Disable Local Drive Mapping On Windows Server 2003

This post will show on how to disable local drive mapping via GPO for Windows Server 2003 environment. Considering GPO will take precedence over Citrix policy, this setting will work on both RDP and ICA sessions.

Description :
Disable local drive mapping via GPO (the same setting can be applied to local policy too)

How To Do :

1. Open your Group Policy Object, and browse to this setting ( Computer Configuration > Administrative Templates > Windows Components > Terminal Services > Client/Server data redirection 
   
   
   
   
2.  Let's focus on Do not allow drive redirection. Right click at it, and click at Properties
   
   
   
   
3.  Choose Enabled, press Apply and OK.
   
   
   
   
   
   
4.  This will be the outcome.
   
   
   
   
5. This is the explanation on this setting by Microsoft.  
   
   
   
   
6. Drive mapping is now disabled, and users are not able to change it.
   
   

Read More

Unable to Change Citrix XenApp Farm

This issue occurred to me a few years back, when we started enrolling Windows Server 2008. When I tried to change my Citrix XenApp server to another farm, CHFARM.exe crashed and I could not do it. Because I was using GUi rather than command line during that time, so I could capture below detail.

I did not have any issues in changing farm for XenApp in Server 2003, and my home lab (with Windows Server 2008) also gave a positive result. As I only can see this error on Server 2008 (security permission on my home lab was more relaxed - UAC disabled) and but not on Server 2003 (and my home lab), thus to me it was safe to narrow down the root cause to security permission on Server 2008 (to be exact : User Acess Control) that cause the problem.

Issues :

CHFARM crashed in the middle of changing Citrix XenApp farm (on Windows Server 2008).

Troubleshooting 

1.  RDP to the server, launch RUN, type secpol.msc, and press OK.
   
   
   
   
2. (First hint) At this window, click at I want to complete this action.
   
   
   
   
3.  Press Control+Alt+End at your keyboard to proceed.
   
   
   
   
4. Click at Continue.
   
   
   
   
5. Local Security Policy window appeared. Browse to Security Settings > Local Policies > Security Options
   
   
   
   
6.  Look for this option, you will find it Enabled
   Option : User Account Control: Run all administrators in Admin Approval Mode
   
   
   
   

Resolution :


**Depending on you organization security policies, you may want to consult with your Security team first before performing these steps.

1.  Right click at the option, and click on Properties
   
   
   
   
2.  From Enabled, change it too Disabled. Press Apply and OK. Reboot the server before proceed to change the XenApp farm. You may want to re-enable it once done.
   
   
   
   
3.  This explains in detail on the options. Note that Microsoft already stated that changing this setting requires a system reboot.
   

 p/s : You may find the option set to Not Configured. Try to check GPO applied to the server.

Read More

VDI Issue - Virtual Desktop Under Maintenance

I had this incident reported to my team once in a blue moon. users not able to access to their virtual desktops, with below error.

The desktop that you are trying to restart is currently undergoing maintenance. Contact your system administrator.

Issues :

Users not able to access virtual desktop because of the desktop is still under 
maintenance.

Troubleshooting 

1.  Launch Citrix Desktop Studio, and search for the specific virtual desktop. You may focus on the virtual desktop name or the user ID configured to it.

Read More

Unable to Increase Row Height in Microsoft Excel

On one fine day, when I wanted to do something with Excel, I realized that I was not able to expand the row height as mush as I wished. so When I tried to change the height by putting the value, I received below error.

It turned out that, maximum row height for Excel is 409 points, or 546 pixels. This has been documented in Excel Specifications and Limits, which you may refer to below link (under Reference).

As a workaround, you can merge 2 (or more) adjacent rows, and you will get 409n points of row heights (where n is the number of merged rows was I being silly here by providing that info?).

Give it a try :)

Reference 
https://support.office.com/en-nz/article/Excel-specifications-and-limits-1672b34d-7043-467e-8e27-269d656771c3

Read More

Adding AD User Groups Into Computer Local Groups (Microsoft Server 2003)

Description :
There are multiple ways to do add AD user groups into computer local groups - manual way or using GPO. To me, it is always GPO way - it is easier (sort of) as the configuration will be persistent across all servers where the GPO being applied to.

How To Do :

1.  At your GPO, right click at it, and choose Edit...
   
   
   
2.  Expand to Computer Configuration > Windows Settings > Security Settings > Restricted Groups. Right click at it, and choose Add Group...
   
   
   
3.  Click at Browse... as we want to choose the AD user Group.
   
   
   
4.  Type your AD User Group
   
   
   
5.   Click at Check Names to ensure the group is correct. Once it is confirmed, click at OK.
   
   
   
6. The User group will be listed here. You can choose as many user groups as you want, it will be listed here. Press OK again.
   
   
   
7.  In here, click at the Add button under This group is a member of: option.
   
   
   
8.  Click at Browse to choose the local group to be assigned to.
   
   
   
9.  Type your desired local group name. In this example, I chose Remote Desktop User. As always, press Check Names, and OK once confirmed.
   
   
   
10.  Press OK.
    
    
    
11.  So the local group will be listed here. Press Apply and OK.
    
    
    
12.  You can see a new entry listed in Restricted Groups option.
    
    
    
13.  To ensure the policy enforced to the servers, RDP to the servers and run GPUPDATE /FORCE command
    
    
    
14. You can see the AD user group will be listed in local Group.
    

Read More

Citrix Support Tools

I just realized that Citrix has listed all its support tools under a page. Admins can easily download all those tools and utilized them in their environments.

You can download those tools from here.

Read More

Microsoft has removed a feature from Microsoft Office 2010 which quite oftenly being used by end users - that is Microsoft Office Document Imaging ( MODI ). Therefore, as a workaround, MODI can be installed in 2 ways - MDI to TIFF Converter or Installing MODI from SharePoint Designer 2007. For this purpose, we will focussing on getting MODI installed from SharePoint Designer 2007.

Description :
Installing Microsoft Office Document Imaging ( MODI ) from SharePoint Designer 2007.



How To Do :

1.  Download SharePoint Designer 2007 from http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=21581
   
   
   
2.  Run the installer
   
   
   
   
3.  Extracting file
   
   
   
   
4.  Accept the agreement, and click Continue
   
   
   
   
5.   Click at Customize
   
   
   
   
6.  Put everything as Not Available, at first.
   
   
   
   
7. Now expand Office Tool, and Choose "Run All From My Computer" for Microsoft Office Document Imaging
   
   
   
   
    
8.  So this is how it looks like...
   
   
   
   
9.  Key in Desired location...
   
   
   
   
10.  As well as User Information
    
    
    
    
11. Once all done, click at Install Now
    
    
    
    
12.  Installation in progress.
    
    
    
    
13.  Click Close once installation completed
    
    
    
    
14.  MODI is now installed.
    

Reference :

• http://support.microsoft.com/kb/982760
• http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=21581

Read More