Home / user-75882

f3tt's questions

Martin Hope
f3tt
Asked: 2013-05-11 09:26:47 +0800 CST
  • 3

Is there a way to view which logon script is running for an AD user without having domain admin rights.

I've tried gpresult and it isn't displaying any login/logoff scripts, but I believe the script is configured under the user's Profile tab in AD Users&Computers.

Are there any events logged I could refer to, or does this logon script get stored locally by chance?

active-directory
Martin Hope
f3tt
Asked: 2013-04-12 21:43:54 +0800 CST
  • 0

I'm trying to configure the APC Network Shutdown script for 3 ESX hosts, and it doesn't seem like I can run my test script on my vMA appliance. I'm trying to verify I've set it up correctly using a bunch of echo commands in a test file named 'sandbox.sh'.

Here's my script:

#!/bin/sh
#IFS=$(echo -en "\n\b")
unset IFS
export LD_LIBRARY_PATH=:/opt/vmware/vma/lib64:/opt/vmware/vma/lib
export PERL_LWP_SSL_VERIFY_HOSTNAME=0

#Hosts 
#vMA is on host .131, so it will appear last
hosts=( 192.168.47.130 192.168.47.132 192.168.47.131 )
ups_vm="vSphere Management Assistant \(vMA\)"
mail_vms="Test"
dc_vms="CITRIX"

#search for exchange servers first, and shut down
echo "Searching for Email VMs to shut down..."
for host in ${hosts[@]}; do 
echo $host
source /opt/vmware/vma/bin/vifptarget -s $host
for i in `vmware-cmd -l | egrep $mail_vms`; do
if [ `vmware-cmd $i getstate | egrep -c "on"` -eq 1 ]; then
echo "I would have shut down EMAIL server $i"
fi
done
source /opt/vmware/vma/bin/vifptarget -c
done

#then shutdown all other VMs besides DCs and vMA
echo "Searching for VMs to shut down\(besides DC and vMA\)..."
for host in ${hosts[@]}; do
echo $host
source /opt/vmware/vma/bin/vifptarget -s $host
for j in `vmware-cmd -l`; do
if [ `vmware-cmd $j getstate | egrep -c "on"` -eq 1 ]; then
echo $j
if [ `echo $j | egrep -c $ups_vm` -eq 1 ]; then
echo "Skip shut down of VMA"
elif [ `echo $j | egrep -c $dc_vms` -eq 1 ]; then
echo "Skipping shutting down DC for now"
else
echo "I would have shut down $j"
fi
fi
done
source /opt/vmware/vma/bin/vifptarget -c
done

#now shutdown DCs
echo "Searching for domain controller VMs to shut down"
for host in ${hosts[@]}; do
echo $host
source /opt/vmware/vma/bin/vifptarget -s $host
for k in `vmware-cmd -l | egrep $dc_vms`; do
if [ `vmware-cmd $k getstate | egrep -c "on"` -eq 1 ]; then
echo "I would have shut down DC $k"
fi
done
source /opt/vmware/vma/bin/vifptarget -c
done

unset IFS

I SSH into the vMA appliance and use the following command to try to run the script:

sh sandbox.sh

Output:

': not a valid identifiert: `LD_LIBRARY_PATH
: command not found
: command not found:
Searching for Email VMs to shut down...
(192.168.47.130 192.168.47.132 192.168.47.131)
'andbox.sh: line 21: syntax error near unexpected token `do
'andbox.sh: line 21: `for i in `vmware-cmd -l | egrep $mail_vms`; do

Any idea what's going on? Am I running this script correctly?

linux
Martin Hope
f3tt
Asked: 2013-02-08 13:01:44 +0800 CST
  • 4

I am trying to set up printers for users, and the print server is in a forest with a trust relationship. Users are all on Windows 7, and the print server is Server 2008 R2 Standard.

DomainA contains the print server DomainB contains the users

When users or admins in DomainB attempt to add printers from the DomainA print server, they get a generic error that says "Windows cannot connect to the printer. Access is denied"

I have added DomainB users to the DomainA printer security w/ print rights, still getting the same error. I've even tried creating a Domain Local group in DomainA, and added users from DomainB, and it still fails whether I'm using a standard user or a domain admin in DomainB.

When adding the printer via IP, it works, but that's not running through the print server and isn't an acceptable solution in our environment.

What do I need to do to get this cross-forest printing working?

Printer Wizard error

ADDITIONAL INFO FROM TESTING: DomainB user is able to browse file shares on the DomainA print server, but adding printers flags the error. DomainB user was able to add certain HP/Brother printers, but Ricoh and Canon printers fail. All the printers they were able to add were printers who's drivers are included by default in Win7. This seems to only occurs when the print driver needs to be downloaded from the print server. Possible share missing or with wrong permissions?

network-printer
Martin Hope
f3tt
Asked: 2011-06-22 13:20:00 +0800 CST
  • 1

I've created a user for a consultant, and configured his account so that it's only allowed to log on to specific servers via the user's properties in the AD Users & Comps tool.

I've included all domain controllers and our mailserver, however when the user attempts to access OWA, they get an HTTP 500 error.

What additional servers would be required besides the mail server and the domain controller for this restricted user to be able to access OWA?

exchange-2003 outlook-web-app
Martin Hope
f3tt
Asked: 2011-05-04 09:36:49 +0800 CST
  • 6

I've created a simple answer file for an unattended install, but when booting from USB, it still asks me what language, and requires that I click the 'Install Now' button before it starts. Everything else is automated. How do I automate this first part? Here's my answer file:

<?xml version="1.0" encoding="utf-8"?>
 <unattend xmlns="urn:schemas-microsoft-com:unattend">
  <settings pass="windowsPE">
    <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <SetupUILanguage>
            <UILanguage>en-US</UILanguage>
        </SetupUILanguage>
        <InputLocale>en-US</InputLocale>
        <SystemLocale>en-US</SystemLocale>
        <UILanguage>en-US</UILanguage>
        <UserLocale>en-US</UserLocale>
    </component>
    <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <DiskConfiguration>
            <WillShowUI>OnError</WillShowUI>
            <Disk wcm:action="add">
                <ModifyPartitions>
                    <ModifyPartition wcm:action="add">
                        <Active>true</Active>
                        <Format>NTFS</Format>
                        <Label>Windows</Label>
                        <Letter>C</Letter>
                        <Order>1</Order>
                        <PartitionID>1</PartitionID>
                    </ModifyPartition>
                </ModifyPartitions>
                <DiskID>0</DiskID>
                <WillWipeDisk>true</WillWipeDisk>
                <CreatePartitions>
                    <CreatePartition wcm:action="add">
                        <Extend>true</Extend>
                        <Type>Primary</Type>
                        <Order>1</Order>
                    </CreatePartition>
                </CreatePartitions>
            </Disk>
        </DiskConfiguration>
        <ImageInstall>
            <OSImage>
                <WillShowUI>OnError</WillShowUI>
                <InstallToAvailablePartition>true</InstallToAvailablePartition>
            </OSImage>
        </ImageInstall>
        <UserData>
            <AcceptEula>true</AcceptEula>
        </UserData>
    </component>
</settings>
<settings pass="oobeSystem">
    <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <InputLocale>en-US</InputLocale>
        <SystemLocale>en-US</SystemLocale>
        <UILanguage>en-US</UILanguage>
        <UserLocale>en-US</UserLocale>
    </component>
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <OOBE>
            <HideEULAPage>true</HideEULAPage>
            <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
            <NetworkLocation>Work</NetworkLocation>
            <ProtectYourPC>1</ProtectYourPC>
        </OOBE>
        <RegisteredOrganization>Company</RegisteredOrganization>
        <RegisteredOwner>IT Dept</RegisteredOwner>
        <TimeZone>Pacific Standard Time</TimeZone>
        <UserAccounts>
            <AdministratorPassword>
                <Value>omitted</Value>
                <PlainText>false</PlainText>
            </AdministratorPassword>
        </UserAccounts>
    </component>
</settings>
<settings pass="specialize">
    <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <InputLocale>en-US</InputLocale>
        <SystemLocale>en-US</SystemLocale>
        <UILanguage>en-US</UILanguage>
        <UserLocale>en-US</UserLocale>
    </component>
    <component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <Identification>
            <Credentials>
                <Domain>domain</Domain>
                <Password>domainpass</Password>
                <Username>domainadmin</Username>
            </Credentials>
            <JoinDomain>domain</JoinDomain>
            <MachineObjectOU>OU=New,OU=ComputersOU,DC=domain,DC=com</MachineObjectOU>
        </Identification>
    </component>
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <ProductKey>XXXXX-XXXXX-XXXXX-XXXXX-XXXXX</ProductKey>
    </component>
</settings>
<settings pass="offlineServicing">
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <OEMInformation>
            <Manufacturer>Company</Manufacturer>
            <SupportPhone>(XXX) XXX-XXXX</SupportPhone>
            <SupportURL>http://servicedesk/</SupportURL>
        </OEMInformation>
    </component>
</settings>
<cpi:offlineImage cpi:source="wim://markf/gimage/inprogressimage/install.wim#Windows 7 PROFESSIONAL" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

windows-7 answer-file
Martin Hope
f3tt
Asked: 2011-03-26 08:55:14 +0800 CST
  • 1

We just got a new backup device that installed a client on our Server 2003 Enterprise TS servers. I would like to hide this system tray icon from all users so they don't tinker around with it. The program itself doesn't have a setting to hide the system tray icon.

Is there a way to hide this system tray icon for all users? Is there a group policy or registry setting I can use?

terminal-server windows-server-2003