TheScarfedOne

Sure no prob...what needs looking at?

Those who follow my blogs will know that I run a Thin Client section of my network - powered by Windows Thin PC (aka Windows 7 lite... it runs NT6.1) with Server 2008 R2. This post follows http://www.edugeek.net/blogs/thescar...nt-part-2.html and Introduction Last time out on RDS, we set up Single Sign on, so that our users would log onto a Windows Thin PC as themselves, and changed the shell from "explorer.exe" so that instead a Remote Desktop session was triggered. This would automatically use the details of the user, without showing the real local desktop on the Thin PC. There was only one problem with this, the users were slowed down by a double log on. Once to the Thin PC, and once to the RDS farm server. So, back to the original plan... A single autologon user, with a restricted environment. This environment would need no start menu or desktop, except for a single shortcut to launch the Remote Desktop. This is where the actual user login would happen. So, we need to undo the below, which I've copied from my original article... Allow Default Credential Usage for Single Sign-On (SSO) Now that we have authentication configured, we need to finish the process. To do this, you need to go to the client system (Vista, or 2008) and configure the Local Group Policy Editor. On your client computer open the Local Group Policy Editor. To open Local Group Policy Editor, go to Start, and in the Start Search box, type gpedit.msc and then press ENTER. In the Editor, look in the left pane and expand Computer Configuration => Administrative Templates => System => and then click Credentials Delegation. Double-click the Delegating Default Credentials setting to open it. Next, in the Properties dialog box on the Setting tab, select Enabled, and then select Show. In the Show Contents dialog box, click Add to add servers to the list. In the Add Item dialog box, type the prefix termsrv/ followed by the name of the Terminal Server you will be connecting too. Once you have added the server name, click OK to close the Add Item dialog box. Click OK a few times until you are back in the Local Group Policy Editor and close the MMC. We also need to change a few other registry keys to enable the auto login, and put the shell back. As I'm writing this on my ipad, I will upload the script or screenshots of the GPOs later on. As usual, any queries or things you would like me to cover... Drop me a line or find me on the usual social network spaces!

The variety of tins and boxes of sweets and chocolates dropped into the office have not lasted beyond the day they were brought in! Oops I'm with previous people on unattended bowls of nuts...

This will be the client install failing in your task sequence, which causes it. To bomb ou of the TS completely. Check your TS for what client package, and the parameters being used. Also, a make sure the client package is distributed to content locations

Any ideas Nick what to do with basic auth, which we are using because HAP sits behind ISA for external access?

It may do, as this will change how your virtual network and virtual switch as set up

No problem. I run a 3 node cluster as well. I would suggest remove teaming completely from all nodes.

I didn't think nic teaming was supported in Server 2008 R2, which is why I've stuck away from it. Microsoft Support Policy for NIC Teaming with Hyper-V You ms have to turn this off, as I suspect you may be headed MS Support direction...

Hello!! Someone call for me! LOL Ive seen some odd things with PXE before like this in both 2007 and 2012. Each time, Ive unticked the "PXE" support and checked the event log to make sure its removed. Reboot the server, and then check the box again which will trigger the installation of it.

Great thanks Nick. When you have something that you would like tested on this - give me a nudge and Ill get it on my install.

Is there a way that the "Unavailable" and "Charging" automatic entries can be changed? I would like to be able to set them to be two sessions each side, as we have Break and Lunch on our booking system (to allow staff to book rooms and equipment at those times. S1 Break S2 Lunch S3 Break S4 Unavail Unavail Bookied Charging Charging Free Free Any ideas?

Just re read, the same principal will work where the query to run the section of the TS can be collection, or the start of a machine name, or ou I thnk.

I use ad groups which are then scoped as collections in SCCM. You can then target the software at a collection, and the software will be dropped onto the machine. Make sure you set your install to be "As soon as possible" as well as a schedule you wish, and the install type "Required" with "Run if failed previous" which prevents needless reinstalls.

Hmmm. Could it be the whole basic auth thing that we did to get it to work behind tmg/isa rather than use the built in FBA? I vaguely remember we may have done some iis perms changes when we got it working on v7....

Evening and welcome back! Had a similar SAN related enforced absence too, as did some others! Something in the water!! So, shuffle up and make some more room. Extra choc and eduhobnobs here too! We all need them. Approving of your SCCM 2012 by the ways!

I think SWGFL are looking at it, but its something that I know further down in my patch SCOMIS (LA arm) offer this. I think you may be able to get the service up to you as well @witch...would you like me to check

+1 for Stone

System Centre Config Manager....see my blog...

If I drop the port reference out (which shouldnt work anyway - as the server isnt listening on that port) - it still throws the same .net framework error

Hmmm.... was running "hap logon tracker.exe" logon https://servername:port/hap8 (running on port 444 as already got something on 443). The odd bit ofg the message is "Source Home Access Plus+ already exists on the local computer".... eh?!?!!?

Thanks Nick! Got that all in but im getting an odd error (once I got past the not being able to type!) See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.ArgumentException: Source Home Access Plus+ already exists on the local computer. at System.Diagnostics.EventLog.CreateEventSource(EventSourceCreationData sourceData) at System.Diagnostics.EventLog.CreateEventSource(String source, String logName) at HAP.Logon.Tracker.Loading.api_ClearCompleted(Object sender, AsyncCompletedEventArgs e) at HAP.Logon.Tracker.api.api.OnClearOperationCompleted(Object arg) ************** Loaded Assemblies ************** mscorlib Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400) CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll ---------------------------------------- HAP Logon Tracker Assembly Version: 4.0.0.0 Win32 Version: 4.0.0 CodeBase: file:///C:/Windows/System32/HAP%20Logon%20Tracker.exe ---------------------------------------- System.Windows.Forms Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5460 (Win7SP1GDR.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll ---------------------------------------- System Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- System.Drawing Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5462 (Win7SP1GDR.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll ---------------------------------------- System.Web.Services Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Web.Services/2.0.0.0__b03f5f7f11d50a3a/System.Web.Services.dll ---------------------------------------- System.Xml Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll ---------------------------------------- System.Configuration Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll ---------------------------------------- iqjqpfwc Assembly Version: 4.0.0.0 Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll ---------------------------------------- Accessibility Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900) CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box.

+1 for System Centre Service Manager here as well. Theres a bit on my blog about setting it up. Previously used GLPI (GLPI - Gestionnaire libre de parc informatique) and ManageEngine as well. Both also worked well.

Hi Nick Im having one of those days! Ive got SQL on a Cluster elsewhere on the system - so remind me how I would go about adding the IISAppPool permissions for accessing the HAP database?

The login tracker in HAP will do this...Home Access Plus+ Shameless plug for @nickbro

I know there is a "new" team working on big changes to SLG. Some of the early bits of this I've seen look really good. @PhilNeal...are the people on the Geek to throw some more light on what is coming up?