Print Spooler Setting Changed in GPO to Fix RDP Redirected Printers

A change to Print Spooler service setting was made to the
ccs-'08-'09-vista-settings GPO. The GPO affects all Sites Vista lab
loadset systems. The setting was changed to "Not Configured". The
previous setting configured the Print Spooler service startup to
automatic and modified the default service permissions to give
Interactive Users the ability to restart the service. In testing, it was
determined that this configuration caused RDP printer redirection to
fail.

The original setting was carried over from previous Sites loadsets in
which a logout script was used to restart the Print Spooler service. The
logout script is no longer in use. Also, setting the Print Spooler
startup to automatic is not necessary since the service is set to start
automatically by default.

Terry Miller
Sites PC Team

Change BIOS Passwords Task Disabled in Vista Task Sequence

This a change to the Vista deployment system. In the “V_IMG_SP1_DEP06” deployment sequence (that’s the Fall 2008 production sequence), the task “CCS-SCRIPT-Change BIOs Password” has been disabled. A problem with the script is preventing it from successfully changing the BIOS password, and in some cases the script has prevented successful reloading of systems from completing.

 

The script will be re-enabled after a solution to these issues is developed and tested.

 

Terry Miller

Sites PC Team

MS08-067 Update Deployed

The MS08-067 Update was released to Sites  Vista and XP desktop systems using WSUS. More info on the MS08-067 Update is available here:

 

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

 

Also, in order to facilitate easier Microsoft update scanning, the UMROOT\sites-pc-admins group was added to the Administrators group of our XP loadsets via the addition of Restricted Groups GPO settings in the ccs-'07-'08-base-settings GPO.

 

Terry Miller

Sites PC Team

 

UMROOT Deny All Logons GPO Linked to Sites PC's

A Group Policy (UMROOT Deny All Logons) was linked to the Sites\Computers OU. The GPO implements logon restrictions for accounts that are a security risk to the UMROOT Active Directory domain. The GPO is maintained by the ITCS LAN/NOS group, and is linked to the top level OU in the UMROOT domain. Because inheritance is blocked on many Sites Computer OU’s, it was necessary to link the GPO in the Sites OU structure and to set the link to enforced in order to override the blocked inheritance.

 

--Terry

Update Deployed to Fix Input Method Editor

A new GPO (ccs-'08-'09-CONIME.EXE-fix) has been deployed to all Vista lab systems to replace the file \Windows\System32\conime.exe. The file was deleted by VirusScan  on 10/20 after it was falsely identified as a Trojan due to a problem with VirusScan definitions. More information about the VirusScan bug is available here:

 

http://vil.nai.com/vil/content/v_100683.htm

 

--Terry

Mac Software Updates

We’ve made the following changes in the Mac environment:

• Adium 1.3.2
• Adobe Flash Player 10
• Growl 1.1.4
• Microsoft Office 2004 11.5.2
• Microsoft Office 2008 12.1.2
• Migration and DVD/CD Sharing Update 1.1
• NeoOffice 2.2.5 Patch 2
• Perian 1.1.2
• VLC 0.9.4

Also, we've deployed a fix for SubEthaEdit running on Intel Macs.

Mac Updates

We’ve made the following updates in our Mac environment:

• Radmind Tools updated to version 1.13.0
• Security Update 2008-007 applied to all stations

Also, we’ve deployed a fix for scanning with Adobe Acrobat and Canon CanoScan LiDE 60s.

EpiInfo 6 DOS deployed via Softgrid

A new sequence of EpiInfo 6 DOS has been deployed to all Sites stations
via Softgrid.

SecondLife 1.20.17.98669 & Firewall Exception Deployed to Sites PC's

SecondLife 1.20.17.98669 has been deployed to all Sites Vista PC’s as a SoftGrid sequenced application. Also, a firewall exception for the slvoice application, a component of SecondLife, has been enabled on Sites Vista PC’s.

 

Terry Miller

Sites PC Team

 

Recent CustomSettings.ini changes on CCS-DFS02 MDT Server Rolled Back

Recent changes to the CustomSettings.ini file for the LAB deployment point on CCS-DFS02 have been rolled back. In testing, it was discovered that these changes affected the production environment.

 

Terry Miller

Sites PC Team

 

CustomSettings.ini Modified on CCS-DFS02 MDT Server

The CustomSettings.ini for the LAB deployment point on CCS-DFS02 was modified to allow Deployment Wizard to run. The Deployment Wizard on the LAB deployment point was configured to be suppressed previously. This change should only affect the LAB deployment point. The NETWORK deployment on CCS-DFS02 is used for reloads of production Sites Vista systems should be unaffected by this change.

 

The change to disable suppression of the Deployment Wizard will allow TSG staff to choose additional task sequences when reloading systems form the LAB deployment point. A task sequence to reload a system as a SoftGrid Sequencing host is currently under development and will use this functionality.

 

Terry Miller

Sites PC Team

 

Video Driver Updates Deployed to GX620 & GX745 Vista Systems

Updated video drivers have been deployed to Sites Vista systems that have ATI Radeon X600 and X1300 Pro video cards. Both GX620’s and GX745’s have those cards. The video driver update is required to support SecondLife.

 

Terry Miller

Sites PC Team

 

New Video Drivers Tested in School of Social Work and Union Sites

Updated video drivers are being deployed to GX620 and GX745 systems in
the School of Social Work and Union Sites. The updated drivers are
required for compatibility with Second Life. The driver deployments are
implemented via the following GPO's:

* ccs-'08-'09-SecondLife-Video-driver_for_ATI_RADEON_X1300PRO
* ccs-'08-'09-SecondLife-Video-driver_for_ATI_RADEON_X600

Terry Miller
Sites PC Team

Mac Updates

We’ve made the following version upgrades in our Mac environment:

• iTunes 8.0.1
• VLC 0.9.3

We’ve also added Perian (version 1.1.1), a free, open-source add-on for QuickTime that allows the QuickTime player to open more video formats.

Mac Updates

We’ve deployed the following updates on our Macs:

• Java Update for Mac OS X Update 2
• Mac OS X 10.5.5

In addition, we’ve made a number of small bug fixes:

• The mouse tracking speed has been increased.
• The second mouse button on two-button Mighty Mice has been enabled.
• The Weather widget is now defaulting to Ann Arbor, MI.
  

Changes to Debug privileges on Lab Vista systems

The ccs-'08-'09-vista-settings GPO was modified to grant the builtin\administrators group the Debug Programs privilege. This change was required to allow certain troubleshooting applications like Sysinternals Filemon tool to operate.

 

Terry Miller

Sites PC Team

SolidWorks 2008 SP04 and Related Apps Deployed

The following applications are being deployed to South Quad, West Quad,
and Mosher-Jordan:

* COSMOSFloWorks 2008 SP04
* COSMOSM 2008
* COSMOSMotion 2008 SP04
* COSMOSWorks 2008 SP04
* SolidWorks 2008 SP04

Terry Miller
Sites PC Team