How to join T510 Thin Client to Domain

I need to join my Hp T510 thin client devices to my Windows domain. (I need to place them all in a certain OU in Active Directory). Is this even possible? I have been reading around about this, and I get the feeling that some people have managed to do this, but I don't know how. Any help please? (I have been able to do it with my T520 devices, but the T510s are different). 

I'm not aware of any particular tie-in between Windows 7 and Domain Controller and Samba and OS X Server Open Directory LDAP Services.
Samba did provide limited Domain Controller capabilities and can use Domain Authentication, but the Apple installation from 10.6 is an old release and I've had some problems getting that older stuff to work.  You'll likely have to hand-manage Samba to get this to work, by following the directions at the Samba.org web site, too.
The best resource I've encountered for digging around in this topic area is the archives of the Mac Enterprise mailing list.
FWIW, Microsoft has (migrated from? abandoned? deprecated?) Domain Controller authentication in favor of Active Directory some years ago, and Apple has abandoned Samba in more recent releases; this is a dead end.  If you are using Windows Server and Active Directory, then OS X Server can be configured in what's called a Magic Triangle configuration; where you have Windows handling Windows authentication, and OS X Server handling OS X authentication, and coordinating across the two.  Or (with newer OS X releases) Apple has improved integration with Active Directory.

Similar Messages

  • HP t510 Thin Client and USB Printer Redirectiion

    We have HP t510 thin clients connecting to server side XenCenter and running Windows 7 virtual sessions hosted on the server. We are trying to connect a USB lablewriter printer to one of the thin clients. On the t510 device, XEN Connection General Settings Manager/Local Resources/Local Device Redirection is selected for Printers/Printer Mapping. Also on the t510 device under Peripherals/USB Manager, Protocol/All USB is set to Citrix and Devices has the USB printer selected/checked and set to Redirect.
    We have also tried within the assigned Windows session, a registry key has been created under HKLM\SOFTWARE\Citrix\ICA Client\GenericUSB\Devices, using both a generic redirect for all usb printers as well as device specific using the VID and PID hardware information of the printer.
    When we have booted into the Windows session and have installed the USB drivers/printing software and physically conencted the usb printer, it is not being recognized by Windows at all. Device Manager is not showing any unknown devices or anything.
    Has anyone seen this same issue? Is there an easy workaround? Will there need to be a hardware policy written in XENCenter?
    Thank you,
    Gregory Hall

    Hi Mitchell,
    You might get better assistance on the HP Enterprise Business Forum since you have a business class PC.
    I'll also ask a moderator to escalate your issue.
    HP DV9700, t9300, Nvidia 8600, 4GB, Crucial C300 128GB SSD
    HP Photosmart Premium C309G, HP Photosmart 6520
    HP Touchpad, HP Chromebook 11
    Custom i7-4770k,Z-87, 8GB, Vertex 3 SSD, Samsung EVO SSD, Corsair HX650,GTX 760
    Custom i7-4790k,Z-97, 16GB, Vertex 3 SSD, Plextor M.2 SSD, Samsung EVO SSD, Corsair HX650, GTX 660TI
    Windows 7/8 UEFI/Legacy mode, MBR/GPT

  • How to join windows 7 client to mac osx 10.6 domain controller ?

    Hello,
    I m IT support in school in france, and the network is an heterogen mix between mac os and windows 7 clients.
    The server is under OSx 10.6 and i don t find a workaround/walkthrough to join my windows clients to the domain controller.
    Any solution ?
    An upgrade of samba engine can resolve this issue ? If it can be, how to do this ?
    Thanks and excuse me for my poor english...

    I'm not aware of any particular tie-in between Windows 7 and Domain Controller and Samba and OS X Server Open Directory LDAP Services.
    Samba did provide limited Domain Controller capabilities and can use Domain Authentication, but the Apple installation from 10.6 is an old release and I've had some problems getting that older stuff to work.  You'll likely have to hand-manage Samba to get this to work, by following the directions at the Samba.org web site, too.
    The best resource I've encountered for digging around in this topic area is the archives of the Mac Enterprise mailing list.
    FWIW, Microsoft has (migrated from? abandoned? deprecated?) Domain Controller authentication in favor of Active Directory some years ago, and Apple has abandoned Samba in more recent releases; this is a dead end.  If you are using Windows Server and Active Directory, then OS X Server can be configured in what's called a Magic Triangle configuration; where you have Windows handling Windows authentication, and OS X Server handling OS X authentication, and coordinating across the two.  Or (with newer OS X releases) Apple has improved integration with Active Directory.

  • RMS13:- how to change in thin client

    While RMS13 installation I am getting oci exception.
    Could any one please let me know how to change from oci to thin driver.
    Do I have to change it in properties file or have to update build.xml.

    At first I was thinking..why oci and thin if RMS13 is Forms based? hehe
    Now I think I know you are talking about the installer, right?
    Could you post the complete error?
    As far as I know, the installer asks for an ORACLE_SID but I have found that it can use a tns alias (as you say OCI) but it never uses jdbc type connection strings.
    If in the same session where you run the installer you can successfully do a sqlplus rms13/password@alias and in the installer you answer alias every time it asks for a database, you would be fine.
    -Ramon

  • How to join client to windows server 2012r2 remotely

    Hi.. please.. 
    My Company Just got a new branch far from our recent location.. i am surpose to connect new computers as users from the new location to the domain controller in the head office.. i need to add this client so as to be able to use the Software used in the
    headoffice ...
    i will appreciate a quick response.. please help

    Hi,
    Based on your description, I understand that you want to join some remote client computers to a domain. Would
    you please let me know how setup the connection between the remote client computers and the domain controller?
    If connected in LAN, you can change
    Workgroup to Domain in “Member of” option in System Properties. For more details, please refer to following article and check if can help you.
    How to Join Your Computer to a Domain
    If connected via internet, you may need to establish a VPN connection with the domain from client computer, then
    join the client computer to domain.
    Please refer to following thread and check if can help you.
    Joining
    remote computer to a domain
    If anything I misunderstand or any update, please don’t hesitate to let us know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Thin Client Support

    I am using MAC Mini Leopard. How can I provide Thin Client Support ? Is there any version which already have the Thin Client support ?

    Mac OS X does not natively provide "thin client" support except via X11 or UNIX command line. There is a third-party product that purports to provide such support:
    http://www.aquaconnect.net/
    but I don't know how well it works, and their FAQ says only that it works with Mac OS X 10.4, not with Leopard. You can contact them and ask if they have, or will have soon, a version that works with Mac OS X 10.5.

  • How i upload a web page named index.html generated by NI Web UI Builder in thin client application on world wide Web

    Hello All,
                   I have an example which use simulated signal with its web service generated by LabVIEW. Then an application of this web service was created using NI web UI builder. And application was build and deployed on NI Cloud Portal, a zip file was downloaded of that project  after build and deploying application.
    The downloaded file contain a thin client application like :index.html page, readme file etc.
                  Now problems is this index.html runs easily on http://localhost:8080/appname/index.html or on my computer name like
    http://iaa42:8080/appname/index.html web page runs and shows updated values in indicators and graphs  but when i use ip address of my system like http://192.168.1.6:8080/appname/index.html , index.html runs but the values in indicator and graphs remains 0 (zero) constantly.     how can i get all indicators and graphs updating continously on by using my ip address like same when i use localhost or computer name in url bar.    1st problem is this.
    Now 2nd question.
                 I get a page index.html in a zip file built by NI web UI builder now i want this page to be viewed by every one world wide
    where should i upload that code. Should NI Cloud Portal be my hosting server for that web page ? or i have to purchase a domain other than NI cloud portal?
     Thanks in Advance
    Regards
    Waqas

    Hi Waqas,
    For your first question, my first thoughts turn to your router (which I assume you are using with a 192.168.x.x address). Are you sure you are configuring your ports and firewalls to allow NI services to function? Here is a really good resource on how to check if your ports and firewalls are configured properly:
    http://www.ni.com/white-paper/12402/en/
    For your second question, when you deploy a web service you are hosting it on your local machine. If you wanted to host it elsewhere (i.e. another server or another domain) you would have to be sure that the server hosting your application has the LabVIEW run-time engine installed. 
    Rick C.

  • How to join local computer to virtual server domain ?

    Hi everyone,
    I am new to Window Azure cloud computing. I found many articles and tutorials available online but I am kind of lost because I don't what I need to do to achieve my scenario.
    Scenario: I want to migrate my servers to cloud and retire all local servers such as DC and file server. At the same time, I wish to control the network traffic to limit the clients access to Internet resources. I am not sure retiring the
    all local servers is something right to do and how to do.
    What I have done:
    1. Site-to-Site VPN connection with Dell Sonicwall TZ205 to VNet. (I followed the route-based VPN in this document -> https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CB0QFjAA&url=https%3A%2F%2Fsupport.software.dell.com%2Fdownload%2Fdownloads%3Fid%3D5343958&ei=ykGhVIK6GISWuASU6oHQBw&usg=AFQjCNGGS6fsuK6IHAWyQgZi5fey4xhfKg&bvm=bv.82001339,d.c2E&cad=rja)
    2. Created a VM in the VNet. (I can ping the VM from computers connected to TZ205)
    3. Installed active directory and configured the domain forest.
    What I need to do:
    1. How to join the local computers to the virtual server domain controller with S2S and P2S VPN. (Some Internet resources mentioned I need to install Connect agent in order to do this)
    Extra questions:
    1. Is it possible to request the clients to provide account credentials before the point-to-site VPN to VNet is established ?
    2. How do I configure the TZ205 VPN router to send all the Internet traffic to the VNet instead of the ISP gateway? The computers connected to TZ205 firewall router public IP address doesn't change to the VNet gateway IP.
    Thanks for your time reading my questions. It will be helpful if you can provide me some useful links or ideas.
    Sincerely,
    Chee-Kian

    Greetings!
    I assume there is connectivity between on-prem device and DC on Azure VM.
    You can set the Internal IP of the DC as DNS on the on-prem device and trying joining it to the existing domain. Please note to use S2S VPN.
    It is not possible to provide user credentials while connecting to vNet via P2S VPN. It's a certificate based authentication (which is so by design).
    With regards to your query to send all internet traffic to vNet instead of ISP gateway. Please refer to Forced Tunneling:
    http://msdn.microsoft.com/en-us/library/azure/dn835140.aspx
    Hope this helps.
    Thank you,
    Arvind

  • Installing Adobe Reader on my Thin Client t510

    Trying to figure out how to add Adobe reader to a Thin Client t510.  I have never userd one before and my boss loves to give me new challenges.
    This question was solved.
    View Solution.

    Hi,
    They run Microsoft Windows Embedded CE 6.0. No available installation for Windows CE BUT you can always read PDF files:
    Silverlight for Windows Embedded
    The power of Silverlight brought to Windows Embedded CE to create rich applications and user interfaces
    Internet Explorer Embedded
    Internet Explorer with panning and zooming capabilities and a customizable interface to optimize the browsing experience on devices
    Flash Lite
    Browser plug in to render rich media websites
    Touch and Gesture
    Plug-in engine to enable natural input capabilities and gesture animations
    Connection Manager
    Infrastructure technology to manage multiple network interfaces on the device
    Microsoft Office and PDF Viewers
    Applications to render Microsoft Office Word, PowerPoint, Excel and Adobe PDF content on the device
    QQ Messenger
    Device side client to connect to popular Instant Messaging service
    You don't need to do anything.
    Regards.
    BH
    **Click the KUDOS thumb up on the left to say 'Thanks'**
    Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

  • ACS 5.3 - how to join to domain

    Hello,
    can anybody clarify me how it is possible join ACS 5.3 to windows domain?
    from cisco doc:
    Active Directory Domain Name: Name of the AD domain to join ACS to.
    Username: Predefined user in AD. AD account required for domain access in ACS should have either of
    the following:
    • Add workstations to domain user right in corresponding domain.
    • Create Computer Objects or Delete Computer Objects permission on corresponding computers container where ACS machine's account is precreated (created before joining ACS machine to the domain).
    Password: Enter the user password. The password should have minimum of 8 characters with the combination of atleast one lower case alphabet, one upper case alphabet, one numeral, and one special character. All special characters are supported.
    That means:
    - Active directory must be windows DOMAIN name, or AD-server dns name?
    - username must be domain user, or domain administrator?
    another settings:
    - time on ad-server and acs must be synced (I'm using the same NTP)
    - ip name-server for acs must be AD-server?
    I can't join ACS to ad-domain. error message is 'can not resolve network address', but from acs-cli it is possible. where can be a problem?
    martin

    Hi there,
    In the Active Directory Domain Name field you enter the domain name, for example: cisco.com
    The username field, it will be better if you try with a domain admin account, otherwise you can use a domain user but with privilege enough to add/delete computer objects.
    The time zone and clock must be synchronized using NTP or manual clock configuration should work as well.
    The ip name-server must be your DNS server, if your AD-server is the same DNS then use the AD-server.

  • How to join max os 10.4.5 to Windows Domain?

    Hello everyone,
    I just bought new mac laptop for work. I have windows 2003 server running. I want to join my mac to domain so its easy to manage computers in the network. i have tried many articales and disussions but there is no working solution.
    if someone could guide me on how to join mac OS 10.4.5 to windows 2003 server, it will be greate.
    Thanks

    Hello everyone,
    I just bought new mac laptop for work. I have windows
    2003 server running. I want to join my mac to domain
    so its easy to manage computers in the network. i
    have tried many articales and disussions but there is
    no working solution.
    if someone could guide me on how to join mac OS
    10.4.5 to windows 2003 server, it will be greate.
    Thanks
    Thanks for your reply
    Again i am using this mac under Windows 2003 server and Exchange 2003, the 2 main components in bussiness. I have gotten email working. If i get mac to join domain i can manage mac through AD (active directory). I know it will not work as windows based workstation but something close.
    I am very well aware that i will need windows emulation.
    Could you please guide me on what emulation should i use and how it will work?
    Thanks

  • How to use authid with rwservlet via WebLogic Thin Client

    1. Using J2EE Thin Client for WebLogic (WL) to submit interactive requests for Oracle Reports (App Server 10g) running on another server without SSO.
    2. After starting basic Infrastructure, we start rwserver in batch mode (no other mid-tier components are used).
    3. It appears that the cgicmd.dat file in the Thin Client conf directory on the WL server controls the DB access with the key:connect string info it has.
    4. We had been allowing the testers to come in via the web through a SunOne (iPlanet/Netscape) web server instance, which in turn connects to the WL server running the Thin Client instance.
    5. We noticed that anyone could run rwservlet to view report status with the showjobs command via a URL through the same mechanism as point #4 above, and were concerned about security of the reports - "bad".
    6. Then someone realized the showmap command could also be specified, and thus see the DB connect string (Id/pw/SID) - "worse".
    I researched securing Reports, and read through the white paper, "Securing Oracle9i Reports", and although it discusses security without using SSO, all it says is "users accessing a secured instance of Oracle9iAS Reports Services will be challenged to identify themselves by the Reports Servlet, using its own authentication mechanism (as with Reports6i)", but I can find no explanation of how that works, nor how it would work with the WL Thin Client.
    Questions:
    1. How are the Id's/passwords set up under AS 10g "as with Reports6i" in this environment going through the WL Thin Client?
    2. Is there anything else that needs to be done to secure the created reports, and the connect string info (i.e. using authid with rwservlet?showjob, and not allowing the rwservlet?showmap to be executed at all)?
    TIA,
    ROC

    the JDBC Developer's Guide (11gR2)
    gives an example in chapter 9 under "JDBC Thin Driver Support for Encryption and Integrity", sub- "Setting Encryption and Integrity Parameters in Java"
    from Oracle SQL Devloper, without redirecting the client to use the OCI/thick driver, choose, new database connection, connection type Advanced. add the entry from the example noted above to the Custom JDBC URL form.
    for example:
    Properties prop = new Properties();
    prop.setProperty(OracleConnection.CONNECTION_PROPERTY_THIN_NET_ENCRYPTION_LEVEL,"REQUIRED");
    prop.setProperty(OracleConnection.CONNECTION_PROPERTY_THIN_NET_ENCRYPTION_TYPES,"(AES128)");
    OracleDataSource ods = new OracleDataSource(); ods.setProperties(prop); ods.setURL(jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=xxxx)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=xxxx)(INSTANCE_NAME=xxxx))));
    Connection conn = ods.getConnection();
    strange side note!, we could not get this to encrypt unless the sqlnet.ora file included the SQLNET.ENCRYPTION_SERVER=required. if this was set to default(accepted), and even though the jdbc thin client properties set to required, the network traffic was still clear text.
    good luck

  • How to add Weblogic 10.3 Thin-Client library to project?

    Dear All,
    Can anyone help me how to include Weblogic 10.3 Thin-Client library to project. I am wondering for the location of Weblogic 10.3 Thin-Client library, but unable to locate it.
    Thanks in advance.
    Best Regards
    Bilal

    Its done...
    Go to project properties -> libraries -> Add library -> Weblogic 10.3 Thin-Client.

  • How Do I Join a Workstation to a Domain

    I'm trying to join a workstation to my domain (Server 2012 R2 Foundation).  I've set the workstation up with a static internal IP address (192.168.1.2), and can both ping the server from the workstation and the workstation from the server.  When
    I go into system properties and change the workstation from a workgroup to the domain (Averihire.local), I get an error message saying that "An Active Directory Domain Congroller (AD DC) for the domain "Averihire.local" could not be contacted".
    I'm very new to servers, so I suspect there's something else that needs to be done on the workstation and/or the server, but I haven't a clue to what it would be.
    I'd very much appreciate it if someone explaining what steps must be taken in order to join the workstation to the domain.
    Capt. Dinosaur

    What DNS address did you assign to the workstation?  It should be the IP address of your domain controller.  If that's not the problem, please post the output from ipconfig /all from both the workstation and the domain controller.  That
    error is almost always a network configuration issue.. : | : . : | : . tim
    I'm afraid I'm terribly confused here.  When I posted my question above, I had set up the workstation's static IP Address to the same as the automatic one (i.e. 192.168.1.2).  That gave me the error I cited above.  After reading your
    post, I changed it to the IP Address of the server (i.e. 192.168.1.8), and when I saved it I got an error saying that there are two computers on the network with the same IP Address, and, of course, when I then tried to add it to the domain, I got
    the same error as above.  Also, each time I try to set the workstation's IP Address to the 192.168.1.2, within a minute or two, the workstation loses it's internet connection.  Here's the ipconfig /all for the server
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : AVDC1
    Primary Dns Suffix . . . . . . . : Averihire.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : Averihire.local
    Ethernet adapter Ethernet:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
    Physical Address. . . . . . . . . : D4-AE-52-D5-3C-03
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::51ca:6bd:aa5c:b3e7%12(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.1.8(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.1
    DHCPv6 IAID . . . . . . . . . . . : 315928146
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-C1-57-A0-D4-AE-52-D5-3C-03
    DNS Servers . . . . . . . . . . . : ::1
    127.0.0.1
    NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter isatap.{CC3EB832-8869-48E5-B39C-0CDB5BB27590}:
    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft ISATAP Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    Here's the DNS from the Workstation, but with dynamic DNS.  Every time I try to set up a static IP there it loses its internet connection:
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : Averi02
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    Ethernet adapter Local Area Connection:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
    Physical Address. . . . . . . . . : 00-1A-A0-2D-F4-0D
    DHCP Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    Link-local IPv6 Address . . . . . : fe80::297d:9587:544d:de1d%10(Preferred)
    IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Lease Obtained. . . . . . . . . . : Monday, December 01, 2014 6:10:57 PM
    Lease Expires . . . . . . . . . . : Tuesday, December 02, 2014 6:10:57 PM
    Default Gateway . . . . . . . . . : 192.168.1.1
    DHCP Server . . . . . . . . . . . : 192.168.1.1
    DHCPv6 IAID . . . . . . . . . . . : 234887840
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-5C-59-07-00-1A-A0-2D-F4-0D
    DNS Servers . . . . . . . . . . . : 66.119.96.9
    70.158.128.9
    192.168.1.1
    NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter isatap.{CC18CC2F-EC81-44AB-B600-E8916A02420C}:
    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft ISATAP Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    Tunnel adapter Local Area Connection* 11:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:30f1:403:3f57:fefd(Preferred)
    Link-local IPv6 Address . . . . . : fe80::30f1:403:3f57:fefd%12(Preferred)
    Default Gateway . . . . . . . . . : ::
    NetBIOS over Tcpip. . . . . . . . : Disabled
    I hope this helps.  I guess I need to know exactly what settings I need to put in the workstation's DNS.
    Capt. Dinosaur

  • How to join a lot of computers to a domain?

    I join a computer doing this
    i go to system, change settings, network id, and the wizard ask me for: 
    username and password and the domain then ask me the same but for the administrator of the server and that's what i do to join a computer to a domain, now the problem is that if i do this with i don't know maybe 50 machines this going to take me a lot of
    time and i have to do it with one computer at a time.
    How can i do this more easy, maybe exist a tool to join a bulk of computers in the domain or some script?
    if you know some easy way to do this please help me XD

    Hi Bastian,
    Calin provide you correct link. Please refer to that link and check if help you to solve this issue.
    Just addition, please also refer to following article.
    Use
    PowerShell to Replace netdom Commands to Join the Domain
    If more issues for batch file or PowerShell script, you can also post those issues which were related to scripts
    in the
    Official Scripting Guys forum or
    PowerShell forum. I believe we will get a better assistance there.
    If any update, please feel free to let us know.
    Hope this helps.
    Best regards,
    Justin Gu

Maybe you are looking for