Hi, time for the daily rant.
Why oh why can't something that should be a "virus scanner" just do exactly *that*, and not "break everything else on this machine, just to make it fully secure!"? Have a nice network with Win7 clients and a Server 2008 as AD DC. All works. $Supplier recommends to use F-Secure whateveritiscalled for antivirus, so $customer buys that. $Supplier sets up F-Secure Damagement Console on the Server (OK) and rolls out clients to the PCs (so far, ok). Then all hell breaks loose. Built-in firewall breaks logon to the DC, even though "all outgoing connections are permitted!" is checked in the firewall rules. Built-in "Browser Protection" completely breaks all browsers, and while at it, the local Gimp installation. But only for some of the users (all machines are identical and so are the user profiles). Two of the machines don't even *start* anymore. *sigh* But indeed, the chance that a virus can be introduced into this network now is pretty low. So "mission accomplished", no? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de