Saturday, March 14, 2009

[THIN] Re: 2 Access Gateways different default logon points?

One other thought, you could put the two group in different realms, see if realms let you do LDAP in one and RSA/LDAP in the other this might work…

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Friday, March 13, 2009 9:27 PM
To: thin@freelists.org
Subject: [THIN] Re: 2 Access Gateways different default logon points?

 

I think you are right. When you put the CAG in AAC mode the authentication is off loaded to the AAC. If there is no way to segregate the landing point by device you *might* have to bring up a second AAC server to do what you want….

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of James Scanlon
Sent: Friday, March 13, 2009 8:32 PM
To: Thin
Subject: [THIN] 2 Access Gateways different default logon points?

 

Greetings again all you fabulous list legends!
 
Quick one hopefully!?
 
I have 2 Gateway Devices both pointing to the same AAC server.
 
I want to have 1 gateway device support LDAP and RSA (its available externally)
I want the other to have just LDAP (its only available internally)
 
From what I can tell the advanced authentication methods can only be setup per logon point, however I cant find a way to have 2 different CAGS point to different default logon points (under the same AAC server)
 
Am I missing something really simple?
 
Cheers and best wishes
James
 


Let ninemsn property help. Need a new place to rent, share or buy?

[THIN] Re: 2 Access Gateways different default logon points?

I think you are right. When you put the CAG in AAC mode the authentication is off loaded to the AAC. If there is no way to segregate the landing point by device you *might* have to bring up a second AAC server to do what you want….

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of James Scanlon
Sent: Friday, March 13, 2009 8:32 PM
To: Thin
Subject: [THIN] 2 Access Gateways different default logon points?

 

Greetings again all you fabulous list legends!
 
Quick one hopefully!?
 
I have 2 Gateway Devices both pointing to the same AAC server.
 
I want to have 1 gateway device support LDAP and RSA (its available externally)
I want the other to have just LDAP (its only available internally)
 
From what I can tell the advanced authentication methods can only be setup per logon point, however I cant find a way to have 2 different CAGS point to different default logon points (under the same AAC server)
 
Am I missing something really simple?
 
Cheers and best wishes
James
 


Let ninemsn property help. Need a new place to rent, share or buy?

Friday, March 13, 2009

[THIN] 2 Access Gateways different default logon points?

Greetings again all you fabulous list legends!
 
Quick one hopefully!?
 
I have 2 Gateway Devices both pointing to the same AAC server.
 
I want to have 1 gateway device support LDAP and RSA (its available externally)
I want the other to have just LDAP (its only available internally)
 
From what I can tell the advanced authentication methods can only be setup per logon point, however I cant find a way to have 2 different CAGS point to different default logon points (under the same AAC server)
 
Am I missing something really simple?
 
Cheers and best wishes
James
 


Let ninemsn property help. Need a new place to rent, share or buy?

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Per user licensing is now being tracked but not enforced in Windows 2008.
Michael Burke, as usual, has the rundown:

Christoph


On Mar 14, 2009, at 12:27 AM, Peterson David wrote:

I'm thinking "indirectly" just means they aren't at the console. But I'm on the slow bus and trying to figure out the change...though is the per user licensing enforced yet in 2008 or is it still on the honor system?


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Berny Stapleton
Sent: Friday, March 13, 2009 8:24 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Indirectly: Firewall and NAT?

2009/3/13 Greg Reese <gareese@gmail.com>
i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.


On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:
Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot




NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl may constitute an attorney-client communication that is privileged at law. It is not intended for transmission to, or receipt by, any unauthorized persons. If you have received this electronic mail transmission in error, please delete it from your system without copying it, and notify the sender by reply e-mail, so that our address record can be corrected.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[THIN] Re: Citrix WI/CSG in the DMZ.

exactly.

WI/CSG can talk to the lan through a route set on the FW enabling traffic to pass from the DMZ to LAN.

I then use policies to only allow certain ports/services to communicate from the DMZ to the LAN.

On Fri, Mar 13, 2009 at 5:12 PM, Steve Greenberg <steveg@thinclient.net> wrote:

I think in this case, if I understand it correctly, your WI needs to
reference the FQDN of the CAG instance and set the appropriate mode which I
think here is "Gateway Direct", that is, the web interface uses the SSL
encryption of the Gateway and can communicate to the gateway directly
without NAT-this assumes that the CSG and WI can talk the Citrix servers via
the LAN


Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
www.thinclient.net
steveg@thinclient.net


-----Original Message-----
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
Of Harry Singh
Sent: Friday, March 13, 2009 12:56 PM
To: thin@freelists.org
Subject: [THIN] Re: Citrix WI/CSG in the DMZ.

What specifically inside WI should I look for ?

It's been a while since I tinkered with a WI config.

Thanks,


On 3/13/09, Joe Shonk <joe.shonk@gmail.com> wrote:
> Should work just fine..  Just make sure your WI rules are defined
correctly.
>
>
>
> Joe
>
>
>
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On
Behalf
> Of Harry Singh
> Sent: Friday, March 13, 2009 12:15 PM
> To: thin@freelists.org
> Subject: [THIN] Citrix WI/CSG in the DMZ.
>
>
>
> All --
>
> I'm changing the topology of our current DMZ environment and want to make
> sure that CSG works with NAT
>
> Below are hypothetical IP ranges.
>
> Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x
>
> There will be a route to allow traffic from DMZ to the Internal Network so
> Traffic originating from the DMZ can talk to the Citrix servers.
>
>
> External IP's
>
> 66.111.115.x/27
>
> Private IP's assigned to WI/CSG
>
> 192.168.88.10 + 192.168.88.11
>
> Citrix servers in Internal Network
>
> 192.168.5.1
>
>
>
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: Citrix WI/CSG in the DMZ.

I think in this case, if I understand it correctly, your WI needs to
reference the FQDN of the CAG instance and set the appropriate mode which I
think here is "Gateway Direct", that is, the web interface uses the SSL
encryption of the Gateway and can communicate to the gateway directly
without NAT-this assumes that the CSG and WI can talk the Citrix servers via
the LAN


Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
www.thinclient.net
steveg@thinclient.net

-----Original Message-----
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
Of Harry Singh
Sent: Friday, March 13, 2009 12:56 PM
To: thin@freelists.org
Subject: [THIN] Re: Citrix WI/CSG in the DMZ.

What specifically inside WI should I look for ?

It's been a while since I tinkered with a WI config.

Thanks,


On 3/13/09, Joe Shonk <joe.shonk@gmail.com> wrote:
> Should work just fine.. Just make sure your WI rules are defined
correctly.
>
>
>
> Joe
>
>
>
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On
Behalf
> Of Harry Singh
> Sent: Friday, March 13, 2009 12:15 PM
> To: thin@freelists.org
> Subject: [THIN] Citrix WI/CSG in the DMZ.
>
>
>
> All --
>
> I'm changing the topology of our current DMZ environment and want to make
> sure that CSG works with NAT
>
> Below are hypothetical IP ranges.
>
> Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x
>
> There will be a route to allow traffic from DMZ to the Internal Network so
> Traffic originating from the DMZ can talk to the Citrix servers.
>
>
> External IP's
>
> 66.111.115.x/27
>
> Private IP's assigned to WI/CSG
>
> 192.168.88.10 + 192.168.88.11
>
> Citrix servers in Internal Network
>
> 192.168.5.1
>
>
>
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: Citrix WI/CSG in the DMZ.

Within the WI, you can configure it for several DMZ scenarios. In your case, you'll want WI to return the FQDN of the CSG (should be the Public IP, not the internal NATed one). Then you'll want the WI to use the IP addresses of the XenApp Servers that are visible from the CSG box itself. So if you NAT the DMZ to the Internal Network you'll need to setup the NAT tables (in WI).

For the most part, you shouldn't need to change anything if all your changing is the external IP address.

Joe

-----Original Message-----
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Harry Singh
Sent: Friday, March 13, 2009 12:56 PM
To: thin@freelists.org
Subject: [THIN] Re: Citrix WI/CSG in the DMZ.

What specifically inside WI should I look for ?

It's been a while since I tinkered with a WI config.

Thanks,


On 3/13/09, Joe Shonk <joe.shonk@gmail.com> wrote:
> Should work just fine.. Just make sure your WI rules are defined correctly.
>
>
>
> Joe
>
>
>
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
> Of Harry Singh
> Sent: Friday, March 13, 2009 12:15 PM
> To: thin@freelists.org
> Subject: [THIN] Citrix WI/CSG in the DMZ.
>
>
>
> All --
>
> I'm changing the topology of our current DMZ environment and want to make
> sure that CSG works with NAT
>
> Below are hypothetical IP ranges.
>
> Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x
>
> There will be a route to allow traffic from DMZ to the Internal Network so
> Traffic originating from the DMZ can talk to the Citrix servers.
>
>
> External IP's
>
> 66.111.115.x/27
>
> Private IP's assigned to WI/CSG
>
> 192.168.88.10 + 192.168.88.11
>
> Citrix servers in Internal Network
>
> 192.168.5.1
>
>
>
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: Citrix WI/CSG in the DMZ.

What specifically inside WI should I look for ?

It's been a while since I tinkered with a WI config.

Thanks,


On 3/13/09, Joe Shonk <joe.shonk@gmail.com> wrote:
> Should work just fine.. Just make sure your WI rules are defined correctly.
>
>
>
> Joe
>
>
>
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
> Of Harry Singh
> Sent: Friday, March 13, 2009 12:15 PM
> To: thin@freelists.org
> Subject: [THIN] Citrix WI/CSG in the DMZ.
>
>
>
> All --
>
> I'm changing the topology of our current DMZ environment and want to make
> sure that CSG works with NAT
>
> Below are hypothetical IP ranges.
>
> Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x
>
> There will be a route to allow traffic from DMZ to the Internal Network so
> Traffic originating from the DMZ can talk to the Citrix servers.
>
>
> External IP's
>
> 66.111.115.x/27
>
> Private IP's assigned to WI/CSG
>
> 192.168.88.10 + 192.168.88.11
>
> Citrix servers in Internal Network
>
> 192.168.5.1
>
>
>
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: Citrix WI/CSG in the DMZ.

Should work just fine..  Just make sure your WI rules are defined correctly.

 

Joe

 

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Harry Singh
Sent: Friday, March 13, 2009 12:15 PM
To: thin@freelists.org
Subject: [THIN] Citrix WI/CSG in the DMZ.

 

All --

I'm changing the topology of our current DMZ environment and want to make sure that CSG works with NAT

Below are hypothetical IP ranges.

Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x

There will be a route to allow traffic from DMZ to the Internal Network so Traffic originating from the DMZ can talk to the Citrix servers.


External IP's

66.111.115.x/27

Private IP's assigned to WI/CSG

192.168.88.10 + 192.168.88.11

Citrix servers in Internal Network

192.168.5.1

[THIN] Citrix WI/CSG in the DMZ.

All --

I'm changing the topology of our current DMZ environment and want to make sure that CSG works with NAT

Below are hypothetical IP ranges.

Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x

There will be a route to allow traffic from DMZ to the Internal Network so Traffic originating from the DMZ can talk to the Citrix servers.


External IP's

66.111.115.x/27

Private IP's assigned to WI/CSG

192.168.88.10 + 192.168.88.11

Citrix servers in Internal Network

192.168.5.1


[THIN] Re: IE Zone settings not applying

Of course test it in your environment, but I've had no problems
running them as .cmd files as I showed you.

Cheers

On 3/13/09, Angela Smith <angela_smith9@hotmail.com> wrote:
>
> Hi Tim
>
> I want to ensure I understand you completely.. Im assuming I change my
> Published IE App to run a batch file with your code below. Are there any
> issues with leaving applications setup like this? 70% of my Farm
> applications are IE based so I would need to change all published
> applications
>
> Thanks
> Angela
>
> Date: Thu, 12 Mar 2009 07:27:39 -0500
> Subject: [THIN] Re: IE Zone settings not applying
> From: timothylanderson@gmail.com
> To: thin@freelists.org
>
> I had this problem in the past. The issue is that if explorer.exe is not
> loaded in the session GPO's are not applied to the profile. I got around
> this by running runonce.exe with the alternateshellstartup switch. This
> will get your GPO's applied.
>
>
>
>
> @ECHO OFF
>
> Color 0A
>
> IF EXIST "%userprofile%\filemarker.txt" GOTO LAUNCH
>
> runonce.exe /AlternateShellStartup
>
> ECHO.DO NOT CLOSE THIS WINDOW - SETTING UP PROFILE - THIS IS
> A ONE TIME PROCESS
>
> c:\tools\sleep.exe 5
>
> Copy "C:\documents and settings\filemarker.txt"
> "%USERPROFILE%":LAUNCH
>
> Start "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
> "Path to your website"
> Cheers
>
>
>
>
> On Wed, Mar 11, 2009 at 9:32 PM, Angela Smith <angela_smith9@hotmail.com>
> wrote:
>
>
>
>
>
>
> Hi
>
> I have a strange issue where my Published IE sessions are not getting any IE
> Zone information (ie Local Intranet settings) via GPO. I have set the GPO
> using:
>
> User Configuration > Administrative Templates > Windows Components >
> internet Explorer > Internet Control Panel > Security Page > Site To Zone
> Assignment List
>
>
> Ive also done the above using Machine Based Policy without any luck. I have
> also tried using "User Configuration > Windows Settings > Internet Explorer
> Maintenance > Security > Security Zones and Content" but had no luck either.
>
>
>
> If I run a RSOP, it shows the IE Zone settings supposedly applying but I
> cannot see the settings in IE if I manually check as a user within the
> Published IE Session. If I login to the server console I can see the IE
> settings being applied. They simply dont appear when logging on to the
> Published IE Application as a user.
>
>
> Any ideas on how I can set IE Zone information either via Machine or User
> based policy? Servers are Windows 2003.
>
> Thanks
> Ang
>
> Get what you want at ebay. View photos of singles in your area
>
>
>
> _________________________________________________________________
> View photos of singles in your area. Click Here
> http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fdating%2Eninemsn%2Ecom%2Eau%2Fchannel%2Findex%2Easpx%3Ftrackingid%3D1046247&_t=773166080&_r=Hotmail_Endtext&_m=EXT
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: thin client deployment in a school

Thanks to all of you for such informative inputs.

I have already recomended desktop PC for the heavy apps.

Regards,
Puneet

On Thu, Mar 12, 2009 at 6:58 AM, Steve Greenberg <steveg@thinclient.net> wrote:
> Rick,
>
>
>
> How come I am not surprised that you have a daughter that does that!!?!
>
> Good point, I was thinking in the context of a recent college project we did
> where VDI was sufficient for such applications because they were simply
> doing basic learning labs. If you are doing extensive rendering type of
> workloads then I agree that you probably need dedicated workstations with
> capable resources in CPU, MEM and graphics.
>
>
>
> Although don't forget that a typical VDI server is (4) Quad core CPU's so
> there are plenty of light and med workloads that work pretty well too!!
>
>
>
>
>
> Steve Greenberg
>
> Thin Client Computing
>
> 34522 N. Scottsdale Rd D8453
>
> Scottsdale, AZ 85266
>
> (602) 432-8649
>
> www.thinclient.net
>
> steveg@thinclient.net
>
>
>
> ________________________________
>
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
> Of Rick Mack
> Sent: Wednesday, March 11, 2009 4:59 PM
> To: thin@freelists.org
> Subject: [THIN] Re: thin client deployment in a school
>
>
>
> Hi Steve,
>
>
>
> My daughter runs Maya at home and her quad core AMD with a high end graphics
> card has to work pretty hard to do some of the rendering. 3D Max isn't any
> better so I'd have to say that neither of them belong on a shared
> environment, TS or VDI. That automatically makes a case for either using fat
> clients and something like PVS, or PC blades and 3D graphics display-capable
> protocol/thin clients. In the latter case you're looking at RGS or PCoIP
> with PVS possibly being used for the PC blade provisioning.
>
>
>
> If thin clients are the logical choice to keep the expensive hardware away
> from students, you don't have a lot of options.
>
>
>
> Some of the other stuff will most certainly run on VDI or TS but I'd
> probably opt for VDI so you could stick to just managing a single
> environment (workstations/thin client) on the keep it simple principle.
>
>
>
> regards,
>
>
>
> Rick
>
> --
> Ulrich Mack
> Quest Software
> Provision Networks Division
>
>
>
> On Thu, Mar 12, 2009 at 8:55 AM, Steve Greenberg <steveg@thinclient.net>
> wrote:
>
> I agree with the idea that for intensive appliations such as Maya and
> AutoCad that a mix of TS and VDI is a very strong solution. Use the TS for
> general applications to gain the efficiency of the shared servers and use
> VDI for apps that require more resources and/or have compatibility/support
> issues.
>
>
>
> I also like Provision Server to PC hardware because you get the best of both
> worlds-local graphics performance and compatibility with centralized
> mamangment.
>
>
>
> In *some* cases I think Provisioning Server to PC is a better thin client!!
>
>
>
>
>
> Steve Greenberg
>
> Thin Client Computing
>
> 34522 N. Scottsdale Rd D8453
>
> Scottsdale, AZ 85266
>
> (602) 432-8649
>
> www.thinclient.net
>
> steveg@thinclient.net
>
>
>
>
>
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Is that what they used to call “Internet Connector”, i.e. outside people who weren’t employee?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Joe Shonk
Sent: Friday, March 13, 2009 8:05 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

 

Web Server…

 

Joe

 

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Greg Reese
Sent: Friday, March 13, 2009 5:21 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

 

i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.

On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

 

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Love it!

 

 

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Greg Reese
Sent: Friday, March 13, 2009 8:21 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

 

i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.

On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

 

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Web Server…

 

Joe

 

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Greg Reese
Sent: Friday, March 13, 2009 5:21 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

 

i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.

On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

 

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Not sure, but I thought indirect meant from a client that is not consuming the TSCAL ie, passing through from another Terminal Server or some other scenario where your RDP session is not executing on the end point…..

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Peterson David
Sent: Friday, March 13, 2009 6:27 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

 

I'm thinking "indirectly" just means they aren't at the console. But I'm on the slow bus and trying to figure out the change...though is the per user licensing enforced yet in 2008 or is it still on the honor system?

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Berny Stapleton
Sent: Friday, March 13, 2009 8:24 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Indirectly: Firewall and NAT?

2009/3/13 Greg Reese <gareese@gmail.com>

i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.

 

On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

 




NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl may constitute an attorney-client communication that is privileged at law. It is not intended for transmission to, or receipt by, any unauthorized persons. If you have received this electronic mail transmission in error, please delete it from your system without copying it, and notify the sender by reply e-mail, so that our address record can be corrected.

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

I'm thinking "indirectly" just means they aren't at the console. But I'm on the slow bus and trying to figure out the change...though is the per user licensing enforced yet in 2008 or is it still on the honor system?


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Berny Stapleton
Sent: Friday, March 13, 2009 8:24 AM
To: thin@freelists.org
Subject: [THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Indirectly: Firewall and NAT?

2009/3/13 Greg Reese <gareese@gmail.com>
i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.


On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:
Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot




NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl may constitute an attorney-client communication that is privileged at law. It is not intended for transmission to, or receipt by, any unauthorized persons. If you have received this electronic mail transmission in error, please delete it from your system without copying it, and notify the sender by reply e-mail, so that our address record can be corrected.

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

How did this change from Windows 2003?  It sounds the same.
 
 

_______________________________
Hector Minero
NSWCDD K55
Ph:(540)653-8859

-----Original Message-----
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Jim Kenzig http://thin.ms
Sent: Friday, March 13, 2009 7:37 AM
To: THIN
Subject: [THIN] Microsoft KB Licensing Windows Server 2008 Terminal Services

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

Indirectly: Firewall and NAT?

2009/3/13 Greg Reese <gareese@gmail.com>
i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.


On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:
Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot


[THIN] Re: Microsoft KB Licensing Windows Server 2008 Terminal Services

i haven't had my coffee yet and I am still a little slow, but how do you "indirectly" access a terminal server?

I keep waiting for them to license anyone who "thinks" about connecting.

On Fri, Mar 13, 2009 at 6:37 AM, Jim Kenzig http://thin.ms <jkenzig@gmail.com> wrote:
Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

[THIN] Microsoft KB Licensing Windows Server 2008 Terminal Services

Recently updated:
Licensing Windows Server 2008 Terminal Services
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b8a7c6ed-1bc1-4035-9110-1ee6da8f3fd4
Microsoft licensing policies for Windows Server Terminal Services, including the new components that are included in Windows Server 2008, require that in addition to a Windows Server Client Access License (CAL), Microsoft® Core CAL Suite, or Microsoft Enterprise CAL Suite, you must acquire a Windows Server 2008 TS CAL for each user or device that directly or indirectly accesses the server software to interact with a remote graphical user interface (using the Windows Server 2008 Terminal Services functionality or other technology).


Jim Kenzig
Blog: http://www.techblink.com
Twitter: http://twitter.com/kenzig
Twitter: http://twitter.com/InternetPilot

[THIN] Re: SQL Datastore - clustering

Hi Angela,

Yes, SQL Server running on a failover cluster is fully supported for XenApp data stores.

I have been running data stores on SQL server cluster before.

Depending on what your requirements are (availability, restore time, resiliency, scalability) there a other SQL features available (Mirroring, Replication) to implement a Citrix data store as well.

Cheers
Christoph

On Mar 13, 2009, at 6:35 PM, Angela Smith wrote:

Hi

I will be moving my SQL Datastore + RMSummaryDB from a single SQL Server to a SQL Cluster.  I know some Applications are not DB Cluster aware.  Im assuming Citrix is fine with SQL Clusters but I just wanted to validate it.  Is anyone out there running their DB's on a SQL cluster?

Thanks
Angela


Explore the new Windows Live. Looking for a place to manage all your online stuff?
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[THIN] SQL Datastore - clustering

Hi

I will be moving my SQL Datastore + RMSummaryDB from a single SQL Server to a SQL Cluster.  I know some Applications are not DB Cluster aware.  Im assuming Citrix is fine with SQL Clusters but I just wanted to validate it.  Is anyone out there running their DB's on a SQL cluster?

Thanks
Angela


Explore the new Windows Live. Looking for a place to manage all your online stuff?

[THIN] Re: IE Zone settings not applying

Hi Tim

I want to ensure I understand you completely..  Im assuming I change my Published IE App to run a batch file with your code below.  Are there any issues with leaving applications setup like this?  70% of my Farm applications are IE based so I would need to change all published applications

Thanks
Angela


Date: Thu, 12 Mar 2009 07:27:39 -0500
Subject: [THIN] Re: IE Zone settings not applying
From: timothylanderson@gmail.com
To: thin@freelists.org

I had this problem in the past.  The issue is that if explorer.exe is not loaded in the session GPO's are not applied to the profile.  I got around this by running runonce.exe with the alternateshellstartup switch.  This will get your GPO's applied.

@ECHO OFF

Color 0A

IF EXIST "%userprofile%\filemarker.txt" GOTO LAUNCH

runonce.exe /AlternateShellStartup

ECHO.DO NOT CLOSE THIS WINDOW - SETTING UP PROFILE - THIS IS A ONE TIME PROCESS

c:\tools\sleep.exe 5

Copy "C:\documents and settings\filemarker.txt" "%USERPROFILE%"

:LAUNCH

Start "C:\Program Files (x86)\Internet Explorer\iexplore.exe" "Path to your website"


Cheers



On Wed, Mar 11, 2009 at 9:32 PM, Angela Smith <angela_smith9@hotmail.com> wrote:
Hi

I have a strange issue where my Published IE sessions are not getting any IE Zone information (ie Local Intranet settings) via GPO.  I have set the GPO using:

User Configuration > Administrative Templates > Windows Components > internet Explorer > Internet Control Panel > Security Page > Site To Zone Assignment List

Ive also done the above using Machine Based Policy without any luck.  I have also tried using "User Configuration > Windows Settings > Internet Explorer Maintenance > Security > Security Zones and Content" but had no luck either. 

If I run a RSOP, it shows the IE Zone settings supposedly applying but I cannot see the settings in IE if I manually check as a user within the Published IE Session.  If I login to the server console I can see the IE settings being applied.  They simply dont appear when logging on to the Published IE Application as a user.

Any ideas on how I can set IE Zone information either via Machine or User based policy?  Servers are Windows 2003.

Thanks
Ang


Get what you want at ebay. View photos of singles in your area



Get what you want at ebay. View photos of singles in your area

[THIN] CN=Daniel Schoppmann/OU=bebit/O=LNN/C=DE is out of the office.

Ich werde ab 13.03.2009 nicht im Büro sein. Ich kehre zurück am 16.03.2009.


************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

Thursday, March 12, 2009

[THIN] Re: Thin Print Vs Provision Vs Universal Vs Windows 2008

Rick I appreciate the time you have taken to help me out!
Thanks very much!!
 
We are going to get thinprint in, (free of charge) and if they cant get us a better working solution with the current infrastructure and something that will work for the next 3-5 years we will look to move..
 
Cheers
 

Date: Wed, 11 Mar 2009 20:51:14 +1000
Subject: [THIN] Re: Thin Print Vs Provision Vs Universal Vs Windows 2008
From: ulrich.mack@gmail.com
To: thin@freelists.org

Hi Jim,
 
My apologies. I got carried away and didn't even answer your questions properly. Got hung up on ThinPrint......
 
Now for your questions:
 
1. If the upgrade is cgoing to cost you a lot of cash I'd think of maybe not doing it.
2. Absolutely :-)
3. XPS isn't too bad but you don't start getting real value out of it as a generic printing solution until you've got XPS compatible network printers etc. It's still only a partial solution and you'll end up with non-XPS and XPS printing in your environment unless you get a real UPD solution.
4. I love Konica MFP devices. Their postscript drivers would have to be the most inefficient drivers on the market and you can be absolutely certain to sell a UPD solution to someone with Konica MFP's on their WAN. A good UPD should allow you to select the advanced printing properties at the client end. Most of them do that.
5. An active/passive cluster aware UPD solution is nice, but once you get way from using non-UPD drivers on Citrix the printing stability just goes through the roof so the only thing you've got to worry about most times is hardware failure on the print server. Making it a multi vCPU virtual machine isn't a bad way to go for that number of users.
 
regards,
 
Rick
 
--
Ulrich Mack
Quest Software
Provision Networks Division
 
On Wed, Mar 11, 2009 at 3:25 PM, James Scanlon <scanjam@hotmail.com> wrote:
Greetings List Legends!
 
If anyone of you list citrix / thin legends have any suggestions, thoughts, ideas, I need to advise on the next best step forward for "printing" for our thin environment.
 
I have found ThinPrint to be exceptionally inflexible and expensive though I am uncertain of the alternatives. Really this product was purchased to get the drivers off the Citrix servers  (but lumping all the drivers onto 1 thinprint server seems just as stupid to me)
  1. Do we keep Thin Print and Upgrade to a better version (current 7.0.619.5)
  2. Do we look to another product (provision networks or something else)
  3. Do we look to upgrade to Windows Server 2008 and use some of the newer printing features with no other 3rd party software? (XPSDrv or whatever it is)
  4. We have a number of Konica MFD Devices to be 'migrated' which may or may not support universal printing (due to the extra features, stapling, trays etc) Do we force the rule of "Universal Driver Only"? and what do we do for the printers that don't work? native drivers?
  5. What do we do about redundancy for print services for citrix users
We will be using a brand new XenApp 5 Farm
All this has come up because we are looking to migrate 150 Printers and around 5000 users and I want to make sure we have the best solution in place for printing moving forward for the next 2-3 years min...
 
My thanks and regards to anyone who takes the time to reply, and apologies for the long email!
Best Wishes
 
James


Get what you want at ebay. View photos of singles in your area





Download the new Windows Live Messenger Find out what's new with your friends

[THIN] Re: Major bandwidth issue XenApp 5.0

Are you using any third-party printing products?  The CTXSCRD was the OEM VC at one time so there may be some other implementations that use this channel.

 

Joe

 

From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Jan Homan
Sent: Thursday, March 12, 2009 9:56 AM
To: thin@freelists.org
Subject: [THIN] Major bandwidth issue XenApp 5.0

 

ICA sessions connected to XenApp 5.0 are using continuously a lot of bandwidth on the CTXSCRD

virtual channel , despite the fact that we have turned off all options we know off which uses this

channel (for example SmartCard).

 

And because of this issue, ICA bandwidth usage has DOUBLED (!) since the switch to the XenApp 5.0.

Previous farm at this customer site was Citrix MetaFrame XP.

 

When we minimize the bandwidth on this channel with smcconsole, bandwidth DROPS significantly.

But we have to do this manually for each session (customer has more then 600 remote ICA sessions).

 

 

I have 2 questions:

 

- Has anyone seen this issue ?

  Which Citrix policy settings could maybe cause this bandwidth issue ?

 

- How can you turn of automatically, on server level, the same we now do with the smcconsole.

 

 

Any suggestion would be very much appreciated !!

 

Thanks.

 

Jan Homan

Square One bv