Terminal Services - Frequently Asked Windows Terminal Services Questions!

[12] Frequently Asked Asp Questions!
Updated: Jun 07, 2000
[188] Frequently Asked Citrix Questions!
Updated: Oct 10, 2006
[3] Frequently Asked Sco Tarentella Questions!
Updated: Aug 16, 2002
[260] Frequently Asked Windows Terminal Services Questions!
Updated: Aug 03, 2006
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 [21] 22 23 24 25 26
Do you have any optimization tips for an NT 4.0 Terminal Server installation? 

Items that can optimize a NT 4.0 TSE server:

General

  1. Install current version of Windows NT Terminal Server Edition (419.3h6 or later)
  2. Set up WTS server as an application server only. Moved all boot code and thin client boot services to another server. Set up TMS on another server. Do not install other Microsoft Server products on WTS such as: Internet Information Server, SQL Server, etc.
  3. Change Event Viewer Log options for all logs (Application, System and Services) to overwrite as needed. This will prevent your log files from filling up and crashing the server.
  4. Set up Terminal Server to use roaming profiles and setup the profiles on a non-system drive or another server (the key is to keep the system drive as clean as possible).
  5. Setup user accounts after hours or in lowest load times and login the user at least one time upon creation of account. Terminal Server will initialize When a user logs into a Terminal Server for the first time, the system uses up ram and does not release all of the ram until the server is rebooted.
  6. Remove unneeded bitmaps from Startup or background. Look for *.bmp files in your %Systemroot% directory and remove them.
  7. Always setup the server to reboot once a week.

When installing Office97.

  1. Remove the Paper Clip Office Assistant.
  2. Turn off background Auto Save function.

Configuration for My Computer Properties:

  1. Change Tasking priority from "Best Foreground Tasks to least". Do this in Control Panel>>System>>Tasking. This will help with periodic system slow downs.
  2. Set the page file on non-system drive (unless trying to capture a blue screen dump, then it must be on the system drive).
  3. Set page file to two and a half times the amount of Ram in your WTS machine (min. one and a half ).
  4. Set a fixed page file size. Set the initial and maxium size to be the same.
  5. Keep Registry file size in check. Increase Registry file size to 100 Mbytes. NT will only use what it needs.

Configuration for Network Neighborhood Properties:

  1. Change Server priority to be an App server (Control Panel >> Networks >> Services >> Server).
  2. If multiple network protocols are defined, check binding order and make sure TCP/IP is positioned at first order.

Registry Settings:

WARNING: Using Registry Editor incorrectly can cause serious,

system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of

Registry Editor can be solved. Use this tool at your own risk.

Registry entries have been compiled from the following sources: NCD Field Engineers, NCD Support, Microsoft Support, Dwayne Rodi of Dell Computers and a document written by Jon Perkins and Jim Kenzig.

The settings are categorized by type.

Note: The Registry entries that have been obtained from the document written by Jon Perkins and Jim Kenzig was compiled for Winframe and I have not been able to validate these settings on NT 4 Terminal Server Edition (TSE) at this time. I will supply an update with the settings that have been tested on TSE in the future.

Optimization & Performance Registry Settings:

  • Set menu refresh rate to a faster time to receive quicker response time on the menus.

    "HKEY_USERS>>DEFAULT>>Control Panel>>Desktop

Add Value: MenuShowDelay REG_DWORD: 10

  • If you are saving data to another server (e.g. your home directory is on another server) or you have a caching controller card you may want to turn off lazy writes (NT cached write) on the Terminal Server.
    Turn off lazy writes by confirming or adding the following registry entries:

    "HKEY_LOCAL_MACHINE>>System>>CurrentControlSet>>Services>>Lanman Server>>Parameters"

Add Value: IRPStackSize REG_DWORD: 0x6

"HKEY_LOCAL_MACHINE>>System>>CurrentControlSet>>Services>>Lanman WorkStation>>Parameters"

Add Value: UtilizeNtCaching REG_DWORD: 0x0

  • Disable paging executive to keep all kernel code and driver in memory. This will move the kernel and drivers into memory. Microsoft recommends that the server have plenty of memory before attempting this setting.

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\MemoryManagement"

  • If second level cache is larger than 256, add registry setting to allow NT to be able to access over 256k on the second level cache. Be careful with this setting, it could slow your server down.

    "HKEY_LOCAL_MACHINE>>System>>CurrentControlSet>>Session Manager>>Memory Management"

Add Value: SecondLevelCache REG_DWORD: 1024 (decimal)

  • Increase TCP/IP Buffer size to enhance performance. Change TCP/IP buffer size from 4356 to 14596.

"HKEY_LOCAL_MACHINE\system\currentContolSet\Services\LanmanServer\Parameters"
Add Value: SizReqBuf REG_DWORD:

This parameter has a range of 512 to 65536. The decimal value of 14596 is a better choice.

  • Reduce the number of seconds for a TCP/IP connection retransmission response.

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Tcp"
Add Value: MaxConnectResponseRetransmissions 1

This setting usually has a default value of 3. This results in up to a 90 second delay between retransmission’s on some networks. Set this value to 1 causes only a 18 second retransmission delay. This entry determines how many times a response to a TCP connection request is retransmitted. The initial delay between connection attempts is 3 seconds and is doubled after each attempt. The valid range is 0-0xFFFFFFFF

  • Speed up NTFS performance by changing the LastAccess time stamp on each directory.

    "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem"

    Add Value: NtfsDisableLastAccessUpdateREG_DWORD: 1
    Set value to 1 in order to prevent the LastAccess time stamp from being updated. This will increase performance if a system has a large number of directories.

Stability Registry Settings:

  • Setup all 16 Bit apps to run in separate VDM (virtual DOS machine)

"HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/WOW" Add Value: DefaultSeperateVDM and set it to yes

  • If you wish to disable local cached profiles then change the following key and all subkeys to read only for everyone except SYSTEM, which will have Full Control.

    "HKEY_LOCAL_MACHINE>>Software>>Microsoft>>WindowsNT >>Current Version>>ProfileList"
  • To disabled autodisconnect for LAN.

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\Netconfigserver\Autodisconnect"
To disable autodisconnect set it to -1. Otherwise set this parameterfor the number of minutes needed. The maximum value is 65535.

  • Enable AutoEnd Tasks. If you get a WOWEXEC error when shutting down or executing a program this edit is for you. This parameter tells any task that will not respond to the shutdown notice to end.

"HKEY_USER\.DEFAULT\Control Panel\Desktop"
Add Value: AutoEndTasks REG_SZ: 1

An additional value: WaitToKillAppTimeout REG_SZ: 20000
The default of 20000 milliseconds (20 Seconds) can be increased if the user process does not end by this time, AutoEndsTasks is executed.

  • If you want to stop checkdisk from running at boot up.

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager"
Change the BootExec entry from: Autochek autochk * /....... to autocheck *

  • Erase page file entries at Shutdown for security.

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\MemoryManagement"
Add Value: ClearPageFileAtShutdown REG_DWORD: 1

The default for this parameter is 0. When you set it to 1, inactive pages in the pagefile.sys will be filled with zeros. Some pages can not be cleared as they will be utilized by the system.

  • Keep the desktop from loading before the logon script finishes.

"HKEY_CURRENT_USER\Software\Windows NT\Currentversion\winlogon"
Add or Change Value: RunLogonScriptSync={ }

0=dont wait for logon script to complete before loading the desktop

1=Wait for the logon script to complete fefore loading the desktop

  • Turn off Microsoft Opportunistic File Locking. This setting has to be placed on every NT server in the domain (e.g. Terminal Server, File Server, Exchange Server, etc.)

"\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"
Add Value: EnableOplocks REG_DWORD: 0

  • Disable Dr. Watson.

"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Auto"

0 Will display a message box when Dr. Watson is running

1 (default) tells the Debugger to start on Boot.

To keep Dr. Watson from running delete the AeDebug sub-key.

To get Dr. Watson back type drwtsn32 -i at the command prompt

Cosmetic Registry Settings:

  • You can then change your default background color as follows.

"HKEY_USERS\.DEFAULT\Control Panel\Colors\Background"

  • Create a global login text notice. This message will appear when a user presses CNTL-ALT-DEL to login.

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon"
LegalNoticeCaption:

Default:

Enter any text you want to appear when a users presses CTRL+ALT+DEL.

  • Display Company LOGO on Boot. The Company logo must be in BMP and 8.3 file format.

"HKEY_USERS\.DEFAULT\Control Panel\Desktop"
Add Value: Wallpaper REG_SZ: (Wallpaper file, including path)

Add Value: TileWallpaper REG_DWORD: 0 (0=Do not tile, 1=tile)

Add Value: WalpaperStyle REG_DWORD: 0 (0=Normal, 2=Fill screen)

  • Set NUMLOCK at Startup.

"HKEY_Current_User\ControlPanel\Keyboard\InitialKeyboardIndicators"
Set to 0 (zero to disable Numlock for user after logging in)
Set to 2 (two to enable Numlock and retain settings from last shutdown)

  • Disabled Netware broadcasts for Winframe sessions.

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorstation\Parameters"
Change value: DisablePopup to 1 (one)

  • To Parse or Do not Parse autoexec.bat.

"HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\ParseAutoexec"
Set to 1 (one autoexec.bat is parsed) or

Set to 0 (zero autoexec.bat is not parsed)

  • Do not display Last user in Login dialogue (default).

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\dontDisplayLastUserName"
Set to 0 (zero = false)

  • Suppressed the message "A domain Controller for your domain could not be contacted...".

"HKEY_CURRENT_USER\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon"
Remove the "A domain Controller for your domain could not be contacted...."

Add Value: ReprotDC REG_DWORD: 0

Enter a value of 0 (zero) to suppress this message.

  • Disable the logging of print events to the System Log.
    "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers"
    Add Value: Eventlog REG_DWORD: 0

To re-enable the logging of all print events, remove the EventLog value

from the registry and restart Windows NT.

  • Disable Print Popup Notifications To Users-On by default.
    "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers"
    Add or Change Value: NetPopup REG_DWORD: 0
  • Removing Perflib Stop Errors in Application Event Log.

"hkey_local_machine\system\currentcontrolset\services\netbt\performance"

Check and make sure the application is properly calling these parameters. If the parameters are not needed, you can remove these from the registry but back these entries up first.

When you run Microsoft Excel 97, 2000, or Microsoft Internet Explorer 4.0 on a Terminal Server client, you may experience very slow response when you scroll. 

This problem is caused by the "provide feedback with animation" in Excel and the "use smooth scrolling" option in Internet Explorer.

RESOLUTION
To resolve this problem in Excel 97 or 2000:

1.Start Excell 97 or 2000.
2.On the Tools menu, click Options.
3.Click the Edit tab, and then clear the Provide feedback with Animation checkbox.

To resolve this problem in Internet Explorer 4.0:

•Start Internet Explorer 4.0.
•On the View menu, click Internet Options.
•Click the Advanced tab, then clear the use smooth scrolling checkbox.

Can you tell me what file permissions need to be set to get Office 97 Working on Terminal Server? 

To install Office 97, you need to be able to read and write so many files and folders on the target computer, that normally only an Administrator can install. After installation, a user requires the following permissions:
Read and Write on these folders:

C: 
C:\Temp
%SystemRoot%
%SystemRoot%\Forms
%SystemRoot%\System32
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft Office\Office
C:\Program Files\Microsoft Office\Xlstart
C:\Program Files\Microsoft Office\Templates

Read and Write on these files:

C:\Ffastun.ffa
C:\Ffastun.ffl
C:\Ffastun.ffo
C:\Ffastun.ffx
%SystemRoot%\Artgalry.cag
%SystemRoot%\%UserName%.acl
%SystemRoot%\%UserName%8.xlb
%SystemRoot%\%UserName%.fav
%SystemRoot%\Mso97.acl
%SystemRoot%\Msoprefs.232
%SystemRoot%\Outlook.fav
%SystemRoot%\Outlook.prf
%SystemRoot%\Outlook.prt
%SystemRoot%\Forms\Frmcache.dat
%SystemRoot%\System32\Ffastlog.txt
%SystemRoot%\System32\Msforms.twd

You only require read access to all other folders and files that Office 97 installs, including those that are stored in %SystemRoot% and %SystemRoot%\System32.

How do I hotsync a Palm Pilot with a Terminal Server? 
Ed Carlson of PPSW.com wrote a document on this. The most updated version of this article is available with many other excellent articles and free Palm Pilot downloads here.

Palm Pilot Hotsync Terminal Server Installation and Configuration Notes

Purpose

This document is intended for system administrators and is designed to provide some pointers on setting up Palm Pilot to server synchronization through an ICA session. Please note that I will not be held responsible for any actions or effects resulting from the use of this document.

Please email corrections/additions to webmaster@ppsw.com.
Timeout problems? Check out http://www.palm.com/support/helpnotes/hotsync/timeout.html.
Click here to view the Citrix Knowledgebase article regarding sync failures.

Installation

Installation of the Palm Pilot Hotsync Manager software should be performed in “Install Mode” (“change user /install” at command prompt) while logged into the server console with an Administrator account. Be sure that no other users are logged in during the installation.

During the installation, the installer will ask for a COM port and that you dock the Palm Pilot for the first Hotsync. Choose an unused server COM port then skip the first synchronization.

After the installation is complete the Hotsync Manager software will start and place a Hotsync Manager shortcut into the All Users profile Start Menu Startup folder.

It is recommended that you update the Hotsync Manger to the latest version at this time. You may download patches from www.palmpilot.com/support. There are also updates to the Chapura PocketMirror application. Go to Chaptura’s website at www.chapura.com to download the updates.

Configuration

Switch to “Execute Mode” (“change user /execute” at command prompt). Remove the Hotsync Manager shortcut from the All Users profile Start Menu Startup folder. Place the shortcut in the Start Menu Startup folder in each Palm Pilot user profile. Each instance of the Hotsync Manager will use about 2MB of memory.

Startup a Command Prompt and type the following command: “net use comx: \\client\comy:” (where x is the unused server COM port and y is the COM port that the Palm Pilot docking station is plugged into at the client). It is recommended that all client Palm Pilot docking stations be plugged into the same COM port on each client system. It is also recommended that the net use statement above be added to login scripts (or Startup folder) of all Palm Pilot users.

Run the Hotsync Manager then right click on its icon in the Systray and select “Setup”. Click on the Local tab and change the Speed setting to “As fast as possible”. Change the “Serial Port” drop down box to match the COM port setup in the paragraph above.

Close the Hotsync Manager Setup window and run the Palm Desktop Application. Click on “Tools” in the menu bar then select “Users”. Add a user in this window for every Palm Pilot user that will sync with this server. Make sure the user name matches the user name on their Palm Pilot exactly.

Email Configuration

Next login as the user and run the net use statement mentioned above. Run and right click on the Hotsync Manager and select “Custom”. Select the user currently logged in from the drop down list. Select Mail on the list then click on the Change button. Complete the Mail Setup wizard.

Security

You may wish to secure your Palm Pilot user files by giving them exclusive rights to their user folder in the C:\Palm directory (this is highly recommended and full access to this folder is required). Users will need at least Read access to the C:\Palm directory root.

Tested Successful Configurations

Server: Microsoft Terminal Server SP5 + Citrix MetaFrame 1.8 SP1
Server Software: Microsoft Outlook 2000, SalesLogix 2000 (with Puma’s Intellisync), Palm Desktop, AvantGo 3.3
Clients: Windows NT Workstation 4.0 SP6, Windows 98 SE with ICA Client 4.21.779, WYSE WinTerm Model WT3350SE
Palm Pilot Version: Vx
Network Connections: 10-100 LAN, T-1

Warnings

Tested Failed Configurations

Server: Microsoft Terminal Server SP5 + Citrix MetaFrame 1.8 SP1
Client: Wyse DOS based Winterms WT2310SE and WT2315SE with 2.7 firmware.
Palm Pilot Version: V and Vx
Network Connections: 10-100 LAN

WinFrame 1.x and alternate server root drive letter configurations have NOT been tested. Hotsync Manager cannot be run on the local client and in an ICA session at the same time they will conflict. When making changes to 3rd party Palm related software configurations (i.e. AvantGo) it is highly recommended (and some times required) to be logged in as the user.

How do I get rid of the Loadwc.exe Internet Explorer web Checker for all users? 
The loadwc.exe just checks to see what browser you are using and pops a dialog up (we all know how MF does with popups) saying IE is not your default browser do you want to make it the default.
To Remove this process for all users:
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run is a string named "BrowserWebCheck" with the value "loadwc.exe". Remove that string and your loadwc.exe is never loaded again.
Loadwc.exe also creates the Outlook Express icon, runs the creating personal settings at login, creates come registry keys for IE and Outlook Express, and verifies that status of the Protected Storage service. If you are using mandatory profiles and need these applications (IE and Outlook Express), build your mandatory profile prior to removing this key and all is well. Otherwise, figure out which additional key you need and build them into USRLOGIN.CMD.
If you get rid of this registry key, then do the world (and yourself) a favor and disable the "Protected Storage" service. This can wreak havoc with creating and modifying Mandatory Profiles. "Prot. Stor." adds additional overhead in monitoring IE cache, which is already protected via file level security. If IE is a primary app on your metaframe server, this will buy some significant benefits.
If running Roaming or Mandatory Profiles, with all users off of the two servers, stop all three services, run delprof.exe from the NT Resource kit. This will clear up all Internet Cache which Protected storage `protects.` Clean all Temp directories (i.e. delete C:\TEMP\*.*)and all internet temp directories under C:\WTSRV (i.e. Temporary internet files, downloaded files, etc.). Stop all licensing services and delete the JETTMP files in C:\WTSRV\JET*.TMP .
Disable the protected storage service, reboot and this should remove the dependencies between the services.
Because Protected storage monitors cache to add an additional layer of software security to cache files, if you made changes to Program neighborhood or almost anything while you had IE open, the cache/tmp files for those apps generated a dependency with Protected Storage. By following the procedures above, you remove the dependencies and prevent any long term issues arising from you browser service being dependent upon IE.
Can you suggest some registry entries to lock down the desktop? 
Locking down the desktop.
Desktop restrictions can be implemented by editing the following Explorer values in the registry: (all values default to 0)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoCommonGroups REG_DWORD
set it to 1 so that common program groups do not appear on the Start menu.

NoDesktop REG_DWORD
set it to 1 to hide all desktop icons.
NoDrives REG_DWORD
The low order (right most) bit is drive A: while the 26th bit is Drive Z: To hide a drive, turn on its` bit. These drives will still appear in File Manager. To remove File Manager, delete winfile.exe. If your not happy working in Hex, add these decimal number to hide the drive(s): A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863
NoFileMenu REG_DWORD
If set to 1, the File menu in Explorer is removed.
NoFind REG_DWORD
set it to 1 to remove the Find command from the Start Menu.
NoNetConnectDisconnect REG_DWORD
A value of 1 removes the "Map Network Drive" and Disconnect Network Drive menu and right click options.
NoNetHood REG_DWORD
Set it to 1 to remove the Network Neighborhood icon and prevent network access from explorer (it will still work from a command prompt).
NoRun REG_DWORD
If set to 1, the Run command is removed from the Start menu.

NoSetFolders REG_DWORD
Set it to 1 to hide Control Panel and Printers and My Computer in Explorer and on the Start Menu.
NoSetTaskbar REG_DWORD
If set to 1, only Drag and Drop can be used to alter the Start Menu and Desktop. The Taskbar does not appear on the Start Menu.
NoTrayContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the taskbar, start button, clock, or taskbar application icons. The entry is only available for NT 4.0 with SP 2 or greater.
NoViewContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the desktop or Explorer`s results pane. The entry is only available for NT 4.0 with SP 2 or greater.
RestrictRun REG_DWORD
Set it to 1 and only programs that you define at:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun
can be run on the Workstation.
NoClose REG_DWORD
Set it to 1 to remove the ShutDown button from the Start Menu. This does not disable shutdown from CTRL+ALT+DEL. To totally disable a users ability to shutdown, remove the "advanced" right to "Shutdown the System" from Policies/User Rights of User Manager for Domains.
How do I remove the Dial Up Networking Icon? 
Open Regedt32 and navigate to and delete the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsCurrentVersion\Explorer\Mycomputer\NameSpace {a4d92740-67cd-11cf-96f2-00aa00a11dd9}
What Hewlett Packard Printers Work on Terminal Server? 
Update! Hewlett Packard has created a page of what driver versions work at:
http://www.hp.com/cposupport/printers/support_doc/bpl10248.html
Est. as of 3/1/00
LJ 6L family: HP 6L PCL 5e driver, ver 4.3.0.19
http://www.hp.com/cposupport/printers/software/lj101en.exe.html
MS 5L PCL driver included with Terminal Server
LJ1100 family: HP LJ1100 PCL 5e driver, ver 1.00.5.029
http://www.hp.com/cposupport/printers/software/lj185en.exe.html
LJ4000 family: HP LJ4000 Series PCL 5e driver, ver 3.11
http://www.hp.com/cposupport/printers/software/lj303en.exe.html
HP LJ4000 Series PCL 6 driver, ver 3.38
http://www.hp.com/cposupport/printers/software/lj304en.exe.html
HP LJ4000 Series PS driver, ver 4.0
http://www.hp.com/cposupport/printers/software/lj305en.exe.html
LJ4050 family: HP LJ4050 Series PCL 6 driver, ver 4.2.1.12
http://www.hp.com/cposupport/printers/software/lj582en.exe.html
HP LJ4050 Series PS driver, ver 4.00
http://www.hp.com/cposupport/printers/software/lj584en.exe.html
LJ8000 family: HP LJ8000 Series PCL 6 driver, ver 4.2.1.12
http://www.hp.com/cposupport/printers/software/lj461en.exe.html
HP LJ8000 Series PS driver, ver 4.00
http://www.hp.com/cposupport/printers/software/lj463en.exe.html
LJ8100 family: HP LJ8100 Series PCL 6 driver, ver 4.2.1.12
http://www.hp.com/cposupport/printers/software/lj461en.exe.html
HP LJ8100 Series PS driver, ver 4.00
http://www.hp.com/cposupport/printers/software/lj463en.exe.html
Mopier 320 family: Mopier 320 PCL 6 driver, ver 4.2.1.12
http://www.hp.com/cposupport/printers/software/lj461en.exe.html
Mopier 320 PS driver, ver 4.00
http://www.hp.com/cposupport/printers/software/lj331en.exe.html*
This file represents the entire NT4 printing system, including PCL 5e, PCL 6, and PS drivers. Install only the PS driver from this specific download. Other drivers currently included within this printing system may have conflicts with Terminal Server.
HP 2000c family: HP2000c NT4 driver, ver 2.3
http://hp2000c.com/support/drivers/2000ennt.htm#5
LJ4, 4plus family: HP LJ4/4plus PCL 5e driver, ver 4.3.0.19
http://www.hp.com/cposupport/printers/software/lj101en.exe.html

Microsoft LJ4/4M/4plus/4Mplus PCL 5 / PS drivers which are included with Terminal Server LJ4Si family: HP LJ4Si / 4SiMX PCL 5e driver, ver 4.3.0.19
http://www.hp.com/cposupport/printers/software/lj101en.exe.htm
Microsoft LJ4Si / 4SiMX PCL 5 / PS drivers which are included with Terminal Server LJ 5 family: HP LJ5 Series PCL 5e driver, ver 4.3.0.19
http://www.hp.com/cposupport/printers/software/lj101en.exe.html
HP LJ5 Series PCL 6 driver, ver 3.38
http://www.hp.com/cposupport/printers/software/lj304en.exe.html
HP LJ5 Series PS driver, ver 4.0
http://www.hp.com/cposupport/printers/software/lj163en.exe.html
How do I disable specific Control Panel applets for certain users and groups? 

The best way to disable selected Control Panel applets is to remove the NTFS read permissions from the appropriate .cpl file in the %systemroot%\System32 directory for the selected users and groups. Here is a list:

File Name Applet Name 
ACCESS.CPL Accessibility options
APPWIZ.CPL Add/remove programs
CONSOLE.CPL Console
DESK.CPL Display
DEVAPPS.CPL PCMCIA, SCSI adapters and tape drives
FINDFAST.CPL Office Find Fast
INETCPL.CPL Internet
INTL.CPL Regional Settings
JOY.CPL Joystick
LICCPA.CPL Licensing
MAIN.CPL Fonts, keyboard, mouse and printers
MLCFG32.CPL Mail
MMSYS.CPL Sounds and multimedia
MODEM.CPL Modems
NCPA.CPL Network
ODBCCP32.CPL ODBC
PNOTIFY.CPL Print notification
PORTS.CPL Ports
RASCPL.CPL Dial up monitor
SRVMGR.CPL Server, services and devices
SYSDM.CPL System
TELEPHON.CPL Telephony
THEMES.CPL Themes
TIMEDATE.CPL Date/time
TWEAKUI.CPL TWEAKUI
UPS.CPL UPS
WGPOCPL.CPL Work Group Post Office

FYI - I have listed the registry entries used by some of the applets.

Accessibility Options HKEY_CURRENT_USER\Control Panel\Accessibility 
Date/Time HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
Devices HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Display HKEY_CURRENT_USER\Control Panel\Desktop and HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\VIDEO
Fonts HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
Internet HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Keyboard HKEY_CURRENT_USER\Control Panel\Desktop
Modems HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Unimodem
Mouse HKEY_CURRENT_USER\Control Panel\Mouse
Multimedia HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia
Ports HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP
Printers HKEY_CURRENT_USER\Printers
Regional Settings HKEY_CURRENT_USER\Control Panel\International
SCSI Adapters HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\ScsiAdapter
Services HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Sounds HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default
Tape devices HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\OtherDrivers\TapeDevices
Telephony HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony
UPS HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS
Can you suggest some registry entries to lock down the desktop? 

Locking down the desktop.
Desktop restrictions can be implemented by editing the following Explorer values in the registry: (all values default to 0)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

NoCommonGroups REG_DWORD
set it to 1 so that common program groups do not appear on the Start menu.

NoDesktop REG_DWORD
set it to 1 to hide all desktop icons.

NoDrives REG_DWORD
The low order (right most) bit is drive A: while the 26th bit is Drive Z: To hide a drive, turn on its` bit. These drives will still appear in File Manager. To remove File Manager, delete winfile.exe. If your not happy working in Hex, add these decimal number to hide the drive(s): A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

NoFileMenu REG_DWORD
If set to 1, the File menu in Explorer is removed.

NoFind REG_DWORD
set it to 1 to remove the Find command from the Start Menu.

NoNetConnectDisconnect REG_DWORD
A value of 1 removes the "Map Network Drive" and Disconnect Network Drive menu and right click options.

NoNetHood REG_DWORD
Set it to 1 to remove the Network Neighborhood icon and prevent network access from explorer (it will still work from a command prompt).

NoRun REG_DWORD
If set to 1, the Run command is removed from the Start menu.

NoSetFolders REG_DWORD
Set it to 1 to hide Control Panel and Printers and My Computer in Explorer and on the Start Menu.

NoSetTaskbar REG_DWORD
If set to 1, only Drag and Drop can be used to alter the Start Menu and Desktop. The Taskbar does not appear on the Start Menu.

NoTrayContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the taskbar, start button, clock, or taskbar application icons. The entry is only available for NT 4.0 with SP 2 or greater.

NoViewContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the desktop or Explorer`s results pane. The entry is only available for NT 4.0 with SP 2 or greater.

RestrictRun REG_DWORD
Set it to 1 and only programs that you define at:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun
can be run on the Workstation.

NoClose REG_DWORD
Set it to 1 to remove the ShutDown button from the Start Menu. This does not disable shutdown from CTRL+ALT+DEL. To totally disable a users ability to shutdown, remove the "advanced" right to "Shutdown the System" from Policies/User Rights of User Manager for Domains.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 [21] 22 23 24 25 26

Featured Links