Checking the Onboard Administrator revealed that “IPL Device” Boot ordre was missing the PXE NIC 1 method. However, the “One Time Boot From” still had it listed (didnt work tho)

And the bios configuration was identical to rest of my blades. Testing with both NIC1/NIC2 as PXE bootable didnt change anything.

After a little search at google, i found this article descripting smiliar problem – only problem is the date of the article/bios update (i got a newer bios date)

I decided to try the latest bios update that was available for 465c. Still no luck..

After calling HP support, it turns out that one of the reasons for this problem could be a difference between the blades servers bios rom, iLO firmware versions

as in, if your blade servers in the enclosure contains different versions(eg. you recently installed a new blade, which has a newer iLO firmware version) it could

cause problems for the onboard administrator. And since i recently had installed a new blade, it would make a little sense.

HP advised me to first upgrade all the blades (link) followed by (link) which upgrades the Onboard administrator to 2.60

In my case, the problem was solved already by upgrading the one servers rom and ilo firmware as the only thing. but i’m still going to upgade everything as planned

just in case.

It seems that if you use the quick access toolbar in eg. Word, those settings will be appended to C:\Users\john\AppData\Local\Microsoft\Office\word.qat (etc)

which is local and not roaming – and therefore wont be updated on your UserProfiles network share.

as far as google told me, theres no fancy gpo or registry setting that can change the path of where to store the qat files.

and redirecting the Applications\… folder can work, but often runs into conflicts with other apps or updates that don’t seem to like
it ‘moved’, so it’s side effects can outweigh its benefits.

So, the easiest way to solve this little problem, is to use the Logon/Logoff gpo (User Configuration – Policies – Windows Settings – Scripts (Logon/Logoff)

In the Logoff Properties, add your newly created saveqat.bat which contains the following

SET target=%APPDATA%\Microsoft\Office
SET source=%USERPROFILE%\Local Settings\Application Data\Microsoft\Office

IF NOT EXIST “%target%” MD “%target%”

copy “%source%\*.qat” “%target%”

And in the Logon properties, add loadqat.bat

SET source=%APPDATA%\Microsoft\Office
SET target=%USERPROFILE%\Local Settings\Application Data\Microsoft\Office

IF NOT EXIST “%target%” MD “%target%”

copy “%source%\*.qat” “%target%”

Now your probem should be solved – your qat files will be copied along with your roaming profile, and copied back, and the user settings will be preserved.

ive been all the way around from pressing multiple keys at boot up, clicking the left mouse button, etc etc etc.

and since im using Windows 7 (go hate on me mac fanboys) i can´t use various os x ways.

anyway, when trying to eject your cd/dvd from windows, it pops up with a message i forgot all about (some weird error) and its just impossible to eject it.

i actually had to dissamble the dvd and pull it out manually one time where i had exchanged the drive with a brand new intel ssd (pressing F12 and holding it down while turning on the mac worked, but after i accidently inserted the leopard dvd, it refused afterwards and ignored F12)

Anyway, heres the little trick i found out about. – use ImgBurn!

simply press the eject button, and magic will happen. the fun thing about this, is if you select Tools – Drive – Eject – it will fail the same way if it was done though Windows.

anyway, if anyone got an explanation on this, please feel free to share your knowledge.

after spending some time troubleshooting a sync issue.

The user had problems with settings not being saved (small settings in outlook,word etc) and like the outlook signature dissapeard.none of the gpo’s was restricted, and when testing myself with a test user, i had none of the above problems.

After checking event viewer on the servers, i found 3 entries that appeared again and again.

Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.

Windows could not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you log off.
Windows could not load your profile because a server copy of the profile folder already exists that does not have the correct security.
Either the current user or the Administrators group must be the owner of the folder.

When i had a look in c:\users\ i found out that beside from the local user profiles, there was a few temporary (TEMP.domain.v2) and .BAK folders. for some strange reason,when windows first tags and creates a temporary profile for a user, it wont sync to the TSprofile share anymore. and just deleting these folders isnt enough.

After cleaning up (removing all the user and temp,bak directories) browse to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Find the SID for the user with the corrupted profile and delete it (profile directory will be C:\Users\%UserName%.

and reboot.

In my case, i had the problems in my Citrix env. and using Citrix Session Cleaner from Citrixtools.net solved most of my problems so far (Lovely tool that can force users off, and wipe their locally created user profiles on the xenapp servers every night)

and if i get the time, i will update it later on.

In my previous post, i talked about running the ica client in the userlogon script, making it possible to open files from explorer with a streamed application.

in this case, it would be nice to use Pass-Though Authentication so the user dont get prompted twice for logon credentials.

so i started playing around with it – actually spent way to many hours on something that should be pretty straight forward.

one of the first things one should do, is to reinstall the ica client as admin with the correct options like

CitrixOnlinePluginFull.exe /silent SERVER_LOCATION=”http://10.20.30.40:81″ ADDLOCAL=”ICA_Client,PN_Agent,SSON” ENABLE_SSON=”Yes”

so heres a short list of stuff to check (feel free to comment if theres more)

• Add the ica client adminstrative template for the domain and enabled pass-though & Local username password
• Checked the reg key for NetworkProvider/Order (Citrix single-SignOn needs to be in top)
• Checked that pass-though was enabled and set to default on the XenWeb servers under PNAgent service site/Config.xml
• Check that SSOnUserSetting=On in “UserProfiles\userxxx\AppData\Roaming\ICAClient\APPSRV.ini” and not Off

In my case none of the above worked, and a few days after i found this article. with a hotfix that should solve the problem

Pass-through authentication is not available when accessing a published application from within a published desktop on XenApp 5.0 servers. The user is required to provide valid credentials to launch a session within the desktop session even when pass-through authentication is enabled in the XenApp Plugin.

Another possible workaround is to enable GPO – Computer Configuration\Administrative Templates\System\Credentials Delegation

“Allow Delegating Default Credentials” – set it to Enable, leave “Concatenate OS defaults with input above” checked, and click “Show…”

1) Explorer.exe is published for your users to use (browsing shared folders, private folders, etc)

2) Main part of Office 2007 is installed locally on your golden XenApp image (win2k8)

3) A few applications like Visio, OneNote, Project are profiled and streamed to server

Now when a user launches Explorer, and tries to open a Visio project, it appears as Visio is not installed (no file associations) – now i think about it, it would probably also

be a problem if the user tries to open an attachment from outlook.

This happends cause its a streamed to server application, and cant be seen by the xenapp server it self,unless its actually logged on to a profile with the appropriate access to the published resources)

as far as i can tell, theres not yet any smart way to solve this problem, a temporary solution until Citrix figures something out is to run the ICA client a second time when

the user logs on (letting it run on the xenapp server)

for this to work theres a few things we need to do.

in your UserLogon.cmd script for your AD users, add

Cmd /C “C:\Program Files (x86)\Citrix\ICA Client\pnagent.exe”

just remember to change the path if its located somewhere else.’

On your XenApp servers add the following registry entries to prevent the ica client from hanging on the server after user logs off

Path: HKLM\System\CurrentControlSet\Control\Citrix\wfshell\TWI
Value Name: LogoffCheckSysModules
Type: REG_SZ
String: pnamain.exe

Now fire up Streaming Profiler and get ready to edit your already profiled applications.

After its opened, browse to (Target Properties – Applications – Modify)

Under “Command line parameters – Optional) Add 2 asterisks (**) and save your profile again.

in AMC open up all your published profiled applications and go to Content redirection

here you need to check “Show all available file types for this application” And Select all the extensions you want to use.

Now, when the user logs on, he will see the ica client again, and after logging on, he should be able to browse and open documents though Explorer with streamed applications.

It started out with the some users complaining about their danish published office applications switched to using US keyboard layout

and naturally i started testing (logged on with same user account) and found no issues at all. We tested a bit, playing around with the language bar

and the local region settings, and we found out that on the airbooks, on windows 7, it had 2 keyboard layouts installed (da-dk, and danish-apple)

and after removing it, setting danish as the default, it seemed to have solved the problem.

a week later, it all started over again (cant remember why) and this time, it would always default back to US keyboard (only way to shift was using ALT+SHIFT) since i’ve hidden the language bar.

but every time the user logged out of and profile was saved – it went straight back to the old us layout.

This was only related to the machines running Mac with Windows installed, and after a bit of research i found out that its actually defaulting back to us layout

cause the terminal server allows the remote user keyboard to decide what layout to use. – ignoring the users last used setting.

its actually a nice feature, but of course in this situation i cant live with it – and i see this as a temporary solution until i figure out another way of dealing with it.

1.    On the terminal server (XenApp server), click Start, click Run, type regedit, and then click OK.
2.    Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout
3.    On the Edit menu, click Add Value, and then add the following registry information:

Value name: IgnoreRemoteKeyboardLayout
Data type: REG_DWORD
Value data: 1

4. Quit Registry Editor.

Next time the user logs on – make the changes to use native language (danish i my case) and logs off again, the setting will be saved to the users profile

and remembered next time the user logs on.

I restricted access to to prevent users from browsing though the c:\ – which forced me to use the administrative office 2007 gpo templates

since i needed to change the default “save as” location. cause else outlook would try and access “drive:\Documents and Settings\username\My Documents”

which would give it “This operation has been cancelled due to restrictions in effect on this computer. Please contact your administrator”.

(eg when you try and save emails, or attachments)

anyway, for some reason, theres no template for Outlook 2007 (would like to know why…) So Microsoft instead recommends this article

which in short tells you to add a string (REG_SZ) called DefaulthPath containing the new path for outlook to look in default.

(HKEY_CURRENT USER\Software\Microsoft\Office\12.0\Outlook\Options)

now, this you would normally throw in you startup scripts which is assigned to your users (sysvol/domain/scripts) like

REG ADD “HKCU\Software\Microsoft\Office\12.0\Outlook\Options” /v DefaultPath /t REG_SZ /F /d \\server.domain.tld\shared

This will run silently every time your user logs on a new citrix session and apply it to Outlook.

Now, i spend quite alot of time on getting this stuff to work, after a couple of hours testing and ensuring that the entry IS added, i gave up and asked Google

who completly ignored me.. Without the /F force parameter i could even see that when streaming Outlook, CMD appeard asking me if i wanted to overwrite the value in registry.

so there was no doubt that it was added.

After almost giving up, (no comments on this one) i came up with the really delayed idea that i should test it as an installed application and not streamed/profiled.

So after installing Office 2007 locally on my XenApp servers, i was surprised to see that it actually worked.  i could now shift between the profiled Outlook 2007 (streamed to server)

and the locally installed Outlook – never getting the streamed version to work.

So whoever reads this post and knows the explanation – please feel free to enlightenment me.

and i was met with the error message above.

theres probably multiple answers to solving this problem. some say that you need to run it as administrator permissions (doh) and some want you to change permissions on the

registry vmware path.

what almost worked for me was deleting the reg entry “HKLM\Software\VMware Inc” and then just retrying with the installation. i however, had to delete the entry

“HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VMware, Inc.” for it to work.

anyway – a quick search oh my resellers website told me that i could buy one of these smart “Belkin…..” usb-to-serial adapters. which was Windows 7 certified (i just read it as – of course it works with windows 7 – go buy it! )

The next day i got it with mail – its actually better quality than expected, and it didnt took me long to hook it up. Now the next thing i expected,was for windows 7 to just search for a driver and install it like it did with most of my other hardware. instead it told me to *** off – and go find a driver myselfe.

to make a long story short – go google “Belkin F5U103vea” Vista for yourselfe, and you will quickly find out that – its either impossible to find, or your download link ends with …/super-driver-downloader-professional2010.exe.

It seems like those bastards from Belkin didnt bother to host a driver that works with their product – or link to one. It turns out (like alot of other hardware) that its rebranded.

its from a company called Prolific Technology inc. And its original name is “PL-2303 USB to Serial Bridge”

you can find it on this website or directly link

so to summarize this post….. fuck you belkin for wasting my time which i could have spent on youporn instead.