kgoering

Forum Replies Created

Viewing 30 posts - 31 through 60 (of 92 total)
  • Author
    Posts
  • Avatar
    kgoering
    Member
    in reply to: Printer showing after applying usb disable policy #386581

    Re: Printer showing after applying usb disable policy

    Hi Blood,

    This is to restrict users from both copying data and software coming in..

    Regards,
    Anishk

    ==================

    Blood;281687 wrote:
    I suspect that the only way to do this would be disable the USB node via Device Manager. However, discovering which are for the front and back would be entertaining, and doing it on each machine a real chore. If you have a lot of machines it would be impossible.

    Why do you wish to block USB access? Is it to prevent data from being copied to it and leaving the office (security software can do this), or to protect against software coming in, or both?

    Avatar
    kgoering
    Member
    in reply to: Printer showing after applying usb disable policy #386580

    Re: Printer showing after applying usb disable policy

    Hi,

    We at last had to give pen drive access to the printer connected machines in all branches to avoid this issue as there is no other solution coming up…!!!

    In between, Can we block only the front ports of Cabinet to avoid usb stick usage ?

    Regards,
    Anishk

    Blood;281632 wrote:
    I had the same issue with an HP b/w laserjet at our office. I had installed it using the driver that came with the installation CD (printer was displayed as USB storage), then used the web update utility to update it – still did not change the status of the printer.

    I tried all sorts – downloading the correct driver from the web, etc etc.

    Eventually, it was persistence that worked. After uninstalling/reinstalling several times and running the built-in web update it eventually worked.

    It was a PITA!

    Avatar
    kgoering
    Member
    in reply to: Printer showing after applying usb disable policy #386579

    Re: Printer showing after applying usb disable policy

    Hi,

    Other printers seems to be working fine except hp 400. The same printer is having issue in most of the branches. Is that because this printer is having internal memory which in turn is making it to be detected as usb mass storage device instead of ‘usb composite device’ ?

    Regards,
    Anish

    ===

    Bertmax;281609 wrote:
    Make sure you have the correct printer drivers loaded. A poor or incorrect driver is usually the cause of Windows misidentifying devices.
    Avatar
    kgoering
    Member
    in reply to: Printer showing after applying usb disable policy #386578

    Re: Printer showing after applying usb disable policy

    Hi Humannetwork,

    We have already set script to disable or enable usb on the basis of user who logs on. pen drive is working fine with the policy. The problem is with the usb printers. It is showing as offline because it seems to be detecting printer as usb mass storage device.

    Regards,
    Anish

    Humannetwork;281586 wrote:
    Avatar
    kgoering
    Member
    in reply to: Creating users with specific application rights #386577

    Re: Creating users with specific application rights

    Hi,

    Seems Applocker is for windows 7 , but we have both win xp and 7 computers.

    Regards,
    Anish

    Avatar
    kgoering
    Member
    in reply to: Access denied while writing/pasting in c drive #386576

    Re: Access denied while writing/pasting in c drive

    Hi,

    Called Microsoft tech and came to know that the domain user cannot directly paste/create folder in c drive. The options are to add them either as local admin or domain admin group.
    Thanks.

    Regards,
    Anishk

    Rems;280222 wrote:
    Do they try to paste, write/creating files in to the root of the system drive [noparse](C:)[/noparse]? They can’t! users should write only to “their” folders.

    Better not try to change the permissions on the root of the system drive as it could be inherited by sytem folders and will mess up your Windows installation. The root and system folders are protected by the Windows Integrity Mechanism and UAC. You can manage UAC by GPO.

    or, • What is the directory where to the users try to paste, write/creating files? (note that you cannot browse the ‘Documents and setings%username%’ folder in windows 7, instead users should use the users%username%’ folder).
    • Also describe how do the users try to paste, write/creating files / by which program?
    • Are some of the users member of the local group administrators?

    /Rems

    Avatar
    kgoering
    Member
    in reply to: Access denied while writing/pasting in c drive #386575

    Re: Access denied while writing/pasting in c drive

    Hi,

    The error message while copying/creating the file/folder is “A required privilege is not held by the client

    Regards,
    Anishk

    =======================

    Anishk;280213 wrote:
    Hi Ossian,

    Tried giving full control to effective permission but getting error messages during the process. Screenshot for one such error attached for your reference.

    Regards,
    Anishk

    Avatar
    kgoering
    Member
    in reply to: Access denied while writing/pasting in c drive #386574

    Re: Access denied while writing/pasting in c drive

    Hi Ossian,

    Tried giving full control to effective permission but getting error messages during the process. Screenshot for one such error attached for your reference.

    Regards,
    Anishk

    Ossian;280179 wrote:
    Check the NTFS “effective permissions” for the user on the actual machine.

    Presuming you are accessing the local C drive, that should be enough, but if it is a shared drive, check the share permissions too.

    Avatar
    kgoering
    Member
    in reply to: Access denied while writing/pasting in c drive #386573

    Re: Access denied while writing/pasting in c drive

    Hi Ossian,

    Thanks for the reply. Will check the same and revert.

    Regards,
    Anishk

    Avatar
    kgoering
    Member
    in reply to: Windows 2012 – Blank screen #386572

    Re: Windows 2012 – Blank screen

    Tried repairing but repair option also not working.

    Regards,
    Anish

    Ossian;278519 wrote:
    Avatar
    kgoering
    Member
    in reply to: Windows 2012 – Blank screen #386571

    Re: Windows 2012 – Blank screen

    Hi,

    Is there any way to install .net framewoek , powershell again in this situation.

    Regards,
    Anish

    Avatar
    kgoering
    Member
    in reply to: Windows 2012 – Blank screen #386570

    Re: Windows 2012 – Blank screen

    Hi Osian,

    We are not having powershell. we have removed the .net framework feature which has also removed powershell from the server.

    Regards,
    Anish

    Ossian;278503 wrote:
    It sounds as if you have managed to disable the GUI functionality and reverted to server core.
    Try following the steps here to re-enable the GUI:
    http://forums.mydigitallife.info/threads/40304-How-To-Convert-Server-2012-Core-Installation-into-Full-GUI-Server-and-viceversa
    (You will need installation media)
    Avatar
    kgoering
    Member
    in reply to: Windows Activation – win 2012 #386569

    Re: Windows Activation – win 2012

    Hi,

    At last, got a solution.

    http://www.doitfixit.com/index.php?option=com_content&view=article&id=192:upgrade-server-evaluation-version&catid=48:active-directory&Itemid=53

    Regards,
    Anishk

    Avatar
    kgoering
    Member
    in reply to: Windows Activation – win 2012 #386568

    Re: Windows Activation – win 2012

    Hi Jeremy,

    Getting the following error message while running it

    Error:0xC004F069 On a computer running Microsoft Windows non core edition, run slui.exe 0x2a 0xC004F069′ to display the error text.

    Regards,
    Anishk

    -=


    JeremyW;275979 wrote:
    If you’re using MAK and not KMS then try the following from an elevated command prompt:

    slmgr -ipk XXXX-XXXX-XXXX-XXXX[/CODE]
    Where “XXXX-XXXX-XXXX-XXXX” is your product key.[/QUOTE][CODE]slmgr -ipk XXXX-XXXX-XXXX-XXXX[/CODE]
    Where “XXXX-XXXX-XXXX-XXXX” is your product key.

    Avatar
    kgoering
    Member
    in reply to: Windows Activation – win 2012 #386567

    Re: Windows Activation – win 2012

    downloaded from microsoft site. The key is purchased and is reflected in our vlsc page.

    Regards,
    Anish

    JeremyW;275953 wrote:
    Where did you get your key from?

    Have you gone through the steps to download the evaluation?
    http://technet.microsoft.com/en-us/evalcenter/hh670538.aspx

    Avatar
    kgoering
    Member
    in reply to: Windows Activation – win 2012 #386566

    Re: Windows Activation – win 2012

    Hi ,

    It says windows server 2012 standard evaluation edition.

    Regards,
    Anish

    Ossian;275956 wrote:
    What edition does the server say it is (Standard or Datacentre)?
    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386565

    Re: Access denied – Group policy issue

    Hi,

    I have tried running the usb block policy by applying the policy to an OU containing user. the usb policy does not work while applying the policy to user. why then do we have the usb option in user configuration in addition to computer config ? Please help.

    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386564

    Re: Access denied – Group policy issue

    Hi,

    Can we apply usb/cd block policy based on user instead of computer. Removable storage template is present in both user configuration and computer configuration.
    Also, what if in user config, it is set to allow and in computer config, it is set to deny ? which policy would override in this case ?

    Regards,
    Anish.

    ============

    Anishk;275287 wrote:
    Hi,

    Finally got the solution. Went to device manager and uninstalled the driver for cd and usb devices. Restarted the machine and everything was normal as before.

    Regards,
    Anish

    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386563

    Re: Access denied – Group policy issue

    Hi,

    Finally got the solution. Went to device manager and uninstalled the driver for cd and usb devices. Restarted the machine and everything was normal as before.

    Regards,
    Anish

    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386562

    Re: Access denied – Group policy issue

    Hi Pope,

    We have created an OU A and created 2 sub ou’s named userA and computerA inside that. the policies for usb block was created under computer configuration and then applied to the OU A which contain the sub ou’s containing users and computers.
    There is no local policy for usb block in the local machine. The dword value in registry for usb is 3.

    Regards,
    Anish

    pope;275216 wrote:
    Did you edit the default domain policy?

    Check if the policy was applied to the machine or to individual users.

    It ought to have being applied at the domain users level such that when a user with admin rights or any other rights logs in into any machine he can use usb devices whereas a standard users cannot.

    Access denied means the policy is still there.Remember a local policy will take precedence over a domain level policy

    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386561

    Re: Access denied – Group policy issue

    Hi,

    Still no help. other computers are also facing the same issue for CD and usb access. Both devices are showing access denied when inserted. The policy was applied and later removed.

    Regards,
    Anish

    Avatar
    kgoering
    Member
    in reply to: Access denied – Group policy issue #386560

    Re: Access denied – Group policy issue

    Hi,

    Already tried running gpupdate on the server and restarted the affected pc.
    Will check in the device manager as well.

    Regards,
    Anishk

    =


    tAnk;275035 wrote:
    Try to run gpupdate via command line on one of the Domain Controller, and restart affected users computer after that. If that did not help, try to check in the Device Manager on his computer if that device in the list of devices and if it is not disabled. If it is disabled – enable it.
    Another reason why the usb device could stop working on particular computer, if it conflicts with network drives letter, to fix it open the disk manager on his computer, find that usb in the list and manually assign it the different drive letter.
    Avatar
    kgoering
    Member
    in reply to: Blocking registry/task manager for specific users #386559

    Re: Blocking registry/task manager for specific users

    Thanks Osian.

    Ossian;274368 wrote:
    Server 2003, unlike later versions, only has one local policy, which applies to all users

    You could try setting custom permissions on the executables (REGEDIT, REGEDT32 etc.)

    Avatar
    kgoering
    Member
    in reply to: Blocking registry/task manager for specific users #386558

    Re: Blocking registry/task manager for specific users

    Hi,

    The computer is not under domain. The polcies applied are in local group policy editor.

    Regards,
    Anish

    wullieb1;274366 wrote:
    Move your limited users to their own OU and apply the GPO to that.
    Avatar
    kgoering
    Member
    in reply to: List of applications installed #386557

    Re: List of applications installed

    Thanks wullieb1, So with AD, no inventory control is possible. is there any scripts to get this inventory.

    Regards,
    Anishk

    wullieb1;274329 wrote:
    Nope.

    You will need to have some sort of inventory tool that will do this for you.

    In our org we use Lansweeper but there are loads out there.

    Avatar
    kgoering
    Member
    in reply to: FTP Not working using commmand prompt #386556

    Re: FTP Not working using commmand prompt

    Ossian;273916 wrote:
    Can you please post the actual commands you are using and, if possible, a screenshot of the error?

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.
    C:Documents and Settings4351>ftp 10.x.x.x
    Connected to 10.x.x.x.
    xxx windows-xxxxx X2 WS_FTP Server 7.5.1(47982101)
    User (10.x.x.x:(none)): ftptmb
    331 Enter password
    Password:
    530 Invalid userid/password
    Login failed.
    ftp>

    —-

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.
    C:Documents and Settings4351>ftp 10.x.x.x:1305
    Unknown host 10.x.x.x:1305.
    ftp>

    Regards,
    Anish

    Avatar
    kgoering
    Member

    Re: the local policy of this computer logon interactively domain- rdp

    Hi,

    We only require that if we connect x number of computers in domain environment, the domain users(non-admin) should be able to take other machines remotely from the machine they are working all in within that domain. But, in our case, this is not working. Only when domain users are added in the administrator group, they are able to take remote of other machine.

    Regards,
    Anish

    Virtual;273320 wrote:
    So as it stands, only Administrators appear there? What roles does the server have?

    Also, just read your subject title. Can you let us know what you need to do as logon interactivelt rights is for when you are physically at the server or using its console session as oppose to a Remote Session where you also need the Allow Logon Locally to be permitted usually via adding a relevant AD Group to that GPO setting.

    Avatar
    kgoering
    Member

    Re: the local policy of this computer logon interactively domain- rdp

    Hi,

    No, we have not added any group to “Allow logon locally”.

    Virtual;273312 wrote:
    Have you been adding a group?
    Avatar
    kgoering
    Member

    Re: the local policy of this computer logon interactively domain- rdp

    Hi,

    Iam unable to add a user(non-administrator) in the allow logon locally as it is throwing the error “administartor must be granted the logon local right”. I have added the same user in the “allow logn through remote desktop services”.

    Does that mean for any user(non-administrator) to take remote of any other machine remotely, all user must be administrator.

    Regards,
    Anishk

    Virtual;273265 wrote:
    You probably need to add the relevant user group(s) to the ‘Allow Logon Locally’ GPO setting. I was askign what roels were installed as usually a DC will not allow non-administrators to logon even with ‘Allow Logon through Remote Desktop’ permitted.
    Avatar
    kgoering
    Member

    Re: the local policy of this computer logon interactively domain- rdp

    Yes, in our case, it is only default domain group polciy. Added few user’s in “Allow log on through Remote Desktop Services”. The users added with having administrator privilges were able to logon remotely. Other domain level user are unable to logon remotely even though they were added in the “Allow log on through Remote Desktop Services”.

    Virtual;273246 wrote:
    Is the server a DC as well? What role do the Windows 2012 servers have?

    Either local Group Policy or Domain Group Policy will be only adding ‘Administrators’ to the ‘Allow logon Locally’ policy or other restrictions.

Viewing 30 posts - 31 through 60 (of 92 total)