Fermi National Laboratory

Windows 2003 Terminal Server User's Guide

Contents: Introduction | Getting Started | Windows | Linux | FNALU | Macintosh | Logon | Using the Remedy Client | AFS | Printing | FAQ's | Appendix

Introduction

The Windows server, "FERMI-TS" is a central Windows 2003 Terminal server that is configured to be a general purpose platform to accommodate various users at Fermilab. The system is designed to provide a flexible Windows environment for Linux/Unix, Macintosh and Windows users that need access to key Windows based applications and Windows based file repositories in the Fermi domain.

Disclaimer:
This document refers to various application and software products. Because these products are mentioned in this document does not constitute support from the Computing Division, and in some cases these applications/software products could be removed without notice.

What is a Terminal Server?
Microsoft supplies an additional service in the Windows server operating system that allows multiple users access to a single Windows computer. This service is called the Windows Terminal Server service (TS). TS computers can be used to provide Windows applications to non-windows users, or a convenient remote connectivity option to remote Windows users.

Windows Terminal Server uses the Remote Desktop Protocol (RDP), and any client that can use an RDP certified client can be used with the Windows Terminal Server. The client is built-in to Windows XP and Vista. Microsoft has a free download for Mac OS X. There are also RDP clients available for Linux and various hand-held devices. (see Appendix B - Clients)

RDP clients that support version 5 of the RDP protocol sometimes include the additional feature of mapping local disk and printer connections directly to your Windows terminal session. This is extremely handy for transferring data from your local computer, or printing documents to your local printer.

The design strategy we are using does have some limitations. In order to maintain a reliable and stable environment for our users, the systems do not allow users to install applications. Additionally, various configuration options have been removed, and we have time limits placed on connectivity. We also restrict users to a single active session.

The Central Terminal server is not meant to be a replacement for users requiring a Windows desktop, but instead it is to provide limited Windows desktop capabilities for users requiring occasional Windows desktop needs. There is only a subset of Windows applications (see Appendix A - Applications Available) provided to users, and users requiring more extensive applications should consider obtaining a windows desktop or consider using a Windows PC emulator like VMware or Virtual PC

Return to top

Getting Started

To use the Terminal server, you must have a valid Windows Kerberos principal. Once you have an account, you will need to request access to the FERMI-TS server. A request can be made through the Fermilab helpdesk, and you will need to include your windows account name and what applications you need access to. The Computing Division will accept costs at this point in time, but reserve the right if the user population rises, to commence chargebacks at any time.

After your request is approved, you will be sent e-mail with confirmation. You will then need to install the proper client RDP software on your system. If you are using FNALU, the rdesktop client application has already been installed. If you are using a shared server, please contact your server administrator. If you are the administrator, please review the section, RDP Clients section of this document.

Once you have the client installed, you will need to point your client to the FERMI-TS.FNAL.GOV server. Set your client to do 'High Encryption', as our server only accepts clients connecting with that level of encryption. Consult the help information for your RDP client software for more details.

Windows

Use Remote Desktop Connection from your Windows desktop.
Bring up the Remote Desktop (in XP): Start->Programs->Accessories->Communications->Remote Desktop Communication

 

If you want any drives, printers, etc mounted in the Terminal Server Connection that you currently have mounted on your pc check the appropriate box. Hit connect.

Linux

If you have rdesktop on your Linux desktop, you would do the following:

FNALU

If you are using one of the FNALU nodes, you would do the following:

setup rdesktop
rdesktop fermi-ts &

Note - make sure you export your display

Macintosh

If you are using a Macintosh desktop running OS X, you would do the following:

If you want any drives or printers mounted in the Terminal Server Connection that you currently have mounted on your mac check the appropriate box. Hit connect.

Behind a Restricted Network
If you are behind a restricted network or you are using firewall software, check to see if TCP port 3389 is open. If this is blocked you might have to use the Fermilab VPN to provide a secure network connection.
Once connected, you will be presented with the standard Fermilab computer disclaimer: If you agree to these terms, press OK.

Now you will be presented with a Windows server logon which will look like the following:

Logon

For the User Name, enter your windows Kerberos account name, and enter your password on the next line. Make sure the, 'Log on to:' box has 'FERMI'. If not, you can use the pull down arrow to switch to that choice.

First Time Setup

When you logon, you will see something like the following:

If you are familiar with Windows, you will notice the Windows 2003 Terminal server comes up in the Windows XP view (referred to as 'Fisher Price Mode'). If you prefer the more traditional Windows 2000 view, you can set your session into 'Classic' mode. (see Appendix C - Classic Mode)

Applications:
There is a standard set of applications available to each user session. Click on Start button, select Programs. You should see something like the following:

If you are authorized, we have the full version of Office 2007 (Word, Excel, PowerPoint, Access, Publisher, and Outlook). In addition, if you select the 'Products' selection, we have additional applications like Adobe Acrobat Reader, and other viewers.

Ending your Session: If you are inactive for 2 hours, the system will automatically disconnect your session. If you have completed your work, you can Logoff by clicking on the Start button, and selecting logoff

Return to top

Using Remedy on the Terminal Server

We strongly encourage you to use the regular web interface (see https://ar-mt1.fnal.gov/arsys/) instead of the Remedy client interface. In general, the web interface is the same as the client interface. If you need to run the “reports” feature from Remedy, then you will need to run the Remedy Client interface. The Remedy client interface can be installed to Windows desktops, and is located at \\pseekits\desktoptools\Remedy\Current-version.

---------------------------------------------------------------------------

To use the client interface will require some configuration settings the first time you use the interface on Fermi-ts

STEP 1:

  Run the odbc-fix2.reg tool located in the Program files area. It will look something like this:

.


When you click on this to run, you will receive a message like the following:

Select “yes”, and then you should see the following:

Click “ok”, and you will be ready for the next step.

 

STEP 2:

  Run the BMC Remedy User program from the “START/Programs/Action Request System/BMC Remedy User” You should see something like this:

Enter your Remedy user account and password. You will then get the following:

This is normal for the first time you try to use the application. Click "OK", and you will see:

 

Click on "accounts"

you will now see:

Again, this is normal for the first time. Click "OK", and you will see:

Click the "add" button, and you will see as similar dialog box with a box under "server". Enter "ar-srv1" in that box. It should now look like this:

Click on the "Users" button, and you will see:

Note you do not see your account listed, just the "default" user.

Click the "Add" button so you can add your account to the list.

Change the "User:" field and "Home Directory: fields

  use your Remedy account name for the User name, and key in the following for the Home Directory path:

     D:\User-Profiles\xxxxx\UserData\AR System\home
         Where "xxxxx" is your account name

When done, the dialog box will look something like this:

Click "ok", and you will see:

 

Now Click "ok", and you will see:

Again, click "ok". The Remedy login interface should start up, and you will see:

Simply Click "OK". If you entered everything correctly, you should now see:

The next time you use the client software, the profile settings will already be made, and you can simply login.

Return to top

Using AFS on the Terminal Server

FERMI-TS includes the OpenAFS client interface to allow users easy interoperability between the windows file systems and applications with the AFS file system. The AFS file system is the main file storage system used by the Unix community here at Fermilab and other Scientific communities. The OpenAFS client is the same program that many Windows desktop users use to manipulate and transfer data between their Windows desktop and the AFS file system. Authentication is integrated through the Net ID Manager interface.

Users do not have the ability to start or stop the OpenAFS service. The service is already running. Users also do not have the ability to alter most of the 'advanced' configuration settings. These settings are controlled by the server administrators.

More information on using the OpenAFS client may be found at:
http://computing.fnal.gov/software/netidmgr/mapping_afs_drives.htm

Return to top

Printing

Follow the steps given below to 'setup' a printer while in your terminal session window.

Start->Search->Find Printers...
Put in the Name: of the printer you are searching for. As shown below, you may use a wildcard " * " to find the printer. Select Find Now for results.

Double click on the printer (in the Search results window) that you want to 'setup' in your session

To verify the printer is setup on your machine, access Start->Programs->Printers and Faxes

Note: The settings are persistent. Next time you log into the Terminal Server the settings will still be there.

Return to top

FAQ's

Resizing the Remote Desktop Window

This option gives you a nice sized view.
rdesktop -g 1280x1024 fermi-ts &

This one takes your whole screen up and you can't move around behind the window at all as you do not get a border around it.
rdesktop -f fermi-ts &
Note: If you start rdesktop with the flag -f (for fullscreen) you may encounter difficulties switching back to your linux windows. To switch windows press Ctrl + Alt + Enter.

Mappings

Two examples of mappings:
rdesktop \
  -r disk:floppy=/mnt/floppy \
  -r disk:cdrom=/mnt/cdrom \
  -r disk:afshome=$HOME \
   fermi-ts &

rdesktop -g 1000X10000 \
  -r disk:afsweb=/afs/fnal.gov/files/expwww \
  -r disk:afshome=$HOME \
  fermi-ts &

Password Change

When you are logged in go to: Start -> Settings -> Windows Security Then click on "Change password" and enter your old one and then the new one, twice!

Note: If your password was just reset, you will be required to change it at first logon. You will receive the following message.

After you have changed your password, the message received back does not read correctly. But fear not, your password has been successfully changed.

Distribution List

When you receive an account on the Terminal Server you are also subscribed to the distribution list (fermi-ts-users). This list will be used as a discussion list as well as a means for the administrators to inform all terminal server users of announcements that would include scheduled downtimes.

Saving Documents Created with Office Apps

At this point in time rdesktop does not allow one to save documents directly into afs space. You will need to save the document to the desktop area, then drag the document over to your afs space. We hope this will be remedied in a future release.

Return to top

Appendix A - Applications Available

The FERMI-TS server provides the following applications:

Office 2007 Suite:

Adobe Acrobat Reader
AFS Client
Ghostview
Internet Explorer 6
Jinitiator (used by BSS web client)
Outlook Express
Remedy Client
VoloViewer
Net ID Manager

Return to top

Appendix B - Clients

NOTE - you will need administrative privileges to install.

There are several RDP (Remote Desktop Protocol) Clients available. The preference is to use clients that conform to RDP version 5.2.

The RDP clients are available locally at:
http://www-pseekits.fnal.gov/desktoptools/Microsoft/RDP_5.2

or from Microsoft:

For Windows 95/98/ME, Windows NT4, Windows 2000, Windows XP, you can download the RDP 5.2 client at:
http://www.microsoft.com/ts
Go to the downloads section, and select, "Remote Desktop Connection for Windows Server 2003"

For Mac OS X, you can download the client at:
http://www.microsoft.com/mac/downloads.aspx
and look for the 'Remote Desktop Client' download selection.

For Linux
If you are running Fermi Linux do a 'yum install rdesktop' and everything will be installed for you.
If you are not running Fermi Linux check your distribution to see if it is included. If it is not included the rdesktop code can be found at: http://www.rdesktop.org/

Return to top

Appendix C - Classic Mode

Switch your settings to 'Classic Mode'

To switch to classic mode, on the grey bar on the bottom, 'right-mouse' click to get the selection tab, and choose 'Properties'. You will see something like the following:

Switch the 'Start Menu' tab, and you will see:

Select 'Classic Start menu'. You can customize some of the 'Start' options by selecting the 'customize' button. When you are done, press the 'OK' button, and you should now see your desktop session look like the following:

By default, the explorer view uses large icons. For example, if you double click on 'My Computer', you will see something like:

To switch this view to a more detailed view, you can select, view and Details as your choice. This will change the explorer view to:

If you want to make all usage of the explorer default to the detailed view, simply select the Tools/Folder Options selection. You can also switch the explorer view to look more like Windows 2000 by selecting the Tasks selection of "Use Windows classic.

Switch to the View Tab and click on 'Apply to all Folders'

Return to top

last modified 1/12/10    email helpdesk@fnal.gov
Fermi National Accelerator Laboratory