Logon Script for bootstrapping RMS client

Dear all,
When a user first time use RMS, he needs to activate the AD RMS client by invoking the rights management feature in a office application, for example, try to protect a word document. But this process is somehow a little bit slow and somehow
might confuse user in a multiple forest scenario.
Is there any logon script we can use, to automatically check whether the logon user has RMS client activated or not, if not , do the bootstrap work? Can you share with me some idea?
thanks,
Actionxp

Hello,
not sure about but check AD RMS Service discovery in
http://technet.microsoft.com/en-us/library/dd772753(WS.10).aspx:
"Active Directory Domain Services (AD DS) service connection point (SCP) automatic service discovery. This is the recommended way to deploy an AD RMS environment. In this scenario, an SCP is created in the Active Directory forest where the AD RMS
cluster is installed. When the AD RMS client attempts user activation on the computer, it queries the SCP to find the AD RMS cluster and download the rights account certificate (RAC). With automatic service discovery, no additional configuration
is required on the AD RMS client."
Also templates should help you:
http://technet.microsoft.com/en-us/library/cc731070(WS.10).aspx
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Similar Messages

  • Logon Scripts for copying files in Windows 7

    Issues using Logon scripts to copy files in windows 7.  Its default is to append the file rather than copy and replace, which is what XP did.  How can I achieve the same results using
    logon scripts in W7 to copy any files to specified folders and replacing old files.  The reason for this is that we use a software that performs offsite/onsite updates and the only way all the users can have the correct version/tables is to either manually
    update each user in a 90+ user environment or use a logon script to perform the coping of the updates.  Unfortunately the software support won’t create a (while logging in to software) patch for this.  So we have to force it during the user logon.

    Hi Novice,
    It should depend on your script content. it's recommended you ask in the official scripting guys forum for professional help:
    https://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    Karen Hu
    TechNet Community Support

  • Logon script for looping - searching - deleting - copy

    I was trying to do multiple functions within a logon script.  If nobody wants to write the script, can you please point me to the right resource to find how to code it.  I am completely new to this and need help.
    The logic is to have a list of files on the server which were recently updated(this list changes all the time), using these files you would loop and search for these same files on the end user's machine upon logging in.  When it finds that same file
    on the end user's machine you would delete the file from the end user's machine, then copy the new updated file from the server onto the end user's machine in the same location the previous one was deleted from.  If file not found on end user's machine
    then just copy new one without deleting anything in highest level directory.  When done, you would loop again until you went thru every file that was updated on the server.  The source directory will always be the same and the copy to directory on
    end user's machine will always be the same, but end user's machines have subdirectories and the files that will be getting updated are in both.  Any help in any fashion would be appreciated.
    We are in the process of migrating from XP to Windows 7.  While in XP, we only had to do a copy function in the logon script and it would copy over the old file and replace it.  But Windows 7 doesn't delete the old file, it appends the new one
    to the old one, making it hard for the software looking for these files to work properly when it sees two files instead of one current one.  Hopefully this makes sense, I can elaborate more if anyone wants to help and needs more details.  Thanks.

    I would definitely not recommend copying files to end user machines from a logon script.
    But you are right that this isn't a script-on-demand forum.
    You can post a script request here:
    https://gallery.technet.microsoft.com/scriptcenter/site/requests
    I would point out that, as with this forum, there is no service-level agreement that guarantees that someone will have the time do this work for you. You will need to provide a very detailed specification; your post here is very vague.
    However: It sounds to me like you don't have a scripting question but some kind of application architecture question.
    -- Bill Stewart [Bill_Stewart]

  • Login Script for HP Thin Clients using Citrix

    Hi
    Could someone please assist me with this.
    I use a login script on my domain but I am now joining the HP Thin Clients onto the domain which will use SSON (Single Sign ON) which will automatically load citrix and use the current username and password to sign into the citrix session
    Is there a command I can use that will "check" the version of windows and if this is Windows 7 embedded Standard edition, then it will bypass all the commands and go to the end of the script.
    I was trying something like this IF "%OS Version%" == "Microsoft Windows 7 Embedded Standard" goto END
    I know you can use this for a "Computer Name" but we have so many terminals and would need to store all the names of them on the servers.
    Please can someone give me some advise on this.
    Thanks
    Martin

    Hi,
    As far as I know, you can user command systeminfo | findstr /B /C:"OS Name" /C:"OS Version"to check current system edition in
    Command Prompt. However, as I'm not fimilar with script, to need more assistance for your problem, it would be better to provide your question at script center.
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?category=scripting
    Roger Lu
    TechNet Community Support

  • Problem Windows 8 logon script not working from windows server 2008 R2

    hi there , this is third post regard this problem, here is my problem goes .....
    Is a very simple logon script for mapping drive purpose .... PLS take note Domain users can access and run this script for domain users using windows XP / WINDOWS VISTA / WINDOSWS 7 and only  users " WINDOWS 8.1 " Does NOT run
    at all . the script I put on logon script in Windows server 2008R2 group policy ... 
    @jrv :- http://social.technet.microsoft.com/profile/jrv/?ws=usercard-mini , insist said is my group policy setup problem so I post here agn...
    Manually run the script on WINDOWS 8.1 is 100 % perfect so it is definitely not my logon script issue , PLS any guidance pls share for me ok ?? thanks
    Below is my script syntax ;-
    @echo off
    REM Login.bat Version 1.0
    REM Exit if user has logged on to the Server
    IF %COMPUTERNAME%.==SL2011. GOTO END
    REM Delete pre-existing drive mappings
    REM
    REM Map M: to SL2011 on sl2011
    NET USE M: /DELETE >nul
    NET USE M: \\SL2011\sl2011 /YES >nul
    REM
    REM Map Y: to AccScan on rss2
    NET USE Y: /DELETE >nul
    NET USE Y: \\rss2\Public\AccScan /YES >nul
    REM

    Hi Tee Ee Foong,
    According to your post, the gpresult showed the GPO was applied and the script could run successfullymanully in the client. Right? Please follow the following step to narrow down
    the issue:
    1. Change the script to the following command: add 
    > %SystemDrive%\Users\test.txt to the script.
    2. Log on to a client with a regular user account, run gpupdate/force, and then re-log on to this client.
    3. Check if the test.txtfile exists in this location %SystemDrive%\Users.
    If the test.txtfile exists, the GPO with logon script is applied successfully when user logs on. But the result of running logon script achieves the goal we excepted or not which
    is still not sure.
    Regards,
    Lany Zhang

  • Logon script delayed by 5 minutes (300 seconds)

    It appears Windows 8.1 may have a built in delay processing logon scripts of 5 minutes.  Obviously, seems how it is brand new I'm not finding an ounce of information about it anywhere.
    Basically, I have troubleshooted this problem for hours now.  It boils down to the simple fact that I have several brand new Windows 8.1 systems joined to a Server 2003 domain.  Users have a GPO applied to them that assigns a logon script that
    maps network drives and printers.  After logging in, the script does not execute until 5 minutes have passed.
    I have removed all other GPOs, eliminated all non-microsoft services and shut off all startup items.  It makes no difference of admin or limited account, roaming profiles or folder redirection makes no difference.  Looking through the event viewer
    -> Microsoft -> Group Policy I can follow the the process step by step and everything looks great.  The event log shows the policy processing and application is happening within milliseconds.  Then there is exactly a 5 minute delay down to
    the second between:
    Group Policy Winlogon Start Shell handling complete
    and
    Starting Logon script for domain\user
    Task manager confirms that wscript.exe does not run until 5 minutes after logging in.  Once wscript.exe starts the logon script is processed as normal and the drives and printers are mapped as expected.
    I do not have any Windows 8 machines at this location, but I checked another location that has very similar policies and scripting and Windows 8 processes the logon script immediately.  This issue appears isolated to Windows 8.1.
    It appears that part of Microsoft's attempt to optimize the startup and logon process of Windows they may have added a 5 minute delay before processing logon scripts.  What I need to know is why, and where is the registry key to change this.
    Thanks

    Mark Russinovich had a very good session about troubleshooting slow logins this year at Teched.  I highly recommend you try running Procmon during bootup to identify exactly why its taking so long.  In his example it was trying to access a path
    for updates that no longer existed and it waited until it timed out and then continued on.  Another example of this was an environment that was installing McAffee every time during bootup which was causing slow logons.  Its worth a shot to at least
    ensure all your policies have been applied as the event log isn't verbose enough.
    This is not my blog, nor am I affiliated, but it seemed like a good tutorial for doing this.
    http://www.msigeek.com/6231
    Be kind and Mark as Answer if I helped.

  • Logon Script with Credential

    Hello everybody.
    Let me explain my problem. 
    I have a Powershell shell Logon Script for a Domain user without privileges that has to:
    Run IE as Domain user.
    When user close al IE open windows, Script have to make some process as soon as finish, script run again IE.
    The user that run the script doesn’t have any kind of access to the any drive and doesn’t have any access to any app or windows config setting, he has only access to IE through Powershell Logon Script, no more.
    I gave to user privileges as a part of the operating system through GPO.
    Well, let me show you the script before continue with the explanation: 
    Function fCredenciales([String]$FileTXT, [String]$UserIE)
                   $UsIE1       = Get-Credential -Credential $UserIE 
                  $SecureIE  = $UsIE1.Password
                   $BytesIE    = ConvertFrom-SecureString $SecureIE
                   $BytesIE   | Out-File $FileTXT
    #                     SCRIPT                              
    $Folder  = "C:\Cred"
    $FileIE   = $Folder + "\IE.txt"
    $UsIE     = "Domain\User"
    If(-Not (Test-Path $Folder))
                   New-Item $Folder -Type Directory
                    fCredenciales $FileIE $UsIE
    If (-Not (Test-Path $FileIE))
                   fCredenciales $FileIE $UsIE
    $UsIETxt   = Get-Content $FileIE | ConvertTo-SecureString
    If ($UsIETxt -eq $Null)
                   fCredenciales $FileIE $UsIE
    $UsuarioIE      = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $UsIE, $UsIETxt
    $MyNetwork    = Get-WMIObject Win32_NetworkAdapterConfiguration -ComputerName LocalHost | Where-Object { $_.IPAddress -ne $null } # | Select-Object IPAddress
    $MyIPAddress = $MyNetwork.IPAddress[0]
    $URL                   = "https://www.mywebpage.com/?qwerty="
    + $MyIPAddress + " -private"
    $IE                       = "C:\Program Files\Internet Explorer\iexplore.exe"
    While ($True)
        Start-Process $IE -ArgumentList $URL -ArgumentList $URL  -Credential $UsuarioIE
        $IDProcess = Get-Process -Name iexplore | ?{$_.MainWindowTitle} | %{$_.ID}
        Wait-Process -Id $IDProcess
        # Proccess 1                                             
        # Process2                                                                
    I need to execute IE as other user.
    As logon user doesn’t have drive access, he cannot read credential.
    If logon script wants to ask for credential, credential windows never shown.
    I don’t know why, but if the user hasn’t  administratives privileges
    Start-Proccess with –Credential doesn´t work, exactly as
    Wait-Process -Id $IDProcess.
    The security department wants:
    User Without any access (No drives, no menu, no nothing
    J).
    Script has to run IE as domain simple user.
    If script needs administrative privileges to run  Wait-Window the script can be run as administrative user, but not the Start-Process.
     I hope that you can understand me.
    Thanks in advanced,
    Angel Biurrun C.

    Sorry but what you seem to be trying to do is not possible.  You cannot make a user an admin by having them do something that only an admin can do.
    If your company says a user cannot have access to any drives then there is no way they can open a file on a drive they have no access to.
    The script you posted is also impossible to read.  Can you try and post it correctly.  Maybe someone can decode what you are trying to do.
    As a quick example this is how we post scripts.
    Function fCredenciales([String]$FileTXT, [String]$UserIE){
    $UsIE1=Get-Credential -Credential $UserIE
    $SecureIE=$UsIE1.Password
    $BytesIE=ConvertFrom-SecureString $SecureIE
    $BytesIE | Out-File $FileTXT
    Notice that it is readable and better indented. The eye can follow the code.  By using the code control the code becomes color keyed which makes it even more readable.
    ¯\_(ツ)_/¯

  • GPO apply user Logon script or GPP who Wins

    hi
    i have 2 GPO's linked to a OU1 GPO with precedence 1 has a GPP setting which applies a Value 
    the 2nd GPO has a Logon script which applies a value that is different that the 1st GPO
    How does Precedence take place if both have conflicting settings.
    How can i have change Linkorder/Precedence so that GPO 1 always wins
    Who Wins the battle between Logon Script for a setting or GPP for a setting 
    Also 
    None of these GPO's apply HKLM settings 
    But even though i see following when i run ProcMon during User logon. Why is HKLM setting being set when user logon , is it not a computer logon thing
    Operation - RegSetValue
    Result - Success
    Path - HKLM\SOFTWARE\MySoftware\Licensing\1\Server
    Command Line "C:\Windows\regedit.exe" /s \\DC01\NETLOGON\ABC\License.reg

    Also 
    None of these GPO's apply HKLM settings 
    But even though i see following when i run ProcMon during User logon. Why is HKLM setting being set when user logon , is it not a computer logon thing
    Operation - RegSetValue
    Result - Success
    Path - HKLM\SOFTWARE\MySoftware\Licensing\1\Server
    Command Line "C:\Windows\regedit.exe" /s \\DC01\NETLOGON\ABC\License.reg
    Does the file "License.reg" contain HKLM settings ?
    Is the (user) Logon Script, launching this? : Command Line "C:\Windows\regedit.exe" /s \\DC01\NETLOGON\ABC\License.reg
    If so, it's because the Logon script is simply executing what it has been configured to do.
    Group Policy Admin Templates and settings which are specific to \User Configuration\ vs. \Computer Configuration\, will only be executed "per-user" or "per-computer" - just as executing "Startup Scripts" are a per-computer thing,
    and executing "Logon Scripts" are a per-user thing - but that is only the trigger to execute - not what the executed payload might really do.
    I would also expect such a process to fail (a user would not usually have permissions to a HKLM regkey) unless the regkey security has been relaxed, or, the user logging in has admin rights or similar.
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Is \\ domaincontroller \NETLOGON\ the best place to launch .bat and .vbs scripts for GPO clients?

    I am trying to figure out what the optimal shared location is for launching a script via GPO, that will put specific shortcuts on my users' taskbar when when they first login to Windows 7 and create their profile.
    Is putting these scripts in the NETLOGON share on the closest domain controller the best method for doing this?

    I am trying to figure out what the optimal shared location is for launching a script via GPO, that will put specific shortcuts on my users' taskbar when when they first login to Windows 7 and create their profile.
    Is putting these scripts in the NETLOGON share on the closest domain controller the best method for doing this?
    Yes, to run a script, the NETLOGON share would, indeed, be the best location.
    However, placing shortcuts through a script does not seem the best approach to tackle this challenge. With the Group Policy Preferences Client Side Extensions installed by default on Windows 7 (and up), creating shortcuts with Preferences would be a
    far better, easier and more flexible solution.
    More information:
    Group Policy Preferences Getting Started Guide 
    Group Policy Preferences Overview  
    Windows 7: Group Policy Preferences
    Changing the default profile is also possible by defining a default profile in NETLOGON. This, too, might prove to be a more flexible approach.
    More information:
    168475 How to Create a Base Profile for All Users 
    973289 Customize the default local user profile when preparing an image of Windows
    As a side note, I would like to add, that Windows 8.1 clients (and up) will, by default, run scripts after a default time-out of five minutes.
    More information:
    Is your organization ready for Windows 8.1? Part 14, Logon Script Delay

  • Does anyone know of a product I can use to script over a Java Client for Or

    Does anyone know of a product I can use to script over a Java Client for Oracle Forms edition 9i??????????

    You should post your question in the Forms the Developer Suite forums. It is found at:
    Forms

  • RMS Client support for ADFS 3 with MFA

    We are using Azure RMS. The Users are synchronized from on-premise AD onto Azure AD. If we configure the Relying Party Trust for Azure RMS authentication with MFA (Multi-Factor-Authentication like SMS, OneTimeToken...), the User couldn't login from a Windows
    Client with the RMS Client installed.
    The reason is, that RMS Client only ask for username and password. A another box for OTP, SMS Code and so on doesn't appears.
    Because the login into Azure RMS to get access to protected documents is very sensitive, it should be able to using MFA with the RMS Client.
    Are there a timeline to implement MFA support in the RMS Client (e.q. for Windows)?
    Thanks for your help.

    Office apps have historically required app passwords since they didn't support MFA. Newer Office apps are now using modern authentication that allow sign-in through ADFS and/or Azure AD. If MFA is enabled in Azure AD for federated accounts, the primary
    authentication should be done by ADFS, after which Azure AD will perform the MFA. The new Android apps came out later than the new iOS apps. There is a blog post put out by the Office team with details on the modern auth for their apps at
    http://aka.ms/officemodernauth.

  • Licensing for RMS Client or IRM

    Hi All,
    We are trying to implement the IRM on top of the SharePoint environment which is up and running. My question here is do we need to buy the licensce for all the end users in order to use the AD RMS client services or else its a part of in built
    Operating which just required an update?
    My other question is I read that AD RMS client is not supported for the Operating Systems before windows XP, Is it true? If yes what is the alternative way to use the IRM for the users who are on the previous Operating Systems before Windows XP.
    Thanks in Advance

    Hi Ali,
    The Active Directory Rights Management Services (AD RMS) client is included with the Windows Vista, Windows7, Windows Server 2008, and Windows Server 2008 R2 operating systems and above versions. If you are using Windows XP, Windows 2000, or Windows Server
    2003 as your client operating system, a compatible version of the AD RMS client is available for download from the Microsoft Download Center Web site.
    check out the following link:
    AD RMS Client Requirements
    http://technet.microsoft.com/en-us/library/dd772753(v=WS.10).aspx
    CK

  • Best way for a vbs logon script to check which version of Firefox is currently installed

    I am currently writing a vbs startup script for our Windows PCs. In the script I wish to detect if Firefox is currently installed on the PC and if so what version is installed, so that I can then run the Firefox installer only if the installed version is out of date.
    The main target for this is Windows 7 64-bit, although if it worked for XP that would be a bonus. The script will run as a PC startup script so will execute before a user has logged on.
    Ideally I would like to avoid assumptions about the current installation location as we have a number of PCs configured for specialist roles where Firefox won't be in C:\Program Files(x86)\Firefox.
    I believe that the information I need can be found in the registry, however the information I have been able to find has generally been conflicting and relating to very old versions of Firefox. Any information you can provide about this for Firefox 5/6 would be very much appreciated.

    You can download Firefox 3.6.x from the link below
    * [http://www.mozilla.org/firefox/all-older.html www.mozilla.org/firefox/all-older.html]
    In TenFourFox, plug-ins are disabled for security reasons, because plug-ins for PPC are outdated and full of vulnerabilities. More information can be found on
    * [http://code.google.com/p/tenfourfox/wiki/PluginsNoLongerSupported the TenFourFox wiki page].

  • How do I have an exe in a logon script run as a different user (either a domain admin or even the local system account)

    So, I'm having some problems getting a logon script to work.  I need a way to deploy the agent that we use via login/startup scripts and what I have works fine if the user has admin rights, or if UAC is disabled.  I've tried to convert the .exe
    to an .msi to make it easier, but the .msi never works and it's only distributed as an .exe.  We deploy this to different clients, I can't disable UAC in their environment unless they specifically tell us to.  Can anyone think of a way around this? 
    I've been searching for days and I'm just lost.  If we could execute the file as the system account, or connect to shares using a startup script instead of logon, that would be perfect.  Basically what it does is check to see if the process for the
    agent is running (agentmon.exe) so we don't attempt to install it if it is already installed, if it's not, then it calls on a different agent installer depending on the IP address of the system (for clients that have more than one location).  Here's what
    I've got written that works for me in my test environment:
    Const strAgent1 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup1.exe"
    Const strAgent2 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup2.exe"
    Const strAgent3 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup3.exe"
    Const strFolder = "C:\Temp\"
    Const Overwrite = True
    dim objFSO, objNIC1, arrNIC, strIP, strMask, objShell, objWMIService
    dim
    'Checks for Kaseya agent process, AgentMon.exe, exits if running
    Set objWMIService = GetObject ("winmgmts:")
    Set proc = objWMIService.ExecQuery("select * from Win32_Process Where Name='agentmon.exe'")
    If proc.count > 0 Then
        WScript.Quit
    End If
    'Instantiate a NIC configuration object
    Set objNIC1 = GetObject("winmgmts:").InstancesOf("Win32_NetworkAdapterConfiguration")
    'Instantiate a shell object
    Set objShell = CreateObject("wscript.shell")
    Set objFSO = CreateObject("Scripting.FileSystemObject")
    'Create Temp Dir if it doesn't exist
    If Not objFSO.FolderExists(strFolder) Then
        objFSO.CreateFolder strFolder
    End If
    For Each arrNIC in objNIC1
        if arrNIC.IPEnabled then
            StrIP = arrNIC.IPAddress(i)
            strMask = arrNIC.IPSubnet(i)
            Set WshNetwork = WScript.CreateObject("WScript.Network")
        end if
    next
    Function NetworkID(Address, Mask)
        Dim AddressOctets, MaskOctets, Result, N
        AddressOctets = Split(Address, ".")
        MaskOctets = Split(Mask, ".")
        ReDim Result(UBound(AddressOctets))
        For N = 0 To UBound(AddressOctets)
            Result(N) = AddressOctets(N) And MaskOctets(N)
        Next
        NetworkID = Join(Result, ".")
    End Function
    Select Case NetworkID(strIP,strMask)
        Case "192.168.0.0"
        ' Kaseya install commands for 192.168.0.0 subnet
        objFSO.CopyFile strAgent1, strFolder, Overwrite
        Wscript.Sleep 1*60*1000
        objShell.run "C:\Temp\Test-KcsSetup1.exe"
        Case "192.168.1.0"
        ' Kaseya install commands for 192.168.1.0 subnet
        objFSO.CopyFile strAgent2, strFolder, Overwrite
        Wscript.Sleep 1*60*1000
        objShell.run "C:\Temp\Test-KcsSetup2.exe"
        Case "192.168.2.0"
        ' Kaseya install commands for 192.168.2.0 subnet
        objFSO.CopyFile strAgent3, strFolder, Overwrite
        Wscript.Sleep 1*60*1000
        objShell.run "C:\Temp\Test-KcsSetup3.exe"
        Case Else
        ' Some sort of error checking. Maybe a BLAT SMTP command to send an email
    End Select
    Set objWMIService = Nothing
    Set objNIC1 = Nothing
    Set objShell = Nothing
    Set WshNetwork = Nothing
    Wscript.quit

    You need to read the documentation carefully:
    The Deploy Agents install package is created using a Configure Automatic Account Creation wizard. The wizard copies agent settings from an existing machine ID or machine ID template and generates an install package called
    KcsSetup.All settings and pending agent procedures from the machine ID you copy from—except the machine ID, group ID, and organization ID—are applied to every new machine ID created with the package.
    Including Credentials in Agent Install Packages
    If necessary, an agent install package can be created that includes an administrator
    credentialto access a customer network. Credentials are only necessary if users are installing
    packages on machines and do not have administrator access to their network. The administrator credential is encrypted, never available in clear text form, and bound to the install package.
    ¯\_(ツ)_/¯

  • Running Permission Scripts for App-V packages in VDI environment

    Hi
    We use App-V 5.0 SP1 in VDI environment.
    We have a major problem with packages' permissions
    Our users don't have administrative privileges on their machines.
    As the option for "Security Descriptors" is discontinued, the only way to give permissions to a folder in a package is to use the VFSCACLS.vbs as a startup script of a package.
    This way the first time users launch an application they're prompt to reopen it, and the second time they can use the application with the needed permissions.
    The problem:
    The script saves those permission changes under LOCALAPPDATA\AppV...
    Therefore, everytime the users logoff the folder is deleted (VDI...) and again, they must run the script for the first  again to get the permissions back after logon!
    We cannot roam the LOCALAPPDATA\AppV folder as its size can be dozens of GBs...
    Folder permissions with group policy is also not a solution, as the folder name changes everytime we upgrade a package and it's impossible to follow with hundreds of packages.
    So it's either we're missing something critical in the architecture with VDI environment or there's a normal solution for these situations.
    Would love to get some help
    Thanks
    Tamir Levy

    Hi Nicke
    that's what I did! the problem is that I find my self over and over again want to sequence packages in App-V 5.0 and forced to sequence it in App-V 4.6.
    I really hope that it wasn't App-V team's goal. announcing App-V 5.0 and tell us it doesn't support many things so we will still need App-V 4.6 forever.
    I have to maintain 2 different App-V environments with 4 different servers , 4 different sequencers and 2 clients on each computer. it doesn't make any sense for me to forced to stay with both of the versions forever.
    correct me if I'm wrong but App-V 4.6 is a legacy application. the new versions cover only support on newer operating systems and nothing more. I won't be surprised if in the next version of MDOP won't come with App-V 4.6 anymore and Microsoft will announced
    it's unsupported very soon.
    Every time I open a ticket with MS Support the best thing I get is "It's a known issue, we can't tell when it will be fixed"
    can you help me more ? move it forward to other people from the inside? at least agree with me that something is not as expected in App-V 5.0... :(
    I love the technology, I believe in it, I'm kinda depend on it and I only want it to be better
    Tamir Levy

Maybe you are looking for

  • Screen-touch issues

    The left side of my screen is not responding to any touch and I have tried all the troubleshooting suggestions (reboot, restore, etc.). I cannot 'slide to open' my Ipod and I cannot enter my password on the left side of the screen but the right side

  • Migrating MS Access97 to Oracle 8i.1.x

    Can anyone provide me some good web links, white papers, etc. to review in migrating MS Access97 (.MDB's) to Oracle 8i.1.x? Thanks.

  • Temporary Hand Tool is not working when Firefox is open

    Hi guys Hopefully some of you can help me with a problem that has annoyed me for quite some time now.. Quite often my temporary hand tool (accessed by pressing the space bar) is not working which causes me to move objects instead of panning around my

  • Microphoto Freezes and Shuts Down During File trans

    I just bought my Creative Zen Microphoto a week ago and was pumped when I got. It worked fine for a couple of days, I didn't have a problem transfering the music through windows media player 0. everything worked fine and i was really happy with it. h

  • How do i clean print heads for 990 c on windows 7

    How do i clean print heads for DekJet 990 cxi on windows 7