HOWTO: Use existing SSL certicate for VMware Security server

Not sure if you guys have figured this out already but after lots of trial and error I did eventually figure this out.

There are some steps that the "View Manager Administration Guide" should have included but they are close. I used "View Manager 3.1" version of the document with the following changes.

The following process assumes that you have installed an internal View Connection Server and the View Security Server software on a machine in your DMZ.

-----------------------------------------------------------------------------

If you have an existing SSL certificate follow the below process:

1. Right click your SSL certificate from IIS or Windows Server using the Certificates Snap-in, select All Tasks > Export

2. On the Welcome Screen click Next

3. On the Export Private Key screen, select "Yes, export the private key", click Next

4. On the Export File Format screen, PFX will be selected, check both "Include all certificates in the certification path if possible" and "Export all extended properties" and click Next

5. Type confirm a password, click Next. (Note: You will need to remember this password for Step 10

6. Enter a name and folder path for the exported certificate, click Next

7. Click Finish.

8. Copy the exported certificate to C:\Program Files\VMware\VMware View\sslgateway\conf on your View Security Server.

9. Create or edit the file C:\Program Files\VMware\VMware View\sslgateway\conf\locked.properties

10. Add the following properties to locked.properties
keyfile=name of exported certificate from Step 6
keypass=password used in Step 5

eg.

keyfile=certificate.pfx
keypass=password

11. Restart the View Connection Service on the security server.

12. Connect to your published https://view.companyname.com and enjoy the wonder of virtual desktops.

HOWTO: Set timeout options for Remote Desktop Connections

You can set the maximum amount of idle time allowed for remote desktop connections.

1. From your computer's Start menu, point to Programs, point to Admin Tools, and then click Terminal Services Configuration.
2. In the right pane of the window, click RDP-Tcp.
3. Click the Sessions tab.
4. Specify the values you want to use.

HOWTO: Enable changing the desktop wallpaper

Symptom:
User is unable to browse for and change desktop wallpaper.

Problem:
The background options on the Desktop tab in the Display Properties are greyed out due to Windows Group Policy enforcement.

Solution:
Open regedit and browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop Change the value of NoChangingWallpaper from 1 to 0.

Then browse to: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Change the value of NoActiveDesktop from 1 to 0.

OCS 2007: Manually Configuring the External Web Farm FQDN

Original text from: http://technet.microsoft.com/en-us/library/bb803611.aspx

---------------------------------------------------------------------------------

If you did not configure an external Web farm FQDN when you created your Enterprise pool or configured your Standard Edition server, you can use some the following commands in LCSCmd to configure or change your external URLS specified in Table 3 Directories used by Web Components Servers (see the table in Step 2.1. Configure a Reverse Proxy).

To configure the external Web farm FQDN

1. Log on to the Standard Edition server or Enterprise Edition server in the pool with an account that is a member of RTCUniversalServerAdmins group or has equivalent permissions.

2. Open a command-line prompt.

3. Navigate to the \Program Files\Common Files\Microsoft Office Communications Server 2007 directory.

4. To set the external URL for the Web farm, type the following command:

   Lcscmd /web /action:updatepoolurls /externalwebfqdn: /poolname:

   For example:

   Lcscmd /web /action:updatepoolurls /externalwebfqdn:contoso.com /poolname:pool2

To list the external Web farm FQDNs

1. Log on to the Standard Edition server or Enterprise Edition server in the pool with an account that is a member of RTCUniversalServerAdmins group or has equivalent permissions.

2. Open a command-line prompt.

3. Navigate to the \Program Files\Common Files\Microsoft Office Communications Server 2007 directory.

4. To list the external URLs for the Web farm, type the following command. This command creates a remote of WMI setting values and will output the location of the report.

   Lcscmd /web /action:ListWMISettings /poolname:

   For example:

   Lcscmd /web /action: ListWMISettings /poolname:pool2

5. Open the file using Internet Explorer or another Web browser and look up the values for the external URLs.

   Lcscmd /web /action:ListWMISettings /poolname:

   For example:

   Lcscmd /web /action: ListWMISettings /poolname:pool2

To clear an the external Web farm FQDN

1. Log on to the Standard Edition server or Enterprise Edition server in the pool with an account that is a member of RTCUniversalServerAdmins group or has equivalent permissions.

2. Open a command-line prompt.

3. Navigate to the \Program Files\Common Files\Microsoft Office Communications Server 2007 directory.

4. To clear the external URL for the Web farm, type the following command:

   Lcscmd /web /action:clearpoolexternalurls /poolname:

   For example:

   Lcscmd /web /action:clearpoolexternalurls /poolname:pool2

How to install ASP.NET on Windows XP

To install ASP.NET on Windows XP do the following:

1. Click Start then Run.
2. Type CMD and hit Ok.
3. Navigate to your Microsoft .NET windows directory which is usually C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
4. Run the following commands aspnet_regiis -i and aspnet_regiis -c
5. Load up your IIS Manager and enable ASP.NET on the site you want.

Changing Any Password On XP with cmd

This quick tutorial will show you the steps to change and reset any user password on a windows computer, and also show you how to protect your computer from people doing this to you!

---

CHANGE/RESET PASSWORD FOR ANY USERNAME

1. Reboot the computer
2. Right after the bios is finished, hit F8 (or F2,10,12)
3. Select ‘Safe mode’ or ‘Safe mode with networking support’
4. Windows will boot up to the logon screen. Click administrator, 9/10 there is no password.
5. Do, Start->Run->type ‘command’
6. At the prompt, type ‘net user’ which will display a list of usernames. Find the one you are looking for, try ‘net user username’ for them all. Type ‘net user /HELP’ for more info.
7. To reset the password type ‘net user username *’ where username is the username you want to reset.
8. For no password, leave blank.
9. Now, reboot and you can login as that user.

If a user's domain account has been locked or if you cannot login to a network resource anymore, just login physically and unlock the account with net user username /ACTIVE

Documents and Settings folder littered with *.001 profiles on Citrix Server

Symptom:

You have a Citrix Presentation Server (XenApp 4.5) running on VMware (virtual server) and you notice that the Documents and Settings folder is piling up with profiles names such as: username.001, username.002, username.003 etc...

Background:

VMware's shared folders feature creates a hgfs.dat file and Terminal Services writes this file back to the roaming profile server. For extended information as well as the fix go here.

Resolution:

Remove the value hgfs from the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order\ProviderOrder