Replies

There are ADMX templates for IE and Chrome, but not specifically for Firefox unless you use a special version of that browser.

You could implement a GPO for IE and Chrome then block Firefox by software restrictions, but you also have the problem of other browsers or portable (non installed versions).

You could also try pushing an update to the hosts file to each client, but I’m not sure that would work due to the protected file permissions.

The correct way to control internet access is at the perimeter as Paul suggests.

Bear in mind that very soon, if not already, it will not be possible to obtain an SSL cert for a .local domain name. That may or may not be an issue now, but if it becomes one in the future you might encounter lots of trouble trying to rename your domain.

Microsoft guidance in the subject is vague and contradictory. In the past, I have always implemented .local, but just now am planning migration to a new domain in the the office and seriously considering implementing that as a FQDN.

Updating DNS with an A record for the public website is a very quick fix to overcome the access for client PC’s.

Here’s a couple of discussions over at Spiceworks:

http://community.spiceworks.com/topic/347097-creating-a-new-domain-use-local

http://community.spiceworks.com/topic/279196-impact-of-no-more-local-ssl-certs-following-nov-1-2015

All BIOS developments are proprietary – at least I’ve not come across any that are in the public domain, except on grey hat or black hat websites.

It could be that the previous business owner had a relationship with the PC manufacturer to deploy a locked BIOS. In most cases this would be simply through a BIOS Password, but you say there isn’t one. So we return to trying to understand what BIOS you have and need the make and model of PC and motherboard plus the BIOS version.

Altering the functionality of a BIOS (as opposed to adjusting the configured settings) other than through flashing an upgrade, is a highly specialised job. It’s much closer to the domain of cracking than administration and maintenance.

OK rpiz, thanks for the additional details. I have to go to work soon, so don’t have much time.

The working PC’s are on a completely different subnet and use a different gateway to the problematic machine. I suspect this is getting us closer to the nub of the problem.

You may not know how to access the router configuration, but the data above indicates that the problematic machine is getting a DHCP address from a second router running a different DNS and DHCP server. So, can you describe the exact hardware arrangements as Sudo and Browni suggest: it will help us understand the routing arrangements of the 3 machines.

Some specific questions: where do the two routers connect to eachother, what ethernet ports are connected together on the routers and is there a separate modem, or does the Speedtouch router have a modem too?

Thanks rpiz, all the detail is necessary rather than a subset.

A couple of questions:

Are the DHCP lease times as typed?…is there a time as well as a date?…the expiry on the dhcp is the same day as the grant of IP address and that seems a bit short and I wonder if there’s a problem with IP address allocation.

I think you are saying that the output as typed is what you get when the affected machine can’t reach the internet? Can you confirm that is the case, or is it at a time when you do have internet access.

Can you also provide verbatim output from the other machines when the problematic machine does not have internet access?

Perhaps you have already explained earlier, but I can’t see any detail of your router setup? The IP addresses of the client PC, gateway and dhcp server are ok given the subnet mask, but they are a little unusual for a home network.

OK, so it seems you want to modify the features of your motherboard exposed by the BIOS. That’s a specialist job, one that very few people will be able to do I think.

Perhaps if you let us know your exact motherboard make and model, plus the existing firmware revision, somebody might be able to find a different version, or suggest a different site to use.

Rather than playing whack-a-mole by using the hosts file to try block adverts appearing in Firefox, try using Adblock Plus instead.

Also the Noscript plugin will help with javascript, but bear in mind that many sites do use javascript for genuine purposes and you could break something by blocking it.

There’s a lot of good advice in this thread, but I can’t see anywhere where we have established a baseline of what the OP’s network configuration is.

Is there an answer to Browni’s question posted here.

If you can post the full result for an ipconfig /all command taken from all workstations when the problem occurs it will help establish a lot of detail and perhaps some obvious things can be ruled out.

Winmail.dat attachments are often the result of an originator sending an html or rtf formatted email when the local email client is configured to receive plain text.

Rather than try decode the winmail.dat with a 3rd party tool, try get the originator to send in plain text, or change the email client to receive rtf or html email messages.

Before rebuilding the server, how about trying to restore it back to a time before the registry changes were made to overcome the problematic software. After restoring the registry try the GPO again. You’re not on a Domain with ADFS, so running a simple system restore might be effective enough?

You could even pull the registry from the local on disk backups using a boot disk if system restore is not available.

Many years ago BIOS chips used to be mounted in sockets and you could send the chip with the BIOS disk to somebody, but that’s not been the case for a long time.

You will almost certainly need to take the machine to a local PC shop to get BIOS flashed if you can’t do it at home.

Installing VirtualBox to run under Ubuntu is pretty straightforward. There should be no big problems and it will run exactly as if it is on a Windows host.

Turning to the question of XP: There may be a genuine Digital River download for XP, which will allow you to install into VirtualBox direct from the ISO, but realistically I think you are describing importing your existing XP installation.

You will need to take an image backup of the current installation and make sure it’s in a format that VirtualBox can import.

However, this process is problematic.

From technical perspective, the main problem with be with drivers. The OEM installation will quite likely BSOD with the current driver set if you successfully create an image and import into VirtualBox. In theory you could then use a boot disk to repair the installation, but if you are using a boot disk, you may as well use the correct installation media which will install a clean version into VirtualBox.

The next hurdle will be activation.

Microsoft’s new licensing conditions with the likes of Windows 8 is very clear that OEM installations are tied to the original hardware and are not allowed to be reused on other hardware. There were similar, but less clear cut clauses previously for XP and even now these may have been clarified.

So, if you get past the BSOD driver issue, your system will probably fail activation. It may be possible to tell a lie on the activation telephone hotline and reactivate on the Virtual Platform but I doubt anyone will be able to give you a guarantee that doing so will give you new lease of life on the licence.

In essence, yes you have a licence for XP, but it’s tied the the original hardware and, according to Microsoft, cannot be reused.

Backups come after you’ve set up your desktop, (Install the Classic Shell 4.0.4) to blow right past the Metro Screen to your desktop on bootup

Windows 8.1 can be configured to boot to the desktop without a 3rd party add-on.

as you’ll probably do almost everything on the desktop anyway.

That’s quite an assumption. Maybe the OP will stay in Metro, who knows?

So set up your desktop the way you want it and install all your Security (AV & AS) Software, Word Processor, and any other programs you can’t do without. Set your screen resolution, themes, text size, etc.
Then once you have it all the way you want it, make a backup to an external media,

Good advice, agreed.

]with one of the FREE backup programs

In my opinion backup programs are worth paying for. If the data is worth backing up it is important and has value. Skimping to save a few £ for backups is a false economy in my opinion.

And, watch out for all the Spyware and Trojans that come with most of them.

Whoa there! That’s a pretty big claim to make in a public forum. Care share your evidence with us?

Two ‘MUST-HAVE’ programs that I install as soon as I can after the Setup is done, are “Classic Shell” and “Grant Admin Full Control”. You really NEED more control over your files and folder than what MS is willing to give you.

Opinions will vary on the need for Classic Shell, but there is rarely a need for Grant Full Admin Control. The purpose of preventing access to certain files and locations is to prevent the kind of problems that might lead to needing a full image backup. If you don’t tinker and mess about with things, the default permissions in the latest Windows Operating Systems are perfectly adequate for most users. There may be a desire to have full control by some people, yes, but I question the statement “really NEED” applying to most people if only because it’s inherently dangerous to inexperienced users.

Sorry I’m a little late on picking this up. The symptoms you present are very confusing.

Windows will assign a new network name if it detects a new Ethernet connection. However when it does this you state you can access the Internet but not the router?….that’s very strange if the Internet is accessed through the router.

Wireless devices connecting via WIFi, but not getting to the Internet? At what point?….all the time or just when the wired network drop and reconnects?

All in, what you need is diagnostic information to unpick a very confusing situation.

Start by running ipconfig /all on the ethernet and wireless clients (assuming some are Windows devices) before and after the network drops. Also execute an nslookup {router_name} and nslookup {google.com} before and after.

These will start to give you some detailed information about what is happening on your network at the time the drops occur. Look for strange DNS and/or DHCP settings and configurations.

YankeeNat, welcome!

I’m afraid your question is a little obtuse.

It sounds like you have a new SharePoint site that you wish to redirect client PC’s in remote offices to use as their internet home pages? If so, just update the browser home page by Group Policy and force out over the network.

If you need to edit the SharePoint site, you could use the MS SharePoint Designer