kmount

If it's using RDP it will be passing %CLIENTNAME% over to the VDI Session. If it's using PCoIP (View) it could be passing over %ViewClient_MAC_Address% or %ViewClient_Machine_Name% For Citrix, I'm not sure off of the top of my head.

Are you accessing the VDI from thin clients (or such other fixed device)? If so, you may find that the client is passing over an environment variable such as %CLIENTNAME% (typically a mac address or end point device computer name) which in Terminal Services mode some of our customers have set their groups in Impero. (so in effect, the virtual desktop becomes less relevant, the grouping is done on the physical end point) Been a few years since I've done it but it could be a good place to start.

Sorry, I misread your first post where you said from DC2 you could see both. In AD Users and Computers on DC01 can you see DC02 here? Has sysvol replicated between them?

You installed the ADDS role on DC02 but did you run the process to add the new domain controller to your domain?

Have a look at the best practices analyzer link I posted above, it explains why if you set it as a primary bad things /could/ happen.

Absolutely not, what your colleague has done will have a negative impact on your system. DNS Servers have a special section within their configuration called "Forwarders" which is where your ISP / External DNS servers can go, so they are only used if your DNS servers don't know the answer. Steer your colleague to the DNS best practices analyser - DNS: DNS servers on should include the loopback address, but not as the first entry

Might be worth a read of - Windows 8 moves to BIOS-based product keys - CNET

Can't say fairer than that @cameyo - Many thanks for continuing to support the folks who use your cool software.

I'd set up an RDS Gateway with Connection Broker and point your Smoothwall rule to that (using port 443) and it will deal with the load balancing of the internal remote desktop services servers for you. From the outside you hit the RDS Gateway and it deals with which RD server you land on internally.

Can you ping the kms server by IP from this machine?

Try slmgr /skms ip_of_kms slmgr /ato

Thanks for the update there fella, hopefully you've got it covered up for now. I'd imagine the ubuntu updates on current version (assuming LTS) will be safe enough, though the Zimbra side isn't something I've played with in a good few years (though we use it at work though it's third party hosted).

Hmm ... interesting one. Only thing I could think of if everything is proper locked down is some kind of php/perl shell thing running on the webserver that could get in on loopback/local IP. You say a non-admin account, is it an account that is used to run any services on the box itself? This has piqued my interest this one ...!

Make sure whatever you go with on the endpoint supports RemoteFX so you get the best multimedia performance out of your environment (Even if you don't put in hardware GPUs)

Looks like staticc2.cdngeek.net is throwing 503's.

I don't have a system in front of me sorry, has it worked before running as LocalService or did you change it to this whilst troubleshooting? Some more general troubleshooting steps - Troubleshooting IMA Service Failure To Start http://support.citrix.com/article/CTX735338

Hi there, Does this help? - Error: Windows could not start the Independent Management Architecture on Local Computer...refer to service-specific error code -2147483647

Yep, dig on linux though you could do the same thing with windows nslookup. 1. Nip to WHOIS Search, Domain Name, Website, and IP Tools - Who.is and pop in the domain, in this case primrosehillschool.org.uk and search 2. Review the resulting information and find the nameservers responsible for the domain, in this case ns1.server19.ourlinuxnetwork.com & ns2.server19.ourlinuxnetwork.com 3. Using dig/host/windows nslookup issue a command such as: dig @ns1.server19.ourlinuxnetwork.com www.primrosehillschool.org.uk or nslookup www.primrosehillschool.org.uk ns1.server19.ourlinuxnetwork.com By checking the nameserver(s) directly responsible for the domain you're bypassing the need to wait so much for dns propagation across the internet etc. HTH.

There's no DNS record for the www. address. The non www one works OK for me but the rendering is wrong because it's no doubt looking (and failing) to find the www. address for the other content. A DNS lookup against the servers responsible for the domain shows the supporting evidence accordingly: dig @ns1.server19.ourlinuxnetwork.com www.primrosehillschool.org.uk | grep -A10 QUESTION ;; QUESTION SECTION: ;www.primrosehillschool.org.uk. IN A ;; AUTHORITY SECTION: primrosehillschool.org.uk. 10800 IN SOA ns1.server19.ourlinuxnetwork.com. bursar.primrosehill-euxton.lancs.sch.uk. 1395583053 10800 3600 604800 10800 ;; Query time: 25 msec ;; SERVER: 109.109.131.153#53(109.109.131.153) ;; WHEN: Sat May 17 09:54:39 2014 ;; MSG SIZE rcvd: 152 dig @ns1.server19.ourlinuxnetwork.com primrosehillschool.org.uk | grep -A10 QUESTION ;; QUESTION SECTION: ;primrosehillschool.org.uk. IN A ;; ANSWER SECTION: primrosehillschool.org.uk. 86400 IN A 109.109.131.153 ;; AUTHORITY SECTION: primrosehillschool.org.uk. 86400 IN NS ns1.server19.ourlinuxnetwork.com. primrosehillschool.org.uk. 86400 IN NS ns2.server19.ourlinuxnetwork.com. ;; Query time: 32 msec

Not unless your virtual servers are reporting much higher resource usage and needing 'more' from the host pool. i.e. if your virtual servers are running flat out and needing more resources on their allocation then yeah, allocate more. If they aren't, you don't need to give them anymore. Just means you've got plenty of resource left in the host pool for more servers etc.

Had one of these in the past, can be nuked out of the SQL Database. DB Backup, ship off to support and they'll tell you what needs to be removed safely to make it go away.

SSL247 accepted a school PO from one of our customers last year, worth a look maybe. Digicert is also a good, though not sure if they'll take a PO.

Not so much, you're finding out about the desktop.ini annoyance. http://www.edugeek.net/forums/windows-server-2008/53755-home-folders-renames-my-documents.html

Yes, it will work fine on the same host, just two different datastores. (did this last night to move a vCenter VM which was offline as I did not have storage vmotion to move it online). I would not use the converter because it will re-mac etc. (though you could override it). Using the quick migrate will allow you to continue running 'live' whilst it does its thing then it'll snapshot + copy differences at the end. - - - Updated - - - Block in VMware the same? Block/strip size on the HBA the same?

Use Veeam quick migrate (free version can do it too), tends to work out a lot quicker than a full fat copy and it'll work live most of the time except the suspend + boot up at the end.