jamitupya

have you specified the location in your GPO where the Bitlocker Keys are backed up too? silly i know, but we experienced this same thing recently and had a typo in the GPO. fixed that and seemed to work again.

we package the language pack into an unattended .xml and .msp file with-in the office source. you can do the same thing, download the office lp source and the office templates for customizing installation, run the setup.exe /admin and create a transformation file... thats one method....

Prefered to do it through gpo also, however I have a script laying around here to do it... Same think came up yesterday in the deploy windows 7 forum I'll find and post next week

Select the bottom option :-) its a bit misleading but its the one

Well i've got SCCM built with citrix integration and playing around... im trying to figure out, are there an best practices on GPO usage in XenDesktop? or do i just use our normal GPO practices? either way...

Yeah, i'd just use a csv file and the import function in SCCM also like Peter says

Hey Jason, can you copy the attach the whole log file? i assume your just wanting to add the SRCShell to the local admins group? is the SRCShell user a domain user or do you want to add as a local user? if you want to add as a local user "net user /add SRCShell password /EXPIRES:NEVER" "net localgroup Administrators /Administrators /add SRCShell" if you want to add as domain user net localgroup Administrators /add /domain SRCShell this help out a bit? we script it, and generally don't add domain users to a local admin group as it get to messy to maintain... you can add a domain group easily also VBSCRIPT 'Beginning Of the Script On Error Resume Next 'get main objects/variables Set ws = WScript.CreateObject ( "WScript.Shell" ) compname = ws.ExpandEnvironmentStrings ( "%COMPUTERNAME%" ) Set adGrp = GetObject ( "WinNT://" & compname & "/Administrators,group" ) 'add domain groups to local admin group adGrp.Add ( "WinNT://DOMAIN1/Domain Admins,group" ) adGrp.Add ( "WinNT://DOMAIN2/Domain Admins,group" ) 'End of the Script

Congrats

Hi Andreas, Yes i was looking at the connector however it seems to error out on my vNext installation. Not to worry as i will just use sccm until an updated version is released (any timeframe for a test you know of? ;-) ) I'm struggling with hyperv and scvmm atm and using this with xendesktop... just the performance isnt there atm, need to tweak more but customers keep bothering me... the bastards ;-) good to see a couple of citrix people floating around and i'd be really interested to see any doco you pump out :-) Good luck :-) Greg

you could also use "reg import filename". i have more luck with that though you need a reboot to effect it generally...

Hi Jo, Impressed :-) Currently we have a design for our global standard that is entirely based on XenAPP and XenDesktop. For our Managed Desktop Solution at current we utilize CA's toolsets however they don't play so well in the virtual environment and alot of customers are unwilling to go down the CA road as they already have SMS or SCCM implemented organization wide. So to marry the two solutions is my plan. You are correct we already lockdown USB, Software installation (and drivers), have a variety of GPO's to solve these problems dependant on the users Group member ships, we also utilize the Appsense suite to ensure the more difficult to manage components are locked down and enforce as well as managing the user profiles are managed in an orderly fashion. When we test the implementations we also use varying degrees of user accounts (no managed, lightly managed, highly managed) to test access and service availability. I am only just beginning in the Citrix World and so far i like it, i'll have a read and post in the citrix forums and here Greg

As you can imagine, virtualized desktops is the "IN" thing at the moment and utilizing a wide range of toolsets and infrastructure. Is anybody else building these solutions at this time? One of the few "regular" requests to my organization is for better governance and control over the IT environment in the customers Offshore (and onshore) Service Desks, Corporate Entities and their Subsidiaries. Generally this will fall down to the below arguments... - No Consolidated governance of the individual companyInfrastructure - No asset management of Software, hardware and compliance. - A lack of IT resources to effectively manage theEnterprise Infrastructure and Desktop Environment. The other request is in regards to Licensing and Data Retention. - There are many risks of data leakage in most organizations (employee copying confidential information to USB memory, PC theft, etc.) - Minimal network andapplication security - Improve Antivirusand Security patches - Many unapprovedapplications in use In looking at these risks and possible methods to remove some of the burden on IT staff we are deploying a virtualized desktop client to our Customers and in turn securing the end-point devices (Fat Clients). Our Lab for building services around is primarily based in the Citrix and CA World however where possible i am trying to move this to the Citrix / SCCM and App-V World. This thread is to provide a sounding board to myself and members who are undertaking other such projects. LAB: Hosts Citrix XenServer HOSTS x 2 Hyper-V Management Server vServers (on Management Server) 2 Domain Controllers for Forest Root (lab.dns) 1 SQL Server 1 File Server (user profiles and homes, USMT, etc) 1 Xen Center Server 1 Xen Desktop Server (DDC, Etc) 1 Application Server (Various Tools) 1 SCCM 2007 R2 Server - PXE - OSD - Software Distribution 2 Domain Controllers for Client Domain (vdi.lab.dns) vClients (on XenServer Hosts) Various Virtual Desktops 10 Windows 7 ZTI vDesktops 5 Windows XP ZTI vDesktops 2 Windows Server 2008 R2 XenAPP Hosts SO this is my Plan, im looking to provide a value add to our customers that enable us to utilize their existing SCCM Infrastructure and Site Servers to provide virtualized client services... Any one care to talk about this? Ask questions etc? There's a heap of other requirements and software that we utilize to virtualize these environments however i will list them later if needs be. Any concerns / Questions / comments ?

You can set a password on the TS thats advertised to unknown computers to negate that concern.... :-)

mmm... are the PST's in known location or office defaults?

checkout these... http://nexthopSPAM!/ http://www.insideocs.com/ also, follow DrRez and winxnetuc on twitter....

you should be able to use the unattended.xml file for this... under Packages / Foundation

this http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/8edd19ca-ccd7-4593-bed7-1cefe3e1a6f3 suggests it maybe a to long of a name. is your naming converntion over 16digits? try something shorter? can you give us the full smsts.log to help out

yes you should be able to just migrate your settings and data and rename and ip that bad boy and off you go.

I guess they are running windows small business server 2008 if they are using exchange? We need a few more bits of information to see if its the servers fault or other problem. 1) can you do an ipconfig/all of the server (in a command prompt) 2) can you do an ipconfig/all on one of the clients. 3) can you list out the specifications of the server, CPU,HDD,RAM(4Gb),NETWORK CARDS,CORE SOFTWARE (windows,exchange,other tools?) For exchange, you can set a policy to archive email over a specified period, however you need to be certain this is OK by the business Data retention policy (if they have one) This affects MANY things, for example, if its a legal office, they are required to keep ALL client communications etc... Thats a start

I'll see if i can extract it, it's part of a bigger script..... will try my best :-)

no problems, we also have a killscript that operates during OSD (we have a reboot after SAV and about 4 other apps install) and the Liveupdate service kicks off, our kill script stops the process and pauses the LUI service. thats another way it can be handled.

http://www.symantec....ckage-or-policy does this help? and the embedded links? more detailed http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101610183248

I know you can disable liveupdate after install until reboot... That's how we do it, will ask my packager how she does it next week :-)

Yeah cleans things up a bit doesn't it :-)

I'd set these configurations through Active directory Group policies.... easier to manage and more flexibility over the changes. I think what niall means is build a reference image, with your small common tools, and then have a deploy task sequence which actually deploys the image and then the larger applications like office, SAP, etc... thats how most people do it... my "base/gold" image is still 2.2Gb for Win7 x86 and has no drivers, but has winrar, bginfo, pstools, adobe reader, flash, etc. Build x86 Windows 7 Enterprise Build 0.9a.xml Deploy x86 Windows 7 Enterprise Deploy 0.9a.xml