Free Download of our 500-page Terminal Services for Windows Server 2003 Book

Brian Maden dan Ron Oglesby telah menulis buku "Terminal Services for Windows Server 2003", yang mana saat ini buku tersebut dapat di download dengan gratis (versi e-book) dalam bentuk format PDF dan CHM.

Buku yg dapat didownload tersebut adalah:

1. Terminal Services for Microsoft Windows Server 2003, Advanced Technical Design Guide
   January 2004, 480 pages, ISBN 0971151040
   
   
   This book is not an administrator’s guide. Rather, it’s written for IT consultants, system engineers, and architects who must plan, design, implement, and optimize Windows 2003-based Terminal Server systems. It's filled with real-world, proven strategies created specifically for Windows Server 2003. See how some of the world's largest companies are using pure Terminal Server 2003 environments. You can download this book for free.
   Download pdf 4.2MB| chm 9MB
   
2. Citrix MetaFrame XP, Advanced Technical Design Guide, Including Feature Release 2
   November 2002, 800 pages, ISBN 0971151032
   
   
   A completely updated version of the bestselling first edition, this book is a real world field guide that details the design and deployment of MetaFrame XP environments. Written from years of practical experience, it provides readers with the insight needed to tackle tough design issues, including printing, replicated data stores, NFuse classic, server farm design, coexistence with MetaFrame 1.8, integration with Novell, licensing, and security. You can download this book for free.
   Download pdf 3.6MB | chm 4.7MB
   

Thanks for Brian Maden and Ron Oglesby.
http://www.brianmadden.com/books

Royal TS is an alternative for the standard Terminal Services Snap-In

Royal TS is an alternative for the standard Terminal Services Snap-In that adds additional features, including connection specific display settings, stored login credentials and more. It allows you to connect to any server which supports RDP protocol, and the connections can be organized in custom categories for quick access. Additional features include console connections (Windows XP/2003 or later), custom RDP target port, display smart sizing, port redirection and more.

Royal TS 1.3

Features:

• Organize multiple connections in one file
• Organize connections in different categories
• Custom sorting. Change the order of the categories and connections
• Move connection to other category
• Set default values for new connections
• Set autostart document
• Start a connection via command line
  /connect:"Connection Name" (works with and without autostart document)
• Default values and autostart document is stored in app.config file. Royal TS checks for write permission and disables the config menu for users who aren't allowed to change the config file
• Embedded Mode (like the one in Terminal Services Snap-In)
• External Window Mode
• Smart Size Mode
• Set different connection settings for each connection like Redirection, Color Depth, Window Size, Window Mode, ...
• Change target RDP Port (this KB Article contains information how to change the listening port)
• Passwords can be stored with user credentials (encrypted)
• Connect to interactive console (only for supported platforms) Windows Server 2003 and Windows XP are supporting this feature at this time. Other platforms ignore the flag.
• Session information display. See who is how connected.

Error on Citrix XML Service

"ERROR: The Citrix MetaFrame servers cannot process your request at this time. An error occurred while attempting to connect to the MetaFrame servers. Please make sure that the Citrix XML Service is running on the MetaFrame servers and listening on a valid port. If the Citrix XML Service is configured to share ports with the Internet Information Service (IIS), please make sure that the IIS WWW service is running."

1. Run IISRESET /stop on the web server to stop the IIS servers, not reset them.
2. Then run ctxxmlss /u to unregister the xml,
3. then run ctxxmlss /r80 to register it again on port 80.

Worked for me, hopefully you'll have the same results.

Citrix Port and how to connect behind firewall

1. ICA Client Connections—TCP Port 1494
2. # Understanding ICA Browsing
3. ICA Browsing the Old-Fashioned Way—UDP Port 1604
4. ICA Browsing Using TCP/IP+HTTP and XML—TCP Port 80
5. IMA-Related Traffic and Firewalls

Command Line that use on terminal service

Some of command line is have a great or powerfull for special moment, so now i will write down here. and if you have another tips don't hesitate to post here by me an email.

• mstsc /v:servername /console (Connect to server in console mode, to find another option use mstsc /?)
• qwinsta /server:servername (Used to query terminal session, query windows stations. more information u can use qwinsta /? or you can use "query session" from command prompt)
• rwinsta /server:servername [sessionid|sessionname] (This command used to reset/disconnect session to known initial values, reset windows stations. Another way is use "reset session" from command prompt)
• tsdiscon [sessionid|sessionname] /server:servername (in case you want to disconnect session from terminal session).
  

Terminal Server Licensing

Hari ini entah kenapa, gue ngga bisa connect ke Terminal Server dengan menggunakan Remote Desktop Client. Coba TSL Servernya di activated, masih ngga bisa juga, terus coba jalain "Terminal Server Licensing", ternyata Terminal Server Licensing ngga pernah berhasil mencari Terminal Server Licensing server, tapi jika dengan menggunakan cara manual ternyata bisa connect ke TSL Servernya.

Setelah ubek-ubek ternyata, memang masalahnya karena tidak bisa menemukan TSL Server, sehingga tidak bisa menauthentication client license ke dalam database TSL Server. Huh.. untung ada cara lain yg bisa mengatasi hal ini. Yaitu dengan cara menambahkan key di registry. Lengkapnya adalah;

pada key:
HKLM\System\ControlSet\Services\TermService\Parameters

Tambahkan key "\LicenseServers\NAMA_TSL_SERVER", sehingga menjadi
HKLM\System\ControlSet\Services\TermService\Parameters\ LicenseServers\NAMA_TSL_SERVER

Pada key tersebut tidak perlu memberikan nilai apa, cukup tambahkan 2 key tersebut dan biarkan dengan nilai defaultnya.

Untuk informasi mengenai Terminal Server Licensing, Jika kita sudah menginstall TSL Server pada Windows 2003 Server maka kita mendapatkan "trial" 120 hari untuk connect ke Terminal Sever, dan apabila kemudian kita meng-aktifkan, maka tambahan 90 hari untuk connect ke Terminal Server.

Enable Single Sign On in WI (Web Interface)

Langkah-langkah berikut bisa juga di lihat di Web Interface for MetaFrame XP - Feature Release 3 (Web_Interface_Guide.pdf) halaman 67.

1. Install Full ICA Client 32 (Program Neighborhood), dengan menggunakan user administrator. Pada saat proses installasi akan muncul option "Would you like to enable and automatically use your local user name and password for Citrix session from this client?", jawab Yes. Jika sebelumnya client sudah terinstall di computer anda harus meng-uninstall dan meng-install ulang ICA Client 32.

2. Edit file Appsrv.ini pada directory user profile atau "C:\Documents and
Settings\<User Name>\Application Data\ICAClient". (Jika file ini tidak ada, coba anda jalankan program Citrix Program Neighborhood, yg bisa dijalankan dari Start | Program | Citrix ICA Client)
Tambah 2 baris berikut pada section [WFClient] di file Appsrv.ini;

EnableSSOnThruICAFile=On
SSOnUserSetting=On

3. Jalankan Admin tool untuk mengkonfigurasi authentication, dengan menggunakan browse arrahkan ke http://servername/Citrix/MetaFrameXP/WIAdmin, Click Authentication pada section General Settings, kemudian pilih option Desktop credential pass-through dan Explicitly login
dan set Enable ICA Client pass-through authentication menjadi Enable, lalu save, dan click Apply Changes untuk memperoleh effectnya.

4. Sekarang anda sudah dapat melakukan login dari Web Interface dengan menggunakan local user anda, Jika masih terdapat error. Coba anda tambahkan situs anda pada bagian trusted site, yaitu dengan cara Tools | Internet Options, pilih security tab folder, lanjutkan dengan memilih Trusted Site, dan click tombol "sites". Sampai bagian ini anda harus menambahkan situs/url dari citrix server.

Terminal Services Licensing Server was stoped after installing Microsoft Pacth for Virus Sasser

You need to remove some registry value on HKLM/System/Current Control Set/Services/TermService/Parameters, delete the following entries:
- Certificate
- X509 Certificate
- X509 Certificate IS
After delete this entries you need to restart the server to take affect.

Note: You can use regedt32.exe tools to delete those values, please becareful while work on the registry file since it can make demage your server i'm not guarante for any impact for that you do, so dont forget to create backup before any changes on the system registry.

Citrix MetaFrame Presentation Server Installation

1. Install WIndows Server
   
2. Install Terminal Services
   
3. Install WIndows Service Packe
   
4. Install Citrix MetaFrame XP/Presentation Server
   
5. Install Citrix SP
   
6. Enable logon locally, jika menemukan user tidak bisa login ke terminal server dan mendapatkan error message "The local policy of this system does not permit you to log-on interactively". caranya:
   
   • Gunakan tools NTRIGHTS tools yg berasal dari Windows 2000 Resource Kits, yang dapat di download di sini. Kemudian jalankan dengan menggunakan command: ntrights -u Users +r SeInteractiveLogonRight
     
   • Jika masih belom berhasil, gunakan langkah berikut: Start | Program | Administrative Tools | Domain Controller Security
     
   • Lalu masuk ke Security Setting | Local Policies| User Rights
     
   • Double click pada "Logon Locally", dan tambahkan user/group yg diinginkan
     
   • Setelah selesai Reboot komputer, atau jalankan secedit /refreshpolicy machine_policy /enforce, sedangkan pade Windows XP dan Windows 2003 harus dengan perintah gpupdate /force, dan juga harus merubah user right "Allow Logon Locally", atau memasukan user menjadi member dari group Remote Desktop Users
   
   
7. Jika mendapatkan pesan "You do not have access to logon to this session", anda cukup menambahkan security permission pada "Terminal Service Configuration" yg ada di Administrative Tools. CTX488524
   

NFuse Installation

1. Create a new folder in windows explorer.
2. Copy the "citrix" folder into that new folder
3. In IIS manager, create a new website and point to the new folder as the home directory.
4. Find out the WSVC server number of the new web site by looking at the Properties of the website, on the "web site" tab, then "properties" at the bottom, at the bottom again look at the setting called "log file name" the number will be next to W3SVC# (that is the number you need for the next steps.
5. Go to CTX875451 to get a script called the Metabase fix.
6. Open the file called NfuseMetabase.vbs with notepad and find the line : [ location = "IIS://localhost/W3SVC/1/ROOT" & path ] change the number from /1/ to the number in step 4 and then save it.
7. Run the metabase fix at the command line with the following syntax [ cscript NFuseMetabaseFix.vbs /Citrix/NFuse17 ] pointing to the nfuse 17 folder and then [ cscript NFuseMetabaseFix.vbs /Citrix/NFuseadmin ] nfuse admin folder.
9. Edit the nfuse.conf file to make sure that the value [ URLMapping./=c:\\inetpub\\wwwroot ] is = to what ever the web site's home directory is ... to avoid icon cache error. After editing the file save and restart the web services.

Frank Pulliza