SCCM by Davis

9 may 2013

SCCM by Davis: “Wetou Fourume became a registered member” plus 19 more

SCCM by Davis: “Wetou Fourume became a registered member” plus 19 more

Link to SCCM by Davis

Wetou Fourume became a registered member

Posted: 08 May 2013 10:06 PM PDT

Comments: 0

Flexera Software wrote a new post, App Store Essentials: Leveraging Software Asset Data to Achieve Continuous License Compliance

Posted: 08 May 2013 04:51 PM PDT

By Laura Noonan
What comes to the business user's mind when asked about the enterprise app store concept? An easy-to-browse online catalog. A shopping experience similar to Apple's App Store or Google Play. […]

Comments: 0

Phillipp Broyles became a registered member

Posted: 08 May 2013 05:02 PM PDT

Comments: 0

Rod Trent posted an update in the group SolarWinds:

Posted: 08 May 2013 02:12 PM PDT

Comments: 0

Rod Trent posted an update in the group SolarWinds: SolarWinds Virtualization Manager 5.1.1 New Release Now […]

Posted: 08 May 2013 02:11 PM PDT

SolarWinds Virtualization Manager 5.1.1 New Release Now Available with Improved Hyper-V® support. Virtualization Manager now has simplified installation and configuration for Hyper-V environments. Set up and begin managing a Hyper-V or a heterogeneous VMware and Hyper-V environment in as little as 15 minutes. Click here to see all the virtualization management capabilities. http://www.solarwinds.com/virtualization-manager.aspx?CMP=SYN-TAD-MITFOR-May2013_NewVirt-VM-PP

Comments: 0

Rod Trent posted an update in the group SolarWinds: Someone trying to sell you a huge, prepackaged bundle? […]

Posted: 08 May 2013 02:11 PM PDT

Someone trying to sell you a huge, prepackaged bundle? Watch out for the hidden costs as discussed in the blog "When Less is More" on the SolarWinds Whiteboard blog. http://thwack.solarwinds.com/community/solarwinds-community/whiteboard/blog/2013/04/30/when-more-is-less

Comments: 0

Rod Trent posted an update in the group SolarWinds: Tired of seeing only half the picture when you’re managing […]

Posted: 08 May 2013 02:11 PM PDT

Tired of seeing only half the picture when you're managing applications? Check out this blog on how to get visibility into both your application and your virtual infrastructure. http://thwack.solarwinds.com/community/solarwinds-community/geek-speak_tht/blog/2013/05/03/world-of-visibility-into-performance-of-virtualized-applications

Comments: 0

Rod Trent wrote a new post, Cireson Notify Analyst App for Service Manager

Posted: 08 May 2013 02:00 PM PDT

ThumbnailAnyone who has ever installed and configured Service Manager knows the pain involved in setting up notification workflows for work item re-assignment. This becomes even more time consuming when setting up […]

Comments: 0

Huawei Unveils ICT Nation as Part of US Enterprise Push

Posted: 08 May 2013 01:30 PM PDT

The company wants to bring together vendors and partners to help businesses adapt to their changing data centers, officials said.

Rod Trent posted an update in the group System Center Operations Manager: Amazon releases a Management Pack for OpsMgr 2012 and 2007 R2

Posted: 08 May 2013 01:04 PM PDT

Rod Trent wrote a new post, Amazon releases a Management Pack for OpsMgr 2012 and 2007 R2

Posted: 08 May 2013 01:03 PM PDT

Amazon's investment in participating in MMS 2013, coupled with a slew of announcements from Microsoft about Windows Azure improvements, and topped-off with a heapin' helping of rumors around TechEd 2013 […]

Comments: 0

Windows 8 – Supporting proxy services with Static Configurations, Web Hosted PAC files and Domain Policy Configured Proxy

Posted: 08 May 2013 12:32 PM PDT

Many companies have started using Windows 8 and have noticed with some of the new features there are times when things just don't seem to work the way they expected them too; this was due to configuration needs and not actual issues in many cases.  We have found this is normally due to some additional configurations that are required to enable the newer features and applications that have been introduced with the new OS.

I would like to focus on one that I have been putting some extra effort towards to help customers get the best experience they can when the enterprise has proxy services enabled and they see issues such as the Windows 8 apps and basic services are not communicating with web services.

Sometimes communities identify issues and is important that we help improve the user experience when issues are identified. There are a couple articles currently articles addressing some of the original issues.   Specifically the need to use the NETSH commands to correct the WINHTTP Proxy service; see the reference articles within this blog for links to them.  This include transitioning to new networks and the use of WPAD for the most robust model for Windows 8.

Note: It is important to also understand before we review these scenarios and options that for the best Windows 8 experience it is recommended to use WPAD to enable all the features of Windows 8 without additional work for the client.  Use these links to understand how to implement WPAD and enabling Authenticated Proxy support.

Supporting Articles: 

Implementing WPAD: KB2777643

Authenticated Proxy Support: KB2778122

Proxy Service in the Enterprise:

Key Scenarios: Typical results in the following scenarios with "Static Proxy", "Web Hosted Proxy PAC Files" and "Domain Policy Defined Proxy", hosted PAC files is the following:

  • Window 8 Network Location Awareness: NLA is required for Windows 8 applications to function properly by determining that you are connected to the internet by looking for a file called ncsi.txt on the internet and is the feature that tells the Windows 8 applications if your online.  When this is working right your Network Icon will reflect your online and when you access Windows 8 Application such as Bing Sports it will identify your access and function properly. Properly define proxy services will enable this.
  • Windows 8 Applications:  In general testing Windows 8 applications will function as designed.  Note: This is not a blanket statement for all Windows store application due to the lack of testing. I have tested the normal inbox apps and some additional application downloaded.  
  • The Windows Store Application updates: This feature is functioning while using Static or PAC files when the user is on public networks only.   In some cases it has been noticed that the Inbox Windows 8 apps will be able to update while connected to the corporate network.  If the updating is needed internally and you must use a PAC file you may wish to look at using WPAD. Another option is to use the PAC file model I describe below. 
  • The Windows Store Catalogue:  Can be  viewed and searched. 
  • Windows Store Apps Downloads:  This feature is functioning while using Static or PAC files when the user is on public networks only to purchase apps and download.   If the download is needed internally and you must use a PAC file you may wish to look at using WPAD. Another option is to use the PAC file model I describe below.
  • Windows Update:   For Windows updates it has been observed that Automatic Updates do not work with Proxy configuration but both User Activated updates in the Windows 8 WU and the Classic Update model they will work.  Once the computer is on the public network it will be able to receive Automatic Updates or with the user checking for updates. 

Note: There is a known Issue for Authenticating Proxies Solutions:  You will need to follow the guidance in the KB2778122 for whitelisting certain HTTP address's listed in article to ensure the best experience while on the corporate network.

Note: Known issue with local installed PAC files:  Local install of PAC files will not work for more than Local Browser services.

Enabling these PROXY scenarios:

We will walk through the simplest implementation which also has most limitation to the preferred method and options for configuration of PAC files.

 

Static Proxy Services:

Note: Only noted to help customers understand chance for negative experience. This is not preferred, this shouldn't be used unless you are supporting desktop only. I just wanted to make people aware of it.   Preferred approach is WPAD and then Web Proxy PAC file

This model is a direct insertion of the proxy server address and port used for communication via Internet Explore through the configuration via "Internet Options" and clicking on "Connections Tab" then "LAN Settings" and setting up your proxy definition under Proxy Server"

Load Internet Explorer  and open Settings / Internet Options

 

clip_image001 clip_image002

With this implementation you will find that as long as your computer is on the proper network where the proxy server can be found your services as described above will work.  If the Proxy Server is not locatable the following error will be observed due to WEB services not routing properly. Resolution will be to connect the system back to the proper network.

clip_image003

Put the system back onto the proper network or remove the static proxy setting.

Web Based Proxy PAC File:

Note:  Using the following two configuration options in the Proxy path configuration do not work:

If Proxy PAC files need to be used in the enterprise environment using a web hosted service is the preferred method.  This can be hosted on the proxy server or any other IIS services hosting the file so it can be accessed by the computer at boot.   To do this you need to configure the PROXY setting in the manner below.

This model is a direct insertion of the web server address for the PAC file for communication via Internet Explore through the configuration via "Internet Options" and clicking on "Connections Tab" then "LAN Settings" and setting up your proxy definition under Proxy Server

Load Internet Explorer  and open Settings / Internet Options

clip_image001clip_image004

In this case you will have the expected results I noted above in the top of this Blog. I also want to provide a couple sample PAC files that I have found to help make the user experience work well.   I also will discuss a model where you could potentially enable the Windows 8 App Store for downloading applications that was mentioned above where it may potentially not work with PAC files. 

Sample PAC file #1:

Net Results will be that your system will function with new Windows 8 Apps but you will not be able to download new apps till the device is placed outside the corporate network.  The proxy will be offline and your system will default to standard full internet access allowing the download of the selected applications.  If for some reason you have an external Proxy you will need to consider the second sample file for the best results.

This file is the simplest and will identify your host network and then designate the Proxy Server for that network.  If the network host is not found it instructs the WINHTTP services to use the default gateway of the computer.  While on the company network Windows 8 App Store Downloads may not work but when the computer is on a public network it will be able to download Windows Store Apps.

You can use  notepad.exe to create a simple test file, example: Sample1.PAC

//Begin

function FindProxyForURL(url, host)

{

if (isInNet(myIpAddress(), "10.0.0.0", "255.255.255.0"))

return "PROXY ProxyServerName:8080";

else "Proxy Direct";

}

//End

Sample PAC File #2:

Note: This will require corporate review and approval most likely. The purpose of this Script is to enable Windows Application Store Downloads within the corporate network with proxy services or if the company is using an External Web based Proxy Service.

In this scenario you have a Default Gateway on the corporate network that is open to the internet but normal traffic is always processed through the Proxy server.   With this configuration we have directed any traffic required to communicate with Microsoft to be allowed to operate through the default gateway and the limited capabilities are now removed and Windows Store Apps will now be successfully downloaded on the corporate network.

You can use  notepad.exe to create a simple test file, example: Sample2.PAC

//Begin

function FindProxyForURL(url, host)

{

// variable strings to return

var proxy_online = "PROXY ProxyServer:8080";

var proxy_offline = "DIRECT";

if (shExpMatch(url, "http://*.microsoft.com*"))

      { return proxy_offline; }

if (shExpMatch(url, "https://*.microsoft.com*"))
{ return proxy_offline; }

// Proxy anything else

return proxy_online;

}

//END

Domain Policy Configuration for a PAC File:

This procedure assumes you are familiar will traversing the Group Policy Management tool using either Server 2012 or the Remote Server Administration Toolkit for Windows 8. 

 

First create a policy for Internet Explorer 10 for the proxy configuration under "User Settings" Preference – Control panel settings.

clip_image005

Wizard will pull up and then you can select "Connection" Tab and then "LAN settings" Radio Button

Enter the required Proxy settings and then link the GPO to you target OU

clip_image007

Make sure to select F5 on the Field when you enter the Name so it is accepted.

clip_image008

This will allow you to now set the Proxy GPO on your system. 

Additional information for PAC Files Scripting options can be found here: MS TechNet on PAC File Scripting

This post was contributed by Scott Culbertson, a Solution Architect with Microsoft Consulting Services.

The information on this site is provided "AS IS" with no warranties, confers no rights, and is not supported by the authors or Microsoft Corporation. Use of included script samples are subject to the terms specified in the Terms of Use.

Brandi Neman became a registered member

Posted: 08 May 2013 10:12 AM PDT

Comments: 0

Pedro N Rivera became a registered member

Posted: 08 May 2013 10:11 AM PDT

Comments: 0

Vijay M Guru joined the group Tech Books

Posted: 08 May 2013 09:50 AM PDT

Comments: 0

Chaddd replied to the forum topic How do I find missing content in the group System Center Configuration Manager 2012

Posted: 08 May 2013 09:39 AM PDT

When I have seen the hanging at 0% downloading in the past it has been because a patch was deleted from the content library. In order to fix it I have had to revoke the deployment, re-download the patch, and […]

Comments: 0

Riverbed’s Virtual ADC Aimed at Cloud Environments

Posted: 08 May 2013 09:10 AM PDT

The company's Stingray Services Controller brings ADC in line with increasingly scalable and dynamic data centers.

Mosow became a registered member

Posted: 08 May 2013 08:55 AM PDT

Comments: 0

Rod Trent posted an update in the group System Center Configuration Manager 2012: ConfigMgr 2012 SP1 CU1 Half-Baked Install

Posted: 08 May 2013 08:38 AM PDT

Phil Schwan wrote a new post, ConfigMgr 2012 SP1 CU1 Half-Baked Install

Posted: 08 May 2013 08:26 AM PDT

ThumbnailIt appears an installation of ConfigMgr 2012 SP1 Cumulative Update 1 (KB2817245), if the pre-1/25/13 SP1 media is used and the KB2801987 hotfix applied, doesn't necessarily play nice. Working on some scripts in […]

Comments: 0
by to

No hay comentarios:

Publicar un comentario

Suscribirse a: Enviar comentarios (Atom)

SCCM by Davis

Cargando...