TheScarfedOne

An error occurred in Home Access Plus+ Page: Setup API -> FillNode(DirectoryEntry room) System.DirectoryServices.DirectoryServicesCOMException (0x80072020): An operations error occurred. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_Name() at HAP.Web.API.setup.FillNode(DirectoryEntry root) in N:\Visual Studio 2010\Projects\CHS Extranet\HAP.Web\API\Setup.cs:line 383 Message: An operations error occurred. Stack Trace: at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_Name() at HAP.Web.API.setup.FillNode(DirectoryEntry root) in N:\Visual Studio 2010\Projects\CHS Extranet\HAP.Web\API\Setup.cs:line 383

Indeed - doing just this currently (excluding Moodle - and Lync is in testing).

Bump @nickbro...where next?

+1 as a feature request for that for me too!

The Powershell and Server Manager can be shifted by denying Students/Staff groups to the default C:\ProgramData\Microsoft\Windows\StartMenu and the QuickLaunch folders. The Start Menu Admin tools is a GPO Preference under User Config > Preferences > Control Panel > Start Menu. I did both of these in fact via an additional GPO set to merge linked at the OU where the RDS server(s) were

Ad if you are on 7 Starter or god forbid Vista HB - look out for this one too Windows 7 (and Vista) Roaming Profiles... and resetting them - Blogs - EduGeek.net

Right...im back at the Null Response stage again on the JSON request. The user is a Domain Admin. GetADTreeResult: null Does it matter where in the AD structure the user is?

No problem. Got the logger installed. And spotted this one... An error occurred in Home Access Plus+ Page: Setup API -> FillNode(DirectoryEntry room) System.DirectoryServices.DirectoryServicesCOMException (0x80072020): An operations error occurred. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_Name() at HAP.Web.API.setup.FillNode(DirectoryEntry root) Message: An operations error occurred. Stack Trace: at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_Name() at HAP.Web.API.setup.FillNode(DirectoryEntry root) Will get firebug on my machine now as well...

Changed the DLLs, and was getting the same error - until replaced the setup.aspx as well. Then - the issue is back as the AD Browser not displaying anything other than the progress loading bar.

Yes... and no. Take this scenario... Departmental software - except some rooms are used by more than one subject. Therefore - you want to be able to group the machines and have the right software automatically installed. With OUs this is a pain as you have to faff with the structure and it can get a bit messy. WIth Security Groups - its just add to group and it doesnt matter that where in AD the machines are. You are then using the SCCM collection queries to build the collections based on the AD groups - and advertise software to that collection. We also use partial name filtering too.

Id avoid this one TBH. Its a licence for problems...and of course - Capita and LA teams do not yet support this. I had enough early issues just with Office being AppV and curriculum software not being able to fire it properly.

I missed out on this one then....pizza at yours it is then @Domino :-p Im expecting to be there for the duration...@GrumbleDook - what needs doing? Are you Admin poking?

Urm... yea it was the setup.aspx page where I was getting the issue with the AD browser. Those DLLs broke something... browsing to setup now gives... Description: An error occurred during the compilation of a resource required to service this request. Please review the following specific error details and modify your source code appropriately. Compiler Error Message: CS1061: 'ASP.setup_aspx' does not contain a definition for 'sg_TextChanged' and no extension method 'sg_TextChanged' accepting a first argument of type 'ASP.setup_aspx' could be found (are you missing a using directive or an assembly reference?) Source Error: Line 111: Line 112: Line 113: Line 114: Line 115: Source File: d:\Program Files\HAP7\Setup.aspx Line: 113

I was doing it this way, but moved on to using security groups instead. It meant that I didnt have to faff around with my AD structure to change the software lists.

Look up @rpwillis and a certain Mr Coleman as well - between all of them, you should be home and dry

@John....im here now! Whos nominating me for what?? LOL Im with the suggestions for all you can eat chinese! Works for me :-) I guess we do need to get a wiggle on with organising BETT as trains and hotels need booking... :-)

Introduction Right... as part of a corporate branding exercise - I have been working on sorting out the email signature front. Before everyone says it - yes, I know you can do a "sort of solution" on the Exchange server. Im not going to cover that one in this post - as its more designed for Disclaimers. If you want to know more on that - Google "Exchange Transport Rule Disclaimer". Why not Exchange Transport Rules Back to this post - and why I didnt use Exchange server. Well - the one big bug/by design behavior with the Transport Rule option is that it cant work out where the body of a reply or forward is - and therefore can only tag its content to either the start or end of the entire message. The Solution Enter my solution. What I wanted to do was add a customised signature via Outlook and Web Access to all messages. Yes - I know that in theory these could be editted by the users - but I will come back to that one. Lets start with Outlook. First off, lets get friendly with some scripting. This is Powershell - and you need Windows 7 (built in) or XP SP3 (with Powershell 2.0 addin free download from Microsoft Download Centre). Create your Outlook Template Now - we need to create a kind of template to use. This should be done in Word - and call it CompanyName.docx (replace Company Name with your School name). Create the look and feel you want your signature to have - and yes you can include images! Make sure you use the following keywords: DisplayName, Title, Email, TelephoneNumber, Fax etc.. THis is a bit of a noob thing - but you must ensure these fields are filled out for all users in Active Directory Users and Computers. This is designed to save you time - information in one location. Put your file on your server under the following path \\domain\NETLOGON\sig_files\CompanyName\CompanyName.docx Now - here is the script. I cant take any credit for this - other than the find - and confirming that it works like a dream. You will need to edit sections at the top - the variables for your site. It is uploaded here as a txt - save it as a .ps1 file. SetOutlookSignature.txt Source Credit: http://www.immense.net/deploying-unified-email-signature-template-outlook/ Group Policy Fun Next, you need to get busy with Group Policy. Two things we need to do - one assign our script. Thats under User Configuration > Policies > Windows Settings > Scripts > Logon. Another caveat here - which I should have mentioned earlier. You NEED to be Server 2008 R2 really for this. On the Scripts dialog, you have a second tab "Powershell". Click Browse - and copy your script to this location (which will be a folder within Sysvol.....GUID....Scripts/Login. This is really important. Powershell is so damn powerful that Microsoft have built in a load of protection. By default, unsigned scripts cannot run, and ours certainly isnt! But, by putting it here - it will run safely. So... Thats done. Next - to lock down Outlook to prevent users fiddling with Outlook settings. Sadly, the Office 14 ADMX files (free download from the Microsoft Download Centre) do not give you check boxes to disable features. We have to know the IDs of the controls we want to disable. These are... 5608, 14014, 11323, 21553, 5611, 14823, 12305, 16182, 13991, 12245, 12680, 12863, 12681, 12864, 2087 and you put them here Microsoft Outlook 2010 > Disable Items in User Interface > Custom Outlook Web Access Onto OWA. Yes you can get to the Signatures here as well - under Options. Thankfully - you can prevent access to it via Web Access policies in the Exchange Management Console. But - again, with a little bit of Powershell on the server, we can ensure that a signature we want is set there too - for when your users send email from there. $mailboxes = Get-Mailbox $mailboxes| foreach {$file= "C:\signatures\" + ($_.alias) + ".html"; Set-MailboxMessageConfiguration -identity $_.alias -SignatureHtml "$(Get-Content -Path $file -ReadCount 0)"} Source Credit: http://blog.exchangegeek.com/2010/08/manage-owa-signatures-using-powershell.html Now - one problem with this - you need to have pre-created an HTML signature for each user, and as per the script as is - located it in C:\signatures; issue! So, how to fix that... Well, that will be the subject of my next post - and as a teaser as to the fix, think about what the first Outlook bit is doing! If i can sort out a small prize for BETT, this will be awarded if a member can come up with what the answer is (which is already part written as my next article). Bear in mind - Ive already implemented this.... Questions and comments welcome :-)

Thats a serious mission on Jaffa Cakes! Shhhhh, dont tell @GrumbleDook about there being any chocolate around :-p

See the stickies thread in this forum...its one of the FAQs weve covered - and there are some ADM templates ready to use

This is corrupt profiles causing this. Each profile stores a copy of that file in \AppData subfolder (which is hidden) in the profile. I would clear out the AppData folder of affected users.

Hi Nick Any ideas on my issue? Where could I start to troubleshoot why HAP cant look at my domain structure. DomainName.internal > Domain Computers > Domain Controllers > Domain Groups > Domain Members > Domain Services (HAP username is in this OU) > Domain Users >> Staff >> Students HAP user is a Domain Admin As a second query... with the new auth scheme, any way of getting it to play nicely with TMG/ISA for SSO? Thats what I loved about 6!

If you are moving from Spring to Autumn...you need to be aware that for some reason, Capita thought Finance teams would like a new teletubbies look. Its horrid, and does some wierd stuff. We are direct Capita support - so whill wait to see what others have done. Might even consider firing up another HyperV VM to play with it....ideas.....

Just done a blog post on this...so your luck is in! It more specifically relates to RDS and printers - but I think you could probably use some parts of it. Mainly, the GPO Preferences to map printers to a security group of machines under Computer Configurations - Preferences - Control Panel - Printers rather than User Configuration as I used. Managing Printers in a Remote Desktop Environment - Blogs - EduGeek.net

Just done a blog post on this...so your luck is in! It more specifically relates to RDS and printers - but I cover my normal setup to with Scripts and Screenies of GPO Preferences. Managing Printers in a Remote Desktop Environment - Blogs - EduGeek.net

@Browolf - the latency you mention is the hazard of using a network path for the redirect. I actually use a local path - with some scripts that keep this up to date. I will do an updated copy of this post with the changes I actually use...