You are on page 1of 4

VMware View

-----------
vCenter - View = MN08J-YA102-P8232-0L18H-3WX70
Host = N5283-PXJ90-P8C32-0V3HP-3E7L0
W2008 64bits = h4yqh-7v9j4-p28mp-j2mgc-vb7y4
No TS:
Local Group Policy (gpedit.msc) -> User Configuration - Windows Settings - Scrip
t (Logon/logoff)
Colocar o script remoteDesktop.bat em
c:\windows\system32\grouppolicy\user\scr
ipts\logon:
@echo off
if NOT %username%==administrator goto AD
MIN
GOTO END
:ADMIN
if NOT %username%==Administrator gotp :T
S
GOTO END
:TS
mstsc %username%.rdp /v:%username%.frg.i
ntra
shutdown /l
GOTO END
:END
Terminal Service Configuration:
RDP-tcp -> Environment -> Run initial program ....
================================================================================
=
These are the settings for all the users, as copied from GPMC
All Users
Computer Configuration (Enabled)
No settings defined.
User Configuration (Enabled)
Windows Settings
Folder Redirection
My Documents
Setting: Basic (Redirect everyone's folder to the same location)
Path: D:\Users\%USERNAME%\My Documents
Options: show
Grant user exclusive rights to My Documents Disabled
Move the contents of My Documents to the new location Disabled
Policy Removal Behavior Leave contents
Administrative Templates
Control Panel
Prohibit access to the Control Panel Enabled
Desktop
Do not add shares of recently opened documents to My Network Places Enabled
Don't save settings at exit Enabled
Hide My Network Places icon on desktop Enabled
Prohibit user from changing My Documents path Enabled
Remove My Computer icon on the desktop Enabled
Start Menu and Taskbar
Add Logoff to the Start Menu Enabled
Do not display any custom toolbars in the taskbar Disabled
Force classic Start Menu Disabled
Hide the notification area Enabled
Prevent changes to Taskbar and Start Menu Settings Enabled
Remove access to the context menus for the taskbar Enabled
Remove All Programs list from the Start menu Enabled
Remove and prevent access to the Shut Down command Enabled
Remove common program groups from Start Menu Enabled
Remove Documents menu from Start Menu Enabled
Remove Drag-and-drop context menus on the Start Menu Enabled
Remove Favorites menu from Start Menu Enabled
Remove Help menu from Start Menu Enabled
Remove links and access to Windows Update Enabled
Remove My Network Places icon from Start Menu Enabled
Remove Network Connections from Start Menu Enabled
Remove programs on Settings menu Enabled
Remove Run menu from Start Menu Enabled
Remove Search menu from Start Menu Enabled
Remove Set Program Access and Defaults from Start menu Enabled
Remove user's folders from the Start Menu Enabled
Turn off personalized menus Enabled
System/Ctrl+Alt+Del Options
Remove Task Manager Enabled
Windows Components/Windows Explorer
Hide these specified drives in My Computer Enabled
Pick one of the following combinations Restrict A, B an
d C drives only
Prevent access to drives from My Computer Enabled
Pick one of the following combinations Restrict A, B an
d C drives only
Remove Windows Explorer's default context menu Enabled
Removes the Folder Options menu item from the Tools menu Disabled
Windows Components/Windows Explorer/Common Open File Dialog
Items displayed in Places Bar Enabled
Places to display:
Item 1 MyDocuments
Item 2
Item 3
Item 4
Item 5

The second group policy handles the publishing of the application.


App1
Computer Configuration (Enabled)
No settings defined.
User Configuration (Enabled)
Windows Settings
Scripts
Logon
Name Parameters
D:\Netlogon\app1.vbs
Administrative Templates
Desktop
Hide and disable all items on the desktop Enabled
Start Menu and Taskbar
Turn off personalized menus Enabled
==============================================================================
AD-FRG = 172.20.0.13
View = 172.20.0.14 W2003 32bits 1024MB
SecurityFRG = 172.20.0.15 para rodar PCOIP TEM que ser W2008 64bits
TS = 172.20.0.16 W2008 64bits 4096MB
==============================================================================
*********************************************************************
RDP para Windows 7
******************
Arquivo .rdp -> username:s:nomeDoUsuario
domain:s:nomeDaMaquina
enablecredsspsupport:i:0
-----------------------------------------------------------------------
Allow .rdp files from unknown publishers
These Group Policy settings are located in Computer Configuration\Policies\Admin
istrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Co
nnection Client and User Configuration\Policies\Administrative Templates\Windows
Components\Remote Desktop Services\Remote Desktop Connection Client.
============================================================================
"Your credentials did not work" remote desktop
Start local group policy editor, start – run – gpedit.msc
Go to Local Computer Policy –> Computer Configuration –> Administrative Templates –> S
ystem –> Credentials Delegation
Edit “Allow Delegating Saved Credentials with NTLM-only Server Authentication”
Enable the policy, click Show and enter the value “TERMSRV/*” into the list.
Do the same thing for the following policies:
“Allow Delegating Saved Credentials”, “Allow Delegating Default Credentials with NTLM-
only Server Authentication” en “Allow Delegating Default Credentials”
Close the policy editor,
open a command prompt and use “gpupdate /force” to apply the policy directly
================================================================================
===
Trust Relationship Between Workstation and Domain Fails
There are two methods to rejoin the domain:
You can join the domain from the client if at the same time you can provide
an administrator username and password on the domain.
-or-
You can delete the existing computer account in Server Manager, recreate the
computer account, synchronize the domain, and then on the client rejoin the dom
ain.
Domain Member: Maximum age for machine account password, which by default is eve
ry 30 days.
You can configure this security setting by opening the appropriate policy and ex
panding the console tree as such:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Securit
y Options\
================================================================================
==

You might also like