Kravlin's questions

I'm trying to set up our websites to only allow access from users in certain AD groups using windows authentication but i can't seem to make it work. I've tried using IIS's authorization and restricting it to those groups only, but i don't have access from users that are in those groups. This seems like something that's supported, but I can't get it to work.

The pages are completely in .net as well, so i've tried specifying

<identity impersonate="true"/>
<authentication mode="Windows" />
<authorization>
  <allow users="Domain\ProgramUsers"/>
  <deny users="?"/>
</authorization>

in the web.config but then it allows people in who aren't part of the Program Users group, which doesn't make a lot of sense to me.

I'm trying to create a script to execute an exe on shutdown in order to install sp1. my script goes something like (not actual bat script).

If installed GOTO END
    Install.exe
END:

My problem is that when it runs, it starts the installer, then finishes the script because the installer's a different process and follows up by shutting down the install process because the computer's shutting down and shutting down the system (at least, that's what i think it's doing.)

Is there any way to tell it to wait until the process it started completes and then shutdown?

Where i work they use Group Policy to install Symantec Endpoint Protection. Lately they've been having me build a bunch of new systems they bought so that they can be sent out to the staff/replace old computers. These are the first set of 64-bit windows 7 computers we've tried to roll out so far.

our problem is this. Group Policy applies all of the settings and printers to the computers and when i run gpresult tells me that it's applied the computer based installs for SEP and Firefox but neither of them are installed. The controller is running windows server 2003 (32-bit).

I'm just a lowly undergrad IT and therefore have NO idea what could be going wrong. I didn't set up our Group Policy Objects and was just given access to them a couple weeks ago (it's virgin territory for me. I'm learning the ropes) The person who did set them up has since moved on, hopefully for greener pastures. Does anyone know another step to try/possible solution to my problem?

Edit: More information. It worked perfectly well before on other computers. Two weeks ago i setup a new computer for myself that had no problem with our group policy settings. It's just these computers.

Thanks