Some Notes on the Machines

Best information is now here for Windows and other software firewalls:

http://help.logmein.com/articles/en_US/FAQ/How-do-I-configure-my-firewall-to-work-with-LogMeIn-en1

There is a link in the above for “whitelisting information” which really has the skinny for hardware firewalls:

http://help.logmein.com/articles/en_US/FAQ/Whitelisting-and-LogMeIn

This is very interesting:

http://anydesk.com/

This is Windows 8.1 only, not 7, not 10. It is not known whether 8.0 is affected.

The current known operative case is Citrix-hosted applications, in a dual-monitor situation. If you see a malfunction, go to Control Panel, All Control Panel Items, Display. If “Let me choose one scaling level for all my displays” is unchecked, check it. It will require logoff/logon. And the problem will be fixed.

Here’s a bash script! Works very nicely. Once run on one side and specifying a destination, one does not need a password to open that SSH link in the future.

#!/bin/bash
echo "setup-autossh by Jonathan E. Brickman, jeb@ponderworthy.com"
if [ $# = 0 ]; then
	read -p "Please enter the SSH destination in the format user@host : " sshdest
elif [ $# = 1 ]; then
	sshdest=$1
else
	echo "Usage: setup-autossh [user@destination]"
	exit 1
fi
if [ ! -f ~/.ssh/id_rsa ]; then
	echo "Creating RSA key for authorization..."
	ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
fi
echo "Copying authorized RSA key to $sshdest ..."
remotecmd="cat > authorized_keys ; mkdir -p .ssh ; cat authorized_keys >> .ssh/authorized_keys ; rm authorized_keys"
cat ~/.ssh/id_rsa.pub | ssh $sshdest $remotecmd

Terminal servers require special user modes, for software additions to work correctly, and sometimes, to happen at all.

Before installing anything on a terminal server, do this:

change user /install

And after the installation is complete, do this:

change user /execute

It appears that FreeNX has begotten X2Go:

http://wiki.x2go.org/doku.php/start

Use the following as a script wrapper:

#!/bin/bash
ssh -Y -C -c blowfish $1

It turns compression on, and also sets up Blowfish encryption which is much more responsive than the default.

Something new, looks like it might be excellent:

http://www.mingleview.com/

If you see a slew of 10016 errors in event logs, first try this:

http://support.microsoft.com/kb/920783

and then try this:

http://halfloaded.com/blog/sbs-2011-distributedcom-eventid-10016-fixed/

If you have to authenticate three times — once for for the portal, twice for RDP — try this:

http://tsbraindump.blogspot.com/2012/02/sbs-2011-remote-web-workplace-login.html

Sometimes the default configuration for Remote Web Workplace does not set up use of the RDP gateway by default. The following documentation:

http://technet.microsoft.com/en-us/library/cc770545.aspx

discusses a group policy setting which fixes this nicely.