Search This Blog

Wednesday, March 27, 2013

Set up Internet Explorer 9 Pop-up

The first time you start internet Explorer 9 for a new user you will se this popup.

The user has the choice to select between Use recommended security and compatibility settings or Don’t use recommended settings.

image

It might be a god idea to skip this popup for all users.

On way to achieve this is to create a Group Policy (GPO).

This is one setting that can be controlled in both the Computer and User node, so go to the one you prefer.

User Configuration – Policies –Administrative Templates – Windows Components – Internet Explorer – Prevent running First Run wizard

or

Computer Configuration – Policies –Administrative Templates – Windows Components – Internet Explorer – Prevent running First Run wizard

Enable the policy and select for example Go directly to home page, apply the policy and users wont have to decide what to do whit this question.

image

Wednesday, March 20, 2013

Customize settings for all new users on Windows

When deploying computers in a new setup, I need to set various settings as default settings for all new users.

One way to do this in your MDT or SCCM task sequence is to load the Default User Hive make the changes and save it again. When a new user logs on to Windows the default User settings will be used as a template for his own user profile.

So lets say that we want to remove the Language Bar for all new users logging on to the computer being deployed.

First we load the Default User hive with the command REG.EXE Load HKU\DefUser C:\Users\Default\NTUser.dat

image

If you take a closer look in the registry editor after running this command you will see that it has been loaded.

image

Now disable the Language Bar, we need off course to know the correct registry setting. Almost any setting controlled by a registry value can be customized this way.

Reg.exe Add "HKU\DefUser\Software\Microsoft\CTF\LangBar" /v ShowStatus /t REG_DWORD /d 3 /f

image

Again a closer look in the registry editor confirms that this has been set.

image

Finally we unload the hive again, and the next new user on the computer will start with a user profile where the language bar is not shown.

Reg.exe Unload HKU\DefUser

image

Friday, March 15, 2013

Shortcuts based on group membership

The goal in this case is to create shortcuts on the start menu or desktop, for users who is member of a Active Directory group. If the user later is removed from the group the shortcut must also be removed.

This can be achieved in many ways but one way is to use Group Policy Preferences.

First we create a policy in the group policy editor then go to User Configuration – Preferences – Windows Settings – Shortcuts and select New – Shortcut.

image

Then in Action select Replace and select the Location for example Start Menu.

Name the shortcut and if you want this to be in a sub folder use the syntax as shown Test\Name on Shortcut, this will create the shortcut in a folder named Test, just note that the folder will not be removed if the user is later removed from the group.

Enter the target of the program you want to start with the shortcut, you can browse the the file but remember that it will be locally on the computer where you create the policy, the file will have to be present on the computer where the policy later is going to be applied.

Finally we can change the icon if we prefer to change the default for this program.

image

Select the Common tab and select Run in logged-on user’s security context (user policy option), Remove this item when it is no longer applied and Item-level targeting.

Click on Targeting…

image

Select New Item and Security Group.

image

In group enter the name of the security group the user must be member of to get the shortcut on the start menu. You can browse for the group in Active Directory.

image

When you logon to a Windows client where this policy is applied you should find our shortcut.

image

If you remove the user from the group an do a new logon the shortcut will be removed.It is off course also possible to create a rule that removes the folder Test if desiredSmiley

Monday, March 11, 2013

ADMX files for Windows 7

Here are some ADMX/ADML files you might be missing in your PolicyDefinitions folder on Windows 7, but need them for your Central Group Policy Store.

Search.admx

Windows search feature must be installed after installation search.admx and adml will be available in the policyDefinitions folder.

image

ShapeCollector.admx

Tablet PC Components feature must be installed after installation shapeCollector.admx and adml will be available in the policyDefinitions folder.

image

Terminalserver-WinIP.admx

Install the Remote Desktop Protocol 8.0 update from Windows Update after installation Terminalserver-WinIP.admx and adml will be available in the policyDefinitions folder.

image

Friday, March 8, 2013

AppLocker policy is not working

One reason that could explain why an AppLocker policy is not applying could be that the Application Identity service is not running on your Windows Client.

In order to force the service to start you can add it to your policy.

Change the startup option of the service:

image

Change the startup mode to Automatic.

image

Wednesday, March 6, 2013

Remove text Your Windows desktops and apps on demand

In some situations you might want to remove the text Your Windows desktops and apps on demand – from any PC, Mac, smartphone or tablet shown on the Web Interface.

image

Start a Command Prompt as administrator.

image_thumb[7]

Create a copy of the existing file c:\inetpub\wwwroot\Citrix\XenApp\app_data\include\fullStyle.inc

image_thumb[5]

Then edit the file c:\inetpub\wwwroot\Citrix\XenApp\app_data\include\fullStyle.inc

image_thumb[10]

Find the entry #horizonTagline {  and insert the text Display: none;  as shown here:

image

Text is now gone:

image

Sunday, March 3, 2013

Error creating site

This error sometimes show up when I am trying to create a new Citrix Web Interface site.

An error occurred while configuring the ICA File Signing Service: Unable to add user IIS Apppool\CitrixWebInterface5.4.2AppPool to group CitrixICAFileSigningServiceUsers

image

If I try to create the site again it always work, so an easy way around this Smiley

Friday, March 1, 2013

Remove Citrix and HDX logo from footer on Web Interface

In some situations you might want to remove the Citrix and HDX logo in the footer of the Web Interface.

image

Start a Command Prompt as administrator.

image

Create a copy of the existing file c:\inetpub\wwwroot\Citrix\XenApp\app_data\include\fullStyle.inc

image

Then edit the file c:\inetpub\wwwroot\Citrix\XenApp\app_data\include\fullStyle.inc

image

Find the entry #footer img and insert the text Display: none;  as shown here:

image

The Citrix logo is now gone:

image

Find the entry .horizonPage #hdxLogo { and change the existing text display: inline: to the text Display: none;  as shown here:

image

The Citrix and HDX logo are now gone:

image