http://go.microsoft.com/fwlink?LinkID=96177 the i needed to run the wss sp2 as well as the office servers sp2 then the config wizard then the moss configuration worked. The errors I am getting in SQL are

SQL Server was unable to run a new system task, either because there is insufficient memory or the number of configured sessions exceeds the maximum allowed in the server. Verify that the server has adequate memory. Use sp_configure with option 'user connections' to check the maximum number of user connections allowed. Use sys.dm_exec_sessions to check the current number of sessions, including user processes.

A read operation on a large object failed while sending data to the client. A common cause for this is if the application is running in READ UNCOMMITED isolation level. The connection will be terminated.

There is insufficient system memory in resource pool 'internal' to run this query.

These errors are by a user that was created as a service for sharepoint.

I have recently upgraded all our DC's from 2003 svr to 2008 r2 servers. I had a radius server in the existing environment for 8021x authentication.

I successfully exported the configuration to a text file and successfully imported it into 2008 r2 server after installing NPS server (using the netsh commands to export and import the configuration). The problem is that my radius configuration on the 2008 r2 server is blank. Non of the policies have copied across even though the import said it was successful. Any other ideas before I start to manually copy over all the policies and reconfigure the radius server?

Thanks

I have set up a KMS server on a 2003 server with the lastest update to KMS for windows 7 and 2008 R2 support. I have registered the win 7 enterprise kms key on the kms server. When the clients try to connect they come up with the following error Error: 0xc004f038 The software Licensing service reported that the computer could not be activated. The count reported by your key management service (KMS) is insufficient.

I know this error means that the KMS server has not reached 25 activations yet. But I have 38 devices that were imaged from a syspreped windows 7 enterprise.

I have tried to follow this link http://support.microsoft.com/kb/929829 But I have built my image from a sysprepped image so the CMIDS should be fine. The commands that they say to use in this KB dont show the CMIDS either.

Any Ideas how I cant activate these Machines? Or is it a matter of playing the waiting game.

Thanks

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this with webmin and would like to know how to set it up so that I can add other dynamic content on other sites.

I have tried everything to prevent users from accessing the C: on the network through group policy but they always find a way around it (students).

They cant right click to create shortcuts but they have the shortcuts on USB and are able to run the shortcuts to access the c:.

There isnt a specific group policy that prevents access to the C drive. Any thoughts?

Using windows xp clients with 2003 server for AD and GPolicy

I have a lab of notebook running vista they map to a h drive on a windows 2003 server r2. The users that have xp dont have this issue but the vista users home drives changed their structure on the windows 2003 server from X:\home\username to X:\home\Documents.

When you check the file permissions on the "documents" folder it has that users permissions and if you type X:\home\username you get the contents of the H drive however from a admin perspective having 30 users with X:\home\Documents its tough to find which one is for which user.

It all functions correctly (drives map etc) but it is just messy. Has anyone else had this problem?

Has anyone else experienced this?