|
|
|
Windows 2003 Terminal Server User's Guide
Contents: Introduction | Getting Started | Windows | Linux | FNALU | Macintosh | Logon | Using the Remedy Client | AFS | Printing | FAQ's | Appendix
Introduction
The Windows server, "FERMI-TS" is a central Windows 2003 Terminal server that is configured to be a general purpose platform to accommodate various users at Fermilab. The system is designed to provide a flexible Windows environment for Linux/Unix, Macintosh and Windows users that need access to key Windows based applications and Windows based file repositories in the Fermi domain.
Disclaimer:
This document refers to various application and software products. Because these products are mentioned in this document does not constitute support from the Computing Division, and in some cases these applications/software products could be removed without notice. What is a Terminal Server?
Microsoft supplies an additional service in the Windows server operating system that allows multiple users access to a single Windows computer. This service is called the Windows Terminal Server service (TS). TS computers can be used to provide Windows applications to non-windows users, or a convenient remote connectivity option to remote Windows users. Windows Terminal Server uses the Remote Desktop Protocol (RDP), and any client that can use an RDP certified client can be used with the Windows Terminal Server. The client is built-in to Windows XP systems, and Microsoft provides free client RDP programs for Windows 95/98/ME, Windows NT, Windows 2000, and Mac OS X. There are also RDP clients available for Linux and various hand-held devices. (see Appendix B - Clients) RDP clients that support version 5 of the RDP protocol sometimes include the additional feature of mapping local disk and printer connections directly to your Windows terminal session. This is extremely handy for transferring data from your local computer, or printing documents to your local printer. The design strategy we are using does have some limitations. In order to maintain a reliable and stable environment for our users, the systems do not allow users to install applications. Additionally, various configuration options have been removed, and we have time limits placed on connectivity. We also restrict users to a single active session. The Central Terminal server is not meant to be a replacement for users requiring a Windows desktop, but instead it is to provide limited Windows desktop capabilities for users requiring occasional Windows desktop needs. There is only a subset of Windows applications (see Appendix A - Applications Available) provided to users, and users requiring more extensive applications should consider obtaining a windows desktop or consider using a Windows PC emulator like VMware or Virtual PC
Getting Started
To use the Terminal server, you must have a valid Windows Kerberos principal. Once you have an account, you will need to request access to the FERMI-TS server. A request can be made through the Fermilab helpdesk, and you will need to include your windows account name and what applications you need access to. The Computing Division will accept costs at this point in time, but reserve the right if the user population rises, to commence chargebacks at any time. After your request is approved, you will be sent e-mail with confirmation. You will then need to install the proper client RDP software on your system. If you are using FNALU, the rdesktop client application has already been installed. If you are using a shared server, please contact your server administrator. If you are the administrator, please review the section, RDP Clients section of this document. Once you have the client installed, you will need to point your client to the FERMI-TS.FNAL.GOV server. Set your client to do 'High Encryption', as our server only accepts clients connecting with that level of encryption. Consult the help information for your RDP client software for more details.
Windows
Use Remote Desktop Connection from your Windows desktop.
Bring up the Remote Desktop Start->Programs->Accessories->Communications->Remote Desktop CommunicationIf you want any drives, printers, etc mounted in the Terminal Server Connection that you currently have mounted on your pc check the appropriate box. Hit connect.
Linux
If you have rdesktop on your Linux desktop, you would do the following:
FNALU
If you are using one of the FNALU nodes, you would do the following:
setup rdesktop
rdesktop fermi-ts & Note - make sure you export your display
Macintosh
If you are using a Macintosh desktop running OS X, you would do the following:If you want any drives or printers mounted in the Terminal Server Connection that you currently have mounted on your mac check the appropriate box. Hit connect.
Behind a Restricted Network
If you are behind a restricted network or you are using firewall software, check to see if TCP port 3389 is open. If this is blocked you might have to use the Fermilab VPN to provide a secure network connection.
Once connected, you will be presented with the standard Fermilab computer disclaimer: If you agree to these terms, press OK.Now you will be presented with a Windows server logon which will look like the following:
Logon
For the User Name, enter your windows Kerberos account name, and enter your password on the next line. Make sure the, 'Log on to:' box has 'FERMI'. If not, you can use the pull down arrow to switch to that choice. First Time Setup When you logon, you will see something like the following:
If you are familiar with Windows, you will notice the Windows 2003 Terminal server comes up in the Windows XP view (referred to as 'Fisher Price Mode'). If you prefer the more traditional Windows 2000 view, you can set your session into 'Classic' mode. (see Appendix C - Classic Mode) Applications:
There is a standard set of applications available to each user session. Click on Start button, select Programs. You should see something like the following:If you are authorized, we have the full version of Office 2003 (Word, Excel, PowerPoint, Access, Publisher, and Outlook). In addition, if you select the 'Products' selection, we have additional applications like Adobe Acrobat Reader, and other viewers. Ending your Session: If you are inactive for 2 hours, the system will automatically disconnect your session. If you have completed your work, you can Logoff by clicking on the Start button, and selecting logoff
Using Remedy on the Terminal Server
NOTE:There are a few procedures that need to be accomplished to allow users to access the Remedy Client from the Terminal Server. A user needs to do an initial logon to the terminal server. This creates an initial profile. After this is completed, notify the terminal server admin (via a helpdesk ticket), then the admin will modify your profile so you will be able to use the Remedy Client on the terminal server. The Remedy Client may be launched from the
Start Menu -> Programs -> Products -> Action Request System -> AR System UserYou will need to fill in your
User Name and your Remedy password. Preference Server csdserver
Leave the TCP Port # and RPC # blankUse the File -> Open menu and select CD-Helpdesk then Search
The Remedy interface will be displayed.
Using AFS on the Terminal Server
FERMI-TS includes the OpenAFS client interface to allow users easy interoperability between the windows file systems and applications with the AFS file system. The AFS file system is the main file storage system used by the Unix community here at Fermilab and other Scientific communities. The OpenAFS client is the same program that many Windows desktop users use to manipulate and transfer data between their Windows desktop and the AFS file system. There are only a couple of minor differences between the OpenAFS client interface on FERMI-TS and the one users install on their personal PCs. The OpenAFS client when run on a terminal server allows and manages multiple user access. To accomplish this, some restrictions are made upon user interaction. Users do not have the ability to start or stop the OpenAFS service. The service is already running. Users also do not have the ability to alter most of the 'advanced' configuration settings. These settings are controlled by the server administrators. To use the AFS client, you will need to start the authentication process. You can find the OpenAFS client program under the Products program area:Click on the Authentication, and you will need to obtain your AFS Tokens a shown below:
More information on using the OpenAFS client may be found at:
http://www-oss.fnal.gov/csi/openafs_windows If you routinely need to use files on AFS space with your terminal server session, you can copy the OpenAFS Authentication shortcut into your startup folder on your Programs area. This will force the OpenAFS client to Prompt you to authenticate upon logon. See below:
Printing
Follow the steps given below to 'setup' a printer while in your terminal session window. Start->Search->Find Printers...
Put in the Name: of the printer you are searching for. As shown below, you may use a wildcard " * " to find the printer. Select Find Now for results.Double click on the printer (in the Search results window) that you want to 'setup' in your session To verify the printer is setup on your machine, access Start->Programs->Printers and Faxes
Note: The settings are persistent. Next time you log into the Terminal Server the settings will still be there.
FAQ's
Resizing the Remote Desktop Window This option gives you a nice sized view.
rdesktop -g 1280x1024 fermi-ts & This one takes your whole screen up and you can't move around behind the window at all as you do not get a border around it.
rdesktop -f fermi-ts &
Note: If you start rdesktop with the flag -f (for fullscreen) you may encounter difficulties switching back to your linux windows. To switch windows press Ctrl + Alt + Enter. Mappings Two examples of mappings:
rdesktop \
-r disk:floppy=/mnt/floppy \
-r disk:cdrom=/mnt/cdrom \
-r disk:afshome=$HOME \
fermi-ts &
rdesktop -g 1000X10000 \
-r disk:afsweb=/afs/fnal.gov/files/expwww \
-r disk:afshome=$HOME \
fermi-ts &
Password Change When you are logged in go to: Start -> Settings -> Windows Security Then click on "Change password" and enter your old one and then the new one, twice! Note: If your password was just reset, you will be required to change it at first logon. You will receive the following message.After you have changed your password, the message received back does not read correctly. But fear not, your password has been successfully changed.
Distribution List When you receive an account on the Terminal Server you are also subscribed to the distribution list (fermi-ts-users). This list will be used as a discussion list as well as a means for the administrators to inform all terminal server users of announcements that would include scheduled downtimes. Saving Documents Created with Office Apps At this point in time rdesktop does not allow one to save documents directly into afs space. You will need to save the document to the desktop area, then drag the document over to your afs space. We hope this will be remedied in a future release.
Appendix A - Applications Available
The FERMI-TS server provides the following applications: Office 2003 Suite:
Adobe Acrobat Reader
- Word 2003
- Excel 2003
- Powerpoint 2003
- Access 2003
- Outlook 2003
- Publisher 2003
AFS Client
Ghostview
Internet Explorer
Jinitiator (used by BSS web client)
Outlook Express
Remedy Client
VoloViewer
Appendix B - Clients
NOTE - you will need administrative privileges to install. There are several RDP (Remote Desktop Protocol) Clients available. The preference is to use clients that conform to RDP version 5.2. The RDP clients are available locally at:
http://www-pseekits.fnal.gov/desktoptools/Microsoft/RDP_5.2 or from Microsoft:For Windows 95/98/ME, Windows NT4, Windows 2000, Windows XP, you can download the RDP 5.2 client at:
http://www.microsoft.com/ts
Go to the downloads section, and select, "Remote Desktop Connection for Windows Server 2003"For Mac OS X, you can download the client at:
http://www.microsoft.com/mac/downloads.aspx
and look for the 'Remote Desktop Client' download selection.For Linux
NOTE: The current version (1.3.1) downloaded from www.rdesktop.org does not support disk mapping. Disk mapping is available as user-contributed RPM's from linux.fnal.gov, and as a ups/upd product for all our major Unix platforms.
If you are running Fermi Linux
If you are running Fermi Linux, do a 'yum install rdesktop' and everything will be installed for you.
If you are not running Fermi Linux check your distribution to see if it is included. If it is not included the rdesktop code can be found at: http://www.rdesktop.org/
Appendix C - Classic Mode
Switch your settings to 'Classic Mode' To switch to classic mode, on the grey bar on the bottom, 'right-mouse' click to get the selection tab, and choose 'Properties'. You will see something like the following:Switch the 'Start Menu' tab, and you will see:
Select 'Classic Start menu'. You can customize some of the 'Start' options by selecting the 'customize' button. When you are done, press the 'OK' button, and you should now see your desktop session look like the following:
By default, the explorer view uses large icons. For example, if you double click on 'My Computer', you will see something like:
To switch this view to a more detailed view, you can select, view and Details as your choice. This will change the explorer view to:
If you want to make all usage of the explorer default to the detailed view, simply select the Tools/Folder Options selection. You can also switch the explorer view to look more like Windows 2000 by selecting the Tasks selection of "Use Windows classic. Switch to the View Tab and click on 'Apply to all Folders'
last modified 11/09/04 email helpdesk@fnal.gov
