| ; Methodology in a Box ; Terminal Server tunings. ; Version: 1.0 ; By Tahir Saleem, NettSpesialisten ; saleem@nettspes.no #if version <= 2 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS USER ;;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!GPOnly POLICY !!GPOnlyPolicy KEYNAME "Software\Policies" PART !!GPOnly_Tip1 TEXT END PART PART !!GPOnly_Tip2 TEXT END PART PART !!GPOnly_Tip3 TEXT END PART PART !!GPOnly_Tip4 TEXT END PART PART !!GPOnly_Tip5 TEXT END PART END POLICY END CATEGORY ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS MACHINE ;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!GPOnly POLICY !!GPOnlyPolicy KEYNAME "Software\Policies" PART !!GPOnly_Tip1 TEXT END PART PART !!GPOnly_Tip2 TEXT END PART PART !!GPOnly_Tip3 TEXT END PART PART !!GPOnly_Tip4 TEXT END PART PART !!GPOnly_Tip5 TEXT END PART END POLICY END CATEGORY #endif #if version >= 3 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS USER ;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!MIAB POLICY !!HideDrives EXPLAIN !!HideDrives_Help KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" PART !!HideDrives_txt NUMERIC VALUENAME "NoDrives" MAX 1000000000 DEFAULT "0" END PART END POLICY POLICY !!ConfigServerWizard KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Setup\Welcome" EXPLAIN !!ConfigServerWizard_Help ACTIONLISTON VALUENAME "srvwiz" VALUE NUMERIC "0" END ACTIONLISTON END POLICY POLICY !!DisableICW EXPLAIN !!DisableICW_Help KEYNAME "Software\Microsoft\Internet Connection Wizard" VALUENAME "Completed" END POLICY POLICY !!Console KEYNAME "Console" EXPLAIN !!Console_Help ACTIONLISTON VALUENAME "ScreenBufferSize" VALUE NUMERIC "19660880" ;300 Lines VALUENAME "WindowSize" VALUE NUMERIC "2621520" ;40 Lines VALUENAME "QuickEdit" VALUE NUMERIC "1" VALUENAME "InsertMode" VALUE NUMERIC "1" END ACTIONLISTON END POLICY CATEGORY !!SAP POLICY !!SAPVisual KEYNAME "Software\SAP\General\Enjoy" EXPLAIN !!SAPVisual_Help PART !!SAPGUIch DROPDOWNLIST REQUIRED VALUENAME "Active" ITEMLIST NAME Off VALUE "Off" DEFAULT NAME On VALUE "On" END ITEMLIST END PART END POLICY POLICY !!SAPAnimation KEYNAME "SOFTWARE\SAP\General\Appearance" EXPLAIN !!SAPAnimation_Help PART !!SAPAnich DROPDOWNLIST REQUIRED VALUENAME "Animation" ITEMLIST NAME Off VALUE "Off" Default NAME On VALUE "On" END ITEMLIST END PART END POLICY POLICY !!SAPSplash KEYNAME "SOFTWARE\SAP\General\Appearance" EXPLAIN !!SAPSplash_Help PART !!SAPSplach DROPDOWNLIST REQUIRED VALUENAME "SplashOff" ITEMLIST NAME Off VALUE NUMERIC 1 NAME On VALUE NUMERIC 0 END ITEMLIST END PART END POLICY END CATEGORY ;SAP END CATEGORY ;MIAB ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS MACHINE ;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!MIAB POLICY !!SourcePath EXPLAIN !!SourcePath_Help KEYNAME "Software\Microsoft\Windows NT\Currentversion" PART !!SourcePath EDITTEXT VALUENAME "SourcePath" DEFAULT "\\Servername\I386" END PART END POLICY POLICY !!CompletionChar KEYNAME "Software\Microsoft\Command Processor" EXPLAIN !!CompletionChar_Help ACTIONLISTON VALUENAME "CompletionChar" VALUE NUMERIC 9 VALUENAME "PathCompletionChar" VALUE NUMERIC 9 END ACTIONLISTON ACTIONLISTOFF VALUENAME "CompletionChar" VALUE NUMERIC 64 VALUENAME "PathCompletionChar" VALUE NUMERIC 64 END ACTIONLISTOFF END POLICY POLICY !!InternetMIB EXPLAIN !!InternetMIB_Help KEYNAME "System\CurrentControlSet\Services\SNMP\Parameters\RFC1156Agent" ACTIONLISTON VALUENAME "sysServices" VALUE NUMERIC 72 END ACTIONLISTON PART !!ContactName EDITTEXT REQUIRED VALUENAME sysContact END PART PART !!Location EDITTEXT REQUIRED VALUENAME sysLocation END PART END POLICY POLICY !!CachedCridentials KEYNAME "software\Microsoft\Windows NT\CurrentVersion\Winlogon" EXPLAIN !!CachedCridentials_Help ACTIONLISTON VALUENAME "ReportControllerMissing" VALUE "TRUE" END ACTIONLISTON END POLICY POLICY !!DefaultDomain KEYNAME "software\Microsoft\Windows NT\CurrentVersion\Winlogon" EXPLAIN !!DefaultDomain_Help PART !!DefaultDomain_TXT EDITTEXT VALUENAME DefaultDomainName END PART END POLICY POLICY !!TCPKeepAlive KEYNAME "System\CurrentControlSet\Services\Tcpip\Parameters" EXPLAIN !!TCPKeepAlive_Help PART !!KeepAliveTime NUMERIC VALUENAME KeepAliveTime MAX 100000 DEFAULT "60000" END PART PART !!KeepAliveInterval NUMERIC VALUENAME KeepAliveInterval DEFAULT "1000" END PART END POLICY POLICY !!ICAKeepAlive KEYNAME "SYSTEM\CurrentControlSet\Control\Citrix" EXPLAIN !!ICAKeepAlive_Help VALUENAME "IcaEnableKeepAlive" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 PART !!ICAKeepAliveInterval NUMERIC VALUENAME "IcaKeepAliveInterval" DEFAULT "60" END PART END POLICY POLICY !!DisablePagingExecutive KEYNAME "SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" EXPLAIN !!DisablePagingExecutive_Help VALUENAME "DisablePagingExecutive" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY !!DrWatson KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug" EXPLAIN !!DrWatson_Help PART !!drWatson_TXT EDITTEXT VALUENAME "Debugger" DEFAULT "" END PART END POLICY POLICY !!Printer_Beeps EXPLAIN !!Printer_Beeps_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Print" VALUENAME "BeepEnabled" VALUEON NUMERIC 0 VALUEOFF NUMERIC 1 END POLICY POLICY !!Printer_Pop-up_message EXPLAIN !!Printer_Pop-up_message_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Print\Providers" VALUENAME "NetPopup" VALUEON NUMERIC 0 VALUEOFF NUMERIC 1 END POLICY POLICY !!Print_EventLog EXPLAIN !!Print_EventLog_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Print\Providers" VALUENAME "EventLog" VALUEON NUMERIC 0 VALUEOFF NUMERIC 1 END POLICY POLICY !!ErrorMode EXPLAIN !!ErrorMode_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Windows" VALUENAME "ErrorMode" VALUEON NUMERIC 2 VALUEOFF NUMERIC 0 END POLICY POLICY !!IdleWinStation EXPLAIN !!IdleWinStation_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal Server" PART !!IdleWinStationPoolCount NUMERIC VALUENAME "IdleWinStationPoolCount" DEFAULT "2" END PART END POLICY CATEGORY !!UserOverride POLICY !!UserOverride_Desktop EXPLAIN !!UserOverride_Desktop_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\ICA-tcp\UserOverride\Control Panel\Desktop" ACTIONLISTON VALUENAME "AutoEndTasks" VALUE "1" VALUENAME "CursorBlinkRate" VALUE "1200" VALUENAME "DragFullWindows" VALUE "0" VALUENAME "MenuShowDelay" VALUE "10" VALUENAME "WaitToKillAppTimeout" VALUE "20000" VALUENAME "SmoothScroll" VALUE NUMERIC "0" VALUENAME "Wallpaper" VALUE "(None)" END ACTIONLISTON END POLICY POLICY !!UserOverride_WindowMetric EXPLAIN !!UserOverride_WindowMetric_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\ICA-tcp\UserOverride\Control Panel\Desktop\WindowMetrics" VALUENAME "MinAnimate" VALUEON "1" END POLICY POLICY !!ActiveTitleICA EXPLAIN !!ActiveTitleICA_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\ICA-tcp\UserOverride\Control Panel\Colors" PART !!ActiveTitleICA EDITTEXT VALUENAME "ActiveTitle" END PART END POLICY POLICY !!ActiveTitleRDP EXPLAIN !!ActiveTitleRDP_Help KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-tcp\UserOverride\Control Panel\Colors" PART !!ActiveTitleRDP EDITTEXT VALUENAME "ActiveTitle" END PART END POLICY END CATEGORY ;UserOverride POLICY !!RemoveOutlookExpress EXPLAIN !!RemoveOutlookExpress_Help KEYNAME "SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}" ACTIONLISTON VALUENAME "StubPath" VALUE "" END ACTIONLISTON END POLICY POLICY !!LastAccess EXPLAIN !!LastAccess_Help KEYNAME "System\CurrentControlSet\Control\FileSystem" VALUENAME "NtfsDisableLastAccessUpdate" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY POLICY !!IRPStackSize EXPLAIN !!IRPStackSize_Help KEYNAME "SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" PART !!IRPStackSizeText NUMERIC VALUENAME "IRPStackSize" DEFAULT "15" END PART END POLICY POLICY !!CommandPromptHere KEYNAME "Software\Classes\Directory\shell" EXPLAIN !!CommandPromptHere_Help ACTIONLISTON KEYNAME "Software\Classes\Directory\shell\CommandPrompt" VALUENAME "" VALUE "Command Prompt Here..." KEYNAME "Software\Classes\Directory\shell\CommandPrompt\Command" VALUENAME "" VALUE !!CommandPromptHere_Value KEYNAME "Software\Classes\Drive\Shell\CommandPrompt" VALUENAME "" VALUE "Command Prompt Here..." KEYNAME "Software\Classes\Drive\Shell\CommandPrompt\Command" VALUENAME "" VALUE !!CommandPromptHere_Value END ACTIONLISTON END POLICY POLICY !!Notepad KEYNAME "Software\Classes\*\Shell\Notepad" EXPLAIN !!Notepad_Help ACTIONLISTON VALUENAME "" VALUE "Open in Notepad..." KEYNAME "Software\Classes\*\Shell\Notepad\Command" VALUENAME "" VALUE !!Notepad_Value END ACTIONLISTON END POLICY POLICY !!SetIMInstallDisk EXPLAIN !!SetIMInstallDisk_Help KEYNAME "SOFTWARE\Citrix\AppCloning\Agent\Symbols" ACTIONLISTON VALUENAME "APPINSTALLDISK" VALUE "D:" KEYNAME "SOFTWARE\Citrix\AppCloning\Agent\Installer\Symbols" VALUENAME "APPINSTALLDISK" VALUE "D:" END ACTIONLISTON ACTIONLISTOFF VALUENAME "APPINSTALLDISK" VALUE "C:" KEYNAME "SOFTWARE\Citrix\AppCloning\Agent\Installer\Symbols" VALUENAME "APPINSTALLDISK" VALUE "C:" END ACTIONLISTOFF END POLICY POLICY !!SetDefaultLicenseServer EXPLAIN !!SetDefaultLicenseServer_Help KEYNAME SYSTEM\CurrentControlSet\Services\TermService\Parameters PART !!SetDefaultLicenseServer_txt EDITTEXT VALUENAME "DefaultLicenseServer" END PART END POLICY POLICY !!TcpMaxDataRetransmissions EXPLAIN !!TcpMaxDataRetransmissions_Help KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" PART !!TcpMaxDataRetransmissions NUMERIC VALUENAME "TcpMaxDataRetransmissions" DEFAULT 10 END PART END POLICY END CATEGORY ;MIAB [strings] GPOnly_Tip1="The MIAB.adm file you have loaded requires Group Policy" GPOnly_Tip2="in Windows 2000. You cannot use the System Policy Editor" GPOnly_Tip3="to display Windows 2000 Group Policy settings." GPOnly_Tip4=" " GPOnly_Tip5="Enabling or disabling this policy has no effect." GPOnly="Unsupported Administrative Templates" GPOnlyPolicy="The MIAB.adm" PIAB="Methodology in a Box v.2.0" UserOverride="User Override on Win Station" HideDrives="Hide Specified drives" HideDrives_Help="Use hide calc to specify the value.\nDefault 0 show all drives.\nValue 15 hides dirve A, B, C, and D." HideDrives_txt="Enter the result from the hidecal.xls" DisableICW="Disable Internet Connection Wizard" DisableICW_Help="Disable the Internet Connection Wizard. This policy prevents users from getting error message when they try to start Internet Explorer for the first time.\nRecommend to enable this policy" CompletionChar="File Name Completion" CompletionChar_Help="File name completion enabled in command prompt" SourcePath="Source Path" SourcePath_Help="Source Path for windows installation" InternetMIB="SNMP Contact" InternetMIB_Help="Set Contact Name and Location" ContactName="Contact Name:" Location="Location:" CachedCredentials="Report Cached Credentials" CachedCredentials_help="When logged on with Cached Credentials report this to the user" DefaultDomain="Default Logon Domain" DefaultDomain_Help="Sets the Default Logon Domain to the specified value. In a trusted enviroment this may be useful." DefaultDomain_TXT="Set default domain to:" Notepad="Open In Notepad" Notepad_Help="When right clicking on a file you will have the option to open it in Notepad" Notepad_Value="notepad.exe "%1"" TCPKeepAlive="Configure TCP Keep Alives" TCPKeepAlive_Help="In inconsistent networks that are subject to periodic intervals of high network latency, ICA Clients may time out when connected to a session. When users attempt to reconnect to a dropped session, they receive a new session instead of being reconnected to their previous session. This is due to the server not being aware that the previous session was dropped.\nYou can remedy this problem by enabling TCPKeepAlive for ICA sessions that are connected through TCP. Modification of the TCPKeepAlive parameter helps to make the host server aware of any sessions dropped due to network problems. For more information about TCP parameters, see the Microsoft Knowledge Base article Q120642." KeepAliveTime="TCP Keep Alive Time in milliseconds (Recommended 60000): " KeepAliveInterval="TCP Keep Alive Interval in milliseconds (Recommended 1000): " ICAKeepAlive="Enable ICA Keep Alives" ICAKeepAlive_Help="Enable ICA Keep Alives. Because of the default parameters of the TCP/IP protocol stack in NT, sessions may have problems reliably going into a disconnected state when a connection is unexpectedly disrupted..\By This behavior ca be tuned to bring relibility back by enabling this policy" ICAKeepAliveInterval="ICA Keep Alive Interval in milliseconds (Recommended 60): " DisablePagingExecutive="Disable Paging of NTExecutive" DisablePagingExecutive_Help="User-mode and kernel-mode drivers and kernel-mode system code is usually written to be either pageable or non-pageable. In cases where drivers or system code is pageable, you can use the following registry entry to keep this pageable code in RAM, but this is only advisable on systems with extremely large amounts of RAM." DrWatson="Disable Dr. Watson" DrWatson_Help="Citrix recommendation. Enable this policy and remove to the value to disable DrWatson.\nTo enable Dr.Watson type following into to the value filed:\ndrwtsn32 -p %ld -e %ld -g" DrWatson_TXT="Value:" Printer_Beeps="Disable Printer Beeps" Printer_Beeps_Help="The Beep can decrease printing performance while deing transmitted to the client." Printer_Pop-up_message="Disable Printer Pop-up message" Printer_Pop-up_message_Help="Printer Dialogue can hang server while awaiting user input.\nBy default, each print job logs two informational messages to the System log. On MetaFrame servers with many users, this feature generates numerous events and fills up the log faster.\nBy enabling this policy following registry values are changeg:\nNetPopup = 0 \nEventLog = 0" Print_EventLog="Disable logging of Print events in Event Log" Print_EventLog_Help="" ErrorMode="Disable System Hard Error Messages" ErrorMode_Help="System Hard Error Messages\nMessages generated by system hard errors appear on the server console. If left unanswered on an unattended console, messages can cause ICA sessions to hang. You can configure System hard errors to create an entry in the System log instead of displaying a message on the console. Disabling the display of messages to the console decreases the likelihood of hung ICA sessions, but increases the need to monitor the event log for these types of errors. For more information, see Microsoft Knowledge Base articles Q124873 and Q229012.\nEnable this Policy to disable System Hard Error Messages." IdleWinStation="Increase Idle Connections to handle peak logon periods" IdleWinStation_Help="The default of 2 idle connections minimize memory used, but may not be sufficient to handle peak logon traffic. Increasing the counts helps ensure availability during peak logon periods." IdleWinStationPoolCount=" Number of IdleWinStation (Default 2): " UserOverride_Desktop="Set Win Station User Overrides on Desktop" UserOverride_Desktop_Help="A feature that enables you to set some overides on some of the entries in HKEY_Current_User.\nThis Policy sets following setting:\nAutoEndTasks to 1\nCursorBlinkRate to 1200\nDragFullWindows to 0\nMenuShowDelay to 10\nWaitToKillAppTimeout to 2000\nSmoothScroll to 0\nWallpaper to none" UserOverride_WindowMetric="Minimize graphics use" UserOverride_WindowMetric_Help="To control users' desktops to minimize graphics use. Also see Q226931 - How to minimize Graphics Use with Terminal Server." ActiveTitleICA="Active Title Bar color for ICA connection:" ActiveTitleICA_Help="Color example:\n10 36 106 - Blue (Original)\n0 128 128 - NT 4.0 Green\n0 128 0 - Dark Green\n128 0 0 - Dark Red\n255 0 0 - Strong Red" ActiveTitleRDP="Active Title Bar color for RDP connection:" ActiveTitleRDP_Help="Color example:\n10 36 106 - Blue (Original)\n0 128 128 - NT 4.0 Green\n0 128 0 - Dark Green\n128 0 0 - Dark Red\n255 0 0 - Strong Red" RemoveOutlookExpress="Remove Outlook Express from the Quick Launch bar and Start Menu." RemoveOutlookExpress_Help="This is a little UI clean-up tip." LastAccess="Prevent last access time stamp from being updated on NTFS partitions" LastAccess_Help="For an increase performance boost in the drive subsystem, you can turn of this default behaviour by enabling this policy." IRPStackSize="Set IRPStackSize" IRPStackSize_Help="In Windows 2000, the valid range has changed. The valid values range from 0xB to 0x14 (11 to 20). The default value is 15" IRPStackSizeText="Set IRPStacksize (Default 15): " CommandPromptHere="Command Prompt Here" CommandPromptHere_Help="When right clicking on a drive or directory you will have the option to open a Command Prompt at that location" CommandPromptHere_Value="cmd.exe /k cd "%1"" SetIMInstallDisk="Change IM 2.0 default install drive" SetIMInstallDisk_Help="To control the drive that Installation Manager 2.0 would install all applications to.\This policy set this to D:" SetIMInstallDiskText="Set the installation drive" Console="Command Prompt settings" Console_Help="Sets the following command prompt options: \nScreenBuffer is set to 300 lines.\nWindowSize is set to 40 lines.\nQuickEdit and InsertMode is Enabled." SetDefaultLicenseServer="Set Default License Server" SetDefaultLicenseServer_Help="Configuring Terminal Services Servers to Request License Key Packs from a Specific License Server. Enter NetBIOS name of the designated License Server. If it is located on a remote subnet, confirm that the Terminal Services-based computer can resolve the NetBIOS name of the specified server using Windows Internet Naming Services (WINS) or Lmhosts name resolution." SetDefaultLicenseServer_txt="Enter Default License server name:" TcpMaxDataRetransmissions="Set TcpMaxDataRetransmissions" TcpMaxDataRetransmissions_Help="On highly variable performing network links, it is possible to modify the behaviour of the TCP Protocol stack to make the server more accepting of link inconsistency.\nFor More information see Citrix article CTX757449, Q120642 and Q170359.\n Value 10 is recommended by Citrix" SAP="SAP" SAPVisual="Enable/Disable New Visual Design " SAPVisual_Help="With this policy you can enable/disable the New Visual Design.\n To disable the New Visual Design, change the value to Off" SAPGUIch="New Visual Design" SAPAnimation="Disable Animation" SAPAnimation_Help="With this policy you enable/disable the New Visual Design.\n To disable the New Visual Design, change the value to off" SAPAnich="Animation" SAPSplash="Disable Splash Screen" SAPSplash_Help="With this policy you enable/disable SAP Splash screen.\n To disable the splash screen, change the value to off" SAPSplach="Splash Screen" ConfigServerWizard="Disable the Configure Server Wizard" ConfigServerWizard_Help="Disables the configure server wizard" |