Whistler

Done as you said with removing "Everyone" however still lets me write to the folder. Very strange. I've installed another 2016 Server, and the permissions work as default.

The volume isn't natively shared apart from the admin share. I haven't shared it myself, so yes. I'm assuming NTFS related? I've removed "Everyone" but it still persists? from what i remember, if i remove the admin share, doesn't it re-create at reboot?

Hi, Configured Server 2016 to replace a 2008 Box. Problem is, all shares hosted on drives (\\fileserver2\g$) is shared somehow with full control to any user. Even if they're not on the domain they can have full control to the drive. I cannot figure out how to change this anywhere. To clarify, any folders shared from within the drive have the right permissions set, however the drives themselves (the admin) shares are shared with full control any I can't figure out how to change it! Thanks!

Changing back to Local Profiles for RDS Servers. Thanks.

What was the specs of your RemoteApp Machine, and do you have only 1 server, or 2? Thanks.

Bump! Anyone?

Hi, When launching RemoteApp for our users, it takes a while to launch due the group policy setup. Normally our login times are about 20 seconds. Most of this is it pulling the mandatory profile off the server, and configuring folder redirection. I was thinking of setting up loopback processing on the server, to only do a few GPO's. Is this recommended, or advised to speed it up? Our RemoteApp login times are about 30-45 seconds (too long!) for our Staff to be happy I'm not looking at instant, however 10 seconds ish would be helpful. any advice speeding this up would be appreciated! thanks.

Cheers Nick. I'll move over the Gateway and Web Role to the Server. I think 8GB's of RAM for HAP, Gateway and Web Access should be more than sufficient? In terms of delivering HAP, are you using a Reverse Proxy, or a DMZ? Cheers.

So you've got both the Gateway and Web Access role installed on the IIS Server? @nickbro

Cheers for the info @nickbro. Very helpful! Last question in conclusion for this post, do you run the RD Gateway role on the same system as the Web Server/HAP. From what I'm told, if you host the Remote Desktop Gateway and Web Host on 2 different Servers, you need 2 fixed external IP's, the school I'm working with only has one. I know not strictly HAP related, but insightful to know. Thanks, Whistler.

Definitely, I'm really surprised it's free. Massive Kudos to Nick for this! Interestingly @nickbro what's your stance with regards to the security of the product? Whilst it's "trusted" by many schools and IT administrators alike, what's the attack surface like for the product? (i.e what could potentially be exploited) other than brute forcing passwords or generating dodgy login screens for people to sign-in on? I suppose it's only as secure as the web server it's running off? Last question(s), (for now!) * Can I just change the port that the Application runs off inside of IIS, as the school currently has Remote Desktop Web on the standard SSL port. We would like to be port 9000. * When an update to HAP+ is issued, is it "safe" to checkpoint the VM it's running off, and then if something breaks to just restore? I don't think there's any problems but just making sure! * Any recommended spec's for running this as a VM? Currently we've got 4GB's of RAM assigned, and 2 vCPU's. It's only going to host 30 users, so that should be fine? Cheers. Whistler.

Nailed it! Thank you! Thanks given to all contributors! Cheers!

Haha! Tell me about it! I've been able to change the "Access your School from Home thing" to Login to .... %SchoolName%. However, I want to change the actual "Home Access Plus+" title text above it, to the School's logo. I've got it so when the "Home Access Plus+" is clicked it re-directs to the school site, however as I've shown above with my links provided, some schools have got it changed to their own. Thanks, Whistler.

Bump, Bump, Bump!

Hi, recently got HAP installed for a school that I'm working alongside currently. We want to customise the "Home Access Plus+" shown here: Home Access + .... To the name of the school, like this: Home File Access - ICT@StrathmoreSC (Strathmore...) Any idea on how to do this? I'm sure @nickbro would, but can't find anything on the site already relating to this. Also, within the Login.aspx you can specify the page title, which I have done. However, post login, it beings up the "Home Access Plus+" naming on the Tab, I'd ideally want this changed to "%SchoolName% - Cloud Portal" is possible, any idea how to do any of this? We're set after this, it's been great! Whistler.

Hi... a little update.. We've configured the switch and got all the VLANs setup how we want... however, we can't get an IP address on any of the devices connected to any of the VLANS! We're using UniFi gear for the switches elsewhere and they all work fine. I think I need I need an IP helper or something like that? However, I can't see an option on the web page to configure it? I don't have a USB to Serial adapter, so can't see if it's in the CLI anywhere however I need it to get DHCP from our Windows box that runs DHCP. Thanks.

Hi, Thanks. I'll look to install Skype for Business as you suggested. I suppose there was no harm in aiding on the side of caution. However, based on what you said about Skype for Business replacing Lync anyway as an upgrade, makes more sense as you proposed. Thanks!

I have not administered a Skype for Business Server, whereas I have historically managed a Lync 2013 one. Also, we've not upgraded to Office 2016 yet, so the client requires manual installation. We're only looking to test, so if Lync works out we may move to Skype for Business depending on the cost. However, I'm looking to find the ISO. Where I am currently, we don't have VLSC access, so difficult to find without having one (seemingly)?! Thanks.

Hi, we're wanting to try Lync 2013 on our PC's (not Skype for Business) and unable to find an ISO for the Server Application online. Does anyone have it, and be willing to share? We're licensed for Office 2013, however only wanting to trial Lync currently. Thanks, Whistler.

Bump. Any other suggestions?

Hi, I don't really want to use DirectAccess if we can avoid it. Any other alternatives?

Hi, We have twenty laptops that are given to staff currently. We are using Local Profiles for these machines and all are joined to the domain. The DC is running Server 2012 R2. We use RemoteApp to deliver apps such as Word, Excel etc to the laptops. This server is running Server 2016. We have issues with staff leaving the laptops at home (as they are strictly for home use - as they have a work PC in the office) and are only required to be brought in once a year for a re-image. Windows Updates is done locally and I have SAAS software installed so I can make sure they're up to date. We have an increasing issue of when Staff change their passwords, because the computer can't contact the domain as they are offsite, they are having to use old passwords to logon which is starting to become a problem. Also, it breaks the RemoteApp connection as they have opted to "save" passwords for quicker connection. From my understanding, something like DirectAccess would fix this and emulate local network access always, however adds additional complexities we don't want. In short, is there a way I can have the computer "update" the cached credentials without it being brought back into the office, no VPN or without using local accounts? (i.e something I could do with RemoteApp?) We only have RemoteApp open as a port in the DMZ anyway, do don't want to open other ports when what we have, apart from this issue works very well. Any help appreciated. Thanks.

Hi, I don't know if this is possible or not? We've got an old DL380 G5 server in our office that isn't being used. This will eventually be replaced however we're wanting to trial Citrix. We've been given 2 iPad's as a donation (iPad 2, 16GB) and 4x Thin Clients which we're planning to use a endpoint devices with Citrix. We're planning to install XenServer to the DL380 and use a free trial of Citrix XenDesktop to look at it's possibilities. However, from the XenDesktop - we're going to want to play YouTube on the Thin Clients. Is there such a way we can configure the Thin Client to have the YouTube video rendered on the device itself (using the internal graphics card) rather than on the Server? We have no third-party Graphics Cards on the Server itself, so wanting to render all videos on the Thin Client, if possible? Might be asking a stupid question, but wanting to know what our options are? In short: 4x thin clients, DL380 - wanting to play video on thin clients without assigning graphics cards to DL380 - possible? Thanks.

Hi, you are a legend! On my unit, there was a plate screwed over the reset button, which would explain why it wasn't obvious! I've removed it and reset the switch to defaults now. Thank you!!

Hi, it's a[h=2] 3Com 3CRUS2475[/h] I can't seem to find a physical reset button on the unit, which is a massive annoyance. Very little documentation online as well. Thanks!