May 04

Connect HP OneView with Directory services

Hendricus KramerComments Off on Connect HP OneView with Directory services

— original post on my personal blog https://hendric.us —

This blog describes a step-by-step guide on how to use secure LDAP to connect the HP OneView appliance with Directory Services (Active Directory).

  • step 1. get the server certificate from the domain controller(s)
  • step 2. creating the right ldap query within HP OneView
  • step 3. adding domain groups to HP OneView

Continue reading »

Mar 12

Server 2016 – Using Edge with the built-in Administrator

Hendricus KramerComments Off on Server 2016 – Using Edge with the built-in Administrator

When you’re logged in with local Administrator on a Windows Server 2016 box, you can’t start the Edge browser.

Default security will prevent you from using the Edge browser and suggests you to login with a different user.

2016-edge-buildin-admin

To workaround this, you can follow these instructions:

  1.  (windows+r) run gpedit.msc
  2. go to: Computer configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> User Account Control: Admin Approval Mode for the Built-in Administrator account -> Enabled
  3. Reboot the Windows Server 2016 box (windows+r -> shutdown /r /t 0)
  4. enjoy using Edge with the local administrator account
Feb 18

Copy AD group memberships from a source user to other users

Michaja van der ZouwenComments Off on Copy AD group memberships from a source user to other users

Note: This blogpost is also posted on my personal blog.

One of those mondaine tasks you get to do as an IT administrator is assigning users to security groups for access to resources in the domain. Usually, when you ask the person making this request which security groups the user account needs membership for, they’ll tell you to use some other user account as a reference. Sometime you’ll even get a list of users that need to have the same memberships. Continue reading »

Feb 18

Change network connection category using PowerShell

Michaja van der ZouwenComments Off on Change network connection category using PowerShell

Note: This blogpost is also posted on my personal blog.

 

refwin-advfirewall-img4

I recently came across an issue with PSRemoting to a Windows 7 XenDesktop VM. I discovered remoting was disabled on the remote system because one of the network connections was a Public connection (it was the PVS connection). To change this using PowerShell is quite easy in Windows 8 or higher: the Set-NetConnectionProfile command is available to do just that. However, in Windows 7 this is not so easy. Even though PowerShell 4 was installed, the command was absent. So I decided to create my own functions to facilitate this, based on this script by Microsoft: LINK. This script utilizes the Network List Manager to make the change.  Continue reading »

Nov 03

View ADM(X) templates in RES ONE Workspace Console

Andy BarendregtComments Off on View ADM(X) templates in RES ONE Workspace Console

If you want to add an admx template in RES ONE Workspace and you want to be sure you are adding a newer version it can be handy to view the properties of the admx files that are already added to the repository.

There is a hidden feature in the console that allows you to do that.
In the Console go to Administration>Custom Resources.
Select the right pane and hit CTRL+SHIFT+F9.
A pop-up appears for selecting a RES ONE Workspace class
Continue reading »

Oct 26

Convert Shared Mailbox to User Mailbox in Microsoft Exchange 2010

UnsortedComments Off on Convert Shared Mailbox to User Mailbox in Microsoft Exchange 2010

The limitations of a shared mailbox are quite anoying and sometimes you want to convert the mailbox to a normal mailbox.
It’s quite simple exactly. Follow these three steps:

Continue reading »

Oct 20

Installing printer driver failed, error code 0x2, HRESULT 0x80070057

Andy BarendregtComments Off on Installing printer driver failed, error code 0x2, HRESULT 0x80070057

Last week we had a print spooler problem on a XenApp 7.6/Server 2012R2 farm. The print spooler service grew to a whopping 16GB of Memory. The problem was related to a mix of old Ricoh and Kyocera drivers.
After upgrading to new drivers the problem of the spooler was resolved. But on one machine the Ricoh Universal Print driver could not be installed. We received the following error:

Installing printer driver – failed, error code 0x57, HRESULT 0x80070057. See the event user data for context information. Installing printer driver – failed, error code 0x57, HRESULT 0x80070057. See the event user data for context information.

Continue reading »

Oct 05

Create a custom Deployment Wizard pane for Updates (MDT)

Michaja van der ZouwenComments Off on Create a custom Deployment Wizard pane for Updates (MDT)

Note: This blogpost is also posted on my personal blog.

One of the great things about the Microsoft Deployment Toolkit (MDT) is that it’s a very open product. All the scripts are customizable, including the Deployment Wizard. We can add new functionality to the deployment procedure and add wizard pages so we can choose to use those new functions (or not) with each new deployment. Microsoft encourages creativity for this particular product. One of the functions I wanted to create a wizard page for was the deployment of updates. I wanted to be able to choose between a quick OS deployment for test purposes (no updates) and a slower, more production worthy deployment (with updates). And since I take my deployment VM on the road with me, I wanted the ability to choose if the updates are downloaded from Microsoft Update or a clients’ WSUS server. The result looks like this:

Result Update Pane

Here’s how it’s done: Continue reading »

Oct 05

Add WSUS Target Group option to MDT deployments

Michaja van der ZouwenComments Off on Add WSUS Target Group option to MDT deployments

Note: This blogpost is also posted on my personal blog.

One of the great features you get when deploying a Windows operating system using my favorite deployment tool, the Microsoft Deployment Toolkit (MDT), is the ability to update the OS using either Windows Update or a local WSUS server. The latter is obviously preferred because it’s a lot quicker and you have better control over what updates you want to install. WSUS has a feature called Target groups, which you can utilize for managing update approvals for a group of computers. This way you’ll be able to approve or decline specific updates for  Remote Desktop Session hosts or Exchange servers etc. While MDT let’s you specify a WSUS server to get updates from there’s no way to specify the target group you want to receive updates from. Let’s fix that, shall we? Continue reading »

Oct 05

Screensaver not working in a XenDesktop VDI environment

Michaja van der ZouwenComments Off on Screensaver not working in a XenDesktop VDI environment

Note: This blogpost is also posted on my personal blog.

I was troubleshooting some RES Workspace Manager (RES WM) issues in a customer’s XenDesktop 7.x (Citrix) environment when I came across the following issue: The screensaver didn’t start automatically, even though I had forced a screensaver through RES WM. After some research I’d come to the conclusion that this was a known issue in XenDesktop 7.x. Apparently Citrix has decided to disable Screensavers and power-save options in XenDesktop. They provide the following solution in their eDocs documentation: Continue reading »