|
From: Munindra Das [MSFT] <munind@online.microsoft.com>
To:
none
Subject:
Re: Login Script Issue
Date:
09/25/2007 12:50:21
Have you specified the full path to the script?
--
This posting is provided "AS IS" with no
warranties, and confers no rights.
"Mr Man" wrote in message
news:1190639093.797463.48440@19g2000hsx.googlegroups.com...
> I'm experiencing issues with a Windows 2000
Terminal Server
> environment. When a client logs onto the terminal
server, their login
> script doesn't run. I can run the login scripts
manually , no
> problem??
>
> Any ideas
>
> Thanks
>
Top
From: Lanwench [MVP - Exchange]
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com>
To:
none
Subject:
Re: Lock down in a workgroup environment
Date:
09/24/2007 11:16:42
Scott wrote:
> Hi all,
> I am setting up Win2003 with terminal server with
no AD. How do I
> restrict the RDP clients from accessing the items
on the server that
> they shouldn't without restricting all users
(including
> Administrator), which is what happens when using
the GPO editor?
> I know that if I install AD I can configure a new
OU ?
> policy but I want to install it without AD as
recommended.
I'm not sure what that means. If you *have* AD already
on your network, it
would absolutely be recommended practice to join this
server to the
domain.....and then use group policy.
That said, if you don't currently use AD at all on
your network, check out
the thread entitled "Lockdown desktop without
Group Policy" begun by Pearl
on 9/7/07.
> I have used the limited options in the GPO snap
in (Computer
> configuration, Windows Components, Terminal
Services) but I would
> like to stop them accessing the C drive on the
server, task manager
> etc. I have also excluded access to the control
panel from the "Task
> Bar ?
> the only options without giving them a desktop?
> Scott
Top
From: notbanjo@gmail.com
To:
none
Subject:
Re: Local Resources - mapped client's drive has incorrect
computer
Date:
09/25/2007 11:11:03
Greetings all,
I have inhereted a system having the same problem with
one username
showing up for all the users on the TS (Same setup).
In the registry I
found keys with the Drive letters and the rouge
username under
hkey_classes_root > CLSID and under HKLM >CLSID,
I'm assuming it has something to do with the profile
configuations at
this point. I'm really hoping that there is a quick
and easy fix
Regards
Dillyn
Top
From: Kevin Powell <Kevin
Powell@discussions.microsoft.com>
To:
none
Subject:
Re: Local Resources - mapped client's drive has incorrect
computer
Date:
09/25/2007 14:56:09
I have an identical issue. In my case, an
administrator connected to the
terminal server using the RDP Client for Mac (not sure
which version).
Subsequently all terminal server sessions that opt to
connect local drives
have that user's Mac's computer name displayed within
their session (e.g. "C
on Applexxx" instead of "C on PCxxx").
I can see that global CLSID entries
are registered for client connections with the Mac
computer name tattooed
into the key description. (e.g. the CLSID
{xxxx-xxxx-xxx...} key has the
data "C on Applex", followed by the value
InfoTip with data "Disk from Remote
Desktop Connection"). Normally only CLSID entries
for client computer local
device connections are created and stored in the HKCU
hive.
We've not encountered this problem before, however I
believe this would be
the first time that an admin has connected using a
Mac. Is this a known
issue with the RDP Mac client?
Kevin Powell
"notbanjo@gmail.com" wrote:
> Greetings all,
>
> I have inhereted a system having the same problem
with one username
> showing up for all the users on the TS (Same
setup). In the registry I
> found keys with the Drive letters and the rouge
username under
> hkey_classes_root > CLSID and under HKLM
>CLSID,
>
> I'm assuming it has something to do with the
profile configuations at
> this point. I'm really hoping that there is a
quick and easy fix
>
> Regards
> Dillyn
>
>
Top
From: Vera Noest [MVP]
<vera.noest@remove-this.hem.utfors.se>
To:
none
Subject:
Re: Local Resources - mapped client's drive has incorrect
computer
Date:
09/25/2007 17:28:11
Not that I know of.
Please find out if the admin connected with the
current version of
the Mac RDC client (1.0.3) or if he used the beta
version of Mac
RDC 2.0.
If this is a problem which is introduced in Mac RDC
2.0, it is
important to report this as a bug:
https://connect.microsoft.com/macrdc
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email
___
=?Utf-8?B?S2V2aW4gUG93ZWxs?= Powell@discussions.microsoft.com>
wrote on 25
sep 2007 in
microsoft.public.windows.terminal_services:
> I have an identical issue. In my case, an
administrator
> connected to the terminal server using the RDP
Client for Mac
> (not sure which version). Subsequently all
terminal server
> sessions that opt to connect local drives have
that user's Mac's
> computer name displayed within their session
(e.g. "C on
> Applexxx" instead of "C on
PCxxx"). I can see that global CLSID
> entries are registered for client connections
with the Mac
> computer name tattooed into the key description.
(e.g. the
> CLSID {xxxx-xxxx-xxx...} key has the data "C
on Applex",
> followed by the value InfoTip with data
"Disk from Remote
> Desktop Connection"). Normally only CLSID
entries for client
> computer local device connections are created and
stored in the
> HKCU hive. We've not encountered this problem
before, however I
> believe this would be the first time that an
admin has connected
> using a Mac. Is this a known issue with the RDP
Mac client?
>
> Kevin Powell
>
> "notbanjo@gmail.com" wrote:
>
>> Greetings all,
>>
>> I have inhereted a system having the same
problem with one
>> username showing up for all the users on the
TS (Same setup).
>> In the registry I found keys with the Drive
letters and the
>> rouge username under hkey_classes_root >
CLSID and under HKLM
>> >CLSID,
>>
>> I'm assuming it has something to do with the
profile
>> configuations at this point. I'm really
hoping that there is a
>> quick and easy fix
>>
>> Regards
>> Dillyn
Top
From: Kevin Powell
<KevinPowell@discussions.microsoft.com>
To:
none
Subject:
Re: Local Resources - mapped client's drive has incorrect
computer
Date:
09/26/2007 11:22:05
It turns out the admin person did log in using the RDC
2 Beta client. Also
she did not log in using her admin account but with a
standard domain user
account. I will report this as a bug to the Beta
program.
Kevin
"Vera Noest [MVP]" wrote:
> Not that I know of.
> Please find out if the admin connected with the
current version of
> the Mac RDC client (1.0.3) or if he used the beta
version of Mac
> RDC 2.0.
> If this is a problem which is introduced in Mac
RDC 2.0, it is
> important to report this as a bug:
>
> https://connect.microsoft.com/macrdc
>
>
_________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private
email ___
>
> =?Utf-8?B?S2V2aW4gUG93ZWxs?= >
Powell@discussions.microsoft.com> wrote on 25 sep 2007 in
> microsoft.public.windows.terminal_services:
>
> > I have an identical issue. In my case, an
administrator
> > connected to the terminal server using the
RDP Client for Mac
> > (not sure which version). Subsequently all
terminal server
> > sessions that opt to connect local drives
have that user's Mac's
> > computer name displayed within their session
(e.g. "C on
> > Applexxx" instead of "C on
PCxxx"). I can see that global CLSID
> > entries are registered for client
connections with the Mac
> > computer name tattooed into the key
description. (e.g. the
> > CLSID {xxxx-xxxx-xxx...} key has the data
"C on Applex",
> > followed by the value InfoTip with data
"Disk from Remote
> > Desktop Connection"). Normally only
CLSID entries for client
> > computer local device connections are
created and stored in the
> > HKCU hive. We've not encountered this
problem before, however I
> > believe this would be the first time that an
admin has connected
> > using a Mac. Is this a known issue with the
RDP Mac client?
> >
> > Kevin Powell
> >
> > "notbanjo@gmail.com" wrote:
> >
> >> Greetings all,
> >>
> >> I have inhereted a system having the
same problem with one
> >> username showing up for all the users on
the TS (Same setup).
> >> In the registry I found keys with the
Drive letters and the
> >> rouge username under hkey_classes_root
> CLSID and under HKLM
> >> >CLSID,
> >>
> >> I'm assuming it has something to do with
the profile
> >> configuations at this point. I'm really
hoping that there is a
> >> quick and easy fix
> >>
> >> Regards
> >> Dillyn
>
Top
From: Vera Noest [MVP]
<vera.noest@remove-this.hem.utfors.se>
To:
none
Subject:
Re: Local Resources - mapped client's drive has incorrect
computer
Date:
09/26/2007 16:14:03
OK, thanks for the feedback here, and for reporting
the bug, Kevin!
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email
___
=?Utf-8?B?S2V2aW4gUG93ZWxs?=
wrote on 26 sep 2007
in
microsoft.public.windows.terminal_services:
> It turns out the admin person did log in using
the RDC 2 Beta
> client. Also she did not log in using her admin
account but
> with a standard domain user account. I will
report this as a
> bug to the Beta program.
>
> Kevin
>
> "Vera Noest [MVP]" wrote:
>
>> Not that I know of.
>> Please find out if the admin connected with
the current version
>> of the Mac RDC client (1.0.3) or if he used
the beta version of
>> Mac RDC 2.0.
>> If this is a problem which is introduced in
Mac RDC 2.0, it is
>> important to report this as a bug:
>>
>> https://connect.microsoft.com/macrdc
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by
private email ___
>>
>> =?Utf-8?B?S2V2aW4gUG93ZWxs?= >> Powell@discussions.microsoft.com>
wrote on 25
sep 2007 in
>> microsoft.public.windows.terminal_services:
>>
>> > I have an identical issue. In my case,
an administrator
>> > connected to the terminal server using
the RDP Client for Mac
>> > (not sure which version). Subsequently
all terminal server
>> > sessions that opt to connect local
drives have that user's
>> > Mac's computer name displayed within
their session (e.g. "C
>> > on Applexxx" instead of "C on
PCxxx"). I can see that global
>> > CLSID entries are registered for client
connections with the
>> > Mac computer name tattooed into the key
description. (e.g.
>> > the CLSID {xxxx-xxxx-xxx...} key has the
data "C on Applex",
>> > followed by the value InfoTip with data
"Disk from Remote
>> > Desktop Connection"). Normally only
CLSID entries for client
>> > computer local device connections are
created and stored in
>> > the HKCU hive. We've not encountered
this problem before,
>> > however I believe this would be the
first time that an admin
>> > has connected using a Mac. Is this a
known issue with the
>> > RDP Mac client?
>> >
>> > Kevin Powell
>> >
>> > "notbanjo@gmail.com" wrote:
>> >
>> >> Greetings all,
>> >>
>> >> I have inhereted a system having the
same problem with one
>> >> username showing up for all the
users on the TS (Same
>> >> setup). In the registry I found keys
with the Drive letters
>> >> and the rouge username under
hkey_classes_root > CLSID and
>> >> under HKLM
>> >> >CLSID,
>> >>
>> >> I'm assuming it has something to do
with the profile
>> >> configuations at this point. I'm
really hoping that there is
>> >> a quick and easy fix
>> >>
>> >> Regards
>> >> Dillyn
Top
From: Munindra Das [MSFT]
<munind@online.microsoft.com>
To:
none
Subject:
Re: loading usb Device driver on Win CE 5.0
Date:
09/29/2007 17:20:14
You can share out the driver files in a shared folder
that can the client
can access. When client is asked to install driver, it
can point to that
share.
--
This posting is provided "AS IS" with no
warranties, and confers no rights.
"KSHData" wrote in message
news:1BFC45D9-F298-4F14-87A1-EE51E460C6BC@microsoft.com...
> Iam currently working on connecting a printer to
a terminal using Win CE
> 5.0
>
> When i connect the printer Win CE 5.0 ask for the
drivers, my problem is
> this
>
> How do i tell Win CE 5.0 where to find them?
> The drivers are currently on the server Lets call
it "server1", if someone
> could help me out here i would be Thankfull
>
> Sorry for my bad English
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: Last User Displayed.
Date:
09/21/2007 13:33:51
Hi Don,
Configure your Terminal Servers so that they always
prompt
for the username/password. Open up Terminal Services
Configuration (tscc.msc), double-click RDP-Tcp. On the
Logon Settings tab, choose "Always use the
following logon
information" and check "Always prompt for
password".
Leave the User name field blank and enter your domain
name
in the Domain field.
Thanks.
-TP
Don Jones wrote:
> Is there a way to disable the display of the last
user that logged in
> via Remote Desktop Client? We have the console
set to Do not display
> last user name, but would like to do the the same
with the remote
> desktop.
>
> Don Jones
Top
From: Patrick Rouse
<PatrickRouse@discussions.microsoft.com>
To:
none
Subject:
Re: Last User Displayed.
Date:
09/23/2007 13:24:04
On each client, this information is cached in the
hidden "default.rdp" file.
--
Patrick C. Rouse
Microsoft MVP - Terminal Server
Provision Networks VIP
Citrix Technology Professional
President - Session Computing Solutions, LLC
http://www.sessioncomputing.com
"TP" wrote:
> Hi Don,
>
> Configure your Terminal Servers so that they
always prompt
> for the username/password. Open up Terminal
Services
> Configuration (tscc.msc), double-click RDP-Tcp.
On the
> Logon Settings tab, choose "Always use the
following logon
> information" and check "Always prompt
for password".
>
> Leave the User name field blank and enter your
domain name
> in the Domain field.
>
> Thanks.
>
> -TP
>
> Don Jones wrote:
> > Is there a way to disable the display of the
last user that logged in
> > via Remote Desktop Client? We have the
console set to Do not display
> > last user name, but would like to do the the
same with the remote
> > desktop.
> >
> > Don Jones
>
Top
From: Munindra Das [MSFT]
<munind@online.microsoft.com>
To:
none
Subject:
Re: Is softgrid VAS servers supported on VMWare
Date:
09/27/2007 13:12:00
It might help to post it to the VMWare newsgroup
(http://communities.vmware.com/index.jspa).
--
This posting is provided "AS IS" with no
warranties, and confers no rights.
"murras68" wrote in message
news:1190748685.643394.200070@22g2000hsm.googlegroups.com...
> Does anyone know if the Softgrid Virtual
Application Servers are
> supported on VMWare or has implemented this
before.
>
> Thanks
>
> M.
>
Top
From: Eric Johnson <Eric
Johnson@discussions.microsoft.com>
To:
none
Subject:
RE: Is softgrid VAS servers supported on VMWare
Date:
09/30/2007 21:24:01
I don't know if it is supported, but I've run a
virtual application server on
VMWare ESX server, VMWare Workstation, and also
Virtual PC. They all seem to
perform quite well, and I've never run into any issues
on any of the
virtualization platforms.
Hope that helps
Eric
"murras68" wrote:
> Does anyone know if the Softgrid Virtual
Application Servers are
> supported on VMWare or has implemented this
before.
>
> Thanks
>
> M.
>
>
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: Installing flash from Adobe?
Date:
09/29/2007 11:59:46
Hi,
I have seen cases in the past where the registry
permissions
are set wrong and thus prevent flash from installing
and/or
working correctly. If I remember correctly it usually
is a
handful of flash-related keys under HKCR.
I usually just check through the entries by hand using
regedit
but if you are unsure of which keys to check it would
be
easier to use Process Monitor to direct you. Run the
flash
install with PM running and then look for errors that
occurred
with keys under HKCR.
Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx
-TP
Leythos wrote:
> Anyone having problems installing Flash from
Adobe on their 2003
> Terminal Servers?
>
> I can download it, it shows that it's installed,
but it doesn't work
> (IE 6) and using the ADD PROGRAMS method or just
a install from the
> console doesn't change anything.
>
> TIA.
Top
From: Leythos <void@nowhere.lan>
To:
none
Subject:
Re: Installing flash from Adobe?
Date:
09/29/2007 14:07:14
In article ,
tperson.knowspamn@mailandnews.com says...
> I have seen cases in the past where the registry
permissions
> are set wrong and thus prevent flash from
installing and/or
> working correctly. If I remember correctly it
usually is a
> handful of flash-related keys under HKCR.
I tried about 100000 things and finally found a
Active-X installer on
Adobe's site. Strange thing is that it doesn't work
with the local admin
account logon, but all Remote connections now have
Flash :)
--
Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented
worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email
address)
Top
From: Munindra Das [MSFT]
<munind@online.microsoft.com>
To:
none
Subject:
Re: install on terminal server a printer that is locally
connected to a wyse terminal
Date:
09/22/2007 01:57:31
Can you please provide a little more specific
explanation of what you are
trying to achieve? How is this different from normal
TS printer redirection?
--
This posting is provided "AS IS" with no
warranties, and confers no rights.
"tree leafs" wrote in message
news:%236l8siy%23HHA.980@TK2MSFTNGP06.phx.gbl...
> Hi,
> I need to install a printer that is locally
connected to a wyse terminal
> on to the terminal server so that other wyse
terminals can print from
> there. This is different from the print queue
re-direction on the terminal
> client.
>
> Just wonder if there is anybody has done that
could privide some guides of
> how to do that.
>
> Thanks in advance
>
Top
From: Jeff Pitsch <Jeff@Jeffpitschconsulting.com>
To:
none
Subject:
Re: idle timeout on terminal sessions
Date:
09/26/2007 12:23:21
Timeouts can be set in user account properties, the
server and group policy.
Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP
Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com
Rob wrote:
> hi all, I've set the idle session on each of my
servers to 1 day, but users
> still timeout after about 15 mins on idle, with a
2min warning - where else
> can i look to see why this is occuring? - i made
the change in the session
> tab on the terminal servers themselves....
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: HP3390 network printer is not listed in the printer list
Date:
09/29/2007 11:47:09
Hi,
Is this printer installed on the client's local
machine?
If yes please make sure that the user is running the
version of
the Remote Desktop Client that came with your 2003
server.
The install for it is located on your server's hard
drive here:
C:\WINDOWS\system32\clients\tsclient\win32\msrdpcli.msi
Thank you.
-TP
ervo wrote:
> Hi,
>
> We have a problem.
> we have on a remote lan a network printer HP3390
connected with tcp
> port. when the client connect to our terminal
server in the main
> office the printer is not listed/ available. in
the main office we
> have same printer , also tcp port and is working
fine. the driver is
> so installed on the TS .
>
> tx for your help
Top
From: Jeff Pitsch
<Jeff@Jeffpitschconsulting.com>
To:
none
Subject:
Re: How to prevent computer settings from applying to
Administratorswhen using loopback policy?
Date:
09/25/2007 10:01:24
Computer policies apply to computers not users.
Filtering based on
users is pointless since it applies to computers.
Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP
Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com
J. Jensen wrote:
> Hi
>
> I'm having some trouble with the admin account on
Windows 2003 TS.
> I don't want it to use an TS roaming profile, but
don't know how to avoid
> it, as it is set in Computer settings and
therefore affecting all users.
> Any ideas what to do?
>
>
> Scenario:
>
> 2 terminal servers (none of them are DC's).
> They are in their own OU "Terminal
servers", and there are no other objects
> in here.
>
> There's ~10 GPO's linked to the "Terminal
Servers" OU.
> Two of them are affecting Computer Settings, and
the rest are User settings.
>
> Computer policy #1: Name = Loopback policy:
> Only setting changed here is Loopback enabled,
replace mode.
> Scope -> Security Filtering: Only the two TS
computer objects + the security
> group containing the TS users added here.
> Administrators are not member of this security
group.
>
> Computer policy #2: Name = TS users profile path
> THE PROBLEMS
> Computer settings:
> I have changed TS users profile path at
> Local Computer Policy/Computer
Configuration/Administrative
> Templates/Windows Components/Terminal Services
> Scope -> Security Filtering: Only the two TS
computer objects + the security
> group containing the TS users added here.
> Administrators are not member of this security
group.
>
> User settings, policy #3 -> #10:
> These are working perfectly.
> I have put deny on all Domain Admins "apply
group policy", so the Admins
> aren't affected by these.
> Scope -> Security Filtering: Only the two TS
computer objects + the security
> group containing the TS users added here.
> Administrators are not member of this security
group.
>
> Regards
>
> J. Jensen
>
>
Top
From: J. Jensen <news@sangria.dk>
To:
none
Subject:
Re: How to prevent computer settings from applying to
Administrators when using loopback policy?
Date:
09/26/2007 07:58:18
Hi
"Jeff Pitsch" skrev i en meddelelse
news:u%23NfxT4$HHA.4476@TK2MSFTNGP06.phx.gbl...
> Computer policies apply to computers not users.
Filtering based on users
> is pointless since it applies to computers.
>
Yes I'm aware of this.
What do other admins do?
This must be a common issue when defining "TS
users profile path " through
GPO.
I could of course set this individually on all users
in AD but I would
prefer not to...
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> J. Jensen wrote:
>> Hi
>>
>> I'm having some trouble with the admin
account on Windows 2003 TS.
>> I don't want it to use an TS roaming profile,
but don't know how to avoid
>> it, as it is set in Computer settings and
therefore affecting all users.
>> Any ideas what to do?
>>
>>
>> Scenario:
>>
>> 2 terminal servers (none of them are DC's).
>> They are in their own OU "Terminal
servers", and there are no other
>> objects in here.
>>
>> There's ~10 GPO's linked to the
"Terminal Servers" OU.
>> Two of them are affecting Computer Settings,
and the rest are User
>> settings.
>>
>> Computer policy #1: Name = Loopback policy:
>> Only setting changed here is Loopback
enabled, replace mode.
>> Scope -> Security Filtering: Only the two
TS computer objects + the
>> security group containing the TS users added
here.
>> Administrators are not member of this
security group.
>>
>> Computer policy #2: Name = TS users profile
path >> CAUSING THE PROBLEMS
>> Computer settings:
>> I have changed TS users profile path at
>> Local Computer Policy/Computer
Configuration/Administrative
>> Templates/Windows Components/Terminal
Services
>> Scope -> Security Filtering: Only the two
TS computer objects + the
>> security group containing the TS users added
here.
>> Administrators are not member of this
security group.
>>
>> User settings, policy #3 -> #10:
>> These are working perfectly.
>> I have put deny on all Domain Admins
"apply group policy", so the Admins
>> aren't affected by these.
>> Scope -> Security Filtering: Only the two
TS computer objects + the
>> security group containing the TS users added
here.
>> Administrators are not member of this
security group.
>>
>> Regards
>>
>> J. Jensen
Top
From: Jeff Pitsch
<Jeff@Jeffpitschconsulting.com>
To:
none
Subject:
Re: How to prevent computer settings from applying to
Administratorswhen using loopback policy?
Date:
09/26/2007 09:04:17
It's a trade-off of convenience. I guess I don't
really see a problem
though since administrators would want their settings
following them too.
Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP
Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com
J. Jensen wrote:
> Hi
>
>
> "Jeff Pitsch" skrev i en meddelelse
> news:u%23NfxT4$HHA.4476@TK2MSFTNGP06.phx.gbl...
>> Computer policies apply to computers not
users. Filtering based on users
>> is pointless since it applies to computers.
>>
> Yes I'm aware of this.
> What do other admins do?
> This must be a common issue when defining
"TS users profile path " through
> GPO.
> I could of course set this individually on all
users in AD but I would
> prefer not to...
>
>
>
>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Server
>> Citrix Technology Professional
>> Provision Networks VIP
>>
>> Forums not enough?
>> Get support from the experts at your business
>> http://jeffpitschconsulting.com
>>
>> J. Jensen wrote:
>>> Hi
>>>
>>> I'm having some trouble with the admin
account on Windows 2003 TS.
>>> I don't want it to use an TS roaming
profile, but don't know how to avoid
>>> it, as it is set in Computer settings and
therefore affecting all users.
>>> Any ideas what to do?
>>>
>>>
>>> Scenario:
>>>
>>> 2 terminal servers (none of them are
DC's).
>>> They are in their own OU "Terminal
servers", and there are no other
>>> objects in here.
>>>
>>> There's ~10 GPO's linked to the
"Terminal Servers" OU.
>>> Two of them are affecting Computer
Settings, and the rest are User
>>> settings.
>>>
>>> Computer policy #1: Name = Loopback
policy:
>>> Only setting changed here is Loopback
enabled, replace mode.
>>> Scope -> Security Filtering: Only the
two TS computer objects + the
>>> security group containing the TS users
added here.
>>> Administrators are not member of this
security group.
>>>
>>> Computer policy #2: Name = TS users
profile path >>> CAUSING THE PROBLEMS
>>> Computer settings:
>>> I have changed TS users profile path at
>>> Local Computer Policy/Computer
Configuration/Administrative
>>> Templates/Windows Components/Terminal
Services
>>> Scope -> Security Filtering: Only the
two TS computer objects + the
>>> security group containing the TS users
added here.
>>> Administrators are not member of this
security group.
>>>
>>> User settings, policy #3 -> #10:
>>> These are working perfectly.
>>> I have put deny on all Domain Admins
"apply group policy", so the Admins
>>> aren't affected by these.
>>> Scope -> Security Filtering: Only the
two TS computer objects + the
>>> security group containing the TS users
added here.
>>> Administrators are not member of this
security group.
>>>
>>> Regards
>>>
>>> J. Jensen
>
>
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: How to find RDP client IP Address
Date:
09/21/2007 09:56:11
Hi,
Click on the RDP-Tcp# session in the left hand pane,
then click
the Information tab on the right. The client's *local*
ip address
will be shown. If you want the client's *real* ip
address
(which may be the same as the local), view your
security audit log.
Thanks.
-TP
Jerry Alan Braga wrote:
> we are running thinclient pc against a win2k3
terminal server. One
> of the machines seems to be having a network
problem. I would like
> to run some network ping tests and others to it
but I cannot get the
> ip address from the TS manager. All I have is the
RDP# sessionid and
> the username. The client name is all the same for
that remote
> location since we use a duplicated CD for all the
PC's in that
> location. How can I find the ip address working
backward from teh
> RDP#sessionid ?
Top
From: Jerry Alan Braga <jerry.braga@hotmail.com>
To:
none
Subject:
Re: How to find RDP client IP Address
Date:
09/21/2007 11:50:07
thanks for that
"TP" wrote in message
news:eEMzQ9F$HHA.700@TK2MSFTNGP05.phx.gbl...
> Hi,
>
> Click on the RDP-Tcp# session in the left hand
pane, then click the
> Information tab on the right. The client's
*local* ip address will be
> shown. If you want the client's *real* ip address
(which may be the same
> as the local), view your security audit log.
>
> Thanks.
>
> -TP
>
> Jerry Alan Braga wrote:
>> we are running thinclient pc against a win2k3
terminal server. One
>> of the machines seems to be having a network
problem. I would like
>> to run some network ping tests and others to
it but I cannot get the
>> ip address from the TS manager. All I have is
the RDP# sessionid and
>> the username. The client name is all the same
for that remote
>> location since we use a duplicated CD for all
the PC's in that
>> location. How can I find the ip address
working backward from teh
>> RDP#sessionid ?
Top
From: Munindra Das [MSFT]
<munind@online.microsoft.com>
To:
none
Subject:
Re: How to disable right click on server desktop
Date:
09/20/2007 12:53:06
There is no direct way (GP, TS settings, etc) to do
that. You can set the
permission on the desktop folders for the users such
that they have only
read permission. That way they cannot add anything to
it. You can also deny
read permission on specific folders.
--
This posting is provided "AS IS" with no
warranties, and confers no rights.
"Davey" wrote in message
news:2AA6384A-90F3-4C5D-B7F7-014831FF2848@microsoft.com...
>I want to disable on my W2003 terminal servers the
users ability to right
> click on the desktop and select New- Shortcut and
access things I don't
> want
> them to
>
> Does anyone know how to do this
>
> I don't want to disable all right click
funtionality
>
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: How to disable right click on server desktop
Date:
09/21/2007 10:43:22
Hi,
The command for New-->Shortcut is stored here in
the registry:
HKCR\.lnk\ShellNew
Below is one technique you can use:
1. Create a file using Notepad with the following
contents:
>>> Begin file contents below this line
@echo off
del %1
exit
>>> End file contents above this line
2. Save it in C:\WINDOWS\system32 as dellnk.cmd
3. Right-click on your desktop and choose
New-->Shortcut,
enter dellnk.cmd, click Next, click Finish.
4. Right-click on the new shortcut and choose
Properties.
Change the Run setting to Minimized and then click OK.
5. *Copy* the new shortcut to the C:\WINDOWS\system32
folder
6. Open up regedit and navigate to the following key:
HKCR\.lnk\ShellNew
7. Right-click on the Command REG_SZ value and choose
Rename. Change the name to Command.backup
8. Right-click on the right-hand pane and choose
New-->String
Value, enter Command for the name
9. Double-click the new Command value you just created
and enter the following:
dellnk.cmd.lnk "%1"
10. Click OK to save your changes. Test by
right-clicking on
your desktop and choosing New-->Shortcut. If it is
working
properly a New Shortcut file should appear momentarily
but
quickly disappear.
11. If you want to restore the default shortcut
behavior you can
restore the original value that you saved as
Command.backup
If you want to disable shortcuts *only* for non-admins
then you
could use a logon script or similar to create the
above registry
entry in each non-admin user's HKCU\Software\Classes
*instead* of modifying HKCR.
-TP
Davey wrote:
> I want to disable on my W2003 terminal servers
the users ability to
> right click on the desktop and select New-
Shortcut and access things
> I don't want them to
>
> Does anyone know how to do this
>
> I don't want to disable all right click
funtionality
Top
From: Jeff Pitsch
<Jeff@Jeffpitschconsulting.com>
To:
none
Subject:
Re: How to change Office 2007 settings for all users on
TerminalServe
Date:
09/26/2007 12:19:28
What sort of changes are you looking to make? There
are ADM's available
so settings can be changed through GPO.
Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP
Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com
PeterHS wrote:
> L.s,
>
> I'm using Office 2007 on Terminal Server 2007
with 13 users. I'm looking for
> a way to change the settings for all the users.
>
> I found out how to make a MSP file with OCT and
that this can be used for
> chancing settings after installation. But how do
i run this file, and will it
> make changes for all users on the TS?
>
> A don't want to make the changes with GPO for
Office 2007, because a want
> defaults, which can be changed by the users.
>
>
> And i'am to lazy to make the changes for each
user/program/option by hand.
>
>
> Many thanks
>
Top
From: PeterHS
<PeterHS@discussions.microsoft.com>
To:
none
Subject:
Re: How to change Office 2007 settings for all users on
Terminal S
Date:
09/27/2007 09:12:00
Thanks for your respons,
All sort of changes witch also can be made in the
option menu's. By exampel
a like to set the time for the warning messages (new
mail) in outlook for 30
seconds, in Word set standard safe in .docx, set the
categories in outlook,
set standard "print styles" (afdrukstijlen)
and so on.
When i understand corectly, when i do this with GPO
users can't make
chanches and that is not what i want. I want to make
defaults wich can be
changed by the user.
Peter Willems
"Jeff Pitsch" wrote:
> What sort of changes are you looking to make?
There are ADM's available
> so settings can be changed through GPO.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> PeterHS wrote:
> > L.s,
> >
> > I'm using Office 2007 on Terminal Server
2007 with 13 users. I'm looking for
> > a way to change the settings for all the
users.
> >
> > I found out how to make a MSP file with OCT
and that this can be used for
> > chancing settings after installation. But
how do i run this file, and will it
> > make changes for all users on the TS?
> >
> > A don't want to make the changes with GPO
for Office 2007, because a want
> > defaults, which can be changed by the users.
> >
> >
> > And i'am to lazy to make the changes for
each user/program/option by hand.
> >
> >
> > Many thanks
> >
>
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: How do you install the Socket Forwarding Component?
Date:
09/25/2007 14:29:53
Hi,
Did it prompt you to install the Activex component
when you
browsed to the web page? You need local administrator
rights on your workstation for the install.
Please reference the Intelligent Application Gateway
User
Guide starting at page 150 for more information:
http://download.microsoft.com/download/2/f/9/2f9d9113-b84b-4838-98a0-a3aefa6608e2/iag_userguide.pdf
Thanks.
-TP
Bigdaddymaxx wrote:
> I'm trying to use Whale SSL VPN to remote into my
workstation at work
> and I keep getting this error:
>
> Application "Web Terminal Services"
cannot be launched since it
> requires that the Socket Forwarding Component is
installed on your
> computer.
> Please contact your system administrator for more
information.
>
> Any help at all would be greatly appreciated!
Top
From: TP
<tperson.knowspamn@mailandnews.com>
To:
none
Subject:
Re: How can I add a SPC to IE 6.0 so that all users get the
cert
Date:
09/28/2007 16:21:26
Hi,
Logon to your TS as an administrator, open up the
Local Computer
account's store using the Certificates mmc snapin, and
then import
your SPC into the Trusted Publishers store.
-TP
Saqib Ali wrote:
> How can I add a Software Publishing Cert to IE so
that all the users
> logging on to the server get the certificate in
their Trusted
> Publishers container?
>
> Thanks
> saqib
> http://security-basics.blogspot.com/
Top
From: Meinolf Weber
<meiweb(nospam)@gmx.de>
To:
none
Subject:
Re: hiding processes tab on task manager
Date:
09/27/2007 02:54:26
Hello tnt,
See your other posting.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS"
with no warranties, and confers
no rights.
> Guys,
>
> Is there anyways I can hide this using the local
GPO.
>
> Thanks,
> Tnt
Top
Post your
questions, comments, feedbacks and suggestions
|
