ZCM and Terminal Server?

Hi,
We have set up a Windows 2003 TS and installed the ZENworks agent. Most things work just fine but we have one issue with bundles (bundles triggered by event: user login) being refreshed on all currently logged in users.
That is, if user A is logged on via rdp to TS and user B logs on then all actions performed for user B is also performed for user A...!?!
As an example we have a bundle that empties a directory (del directoryname /s /q) and bundle is triggered on user login. When user B logs in the bundle runs once again for user A.
What could be the cause of this?
Please advice.

That was with 10.2. We have roaming profiles (terminalserver farm).
Furthermore we have 2 seperate Terminalserver with Citrix Client. But on all we had the following problems:
-very slow logins (up to 15 minutes)
-Agent crashed (ZenworksWindowsService.exe) every day! Consequence no logins were possible until the Agent was manually restarted
-very high memory usage (ZenworksWindowsService.exe up to 2 GB)
-very high CPU usage
-terminalserver applications were running very slow
After the agent was uninstalled, the terminalserver run as they never did with the agent. Logins are ready after seconds and the user are happy again.
Originally Posted by magic31
How far back was that? We have two 2K3 R2 terminalservers running the 10.2 agents without issues (not using roaming profiles). Where specific processes locking up or the agent itself crashing?

Similar Messages

  • VPN Client and Terminal Server

    We have several clients that allow us to vpn into their systems and it has come to the point that we are getting software incompatabilities. What I am trying to do is set up "compatable" connections on a Terminal server box and let our people access this from their workstations. The problem is when the acuall connection thru the vpn client is made they loose connection to the terminal server. I have tried putting in 2 nic's into the terminal server and am able to allocate one for the terminal server but can not find a way to allocate the other to the VPN CLient. Is this possable or is there another way to accomplish this?
    Thanks

    Close,
    What I have is one machine with 2 nic's
    NIC #1 = Terminal Server Access (local lan only) Locked in via registry settings to use ONLY this NIC
    NIC #2 = I would like to "LOCK" the Client software to use ONLY this nic (has a dynamic IP for local lan and access to the Inet via a router.
    Problem: When you connect to the T-Server all is fine UNTIL you start up the client software to access our clients systems via the web connection to the T-Server on the local side stops and gives the appearance of a frozen screen.
    manualy disconnect person from the T-Server and kill the cisco client software then you can re-connect to the T-Server (and it all starts over again)
    The Cisco software acualy makes the connection to our clients system but we can not tell because it want BOTH the NIC's for itself and stops access via NIC#1 to the T-Server.

  • Error with SUNPKCS11 and Terminal Server

    I've found a problem when trying to create a SUNPKCS11 Provider through a Terminal Server session. My code is as simple as this:
    Provider pkcs11Provider = new sun.security.pkcs11.SunPKCS11(pkcs11ConfigPath);I see that it works fine in my local system, but when I run it through a Terminal Sever session, I get the ProviderException CKR_TOKEN_NOT_RECOGNIZED. The amazing thing is that if I try to do it several times, at last it works. I mean, doing that...
    Provider pkcs11Provider = null;
    while (pkcs11Provider == null) {
       try {
          pkcs11Provider = new sun.security.pkcs11.SunPKCS11(pkcs11ConfigPath);
       } catch (ProviderException e) {
          Throwable cause = e.getCause();
          if (!(cause instanceof PKCS11Exception && ((PKCS11Exception) cause).getErrorCode() == PKCS11Constants.CKR_TOKEN_NOT_RECOGNIZED)) {
             throw new TokenInicializationException(e);
    }...it finally works. It needs much more times to get it with JRE 1.6 (about 1500) than with 1.5 (about 10).
    I'm completely lost and I haven't found anything around about this. Can someone help me to avoid using this loop?

    When using NT Terminal Server, attempting to boot or shutdown Tuxedo can
    fail for semaphore errors.
    This is because NT Terminal Server performs "object decoration" for
    kernel objects that are created while in a remote session. For example,
    if you create a semaphore named foo locally, it will be called foo. But
    if you create a semaphore called foo while logged in remotely with
    session id 1, the semaphore name will be foo:1
    To be able to work with Tuxedo within a remote login window, "object
    decoration" needs to be turned off.
    SOLUTION:
    First make sure the tuxipc service is not running.
    Change directory into %TUXDIR%\bin
    Run Register
    Register libgp.dll /SYSTEM
    Run Register on all other dll's in %TUXDIR%\bin, it need be only run once.
    This will turn off "object decoration" for these dll's and remote admin
    of Tuxedo should no longer fail.
    Ray Castro Junior wrote:
    Hi,
    I have the product Bea Tuxedo v7.1 for Windows 2000 server.
    Machine: Compaq ProLiant.
    If I to install in the same machine the Terminal Server the tuxedo stops all the
    function.
    What it can be this?
    Thanks in advance.
    Ray

  • Application redraw issue over Citrix and Terminal Server

    Hi All,
    We provide a client-server application which connects to a SQL Server database. The middle-tier is hosted on an application server (Windows Server 2008 R2) which in turn connects to the SQL Server database. The fat client can either be installed on user laptops/desktops
    or published using Citix/Terminal services.
    We have a long standing issue which frankly I just cannot fathom. A customer has published the client via Citrix to users and using roaming profiles. If an employee is using the application in London, the roaming profile is created on a server in London and
    connects to the middle-tier in London. If an employee is using the application in Glasgow, the roaming profile is created in Edinburgh and the user connects to the middle-tier in London. The customer is also using DFS
    The roaming profile consists of the 'My Documents', 'My Pictures', 'My Videos', 'My Music' and 'Windows' folder. Distributed File System (DFS) is used for roaming profile folder replication between offices. See http://technet.microsoft.com/en-gb/library/cc732863%28v=ws.10%29.aspx
    The Edinburgh users are experiencing application redraw issue where the interface loads in chunks. For example, when a user scrolls up and down or left and right, the data loads immediately (from SQL Server) but the interface (GUI) loads in blocks. You can
    actually see each segment of the GUI components loading. The issue also occurs if connecting via a Terminal Server where the application is also installed.
    For London users, it all works fine. If an Edinburgh user comes to London, they have no issues.
    The network connection is super fast between the various offices.
    The application is built using C++ and Delphi and uses the GDI API to draw the objects.
    Any guidance is appreciated.

    Hello partner,
    Thanks for contacting Microsoft. This is Sophia who is going to help with this issue. From your description, I learnt that users from Edinburgh have application redraw issue. However, London users worked fine. Please let me know if I misunderstand your purpose.
    Based on the information, it seems that the issue located in the middle-tier in London. Could you try building a middle-tier in Edinburgh and then test how the issue goes?
    Besides, based on my experience and research, by default the allocation of the bandwidth is 70 percent for graphics data and 30 percent for virtual channel data, meaning when bandwidth usage is under pressure, graphics data is guaranteed to get 70 percent
    of the available bandwidth.  And we can tweak the settings a bit for some scenarios. To change the settings, we can set registry values. Please reference the information below.
    ===========================================================================================================================================
    Note: For these settings to take effect, the computer must be restarted.
    Following is the list of registry values that affect the bandwidth allocation behavior. These are all DWORD values under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermDD:
    ·         FlowControlDisable: When set to 1, this value disables the new flow control algorithm, making it essentially First-In-First-Out (FIFO) for all packet requests. This provides results similar to Windows Server
    2003. (The default for this value is 0).
    ·         FlowControlDisplayBandwidth / FlowControlChannelBandwidth: These two values together determine the bandwidth distribution between display and virtual channels. You can set these values in the range of 0–255.
    For example, setting FlowControlDisplayBandwidth = 100 and FlowControlChannelBandwidth = 100 creates an equal bandwidth distribution between video and VCs. The default is 70 for FlowControlDisplayBandwidth and 30 for FlowControlChannelBandwidth, thus making
    the default distribution equal to 70–30.
    ·         FlowControlChargePostCompression: If set to 1, this value bases the bandwidth allocation on post-compression bandwidth usage. The default for this value is 0, which means that the bandwidth distribution is applied
    on pre-compressed data.
    For more information about RDP Bandwidth, please reference the article below.
    ================================================
    Bandwidth Allocation for Terminal Server connections over RDP
    http://blogs.msdn.com/b/rds/archive/2007/04/09/bandwidth-allocation-for-terminal-server-connections-over-rdp.aspx
    Top 10 RDP Protocol Misconceptions – Part 1
    http://blogs.msdn.com/b/rds/archive/2009/03/03/top-10-rdp-protocol-misconceptions-part-1.aspx
    If you have any concerns about the action plan above, feel free to let me know.
    Best regards,
    Sophia Sun
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Reader 8.1.2 and Terminal Server (2003)

    I have Adobe reader 8.1.2 loaded on a terminal server. Program has been fine until today. When some (not all) users open some (not necessarily all) PDF files, the program terminates without an error being shown.
    The server log shows:
    Faulting application AcroRd32.exe, version 8.1.0.137, faulting module ADMPlugin.apl, version 3.16.128.32, fault address 0x000a7bf1.
    I tried upgrading to Reader 9. But it seemed to do the same thing. Removed Reader, tried to make sure all traces were gone (went through the manual removal), and then reinstalled 8. Still doing this. Any ideas?

    Hi jhousen1,
    Please provide more information for better analyzation:
    1. What error message do you receive in Internet Explorer?
    2. Do we have any proxy settings configured in group policy?
    Please Check the proxy settings through Internet Options in Windows 8.1, also take a look at the article below:
    What to do when Internet Explorer isn’t working
    http://windows.microsoft.com/en-hk/internet-explorer/ie-crashes-stops-working#ie=ie-11
    Best regards,
    Fangzhou CHEN
    Fangzhou CHEN
    TechNet Community Support

  • Problem with Acroabt X Pro and Terminal Server 2008r2

    I have deployed Acrobat x Pro on a 2008 R2 Terminal Server.  Everything was going great but a while back I had to reapir the OS and re-install Acrobat and a few other Programs because of a minor virus.  I have confirmed everything is running fine and that the virsu is gone.  However, since then users prefernces and settings have not loaded up when they open up acrobat.  The pfx file is still there for all users it is simply not loading along with the rest of thier prefernces.  Has anybody seen this before and does anybody have a fix for it?
    Message was edited by: Skywalker32

    Hi Skywalker32,
    I think Sabian is on the right track, well other than his nomenclature  being incorrect. The way Acrobat/Reader works is the list of digital ID files are store in the registry like in the example above (except you'd be looking for 10.0 in the path and either Adobe Acrobat for your Acrobat users or Acrobat Reader for the Reader users).
    So with that in mind, are you using a GPO to push the individual PFX files and are you using the Adobe Installation Wizard to customize the application (Acrobat or Reader) installs? I'm just trying to get a handle on what's in play here. Also, I thought that maybe the digital ID file location could be set as a lockable preference in the HKLM portion of the registry, but they can't so if that's what you are trying to do via the installation wizard that could be a problem (not that I think you are, I'm just taking a shot in the dark here).
    Thanks,
    Steve

  • Acrobat XI and Terminal server 2k8r2 x64

    I found out that Acrobat or adobe no longer provides open licensing? So we were told to buy 5 copies with where each one can be installed twice. 
    Question: How do you install the software if each license is per user and not concurrent? and having to buy 5 copies, we have 5 licenses to install? How would you go about doing that if the first installation instance only gives you one time to enter in the license key?
    Adobe support wasn't very helpful over online, and I have been waiting for 2 hours to get a call back from them.

    What do you mean by Open licences? From your post I can infer that you want to install an instance of Acrobat on a terminal server and you would like to connect to the server using multple clients concurrently. For this I suggest you can explore the option of Volume licensing. Volume licensing provides the option of multiple activations per serial key whereas Retail licensing gives you only 2 activations per serial key. For Terminal Server/Citrix servers, you need to get volume licenses instead of the retail ones.
    I hope I have clarified your doubts...
    Thanks,
    Vinod

  • Need help in setting up Group Policy for same user in local system and Terminal server

    Hi All,
    Currently our remote users are using our network using VPN client over internet.
    They are generally at their home computer and doing VPN as they have to work only in one RDP server for application.
    We actually have a OU created for these RDP users and assign then some strict policy like they can not use any other .exe,they can not user any explorer ,they can not even use windows explorer when they are on RDP they just use one exe of their application.
    Now what my management want is they want their home computers in Domain and want them to login via their same credentials they are using for RDP but they don't want them to restrict in their home computers with any strict policy.
    Now my confusion is how can I configure different policies for same users or same OU.
    Can any one guide me please...

    you can achieve this fairly easily with group policy.
    create an OU and put your remote desktop servers in that OU.
    configure both user and computer policies in a group policy and link it to that ou.
    you need to enable loopback mode - you may want it in merge or replace depending on your other policies you have. Probably replace though I would guess. this is set in the computer configuration > admin templates > system / group policy section.
    now remove the policy you have currently setup for your users on the users OU containing the rdp users. If you want you can move these users back to your main users OU.
    when your users login to the RDP server the settings in the user section of the GPO linked to the RDP Servers OU will apply.
    when the user logs in to their own computer the policies from the user OU and computer OU will apply - but not the more restrictive RDP OU.
    hope that makes sense.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • Report Builder 9.0.4 and Terminal Server 2003

    Is anyone running this config? I'm getting intermittent crashes, and wondering if anyone else has seen the same. We are primarily using Report Builder for non-English reports, but the server's base language is English. Prior to launching Builder, we set the NLS_LANG varaible to the target language, then launch. Most crashes seem to occur in the layout editor.

    You need to set TNS_ADMIN to the director that contains the tnsnames.ora

  • Business One, Terminal Server, and SQL Server on the same machine

    Hi,
    We have a customer who has a machine with Win Server 2003 R2.  They are using it as a Terminal Server with Business One for multiple users and as a SQL Server.  The have memory leakage issues which they believe are caused by our add-on, which, when it fails, has over a gig of ram allocated to it.  Our add-on was created using VB .NET 2005 and should be able to depend on the GC to prevent memory leaks.  Is there something about this approach that is problematic?  Should they have SQL Server on one machine and terminal server with Business One on a different machine?
    Thanks,
    Mike

    we have many customers that have this situation. all on one server.
    the only thing that i recommend is that the server has POWER !
    4 Gigabyte RAM should be minimum and the server should have 2 quadcore processor. -> this results in 8 cores and enough power.
    regards
    David

  • Outlook 2013 on terminal server Search failes for all users

    we have a small comany with a new Windows 2012 Fileserver and Terminal Server.
    Office 2013 is installed and we use Office 365 - Exchange Online as our mailserver.
    We use Outlook with the Cached Exchange Mode ON. We have shared our mailboxes with our collegues.
    Indexstatus is complete for all the users.
    So far the information i have.  
    I suspect wrong permissions on the Windows Search Folders are the cause of my problems but where can i find the Windows Search Folders which are indexed (and shoot be accesable for the users).

    Winnie, thank you for your answer. 
    1. Make sure indexing is complete. ==> Index is complete
    2. Make sure Indexing Options are configured correctly ==> Indexing Options are configured correctly for the administrator, Outlook
    isn't configured in de Indexing options for the users (that might be the problem i guess)
    3. Make sure Outlook data is included in indexing==>
    Outlook Data is included in indexing
    See screenshots below:
    First screenshot are the Indexing Options as configured for the users, the seconde one are the indexing options for the administrator. I suspect there is my problem, but can't find the solution the solve this for the users.

  • Reader 10 Terminal Server 08 Font Issue

    I upgraded from Adobe Reader 8 to Adobe Reader 10 on my 2008 Terminal Server and now the fonts print changed. Readable but not in the Arial font the document shows up in. This happens for all documents in Reader 10. This does not happen for other programs, only Reader 10. I use Easy Print (no specific printer drivers). Reader 10 on a local PC does not have this issue so I think its something with the way 10 and terminal server are playing. Is there a fix out for this issue or am I going to need to downgrade reader versions on my Terminal Servers?
    Thanks!!!

    Can you please see if launching the Preferences window from within Adobe Reader standalone application works?

  • Cpeaut32: error in formula  when print CR rpt 8.5 on terminal server 2008

    I have had this similar error in the past when I tried to run an older version of cr (5.0) on a newer pc (xp)and then I had to update some dll's and register them.
    Now the same kind of error but different versions of CR and pc software.--CR 8.5 and terminal server 2008
    The error reads the same: error in formula (and then code from function in the report where the error occured). "A number, currency amount, boolean or string is expected here... "
    The report runs fine on the older terminal server .  The program is a VAM application.  Any attempt to print report fails (using the preview, print or printer icons)
    A solution for a similar problem ( from the sap library ) using CR 8.5 in a Citrix or Terminal Server enviornment was to copy all files from   <systemroot>\Crystal
    to
                                                      <systemroot>\System32
    But before doing anything i wanted to find out if I needed to update some dlls.   or what is needed to detemine which dll's are causing the problem and what to do about it.  

    Cpeaut32 is very very old legacy SDK and will not likely ever work on newer operating systems. Upgrade to .NET to get support with recent OS's.

  • Moving File/Terminal Server Across Forest Trust

    Hello all, I think this question is relatively straightforward but I wasn't able to find any direct answers with a forum search. I have two forests with a full trust, forest A and forest Z. Forest Z has been on the decommission track for two years, and after
    this operation I intend to completely shut it down. I did not migrate users between forests, rather I created completely new user accounts in forest A for users who were in forest Z, and abandoned the forest Z user accounts. Forest Z still has several file
    servers and a terminal server which I would like to move to a domain in forest A. On the file servers, there are shares which have permissions and sharing settings for forest A users, and the terminal server also has user profiles for forest A users..
    The question is: when I move the file servers and terminal server from the domain in forest Z to a domain in forest A, will the file permissions from the previously non-local forest A remain in place, and will the user profiles from forest A still load when
    users sign in to the terminal server? Any help would be greatly appreciated, thanks!

    Hi,
    Do you mean that forest A users have logged on the TS server and created their profiles on it? Now you want to move the TS server from forest Z to forest A?
    Regards,
    Denny
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Redirect Printer is not working in windows 2008 R2 Server( Server Running as AD and Terminal Service(both role in single server))

    Dear Team
    i need solution from Microsoft for the issue;
    My infrastructure
    - Windows Server 2008 R2 (Role - AD and Terminal Service)- Updated
    - Client Machine running with windows 7 pro (Updated)
    - Client Using RDP Client to connect Windows 2008 Terminal Session
    - All are working fine, but Redirect Printing is not working (Through Windows 7 Pro) ... (HP Laser Jet 1020 plus - attached in Client PC)
    - it is working fine from Windows XP
    - i was done All terminal setting in both end, also try RDP Login with Administrator User, but issue is not resolve;
    What Microsoft can say about the issue;
    Thanks & Regards,
    VIMAL PRAJAPATI | 09824111686

    Have you checked the Print Service log in event viewer?
    Here's How.
    I have the Microsoft XPS driver on my clients, so I use that fact to my advantage below.
    Click Start Button/Administrative Tools/Remote Desktop Services/Remote Desktop Services Manager on the RDSH server
    Click the Sessions tab.  PC’s are listed Under Client Name by their computer name.  Take Note of the corresponding
    ID.  We will use this to locate the Printer information in the Event Log.  
    In the Event Log open Application and Services Logs/Microsoft/Windows/Print Service/Admin/ and Find the Event ID 823 entry that has the corresponding ID from the sessions tab you previously noted.  
    This Event Log Entry is created at Logon and you can only get the session ID when they are logged in.
    This tells you what client printer was mapped for the client.  The name that appears is the name of the Printer that was set on the client when the printer was installed.
    See if you see any errors here.
    If you see Event Id 823 with the following message “The default printer was changed to Microsoft XPS Document Writer,winspool,Ne00:. See the event user data for context information.”  Twice in a row with no other messages in between, and the first occurs
    at the time the user logged in, then their printer was not properly redirected.
    You see the Microsoft XPS driver mapped for each session prior to Easy Print redirecting the client machine’s Default Printer.
    Since your printer is the HP 1020 I would bet the driver on the client does not work with Easyprint.  I would try the  the HP Universal Print Driver or the driver for a printer that is very close, like the HP 1018.
    Thanks,
    Jeremy

Maybe you are looking for

  • How do I fix scrolling in Lion?

    I've read in various places that you can revert scrolling in Lion back to how it was Snow leopard via an option under preferences under either "mouse" or "trackpad," but unfortunately I don't have this option on my system. I have an early '08 Macbook

  • Adobe Acrobat X: Attachments and Extended Reader Functions...

    All, after adding attachments (e.g. PDF documents) to a PDF document and saving the document with "Extended Reader Functions" an error is shown in the Java debugger window: SyntaxError: missing ) after argument list 10:Document-Level:ADBE::FileAttach

  • Illustrator CS4 Swatch Palette Issues

    It seems as though the same issues that came with CS3 are now haunting me in CS4. Every time I close Illustrator my pantone swatch library disappears. This is causing a major issue being that every time I restart, close Illustrator or do an update my

  • Summary Report: Can Smallest Tile Display Label?

    A client has requested to not "do the math"... Even though the hover state shows the value, can the display of labels be required? Please see the linked pic. Thanks for any input. Tim

  • Buffer error using APEX_ITEM

    I have this query on a apex report: select APEX_ITEM.TEXT(1, ATRIBUTO, 30) "Attributes" ,ATRIBID ,VALOR "Actual Value" ,APEX_ITEM.SELECT_LIST_FROM_QUERY(2 ,ATRIB_VLR_ID ,'select VALOR ,ID from ATRIBBVAL where ATRIB_ID = ' || ATRIBID||' order by valor