Sunday 9 February 2014

you didn't get signed in. It might be your sign-in adress or logon credentials. so try those again. if that doesn't work, contact your support team

Few days ago I came across an issue in my organization that some lync clients were unable to login. their client prompting for credentials again and again.  I have Lync Server 2010 environment.
If any user Lync client prompting for password and not connecting then first

(1)                Check network connectivity.


If the network connectivity is fine then go to  the following locations, delete the “Communicator” folder and restart the system.


(1)    "C:\Users\user\AppData\Local\Microsoft"

(2)    "C:\Users\user\AppData\Roaming\Microsoft"

(3)    “C:\Users\user\AppData\LocalLow\Temp\Microsoft”
If still the issue not resolved then make sure that the above "communicator" folders or delete and reinstall the lync client on their system.


for further investigation go to cmd and check that from where this client system is authentiacted. go to that DC and check this user lastlogon time, through "net user userid"
also check client and dc time due to time may also this issue occure.

Wednesday 5 February 2014

How to apply screen saver through group policy in Active directory 2008 R2 Domain

Applying screen saver is an easy task you only have to apply the following steps.

Please be care full that your screen saver file is not a big one as it may chock your network if it have a big size and users system start to download at the same time.

(1) You have to create your screen saver *.scr file (DomainScreensaver.scr). you need tool to create .scr file.
now place this "DomainScreensaver.scr"  in a folder like "\\servername\foldername" share it. on sharing tab add everyone and give read permission.
on security tab add everyone and give (read and execute, list folder contents, read) permissions.
 
(2) You also have to create your logon script so while a user logging to his/her system the screen saver file (DomainScreensaver.scr) will be downloaded to user system. For which you have to create the .bat file

How? (open notepad file and type
 
md "C:\ScreenSaver"
 and save this file as Screensaverphoto.bat

It will download the content(DomainScreen saver.scr) from share location i.e \\servername\foldername to user’s system C:\screensaver.

 (3) share the folder (\\servername\foldername) which contain the screen saver(Screensaverphoto.bat) and give read rights to everyone on this folder.
 

Now you are going to create/configure GPO, So follow these steps
(1) Start à Group Policy Management.

(2) Create a group policy “SS Client”.

(3) Right click on it and select Edit.

(4) Go to user configuration windows settings à Scripts (Logon/logoff)

(5) Double click on logon à show files—go to screensaverphoto.bat file location.

New kept this location/folder ( \\domain.com\sysVol\domain.com\{FD692A-----}\User\Scripts\Logon )   open.
(6)
Go to the location where you have created “screensaverphoto.bat” file and right click on this file and select copy. now close this folder and go above location (mentioned in step 5) and past it there (\\domain.com\sysVol\domain.com\{FD692A-----}\User\Scripts\Logon )
(7) Now go to Logon properties window and click on Add button

And select the “Screensaverphoto.bat” file.
And click OK.

(8) Now go to User configuration à Administrative templates

Control panel à Personalization

(a) Click on Enable Screen Saver and select Enabled.
 
(b) Click on Password protect the screen saver and select Enabled.

(c) Click on Screen saver timeout select Enabled and mention time like seconds 90 etc.

(d) Click Force Specific screen saver C:\screensaver\DomainScreensaver.scr (it will copy screensaver on this location on client system)

Now your GPO is ready, so you need to apply it.
Go to the desired OU in Group policy management and right on that OU.
select link an existing GPO and select "SS Client" GPO and click OK.
you can also enforce etc.

And that's it. Done

Troubleshooting.
you can check on any client screen saver is not applying.
(1) you can use GPresult /r to check that the GPO is applied or not
(2) you can use rsop.msc to check that which settings are applied on your client system.
(3) to check that the screen saver file is downloaded to client system or not go to location (C:\screensaver) that screen saver file is downloaded or not.
(4) you can run the command (xcopy \\servername\foldername\ C:\ScreenSaver) that it is working fine or not.
(5) Command GPresult with different switches will also help to troubleshoot
(6) if you have accessed a system with RDP, then you may be unable to see the Screen saver. So will be better to check on a system on which you have logged in locally.