Duke5A

Exposing a machine's bare bottom to the Internet like that is an accident waiting to happen. The only other way I'd think about going about this is port forwarding RDP to your home computer and connecting with RDC setup to expose local drives. It can be found under the Local Resources tab > More button on the bottom.

You want to do this from a VPN. The ASUS home routers have built-in VPN clients in them. I use one on my phone to WOL computers in the house when I'm out.

The machines are being woken up by a pattern match and it sounds like you only want it being done by a magic packet. Go into Device Manager on the machine, bring up the properties for the wired NIC and go to the Power Management tab. There should be a check box to only allow waking by a magic packet. I know technically this should only affect S3 power states, but give it a try.

You need to thaw the machine and then run the original installer with a /uninstall switch at the command line.

You need two NICs in the system and IPTables needs to be setup to forward HTTP traffic to Squid. There are plenty of guides online for setting this up. For passing traffic to an upstream filtering proxy looking at the cache_peer directive in Squid.

I've never seen this, but then again I've always used the distributable full version of the installer for this stuff.

What is basically happening is Windows is getting sucker punched and knocked out cold; it has no idea what caused the fault and all it can tell you is that it blacked out. This kind of problem is typically indicative of a low level hardware problem and can range from something as simple as faulty power (are you using a UPS and is it good?) to a bum motherboard or other component. We need more details to help any further though. What model and spec is the DC running on? Bad memory could cause this, but I hope you're running your domain controller on real server hardware. The memory should be buffered ECC and if a DIMM were to fail the system could sidestep it without bring the entire box down.

Did you check the Windows Update log? Maybe scheduled updates are being missed and it is rescheduling during the middle of the day.

Where did you get the boot WIM from? I've noticed newer versions of boot WIMs don't like older hardware and I have to keep a list of them handy. Windows 7 = 6.1.x Windows 8 = 6.2.x Windows 8.1 = 6.3.x Windows 10 = 6.4.x Also, these WIMs get progressively bigger with each new version; you need enough RAM in the machine to shove these entire images into memory and still have enough left over to work with.

Honestly, I don't think there is a way to stop them from PXE booting a known computer from WDS. WDS is very dumb in this regard. The only thing you can do is alter permissions on the image folder inside the WDS folder. Do this: Disable inheritance on the permissions for this folder and ensure it looks something like the above. Make sure WDSServer, (local server)\Administrators, and System have full control. The completely blanked out name in the image is a special account I made so that our student helpers can image machines; set it to read. Before the prompt comes up to select an image it'll ask for credentials and as long as you feed it something that has read to the images folder it'll go. This is the best you're going to get for a stock WDS setup. My WDS is tweaked though in that it loads a Linux PXE boot menu first that has the WDS server as an option along with other utilities that are all password protected. This was a pain to setup though and I doubt it will work with UEFI enabled devices.

Awesome, this is exactly what I was hoping to hear. Thanks guys...

WSUS Package Publisher, anyone use it? I've been using Local Update Publisher to deploy Java, Flash and Chrome through WSUS with success, but I'm moving to Server 2012R2 and LUP no longer works. WSUS Package Publisher looks to do the exact same thing, but was hoping to get some feedback on it. @AngryTechnician Use it yet? I learned of LUP through your blog. https://wsuspackagepublisher.codeplex.com/

Alright, here is my script to fix this mess. This contains the most common printer drivers used on my network and has worked in a testing environment. A few things to note though: The required files listed for each driver can vary with the driver version. You should alter these arrays based on the driver versions in use on your print server even if you have the same model printers in use. To restart the print spooler at the end the script needs to be ran with local administrator rights. If you plan on using it as a logon script the user needs local admin. You may be able to get away with using it as a startup script which would make it run as the local machine, but I have not tested this. I have not placed this into production yet, but even if I had you should still test this before using it out in the wild. I hope this helps someone out there. 'https://social.technet.microsoft.com/Forums/scriptcenter/en-US/ee7ba165-47cd-4322-b312-8569341d0b3e/vb-script-to-stop-print-spooler?forum=ITCG Dim strCompName Const HKEY_LOCAL_MACHINE = &H80000002 strCompName = "." strKeyBasePath = "SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers\Version-3" strValueName = "Dependent Files" strHP1200PCL5 = "HP LaserJet 1200 Series PCL 5" arrHP1200PCL5 = Array("HPZLSLHN.DLL", "HPZSSLHN.DLL", "HPZUILHN.DLL", "HPCDMCLH.DLL", "HPZ5RLHN.DLL", "HPZSMLHN.GPD", "HPZSTLHN.DLL", "HPMCPD25.CFG", "HPZ5CLHN.INI", "HPMCPDP5.XML", "HPZSCLHN.DTD", "HPZEVLHN.DLL", "HPZIDR12.DLL", "HPZINW12.DLL", "HPZIPM12.DLL", "HPZIPR12.DLL", "HPZIPT12.DLL", "HPZISN12.DLL", "HPBMIAPI.DLL", "HPBMINI.DLL", "HPBOID.DLL", "HPBOIDPS.DLL", "HPBPRO.DLL", "HPBPROPS.DLL", "HPEACLHN.HPI", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL") strHP1300PCL5 = "hp LaserJet 1300 PCL 5" arrHP1300PCL5 = Array("HPZLSLHN.DLL", "HPZSSLHN.DLL", "HPZUILHN.DLL", "HPCDMCLH.DLL", "HPZ5RLHN.DLL", "HPZSMLHN.GPD", "HPZSTLHN.DLL", "HPMCPD25.CFG", "HPZ5CLHN.INI", "HPMCPDP5.XML", "HPZSCLHN.DTD", "HPZEVLHN.DLL", "HPZIDR12.DLL", "HPZINW12.DLL", "HPZIPM12.DLL", "HPZIPR12.DLL", "HPZIPT12.DLL", "HPZISN12.DLL", "HPBMIAPI.DLL", "HPBMINI.DLL", "HPBOID.DLL", "HPBOIDPS.DLL", "HPBPRO.DLL", "HPBPROPS.DLL", "HPEACLHN.HPI", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL") strHP4100PCL6 = "HP LaserJet 4100 Series PCL6" arrHP4100PCL6 = Array("HPZEVWN7.DLL", "HPZSTWN7.DLL", "HPZUIWN7.DLL", "HPZ6RWN7.DLL", "HPZ6CWN7.INI", "HPZSMWN7.GPD", "HPZ6MWN7.GPD", "hpmcpap6.xml", "HPZSCWN7.DTD", "HPCDMCLH.DLL", "HPMCPAP6.CFG", "HPZLSWN7.DLL", "HPZSSWN7.DLL", "HPBMIAPI.DLL", "HPBMINI.DLL", "HPBOID.DLL", "HPBOIDPS.DLL", "HPBPRO.DLL", "HPBPROPS.DLL", "HPEACLHN.HPI", "HPZIDR12.DLL", "HPZINW12.DLL", "HPZIPM12.DLL", "HPZIPR12.DLL", "HPZIPT12.DLL", "HPZISN12.DLL", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "PCLXL.DLL", "PCLXL.GPD", "P6FONT.GPD", "PJL.GPD", "P6DISP.GPD", "PCL5ERES.DLL") strHP4200PCL6 = "HP LaserJet 4200 PCL 6" arrHP4200PCL6 = Array("HPZEVLHN.DLL", "HPZSTLHN.DLL", "HPZUILHN.DLL", "HPZ6RLHN.DLL", "HPZ6CLHN.INI", "HPZSMLHN.GPD", "HPZ6MLHN.GPD", "HPC38O6L.XML", "HPZSCLHN.DTD", "HPCDMCLH.DLL", "HPLJ4200.CFG", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "PCLXL.DLL", "PCLXL.GPD", "P6FONT.GPD", "PJL.GPD", "P6DISP.GPD", "PCL5ERES.DLL") strHP4600PCL6 = "HP Color LaserJet 4600 PCL6" arrHP4600PCL6 = Array("HPZEVLHN.DLL", "HPZSTLHN.DLL", "HPZUILHN.DLL", "HPZ6RLHN.DLL", "HPZ6CLHN.INI", "HPZSMLHN.GPD", "HPZ6MLHN.GPD", "HPC3JS6L.XML", "HPZSCLHN.DTD", "HPCDMCLH.DLL", "HPLJ4600.CFG", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "PCLXL.DLL", "PCLXL.GPD", "P6FONT.GPD", "PJL.GPD", "P6DISP.GPD", "PCL5ERES.DLL") strHPM400PCL6 = "HP LaserJet 400 M401 PCL 6" arrHPM400PCL6 = Array("hpcm4016.cfg", "hpcm4016.xml", "hpcsc140.DTD", "hpcm401u.INI", "hpcP6.hpx", "hpc6m140.GPD", "hpchm140.gpd", "hpcsm140.GPD", "hpcui140.DLL", "hpcpe140.DLL", "hpc3r140.dll", "hpc6r140.DLL", "hpcbr140.dll", "hpcdmc64.DLL", "hpbcfgre.DLL", "cioum.dll", "CIOUM64.msi", "hpcst140.DLL", "hpcur140.dll", "hpmsn140.DLL", "hpmsl140.DLL", "hpcsn140.dem", "hpcsat20.dll", "hpcev140.DLL", "pclxl.DLL", "pjl.GPD", "pclxl.GPD", "HPCHL140.CAB", "UNIRES.DLL", "UNIDRVUI.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "hpcls140.DLL", "hpcss140.DLL", "hpcpn140.dll", "hpcpp140.dll", "hpcc6140.DLL", "hpbuio64.dll", "hppdvq01.dll", "hppccdvq64.dll", "hpfxcomw.dll") strHPM600PCL6 = "HP LaserJet 600 M601 M602 M603 PCL6" arrHPM600PCL6 = Array("hpcm6006.cfg", "hpcsc145.dtd", "hpcm600u.ini", "hpcm6006.xml", "hpcP6.hpx", "hpcdmc64.DLL", "hpbcfgre.DLL", "hpcui145.dll", "hpcpn145.dll", "hpcpe145.dll", "hpc6r145.dll", "cioum.dll", "cioum64.msi", "hpc6m145.gpd", "hpcsm145.gpd", "hpcst145.dll", "hpcur145.dll", "hpmsn145.dll", "hpmsl145.dll", "hpcsn145.dem", "hpcsat20.dll", "hpcev145.dll", "pclxl.dll", "pjl.gpd", "pclxl.gpd", "hpchl145.cab", "hpcls145.dll", "hpcss145.dll", "unires.dll", "unidrvui.dll", "stdnames.gpd", "stddtype.gdl", "stdschem.gdl", "stdschmx.gdl", "hpcpp145.dll", "hpcc6145.DLL", "hpfie145.dll", "hpcc3145.dll", "HPSecurePrint64.dll", "hpspw145.dll") strHPP2050PCL6 = "HP LaserJet P2050 Series PCL6" arrHPP2050PCL6 = Array("HPZEVWN7.DLL", "HPZSTWN7.DLL", "HPZUIWN7.DLL", "HPZ6RWN7.DLL", "HPZ6CWN7.INI", "HPZSMWN7.GPD", "HPZ6MWN7.GPD", "hpmcpap6.xml", "HPZSCWN7.DTD", "HPCDMCLH.DLL", "HPMCPAP6.CFG", "HPZLSWN7.DLL", "HPZSSWN7.DLL", "HPBMIAPI.DLL", "HPBMINI.DLL", "HPBOID.DLL", "HPBOIDPS.DLL", "HPBPRO.DLL", "HPBPROPS.DLL", "HPEACLHN.HPI", "HPZIDR12.DLL", "HPZINW12.DLL", "HPZIPM12.DLL", "HPZIPR12.DLL", "HPZIPT12.DLL", "HPZISN12.DLL", "UNIRES.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "PCLXL.DLL", "PCLXL.GPD", "P6FONT.GPD", "PJL.GPD", "P6DISP.GPD", "PCL5ERES.DLL") strHPP3010PCL6 = "HP LaserJet P3010 Series PCL 6" arrHPP3010PCL6 = Array("hpcp3010.CFG", "hpc30106.xml", "hpcsc083.DTD", "hpc3010u.INI", "hpcP6.hpx", "hpcdmc64.DLL", "hpbcfgre.DLL", "hpcui083.DLL", "hpcpe083.DLL", "hpc6r083.DLL", "cioum.dll", "CIOUM64.msi", "hpc6m083.GPD", "hpcsm083.GPD", "hpcst083.DLL", "hpcur083.dll", "hpmsn083.DLL", "hpmsl083.DLL", "hpcsn083.dem", "hpcsat20.dll", "hpcev083.DLL", "pclxl.DLL", "pjl.GPD", "pclxl.GPD", "HPCHL083.CAB", "UNIRES.DLL", "UNIDRVUI.DLL", "STDNAMES.GPD", "STDDTYPE.GDL", "STDSCHEM.GDL", "STDSCHMX.GDL", "hpcls083.DLL", "hpcss083.DLL", "hpcpn083.dll", "hpcc6083.DLL") strTOSH455PCL6 = "TOSHIBA e-STUDIO455Series PCL6" arrTOSH455PCL6 = Array("eS4px6wm.exe", "eS4px6.XPI", "eS4pCDTP.dll", "eS4pCIP.dll", "eSPDLD.chm", "eS4pCVal.xml", "eS4px6pr.gxl", "eS4pPrc.dll", "eSTSPVen.lbf", "eS4pxjp.bin", "eS4pxuc.bin", "eS4pxeu.bin", "eS4pFN.xml", "eS4pCCFG.dll", "eS4pPCF.dll", "eSPDLDL6.dll", "eS4PDLD6.dll", "eST4snm6.dll", "eS4pLD.bin") strTOSH855PCL6 = "TOSHIBA e-STUDIO855Series PCL6" arrTOSH855PCL6 = Array("eS8nx6wm.exe", "eS8nx6.XPI", "eS8nCDTP.dll", "eS8nCIP.dll", "eSPDLD.chm", "eS8nxuc.bin", "eS8nxeu.bin", "eS8nxjp.bin", "eS8nCVal.xml", "eS8nx6pr.gxl", "eS8nPrc.dll", "eSTSPVen.lbf", "eS8nFN.xml", "eS8nCCFG.dll", "eS8nPCF.dll", "eSPDLDL6.dll", "eS4PDLD6.dll", "eST4snm6.dll", "eS8nLD.bin") strTOSH6530PCL6 = "TOSHIBA e-STUDIO6530CSeriesPCL6" arrTOSH6530PCL6 = Array("eS6cx6wm.exe", "eS6cx6.XPI", "eS6cDTP.dll", "eS6cIP.dll", "eSPDLD.chm", "eS6cxpr.gxl", "eS6cVal.xml", "eS6cxeu.bin", "eS6cxjp.bin", "eS6cxuc.bin", "eS6cPrc.dll", "eSTSPVen.lbf", "eS6cFN.xml", "eS6cCFG.dll", "eS6cPCF.dll", "eSPDLDL6.dll", "eS4PDLD6.dll", "eST4snm6.dll", "eS6cLD.bin") Set objRegistry = GetObject("winmgmts:\\" & strCompName & "\root\default:StdRegProv") objRegistry.EnumKey HKEY_LOCAL_MACHINE, strKeyBasePath, arrSubKeys For Each SubKey in arrSubKeys strDriverKeyPath = strKeyBasePath & "\" & Subkey Return = objRegistry.GetMultiStringValue(HKEY_LOCAL_MACHINE,strDriverKeyPath, strValueName, arrDependentFiles) If UBound(arrDependentFiles) = "-1" Then Select Case SubKey Case strHP1200PCL5 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHP1200PCL5 blnFixInvoked = True Case strHP1300PCL5 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHP1300PCL5 blnFixInvoked = True Case strHP4100PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHP4100PCL6 blnFixInvoked = True Case strHP4200PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHP4200PCL6 blnFixInvoked = True Case strHP4600PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHP4600PCL6 blnFixInvoked = True Case strHPM400PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHPM400PCL6 blnFixInvoked = True Case strHPM600PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHPM600PCL6 blnFixInvoked = True Case strHPP2050PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHPP2050PCL6 blnFixInvoked = True Case strHPP3010PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrHPP3010PCL6 blnFixInvoked = True Case strTOSH455PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrTOSH455PCL6 blnFixInvoked = True Case arrTOSH855PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrTOSH855PCL6 blnFixInvoked = True Case strTOSH6530PCL6 objRegistry.SetMultiStringValue HKEY_LOCAL_MACHINE, strDriverKeyPath, strValueName, arrTOSH6530PCL6 blnFixInvoked = True End Select End If Next If blnFixInvoked = True Then Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strCompName & "\root\cimv2") Set colServices = objWMIService.ExecQuery("Select * from Win32_Service where DisplayName = 'Print Spooler'") For Each objService in colServices objService.StopService WScript.Sleep(5000) objService.StartService Next End If

Sorry if I'm asking questions to things already answered, but point and print is disabled and you don't get any security prompts when running the script by hand? If it isn't working when the logon script fires, but it is when you run it by hand then it could be the system is still processing something and skips over that printer because it's busy. I've had issues when scripting things in VB where I've needed to give it a breather or it would just skip over things. Try adding this right before you add the photocopier: WScript.Sleep (500) It'll pause the script for a half second. You can experiment with different values too.

Here is a lengthy Tech Net thread about the issue: https://social.technet.microsoft.com/Forums/en-US/e2acb625-027d-47a9-b4a7-1616e270bcbc/print-drivers-on-windows-7-clients-missing-dependent-files I've personally seen this issue on my network affect drivers ranging from PCL5, PCL6 to HP and Toshiba; I don't think it is a specific driver issue. People have reported the same problems with the print server being hosted on 2008, 2008R2, and 2012R2, so this seem to indicate the problem is with the client. The exact cause of the driver of becoming unstable is the blanking of a registry value located in: HKLM\System\CurrentControlSet\Control\Print\Environments\(flavor of client windows goes here)\Drivers\Version-3\(Driver Name) The Dependent Files multiline string value is blanked and then depending on the driver all sorts of goofy crap starts to happen: multipage print jobs printing all on a single page, landscape/portrait not working, and XML errors on HP Laserjets are just to name a few. Turning on registry auditing show that it is in fact the print spooler service on the client making the change. While there are mentions to hotfixes they don't seem to do much. I'm thinking I'm just going to add a sub to my logon script to check for blank values in that key and fill in as necessary for the most common drivers. What a pain this is...

So you basically just need to assign a proxy based on machine and not user? Proxies are configured under user configuration, so apply your proxy GPO to the computer OU and turn on loopback processing. User Group Policy loopback processing mode

Hi Nick, I find myself in the same pickle here; I just setup v10 to take the place of the aging v7.9 install, but can't get students locked out without breaking it. If I implement the above the students are locked out from the main page, but the student is still technically logged in and can just hit the drop down menu on the top left while on the unauthorized page to access all of the functions of HAP+. Ideas?

We did something similar that I documented in a blog post found here: VB script for creating student drop boxes - Blogs - EduGeek.net There is even a script that automates the folder creation and permissions.

I've been seeing similar issues with printer drivers taking a dump on client machines. Our setup consists of mostly HP printers, a 2008 x32 printer server, Windows 7 x64 clients and printers are mapped via script. When the problem occurs users report issues with portrait/landscape settings, multipage print jobs printing onto a single page, and the inability to add new printers to the system (ones that share the same driver as the afflicted printers). The quick solution for me is to stop the print spool service, delete the driver entries from the registry, restart the service, and add the printers back. This fixes it every time. The issue seems to be very random and sometime gives issue with Toshiba copier drivers (doesn't seem to be isolated to HP drivers). If you try and delete the driver from the local machine using the print management snap-in then odds are it'll say the driver is in use even if all the printers have been removed. Sometimes a restart clears this, and sometime it doesn't. Removing the keys from the registry always works without a reboot. HKLM\System\CurrentControlSet\Control\Print\Environments\(flavor of client windows goes here)\Drivers\Version-3\(Driver Name) I'm still at a complete loss for what causes this though. The only thing I can think of is the script attempts to add the printer on every logon even if it already exists. This initiates copying the driver over again and sometime the process is interrupted resulting in a corrupted driver install. Just a theory...

Free, reliable and painless: pick two. I've been through this trying to use Squid that doubles as a captive portal for terms of use and to transparently proxy traffic to a cache peer for filtering. It just doesn't work reliably. The big hang up is HTTPS and unless you control the client to where you can install a cert for the Squid proxy the client will throw cert errors when visiting HTTPS enabled sites. The only way around this was to put instructions on the captive portal page for people to configure the Squid box as a proxy on their device to get access to HTTPS enabled sites. The entire setup is a giant mess that ultimately works, but is a huge pain for the end user. You're going to have to spend money.

Not from where I'm standing; GPP is the most inconsistent and temperamental thing I've ever had the pleasure of working with when deploying printers. I fell back to my VB script and haven't been happier. Even on wireless devices that gang up on a single access point the login script always pulls through.

This might have something to do with Point and Print Restrictions. On the system that you added the printer on locally, delete the printer and try adding it again off of the print server. The difference being this time since you added it locally the driver will already be installed (deleting printers doesn't remove the driver). If it adds the printer successfully then you need to disable Point and Print Restrictions in policy. Computer Settings > Administrative Templates > Printers > Point and Print Restricts - Disabled

If you use client side targeting though you cannot manually move clients from one group to another - it's either all automatic or nothing. That being said, I'm using it here and it's a beautiful thing.

Do it this way so you don't nuke every installed printer: Set objWMIService = GetObject("winmgmts:\\.\root\cimv2") Set colInstalledPrinters = objWMIService.ExecQuery("Select * from Win32_Printer",,48) On Error Resume Next For Each objPrinter in colInstalledPrinters If InStr(LCase(objPrinter.Name), "OLDSERVERNAMEHERE") Then objNetwork.RemovePrinterConnection objPrinter.Name End If Next If Error <> 0 Then 'Just catch the error, moving on Else 'Nothing to see here folks, move along. End If Just replace OLDSERVERNAMEHERE with the old printer server's name.

We use Deep Freeze here and have it setup to wake the computers up at 1am; which is 1 hour prior to the schedule setup in GPO for Windows Update to download updates from WSUS and install them. Really, all you're missing is the component that can wake up machines on a schedule through WOL. There has got to be something out there that can parse DHCP logs and send out WOL when fired as a scheduled task.