Remote Desktop Services Web Client

Hello.

Microsoft liberated Remote Desktop Services Web Client last week. This is the last improvement in the RDS roles and for me, it's a significative new feature because it offers us to consume an app or desktop from a client without Rdp or remote desktop app. What is the same, from a client with only a HTML 5 supported browser.

Before installing/adding this new feature you need to know:

- The RDS farm is not using Azure Application Proxy
- RD Gateway, RD Connection Broker and RD Web Access are in Windows Server 2016 or higher
- Kind of license are per User
- Have installed https://support.microsoft.com/en-us/help/4025334/windows-10-update-kb4025334  on the RD Gateway
- Public Certificates are installed.
- Microsoft says, Windows 10, 2008R2 or higher are only supported as client but I have this role used by my Mac OS High Sierra and others with Chrome.
- You have published this farm as wildcard or public valid certicates and the user experience connecting to the farm works without any advertisement. If there were a problem with internal certificates connecting from the Wan, you should review this post  https://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/ mainly this part: Set-RDSessionCollectionConfiguration –CollectionName QuickSessionCollection -CustomRdpProperty “use redirection server name:i:1 `n alternate full address:s:remote.domain.com”

Steps to install RDS Web Client

1. Export the current certificated that you are using in the RD Connection broker as .CER
1.1 MMC
1.2 Add Computer Certificates

2. Go to the RD Web Access Sever Or servers and get powershell as administrative elevated credentials.

3. Launch these Powershell commands:

    - Install-Module -Name PowerShellGet -Force

    - Shutdown -r -t 0  (Take care it'll restart the server)

    - Install-Module -Name RDWebClientManagement

    - Install-RDWebClientPackage

    - Import-RDWebClientBrokerCert x:\ExportedCertificatepath.cer  (Exported in the step 1)

    - Publish-RDWebClientPackage -Type Production -Latest  (Accept the appeared Warning)

You can access to this new feature by: https://server_FQDN/RDWeb/webclient/index.html

User Experience:

Azure - Adding a Public IP to an existing VM and publishing ports.

Hello,

In this post i'm going to show you how to create and associate a public ip to an existing Virtual Machine.

1. Firstable you have to look for "Public IP" Above in the Azure search option.

2. Then choose +Add in the Public Addresses option.

 3. Create a new IP choosing you custom options & click on Create

4. Go back to the search option above the portal and look for "Nic"

5. Choose doing click on the nic associated to the Virtual Machinne.

6. Go to  IP Configurations Option, do click.

7. Click on the Private IP Addresses 

 8. Click on the Enabled option over Public IP Addreses insomuch it should appears Disabled.

9. Choose the Public IP you created in the thirst step previously.

10. Click on Save

Publishing

1. Go to the VM Configuration you associated a public IP before.

2. Click on "add inbound port rule" in the security group options.

3. Create a public rule where you have to permit communications to the Public IP through the port needed by the service. 

Windows 10 – AppX Packages Can Break Sysprep

Hi.

I was suffering a problem using MDT trying to capture with sysprep the Windows 10 x86 1709 release. The log shows the error 0x3cf2 after launching sysprep /generalize.

Problem and solution appears here:  KB2769827  but this guy https://virtuallyinclined.com/2017/01/08/windows-10-appx-packages-can-break-sysprep/ and myself went from throwing lines after launching sysprep /generalize again and again.

 I'd appreciate your feedback and update if you would detect that I had to remove more apps after changing them in Windows 10, because I've seen that these are changing depending on the apps promoted by Microsoft in every period.

The second problem I've found is that the shawn's script is not updated for W10 v1709 so I updated this.

Finally the scripts are:

FIRST ONE:

Import-Module AppX
Import-Module Dism

#You may have to manually uninstall some Sponsored Apps from the Start Menu

#Microsoft Apps
Get-AppxPackage *Microsoft.3DBuilder* | Remove-AppxPackage
Get-AppxPackage *Microsoft.BingTranslator* | Remove-AppxPackage
Get-AppxPackage *Microsoft.FreshPaint* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Getstarted* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Messaging* | Remove-AppxPackage
Get-AppxPackage *Microsoft.MicrosoftOfficeHub* | Remove-AppxPackage
Get-AppxPackage *Microsoft.MicrosoftSolitaireCollection* | Remove-AppxPackage
Get-AppxPackage *Microsoft.NetworkSpeedTest* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Office.OneNote* | Remove-AppxPackage
Get-AppxPackage *Microsoft.OneConnect* | Remove-AppxPackage
Get-AppxPackage *Microsoft.People* | Remove-AppxPackage
Get-AppxPackage *Microsoft.SkypeApp* | Remove-AppxPackage
Get-AppxPackage *Microsoft.MicrosoftStickyNotes* | Remove-AppxPackage
Get-AppxPackage *Microsoft.WindowsCalculator* | Remove-AppxPackage
Get-AppxPackage *microsoft.windowscommunicationsapps* | Remove-AppxPackage
Get-AppxPackage *Microsoft.WindowsFeedbackHub* | Remove-AppxPackage
Get-AppxPackage *Microsoft.WindowsMaps* | Remove-AppxPackage
Get-AppxPackage *Microsoft.XboxApp* | Remove-AppxPackage
Get-AppxPackage *Microsoft.XboxIdentityProvider* | Remove-AppxPackage
Get-AppxPackage *Microsoft.ZuneMusic* | Remove-AppxPackage
Get-AppxPackage *Microsoft.ZuneVideo* | Remove-AppxPackage
Get-AppxPackage *SpotifyAB.SpotifyMusic* | Remove-AppxPackage
Get-AppxPackage *Microsoft.bingnews* | Remove-AppxPackage
Get-AppxPackage *king.com.BubbleWitch3Saga* | Remove-AppxPackage
Get-AppxPackage *king.com.CandyCrushSodaSaga* | Remove-AppxPackage
Get-AppxPackage *A278AB0D.MarchofEmpires* | Remove-AppxPackage
Get-AppxPackage *A278AB0D.DisneyMagicKingdoms* | Remove-AppxPackage
Get-AppxPackage *DolbyLaboratories.DolbyAccess* | Remove-AppxPackage

#Sponsored Apps
Get-AppxPackage *Duolingo* | Remove-AppxPackage
Get-AppxPackage *EclipseManager* | Remove-AppxPackage
Get-AppxPackage *Flipboard* | Remove-AppxPackage
Get-AppxPackage *Wunderlist* | Remove-AppxPackage


AND THE SECOND ONE:

Import-Module AppX
Import-Module Dism

#You may have to manually uninstall some Sponsored Apps from the Start Menu

#Remove AppX Packages for non-business Apps
Get-AppxPackage *Microsoft.3DBuilder* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Getstarted* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Messaging* | Remove-AppxPackage
Get-AppxPackage *Microsoft.MicrosoftOfficeHub* | Remove-AppxPackage
Get-AppxPackage *Microsoft.MicrosoftSolitaireCollection* | Remove-AppxPackage
Get-AppxPackage *Microsoft.Office.OneNote* | Remove-AppxPackage
Get-AppxPackage *Microsoft.People* | Remove-AppxPackage
Get-AppxPackage *Microsoft.SkypeApp* | Remove-AppxPackage
Get-AppxPackage *microsoft.windowscommunicationsapps* | Remove-AppxPackage
Get-AppxPackage *Microsoft.WindowsFeedbackHub* | Remove-AppxPackage
Get-AppxPackage *Microsoft.XboxApp* | Remove-AppxPackage
Get-AppxPackage *Microsoft.XboxIdentityProvider* | Remove-AppxPackage
Get-AppxPackage *Microsoft.ZuneMusic* | Remove-AppxPackage
Get-AppxPackage *Microsoft.ZuneVideo* | Remove-AppxPackage

#Remove AppX Provisioning for non-business apps
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.3DBuilder" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.Getstarted" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.Messaging" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.MicrosoftOfficeHub" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.MicrosoftSolitaireCollection" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.Office.OneNote" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.People" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.SkypeApp" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "microsoft.windowscommunicationsapps" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.WindowsFeedbackHub" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.XboxApp" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.XboxIdentityProvider" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.ZuneMusic" | Remove-AppxProvisionedPackage -Online
Get-AppxProvisionedPackage -Online | where Displayname -EQ "Microsoft.ZuneVideo" | Remove-AppxProvisionedPackage -Online

Console shows this error "requesturi is /veeamservice" when you try to connect to a veeam server

Hello.

After my investigation I didn't find in internet the solution to the problem named in the title of this article.

I found from veeam some information like this article: https://www.veeam.com/kb1756

As you are able to find in internet, this problem appears if the service is down but as I said it didn't work in my case because the services were working properly so i had to investigate more.

Finally the problem was related with the network. I had three nics in my server and Veeam worked fine when I re installed the server only with one Nic enabled and all others disabled. Maybe there is another article detailing the problem but while that, I wanted to share with you the solution I deduced after reading all others.

Cheers.

Powershell script - Cambio de contraseña de administrador local 2/2

Siguiendo con la entrada anterior, publico a continuación el script que deberá ser lanzado vía sccm u otros, de forma local en los equipos por mediante un usuario que tenga permiso de acceso a los archivos que hemos generado con nuestro script que comento también en la entrada anterior.

Como comenté, el script modifica la contraseña del usuario con ID 0, el cual, ya que si fuésemos a buscar el usuario Administrador o Administrator, este podría haber sido nombrado y fallaríamos en nuestro intento.

Personalización:

El script requiere ser personalizado en la linea 1 y 2, donde pondremos la ruta correcta de los archivos.

Script:

$PasswordFile = "c:\temp\Password.txt"
$KeyFile = "c:\temp\AES.key"
$key = Get-Content $KeyFile
$pwd= get-content $passwordfile | Convertto-SecureString -Key $Key
$userlist = get-wmiobject win32_useraccount
$localadm=$userlist[0].caption.replace(“\”,”/”)
$objUser = [ADSI]"WinNT://$localadm, user"
$decodedpassword = [System.Runtime.InteropServices.Marshal]::PtrToStringAuto([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($pwd))
$objUser.psbase.Invoke("SetPassword", $decodedpassword)
$objuser.psbase.CommitChanges()