My fan

welcome monthly smallbasic challenge!   these challenges intended people learning program or for more experienced programmers want start using smallbasic after using different language.  some easy, hard - make think, , more importantly be  great fun ! please post solutions / partial solutions / questions / feedback etc. thread remain 'sticky' month.  the rule solution must use standard smallbasic methods (no extensions). it if people post problems these challenges so discussion can start can learn each other. text challenge 1 measure type speed unit words/sec. text challenge 2 make list of subroutine names given small basic source file. text challenge 3 make indent program coordinates indentation of given small basic source file. graphical challenge 1 make pictures of 4 suits marks - club, diamond, heart , spade - of playing card. graphical challenge 2 use shapes , make pictures of animals like, e.g. lion, elephant, penguin etc. graphical

i'm planning enable tde dbs. in dbs (2.1 tb)  45% image columns (created images in sql 2000 , in 2008). should more worried performance after enabling dte because of that?   i had experience in past , did not remember of issues, should not problem best regards, uri dimant sql server mvp http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/ SQL Server  >  SQL Server Database Engine

i'm searching way access webservice silverlight2 launched html file located on c:\ (for example). i've read msdn policy access, if hard disk restricted zone, internet isn't, , don't see why may more restrictive cross domain on 2 internet access, or localnetwork (server) to internet (webservice) access wich permitted. thanks explanation. (and sorry bad spell, i'm not english/us) hi, i not clear question if understanding correct want access services different domain. if case need put xml file named clientaccesspolicy.xml. content of be <?xml version="1.0" encoding="utf-8"?> <access-policy>   <cross-domain-access>     <policy>       <allow-from http-request-headers="*">         <domain uri="*"/>       </allow-from>       <grant-to>         <resource path="/" include-subpaths="true"/>       </grant-to>     <

hello all, i have fact table called fcthotelstay contains columns such amount, start_date, end_date, customer_skey etc. need calculate average rate, amount divided number of days of service (end date - start date). this, created field in dsv called servicedays = datediff(d, start_date, end_date) , added measure. created calculated member [measures].[amount]/[measures].[servicedays]. is right way this? in advance help. yes. right way. martin mason wordpress blog SQL Server  >  SQL Server Analysis Services

hi, i have installed 2 node active/passive sql 2005 cluster on windows 2003 in vmware workstation environment . cluster installed (configured cluster according link "http://www.bradspace.net/blog/kb/?p=91&more=1&c=1&tb=1&pb=1"). when try move sql server resource group passive node, gets fail logging following error message in event log "initerrlog: not open error log file 'g:\microsoft sql server\mssql.1\mssql\log\errorlog'. operating system error = 1392(the file or directory corrupted , unreadable.)." have taken sql resources group offline , manually moved sql server shared drive other node , have found not being able access error log or other folder including data on node 2. operating system shows error saying disk corrupted. have run chkdsk delete's files of sql setup. i re-installed sql server, again found same problem . working on issue found out, shared drive works first node when failover other node (node2) con

hi! we getting the below error message while running gpupdate on secondary domain controller. both dcs windows 2012. computer policy not updated successfully. following errors encountered: the processing of group policy failed. windows not apply registry-base d policy settings group policy object ldap://cn=machine,cn={29face21-ae6 a-4225-b845-a5f12ff93096},cn=policies,cn=system,dc=domain,dc=com. group poli cy settings not resolved until event resolved. view event de tails more information on file name , path caused failure. user policy update has completed successfully. any suggestions? thanks. hi, according research, registry client-side extension failed read registry.pol file group policy template location. registry.pol file contains registry policy settings. file may missing, inaccessible, or corrupt. possible resolutions include: ensure registry.pol file exists in location , has same permissions gpt.ini file in same group policy object (gpo). ensu

hi  i have  an  issue -  we have small business server 2011,  installed  exchange 2010 on it  under dns records have  the  following zones connecxionzltd.local , connexionz.co.nz the second domain  we want  to use  for our email - example  xyz@connexionz.co.nz i can ping  ip addresses not domain names  with connexions.co.nz, can ping ones with connecxionzltd.local  how create  a dns record autodiscover connexionz.co.nz ? all active directory user using name regards  hi, >>how create  a dns record autodiscover connexionz.co.nz ? 1.create record 'mail' in 'connecxionzltd.local' ip address 'xxx.xxx.xxx.xxx' 2.create cname record 'mail' in connexionz.co.nz 'mail.connecxionzltd.local' for dns settings exchange server,you check reference: https://technet.microsoft.com/en-us/library/bb124896(v=exchg.80).aspx ________________________________________ best regards, cartman please remember mark replies answers

hi all in 70-643 r2 , @ page 189 , read : " you might need configure either of these ip virtualization modes on rd session host provide compatibility older applications, enable per-user logging related lsp regulatory requirements, or support network filtering , resource access control. now question :  where these log files written ? thanks     event logs - security log. can configure audit policy to track success , failure "audit logon events" , "audit account logon events." audit logon events: security configuration editor; security services jan 21, 2005 – security setting determines whether audit each instance of user ... user has reconnected disconnected terminal server session. ... eventid 528 success logons, eventid 529 failures, both for "logontype 10" (remoteinteractive). http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx i wanted know if there logs maintained windows xp when connects through remote

hello! my name miles have taken several classes , have experience computer. decided build own computer instead of buying major company. when finished first building computer originally  graphics card did not work. xfx gforce 9800 gtx+ exchanged ati diamond 48000 series card, , work perfect! after while of installing other drivers , applications began error of ati2dvag.dll tried solution , found some, cannot figure how try fix suggested or cannot find it! now current problem installed new router , when tryed allow access though mcafee not open mcafee though maybe if uninstall , reinstall mcafee work... cannot install becuase error of javascript not working error listed jscript.dll now when try go system restore cannot access blank screen tryed command promt safe mode method , not there! can open , support page microsoft. think should reinstall xp on computer , see if clean slate fix problem. oh! , reason cannot install sm bus controller on motherboard! my specs are intel core 2 duo 3.16

hi.. while trying transfer schema master.. getting following error. requested fsmo operation failed. current fsmo holder not contacted. transfer of current operation master not perfomed. after googling.. had pointed domain controller dns internal ip..even though not able transfer roles.. run netdom query fsmo , check domain controller host schema master. make sure dc holding schema master online. regards, _prashant_ mcsa|mcitp sa|microsoft exchange 2003 blog - http://prashant1987.wordpress.com disclaimer: posting provided as-is no warranties/guarantees , confers no rights. Windows Server  >  Directory Services

trying install windows server 2012 essentials release candidate on hard had windows server 2011.  system has 4 hard drives, sata 500gb, installed first drive, unallocated space.  installation progressed point of asking questions, server name, administrator account etc. got screen said "an error has occured" option save logs did usb stick.  can post of send it? larry problem installing bootleg copy of   windows server 2011 :) does box have usb card reader?  if unplug it. if not unplug drives 1 installing to. grey Windows Server  >  Windows Server 2012 Essentials

hi guys, we have 30 users connecting our rds server 2008 r2. moved vm 1 esx host , it looks issue started then. makes no sense happened.   we have 2 printers need redirect rds gp. 1 regular dell works fine , have tec label printer. 1 doesn`t redirect anymore , error message ideas ? thanks. hi,   terminal services provides printer redirection, routes printing jobs server printer attached client computer or shared printer available client computer. when user establishes remote session terminal server, redirected printer available applications running in remote session.   by default, windows server 2008 terminal server first tries use terminal services easy print driver. if client computer not support driver, terminal server looks matching printer driver installed on terminal server. can either install matching printer driver on terminal server, or can create custom printer mapping file.   please refer following article troubleshooting: event id

i have created win 10 image on wds , require installed drivers on image, receive "the request not supported" whenever try add drivers image using add drivers boot image wizard, have had working 100% until week, not wont work, please can advise may have changed? hi, if trying add driver boot wim , failed following may help. 1. try dism /cleanup-wim before adding driver 2. clear temp directorys. 3. browse "hkey_local_machine\software\microsoft\wimmount\mounted images" , delete keys below this. if issue persists, please check whether can add other drivers boot image. if so, afraid may contact laptop's manufacturer confirm whether these drivers can added boot image. common causes failed packages include following:     a corrupt package or package missing files.     a network connectivity issue     an unsigned x64-based driver package (x64 pages must signed)     an .inf file not authored correctly best regards cartman please remember mark repl

i have single domain controller running 2008 r2 standard , want upgrade 2012 r2 standard. when running adprep /forestprep 2012 media getting following error: ------------------------------------------ adprep not discover schema fsmo. schema fsmo must discoverable operation proceed. [status/consequence] active directory domain services schema not upgraded. [user action] check log file adprep.log in c:\windows\debug\adprep\logs\20160103095410 directory possible cause of failure. adprep encountered win32 error. error code: 0x6ba error message: rpc server unavailable. adprep unable check specified user's group membership. [status/consequence] adprep has stopped without making changes. [user action] verify specified user member of enterprise admins group , schema admins group if /forestprep specified, or member of domain ad mins group if /domainprep specified, or member of enterprise admins group if /rodcprep specified . adprep encountered win32 err

hi i have followed steps, have mentioned in below link.  http://social.microsoft.com/forums/en-us/partnerwinserver2012/thread/235594d6-a42d-4345-8a77-05481d8bc8bd#451ec885-bbff-4bf7-addb-983f22683c82 we have deployed 3 servers , tried start pooled managed desktop, showing error in final stage. error "  the integration components in virtual desktop template not correct version”.  we have installed integration service setup , completed sysprep steps in windows 7 pro sp1 machine also. please let know furthers. edward antony.d | quadrasystems.net india pvt ltd hi a this means unless updated integration services on windows 2012 or windows 7 vms (and windows server 2008 r2), running older version of integration services. machine\auto\integrationservicesversion ic version, or host using command: to update easiest way, extract content c:\windows\system32\vmguest.iso hyper-v host folder, launch setup.exe relevant support\<architecture> folder on each vm. example:

anyone have cortana issue message sorry, speech failed start try again later . this had been haunting me few builds , cannot work. still general problem? i using surface pro 3 w10 build 10061. hi, windows 10 insider preview build 10074 available. install new update see if resolve issue. please remember mark replies answers if help, , unmark answers if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows 10 Insider Preview  >  Windows 10 Insider Preview Setup and Installation

hi, created gpo on server 2008 r2 apply our company logo machines ( win7 & win8 ) in domain, user profile picture. after gpupdate images being downloaded domain machines (to c:\programdata\microsoft\user account pictures )but, not showing @ log on screen/lock screen. picture specs. 128x128. picture location shared domain computers , authenticated users. appreciate help thanks, rafi hello rafi, i found update 1 of techent. please have look. "regarding policy “apply default user logon picture users” has been accepted bug , dev team working on fix same. occurs because of following behavior, when user changes default picture writes bitmap .dat file in user account pictures directory under name {domain}+{username}.dat. when explorer starts checks whether file exists logged on user and, if does, copies bitmap part of file memory. if doesn’t find or policy “apply default user logon picture users” applied, use user.bmp or guest.bmp (depending on user)

shrikant hi shrikan, sorry not quite sure problem. if understand correctly, want share drive everyone, restrict them delete folder/file. in case, share drive , grant them read permission on drive, could: 1. right-click drive want share. 2. click properties. sharing tab, click advanced sharing. 3. click share folder. 4. in appropriate fields, type name of share (everyone in case), 5. click permissions add group, , select read permission 6. in addition, , check permissions in security tab of drive properties , ensure read permission granted. besides, if don’t meaning, share more details issue, hard troubleshooting or offer suggestion based on little information. thank understanding. best regards, wendy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server

hi, have windows xp client systems within domain created windows server 2008. want backup folder contents daily readable format users in domain can access them. have seen windows 7 has feature of scheduled backing of folder contents doesnt in readable format. found tool called microsoft file transfer manager dont know whether works network file transferring. there feature can schedule backup/transfer of files server users in domain can access them. have no issues migrate clients windows xp windows7.   thanks! dave  what talking isn't considered a backup, it's act of copying files network share. to this, write batch file or other script copy files xp/win7 computer desired network location. to schedule use schedule tasks on xp/win7 , configure appropriate settings schedule run desired. a backup collects multiple files , stores them 1 large file, in compressed format.  backup solution looking @ not fit needs.

i running command get-aduser username -properties * | select name, publicdelegates, publicdelegatesbl but output returns microsoft.activedirectory. management .adpropert yvaluecoll ection, despite knowing there delegates setup user queried. is there anyway round this? dont understand why doesnt return correct information. did wonder if perhaps because there number of entries in both fields? get-aduser username -properties * | select -expand publicdelegatesbl get-aduser username -properties * | select name, @{n='publicdelegates';e={$_. publicdelegates -join '|' }} \_(ツ)_/ Windows Server  >  Windows PowerShell

we have 5 hp in 1 desktop win 10 installed, have updated 2 other desktops win 7 on win 10, 1 of them not see networked folder, other computers fine, checked driver updates in device manager still wont give permission, computer see other folders on computer has folder cant see, can please?  error states: not have permission access \\[computer name]\c. contact network administrator request access." hi philster, >> error states: not have permission access \\[computer name]\c. contact network administrator request access." please check policy of file has allowed computer access resource. according description, post issues file service forum further help. the link below file service forum: https://social.technet.microsoft.com/forums/office/en-us/home?forum=winserverfiles best regards john Windows Server  > 

i have deployed windows 2016 server hyper-v host.  however server manager showing red local server , servers under services.  the services sync host_3d6a513 , downloaded maps manager.  i can start sync host service downloaded maps manager starts stops.  does not seem causing issues see green status in server manager.  can set these manual?  do need them? hi, sync host_3d6a513 service synchronizes mail, contacts, calendar , various other user data. mail , other applications dependent on functionality not work when service not running. regarding sentence "i disabled downloaded maps manager can't disable the   sync host_3d6a513 service ", please describe more details it? best regards, alvin wang please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server

hi everyone, please need idea how solve following issue. verification of prerequisites active directory preparation failed. unable perform exchange schema conflict check domain domain.local. exception: rpc server unavailable. adprep not retrieve data server server.domain.com through windows managment instrumentation (wmi). [user action] check log file adprep.log in c:\windows\debug\adprep\logs\20141015160252-test directory possible cause of failure. thank help hi, please make sure necessary ports open , rpc service running on domain controllers. in addition, here kb articles below same issue: "unable perform exchange schema conflict check" error, , prerequisites check fails http://support.microsoft.com/kb/2737560 according kb, issue caused by: the existing domain controller or controllers missing seservicelogonright ("logon service") right network service account the wmi , dcom protocols blocked between computer running windows s

  i tried installing hyperv on system, ran issue documented on forum virtual system cannot bind either of nics (switch failure). after deciding hyperv isn't quite right yet, tried removing but, removal wasn't clean. after rebooting, my system didn't past step 3 of 3 of removal process , froze @ 78% of removal, had manually reboot. system came without hyperv, left of virtual network adapters , virtual switches in network config. i've tried deleting them, os won't let me. i'm experiencing network issues now, , want these gone can eliminate these potential problem. how clean mess up?   thanks! unfortunately adapters in rc0 difficult remove. you can use slight variation of: http://support.microsoft.com/kb/899868 however, instead of looking “false” adapters in step 4, adapters “product type” “microsoft virtual network switch adapter” instead of steps 6 , 7 in kb following: 6. locate following registry key, , change following registry value 0 : hke

my question is, how configure windows 7 pro domain user accounts can install software? know may think bad idea , agree, it's not decision. googling has not produced answer. don't have applocker. have tried disabling uac setting "detect application installation , prompt elevation" under control panel/administrative tools/security settings/local policies/security options. tried setting "prohibit user installs" "allow user installs" under local computer policy/administrative templates/windows components/windows installer.  you can use group policies install msi packs. to permit users install own softwares, should make them local administrators on computers. perform via group policies, please use restricted groups .   posting provided "as is" no warranties or guarantees , , confers no rights. microsoft student partner microsoft certified professional microsoft certified systems administrator: security microsoft certi

hello, we have run issue our wsus deployment of server have been assigned multiple groups should not sharing.  there shy of 500 servers int wsus console , 45 different groups.  has had have change member ship of these servers.  there many domian administrators access servers on our domains, there way in wsus or group policy restrict users may access wsus management console specific wsus server wether @ server console or remote mmc connection? i have looked through wsus deployment guide not found answer question. thank you carl is there way in wsus or group policy restrict users may access wsus management console specific wsus server wether @ server console or remote mmc connection? access wsus management console controlled membership in local\wsus administrators local group or local\administrators group on wsus server. extension, includes domain\domain admins, member of local\administrators group. if need restrict access wsus persons domain admins, should: [1] ensure wsus not instal

i setup windows server 2008 kms host , worked fine. added server 2008 , when i install kms key on it, tries second kms host don't want. have mak key activated 2nd server through mak. when checked vamt saying second server in out-of-box (oob) grace. doesn't vamt recognize server activated regardless if mak or kms? can mix mak activated server domain activated via kms? thanks! hi,   please understand kms key can used setup 6 kms hosts. if not want second windows server 2008 computer kms host, please type kms client setup key it. second windows server 2008 computer setup kms client.   kms client setup keys:   operating system edition product key windows 7 windows 7 professional fj82h-xt6cr-j8d7p-xqjj2-gpdd4 windows 7 professional n mrpkt-ytg23-k7d7t-x2jmm-qy7mg windows 7 enterprise 33pxh-7y6kf-2vjc9-xbbr8-hvthh windows 7 enterprise n ydrbp-3d83w-ty26f-d46b2-xckrj

i cant online upgrade windows 2008 enterprise windows 2008 r2 enterprise. goes thru copying files stage bombs when looks @ settings. there arent errors in viewer either. a box pops says "setup cant continue. restart computer , restart setup. when prompted try getting latest updates". grabbed every update possible.  i cant flatten server , start on backup server. have upgrade r2 install symantec enterprise vault. has seen before? perhaps reviewing doc might help. understanding failures , log files http://technet.microsoft.com/en-us/library/ee851579(v=ws.10).aspx setuperr.log , setupact.log dave guenthner [msft] posting provided "as is" no warranties, , confers no rights. http://blogs.technet.com/b/davguents_blog Windows Server  >  Setup Deployment

hello guys, i need script i'm working on. think should work, when divide code works. can please tell me i'm doing wrong? thank you [string]$info = "cannotchangepassword","city","company","country" $user = get-aduser user -properties * $user | foreach {select -expandproperty ($info | foreach {$info})} if want property value in same line. single user (use / or - or space between {0}{1}as per need) $user = get-aduser vincent -properties cannotchangepassword,city,company,country '{0}/{1}/{2}/{3}' -f $user.cannotchangepassword,$user.city,$user.company,$user.country output: false/mumbai/surgesystem/in for multiple user get-aduser -filter {name -like 'vin*'} -properties cannotchangepassword,city,company,country | foreach { '{0}/{1}/{2}/{3}' -f $_.cannotchangepassword,$_.city,$_.company,$_.country } Windows Se

i'm doing perfomance analysis application , sql server 2005. i'm inserting 400k rows, doing 20k selects (one each 20 inserts). edition 1 has non-unique clustered index (userid, productid, batchid, locationid), editon 2 has non-clustered index (userid, productid, batchid, locationid, quantity) in addition clustered 1 (same edition 1 got). i'm testing because of article http://www.sql-server-performance.com/covering_indexes.asp  says aggregate functions alot. i'm doing sum(). the sql i'm executing 20k times is: select productid, batchid, locationid, sum(quantity) quantity, count(*) lines from logistics where userid = [client id] , productid in ([product list]) group productid, batchid, locationid the problem edition 2 1-2 ms slower, when inserts has no differences (they equal). execution plan says editon 2 should perform better (less io , cpu operations) since has covering index.   why this? can't find logical explenations problem. can reason that 

hi  everyone, please share power shell command remove sip address multiple user. like used below command add sip address: get-qaduser user name | add-qadproxyaddress -customtype 'sip' -address 'user@xyz.com' i have updated xyz.com need xyz.net. please asap. mukesh saini get-qaduser |  remove-qadproxyaddress -pattern '*@xyz.net" http://wiki.powergui.org/index.php/remove-qadproxyaddress http://mariusene.wordpress.com/ Windows Server  >  Directory Services

hello, when try access dfs-r shares on w2008 r2 machines xp machines appears slow. any ideas? smb? can related this? (this article talks w2003 maybe still case w2008?) http://support.microsoft.com/kb/915377 tnx! hi, please open active directory sites , services on domain controller, check if servers in right site , if subnets set correct. check if ip of windows xp systems in same site as server. meanwhile, test access the dfs share on insite server \\server\share see if still work or not.   shaon shan |technet subscriber support in forum |if have feedback on our support, please contact tngfb@microsoft.com Windows Server  >  File Services and Storage

i had our pdc fail other day. running windows 2008 r2. have bdc (running windows 2003 sp1) did nothing far changing roles or anything. have gotten new server in , want bring new pdc. steps need take achive this? need seize roles? need promote bdc? not sure steps take i not removing old server im going use bdc again. want make new server technically pdc know there no such thing anymore want main server. still need transfer roles? if want new 2008dc main dc , others adc can transfer fsmo roles , authorative time role new dc. transferring fsmo roles: http://www.petri.co.il/transferring_fsmo_roles.htm http://www.elmajdal.net/win2k8/transferring_fsmo_roles_in_windows_server_2008.aspx regards, abhijit waikar - mcsa 2003|mcsa 2003:messaging|mcts|mcitp:sa Windows Server  >  Directory Servic

hi, please me add shut-down, log off, hibernate command desktop context menu through group policy. i using windows server 2008 r2 standard 64 bit. thanks in advance.   hi ashish,   far know, don’t have such built-in group policies “ add / remove application desktop context menu ”. however, can make creating related registry keys. can customize icons each item.   here example reference:   to add shut down, log off , hibernate desktop context menu.   windows registry editor version 5.00   [hkey_classes_root\desktopbackground\shell\shut down] "icon"="shell32.dll,-28" "position"="bottom"   [hkey_classes_root\desktopbackground\shell\shut down\command] @="shutdown.exe -s -t 00 -f"   [hkey_classes_root\desktopbackground\shell\log off] "icon"="input.dll,1" "position"="bottom"   [hkey_classes_root\desktopbackground\shell\log off\command] @="shutdown

i trying clean wsus server free disk space.  in wsus see there updates products no longer use.  example, outlook express, ie 5 , w2k.  have ran wsusutil.exe deleteunneededrevisions found on http://technet.microsoft.com/en-us/library/bb432641.aspx , doesnt remove no longer used updates. is there way remove database other previous mentioned solution?  doesnt seem working me. tx james hi,     the server cleanup wizard  helps to you manage disk space. wizard can following things: remove unused updates , update revisions the wizard remove older updates , update revisions have not been approved. delete computers not contacting server the wizard delete client computers have not contacted server in thirty days or more. delete unneeded update files the wizard delete update files not needed updates or downstream servers. decline expired updates the wizard decline updates have been expired microsoft. decline superseded updates  the wizard decline updates meet following criteria:  the s

'm working on windows 2012 r2 hyper-v. i've done export of virtual machine csv volume import later. hanve't performed import, , when went delete exported folder i've got access denied error of vhdx file. how can identify process locks file , delete it? there no virtual machine file attached on it. i've restarted "hyper-v virtual management server" service without success. not permission problem because i've tried take ownership reset permissions, i'm getting 'access denied error'. cacls command. regards i've used process explorer find open handle. should opened system process ipv6 address associated it. find node in cluster ipv6 address , try restarting vmms service on host. otherwise force close handle. check backups may have file locked too. sometimes changing csv owner trick too. (i.e. failover csv node) Windows Server

i've got windows 2008 datacenter x64 server core sp1 system can't 2 updates installed on. updates need install kb968537 , kb970238. i've downloaded both updates, windows 2008 x64 sp1 versions , tried install them both don't apply system. there special updates the datacenter edition? orange county district attorney hi, thank update. windows update log, can find these 2 updates installed other updates. 2009-06-17    20:22:14:642    success    content install    installation successful: windows installed following update: security update windows server 2008 x64 edition (kb968537) 2009-06-17    20:22:14:642    success    content install    installation successful: windows installed following update: security update windows server 2008 x64 edition (kb961501) 2009-06-17    20:22:14:642    success    content install    installation successful: windows installed following update: cumulative security update internet explorer 7 windows server 2008 x64 edition (kb96989

win 2012 r2 remote desktop services; deploy remoteapp security in mind. i published couple of remoteapp, including excel. gave permissions , stuff restrict users following "least privilege" vision. opened excel win7 client. turns out when saving file excel, if write "cmd" name file textbox, command line opens. same if write "control panel" or notepad or .. whatever want. i wonder what's purpose of publishing remoteapp , fine tuning permissions when can use every application installed on  session host. also, there isn't way hide local disks, network discovery pc, deny logon remote desktop on session host.... , on. how can manage of above bit of security in mind ? understand have "fix" these issues combined set of tricks (logoff.exe custom shell, hiding disks registry, applocker integration ... ) .. if (and of course) forget ? thanks suggestions. hi, i wonder what's purpose of publishing remoteapp , fine tuning

hello, first time in forum , hope answer this. have been researching issue no end. haven't been able find exact replication of info error. have checked similar cases , explored option such loopback check, time/date issues, etc. here event info on 2008r2 datacenter, although see on every server in our care.  i'm aware of different logon types. i've seen scripts , task schedulers brute force attacks. ideas has solved issue? can't take being sent microsoft link explaining difference between logon types again. major issue can't find similar event ours. either have null security id or call process. servers dc's. appreciated. in advance! account failed log on. subject: security id: s-1-0-0 account name: - account domain: - logon id: 0x0 logon type: 3 account logon failed: security id: s-1-0-0 account name: administrator account domain: fxnb failure information: failure reason: unknown user name or bad p