wiki:ChecklistRDS

Version 39 (modified by wqw, 5 years ago) (diff)

--

BIOS

  1. CPU sleep throttle -> off
    • Intel C-STATE Tech -> disable
    • C1E Support -> disable

Windows

  1. LAN card speed -> 1Gb full duplex
  2. Power Options -> High performance
  3. DEP -> Essential Windows programs and services (Ctrl+Break -> Advanced system settings -> tab Advanced -> Performance: Settings -> tab Data Execution Prevention)
  4. Regional Options -> Bulgarian (Language for non-Unicode programs + Copy Settings: New user accounts)
  5. Printer Substitutions -> виж ntprintsubs.reg и ntprintsubs.inf
  6. Font Substitions виж tahoma.reg
  7. RDSH Certificate
  8. Разрешаване на OutputDebugPrint със enable_debug_print.reg
  9. Symbolic Links
    • net use z: \\NAS\DFS\Company00\Public
    • mklink /d C:\Dreem Z:\Dreem & mklink /d C:\imPress Z:\imPress
  10. Server Manager | IE Enhanced Security Configuration -> Off

Инсталация

  1. SQL Server 2008 R2 Native Client
  2. Mozilla Thunderbird (default e-mail program в default профила)
  3. Kingsoft Office 2012 от \\ucsisa\install\Utils\Kingsoft Office 2012
  4. AccessDatabaseEngine_x64.exe от \\ucsisa\install\DevOnly\Access Database Engine\2010 (за импорт от .xlsx файлове)
  5. Инсталация на Ghostscript от \\ucsisa\install\Utils\Ghostscript (за PDF export)
    • Създаваме pdfwrite.rsp (виж по-долу) във C:\Program Files\gs (note: в родителската папка на инсталацията на Ghostscript)
  6. Инсталация на Ghostscript PDF принтер от \\ucsisa\install\Utils\Ghostscript\ghostpdf_x64 (local printer към RPT1: port)
  7. Инсталация на SumatraPDF от \\ucsisa\install\Utils\SumatraPDF\
  8. Инсталация на nxlog от \\ucsisa\install\Utils\nxlog\
    • Настройка nxlog.conf виж по-долу
  9. Прилагане на lowrisk.reg (виж по-долу) за да не се оплаква DreemBoot.exe
  10. Прилагане на excel_guess_rows.reg (виж по-долу) за да роботи Import Wizard на продукти
  11. Инсталиране на \\ucsisa\Install\Utils\DPI setting through a Remote Desktop Hotfix\
  12. Настройка за използване на Token Ring в secpol
    • Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker\Use IP Address Redirection-Disable
  13. Настройка на UcsLogon.vbs
    • копиране в C:\Windows\System32 от
      UCSISA\Install
  14. Инсталация на Office Import Filters от \\ucsnas\data\Install\Microsoft\Excell Viewer\For TS\OCONVPCK.EXE

Файлове

ntprintsubs.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd]
"PrinterMappingINFName"="C:\\Windows\\inf\\ntprintsubs.inf"
"PrinterMappingINFSection"="Printers"

ntprintsubs.inf

[Printers]
"Epson Compatible 9 Pin"="Generic / Text Only"
"Epson Compatible 24 Pin"="Generic / Text Only"
"Panasonic KX-P1150"="Generic / Text Only"
"Star LC-1021"="Generic / Text Only"
"Oki ML3321"="Generic / Text Only"
"Oki ML 521 Elite (IBM)"="Generic / Text Only"
"ML3321"="Generic / Text Only"
"Fujitsu DL3850+"="Generic / Text Only"
"Epson LQ-2070 ESC/P 2"="Generic / Text Only"
"EPSON LQ-1150II ESC/P2"="Generic / Text Only"
"Oki ML3391"="Generic / Text Only"
"Epson LX-1170"="Generic / Text Only"
"Star LC-1511"="Generic / Text Only"
"Epson LX-300+"="Generic / Text Only"
"Star LC-1021"="Generic / Text Only"
"Epson LX-1050+"="Generic / Text Only"
"OKI ML5521"="Generic / Text Only"
"ML5521"="Generic / Text Only"
"Fujitsu DL3700Pro"="Generic / Text Only"
"Epson LX-300"="Generic / Text Only"
"EPSON LX-1170II ESC/P"="Generic / Text Only"
"Fujitsu DL3750+"="Generic / Text Only"
"Epson LX-1170"="Generic / Text Only"
"EPSON FX-2190 ESC/P"="Generic / Text Only"
"Epson Epson LX-300+II"="Generic / Text Only"
"Epson FX-1170"="Generic / Text Only"
"EPSON LX-1170"="Generic / Text Only"
"Oki ML3320"="Generic / Text Only"
"EPSON LQ-1150II ESC/P2"="Generic / Text Only"
"Epson LQ-2070 ESC/P 2"="Generic / Text Only"
"Oki ML3391"="Generic / Text Only"
"ml3321"="Generic / Text Only"
"EPSON LX-300+II ESC/P"="Generic / Text Only"
"Epson LX-300+II"="Generic / Text Only"
"Oki ML 320 Elite (Microline)"="Generic / Text Only"
"Star LC-15"="Generic / Text Only"
"Oki ML 321 Elite (IBM)"="Generic / Text Only"
"Star LC-100+ Colour"="Generic / Text Only"
"EPSON FX-890 ESC/P"="Generic / Text Only"
"EPSON FX-880+ ESC/P"="Generic / Text Only"
"EPSON FX-880+"="Generic / Text Only"
"Epson LQ-1170 ESC/P 2"="Generic / Text Only"
"EPSON FX-980"="Generic / Text Only"
"T6050-136"="Generic / Text Only"
"Epson LQ-680 ESC/P 2"="Generic / Text Only"
"Tally T6212"="Generic / Text Only"
"Epson LQ-300 ESC/P 2"="Generic / Text Only"
"EPSON FX Series 1 (80)"="Generic / Text Only"
"EPSON LX-300+"="Generic / Text Only"
"TallyGenicom 6605"="Generic / Text Only"
"TallyGenicom 6212"="Generic / Text Only"
"EPSON FX-890 Ver 2.0"="Generic / Text Only"

pdfwrite.rsp

-sDEVICE=pdfwrite
-q
-dPDFSETTINGS=/prepress
-dAutoRotatePages=/All
-dCompatibilityLevel=1.4
-dNOPAUSE
-dBATCH

lowrisk.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"="*.exe;*.pdf;*.xml;*.doc;*.docx;*.xls;*.xlsx"

excel_guess_rows.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines\Excel]
"TypeGuessRows"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Access Connectivity Engine\Engines\Excel]
"TypeGuessRows"=dword:00000000

nxlog.conf

## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.

#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Extension syslog>
    Module      xm_syslog
</Extension>
 
<Extension json>
    Module      xm_json
</Extension>

<Input internal>
    Module      im_internal
</Input>

<Input eventlog>
    Module      im_msvistalog
    Query       <QueryList><Query Id="0"><Select Path="Security">*[System[band(Keywords,4503599627370496) and (EventID=529 or EventID=4625)]]</Select></Query></QueryList>
    Exec        if $WorkstationName == "TSCB" drop();
    Exec        delete($Message); to_json();
</Input>

<Output out>
    Module      om_tcp
    Host        bgs01
    Port        514
    Exec	    $SourceName = 'rdp-farm'; delete($ProcessID);
    Exec        to_syslog_bsd();
</Output>

<Route 1>
    Path        internal, eventlog => out
</Route>

tahoma.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes]
"Tahoma,0"="Tahoma,204"
"Consolas CYR,0"="Consolas,204"

enable_debug_print.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Debug Print Filter]
"DEFAULT"=dword:0000000f