Manny-Tech

I'll give it a go now. It is consistently saying on the deployment summary that it is unable to map a network drive to \\\servername that being the 'elsewhere on the network' server.

[settings] Priority=Default [Default] DeployRoot=\\srvwds1\deploymentshare$ SkipBDDWelcome=Yes UserID=username UserDomain=domain.school UserPassword=password KeyboardLocale=0809:00000809 UserLocale=en-GB Countrycode=44

It's when you boot from PXE before you see the task sequences.

I did do rather than explaining that it was called something else. I don't understand why it is trying to connect without a username? Where else can I set this if it isn't mine at the start of the wizard?

It still fails, I will attach the ZTIApplications log file. Is there any other log files I can look into? I have double checked permissions on the share, I have full access. I'm not sure why, in the log file, that it says it's connection to \\servername and then says it failed to connect to \\\servername (note the three backslashes). ZTIApplications.txt

The user in MDT is my account, I'm a domain admin and have full access to the share.

I can confirm it works fine when it's in the Deployment Share Applications folder. I guess the problem is when connecting to a network share when it uses the local adminstrator account, I think at the start of the wizard it asks for a username and password for connection to network shares, which I used mine so there shouldn't be a problem there.

I'm just branching into MDT, I used it some years ago at a previous company but this time around it's all my own config. I have a network share with the majority of our applications, rather than me duplicating this all to the Applications folder on the Deployment Share, I was hoping to use the option of 'Without Source Files or Elsewhere on the Network'. I'm trying to deploy Office 2013. I have the command set as "\\servername\applications$\Office 2013\setup.exe /adminfile office2013.msp" with a working directory of "\\servername\applications$\office 2013" Each time it runs I get an error of 'Unable to set working directory' and 'Application Microsoft Office 2013 returned an unexpected return code: 2.' Just for my own peace of mind I will copy it to the Deployment Share just so I know it actually installs, but I'm struggling to find examples of people using the 'Without source files' option successfully.

Sorry to resurrect an old thread. I'm trying to get an unattended install setup for Reason 4. I have managed to get the application to run silently, I have copied over the Soundbank files to the install directory and copied the "reason data.dat" to ProgramData - it is however, still asking for a DVD. Anyone able to help? Soon as I put the disc in it asks for the license key information which I take it I may need to copy over too, I'm unsure where this is stored though.

Is this a launcher specific to your site, or can it be used elsewhere? We don't tend to have a problem, but every now and again we do get users prompted for an administrative password just to even get to the 'Checking for updates' stage.

I gather it works fine if you're logged in as an admin? You'd have thought if you set the Network Manager to an account with similar permissions then it would work. I'd be interested to know what is the problem when you find a solution.

About five years ago in a previous job I remember spending a while on finding a decent resolution to this for Vista. I think in the end it was a combination of things, disabling the EoA button on the logon screen, it was called utilman.exe back then, not sure if it still is. Then a registry edit to stop high contrast from being enabled. I can dig it out if necessary.

Don't you just configure the Network Manager on the server with credentials for clients that don't have access to update, i.e. any standard user? Works flawlessly here.

I'm not sure about that, if they do they haven't mentioned it. I've recently been away on holiday so I'm going to get back onto this again this week. It's a massive problem for us, especially as it used to work previously. I'm due to get a packet capture setup with Ruckus and Lightspeed so they can have a look what's going on. I'll come back to you all when I have anything else.

Would it not be easier to just send accounting info from the RADIUS server straight to the Lightspeed box rather than setting the Ruckus controller to send the accounting info back to the RADIUS? The only other option Lightspeed said was to somehow stop the RADIUS server sending 'stop' messages to them, not sure how plausible that is.

Hi, We have a Ruckus Controller in school that performs 802.1x authentication to a Windows Server 2008 R2 running NPS for wireless devices. We also have a Lightspeed web filter. If the Lightspeed filter doesn't know who you are it presents a captive portal page for you to login with your AD credentials before you can get out to the Internet. With this in mind, we created a WLAN for 802.1x authentication to our RADIUS server which works great. The problem we had was to then get out to the Internet you had to enter your password in on the captive portal page of Lightspeed. To bypass this we set the accountancy server on the Ruckus controller to point to the Lightspeed filter. In theory this should pass on the user identification and let the user straight out to the Internet rather than being presented with a login page. This isn't the case. I've logged it with both Ruckus and Lightspeed and we're at a junction point where neither are able to commit to changes. The main problem seems to be as a user moves from AP to AP they retain connection, but it seems to send a 'stop' message to the Lightspeed filter when they disassociate with the old AP which then proceeds to log the user out therefore presenting the captive portal login page. Ruckus say that is usual behaviour and Lightspeed said if they receive a 'stop' message then they will log the user out. Is anyone else in the same scenario as us, maybe not with Ruckus but with using Lightspeed as the 'accounting' server? Does anyone have any recommendations on how to bypass this captive portal once users have authentication with the RADIUS server? Please let me know if you require more details. Thanks

I'm having a bit of a weird problem with my connection broker when accessing my session hosts externally. Setup: RD Connection Broker - SRVRDS RD Session Host - SRVRDS1 RD Session Host - SRVRDS2 Farm Name - remote.domain.sch.uk NLB configured for SRVRDS1 + SRVRDS2. NLB cluster name remote.domain.sch.uk DNS internally points to the NLB cluster IP DNS externally points to the public IP of the NLB cluster Firewall rule configured for public NLB IP to internal NLB IP on 3389 Internally everything works brilliantly. Externally it is very sporadic - some users connect, and some don't. If I disabled the Connection Broker service on SRVRDS then there are no problems with connection at all which makes me think the problem lies with the Connection Broker somewhere. I've checked the logs and it appears if a user connects to SRVRDS1 and isn't redirected by the Connection Broker all works swimmingly well. If a user connects to SRVRDS1 and then the Broker redirects them to SRVRDS2 then it just disconnects and says check the server is enabled for remote connection etc.. Do I need any further firewall configuration? Has anyone come across this before? Any help much appreciated.

We don't allow them to save .exe in their user area but via software restriction policies they can run their game, they just can't save as an .exe.

Hi, We recently invested heavily in an virtualised infrastructure to give us the amount of redundancy we required. The next stage is to federate our Office365 tenancy with ADFS - I have read the documentation, and the recommended practice is to have the Web Application Proxy off the domain, with access only to the ADFS server on 443, pretty much in a DMZ. Our firewall is hosted by our LA, and I only have one subnet 10.10.78.0 - internally we only have a flat network, so there is no VLANs configured. At this point it is pretty hard to achieve what we want to if following the correct practice. I have spoken to our LA and they have secured us a secondary IP range of 10.10.44.0 - they are able to add this range onto our router as a secondary subnet. What they said they can do is create an ACL so only the WAP IP address can access our ADFS server on our network. I'm unsure how secure this would be? If I did go the ACL route on the router, would I need to configure anything on our VM environment? Currently our VMs all sit spread across three hosts on one vSwitch, would I need to configure a new vSwitch to segregate this? I really don't know the best way to go with this. If anyone has any ideas I'd welcome them! Thanks

In the end we had a requirement for Salamander Active Directory, for an additional £100 you get SIMS writeback so we've gone for that instead.

In the end I created a seperate VLAN for the test machine, also a VLAN for the clients who need to use it and gave that VLAN access to the test machine VLAN plus the rest of the curriculum network. That way the clients that need access to it can still see everything else on the network, plus the test machine, and the test machine can't see anything else.

That's the thing, previously it was a standalone laptop with no network access. I only want it virtualised so I can back it up with Veeam and make use of snapshots etc.. when testing.

If I disable the NIC won't that stop me getting to it over the network? I would like to RDP into it.

I'm currently operating with three ESXi hosts with my VMs spread across the three. I have one particular machine that I haven't virtualised yet, it is a test machine for software. I would like to get this on the virtualised platform jsut for ease of use with snapshotting and reverting back etc... The problem I have and I'm not sure how I get around it is that I don't want it to be able to see our MIS server, or any others for that matter - it doesn't need to be a domain joined machine so doesn't need access to anything other than a DC for an IP address, but even then I could give it a static one. Any ideas?

I'd gather it's like any other android emulator (we use App Inventor) and tried to redirect everything to the local path? We had to do a few edits on configuration files to point to the users home area not sure if it's a similar thing with Genymotion?