Archive for May, 2014

Tip: How to avoid Adobe Flash in Terminal Server/VDI environments with the IGEL LX/OS

Wednesday, May 28th, 2014

Hi Folks,

maybe you also agree that Adobe Flash content is one of the biggest crap that can be used in a Terminal Server/VDI environment. For example youtube or similar site’s mostly waste expensive Server CPU resources only for watching a “funny” video..

flashtaskbar
Yeah… One User with one HD Flash Movie use 41% of  Server CPU resources!

HTML5 is still not a big deal for most site’s, so how can you handle it?

1) Ban it… Block unwanted traffic with a firewall or proxy. This is highly efficient but will upset the user base and maybe you need it (schools/education), so mostly this option is no deal.

2) Buy more Server.. More or less efficient and very expensive (Hardware, licensing, setup and cooling). No deal!

3) Use solutions like Citrix HDX Flash Redirection… More or less efficient, hard to setup and not 100% compatible, it could be a option but it’s not a real solution.

4) Ban it from the servers… I just setup this for a PoC and it seams to be the most efficient way which is also acceptable for most users. So how is the setup?

a) You need IGEL Linux based devices (LX or OS) based on the x86 architecture to do this.

b) Setup a local Firefox browser session and deploy any Version of the Adobe Flash Player for Linux to it (Browser Plugins in the IGEL Setup).

c) Assign a Hotkey to the Firefox Browser Session like ALT+CTRL+i.

d) Setup a IIS/Webserver on any System that is not already running a IIS/Webserver

e) On the Terminal Server/VDI (i recommend to use the golden Image) site open the hosts file which is located in the Windows/System32/drivers/etc folder and edit it. Now add any Website you want to outsource, point it to the “new” Webserver. Example:

192.168.1.150 youtube.com
192.168.1.150 youtube.de
192.168.1.150 anyotheruselessflashsite.com

Do not perform this for any Website which is used for “business” uploads/work! Don’t use a DNS Server to apply the configuration, this might also point the Thin Clients to a “wrong” site… Of course you can also add Webradio Website’s, browser based games or what ever you don’t want to see in a Webbrowser on the server backend. But at all.. It’s not a security solution at all, it’s to save resources only!

f) Create a small HTML Website with a short Text like “This site can not be used on a Server/VDI! Please press ALT+CTRL+i to open the local Browser and use ALT+CTRL+TAB to switch between the Browser/Session.” or similar. Make it simple and easy to understand… Now set this HTML Page as default and 404 error page for the new Webserver (d).

g) Let the user test it… If the User enter www.youtube.com the “new” Website will open and point the user how to work with the local Browser.. For the User it looks “very” embedded into the session, not 100% but it will be good enough to watch movies for most of them.

I know this solution is also not a 100% one and it can be bypassed if the User is using the IP. 😉 ..but it’s not a security solution, the User can watch Movies and you have minimized the wasted CPU resource on your backend. It’s easy to control, high compatible and everyone is happy. From my point it’s currently the best way to handle Flash until it will be fully replaced by HTML5 or any other “better” working solution. The performance depends on the User device, a UD5 will better perform than a UD2 but still: A slow client is better than a slow server for most company environments.

Also some more benefit’s.. You can seperate client traffic from your server traffic quite simple, the customer where i suggest this mentioned that they have 10GB or more “flash” streaming traffic (only youtube) per day in the server infrastructure with a little bit more than 300 user’s. You can use it with any Terminal Server/VDI solution but please note: If using VMWare View, Microsoft RemoteFX, Citrix XenDesktop x.x / XenApp 7.5 or any other solution that support real USB redirection don’t setup USB Redirection for Human Interface Devices (HID) because in this case the Mouse and Keyboard can not be used outside the Session (…and with the local Browser).

You can also add other description’s to the created “manual” website, for example for Android press the home button and open the local Browser or similar.

If you have suggestions to improve this solution feel free to give me a mail or add a comment.

Cheers

Michael

Q&A Feature added to blog@cloud-client.info

Monday, May 26th, 2014

Hello Folks,

as replacement for the forum i’ve added a Q&A Feature to the blog, you need to be a registered user to ask or answer questions. The Q&A Feature can be accessed thru the Menu on the right side (Q&A @ cloud-client.info).

Cheers

Michael

Some changes at cloud-client.info

Saturday, May 24th, 2014

Hello Folks,

we’re close to the 1.500.000 visitors mark and after looking at some facts we are doing some changes.

cloud-client.info maintenance

cloud-client.info maintenance

1) The Forum will be discontinued since today, there will be something as alternative to ask questions in the future but it seams to be that the time for old school forum’s is gone and it doesn’t make sense to use resources on this in the future. Thanks to all registered users and i hope it’s not to bad for you! If you are a native german speaker check out www.igelfreun.de. All personal user information’s will be deleted without any backup to keep the registered user data save.

2) The blog is renamed from “Unofficial IGEL Thin Client Blog” to “blog@cloud-client.info” regarding the fact that other cloud solutions got a bigger impact to this blog in the last time, IGEL Thin and Zero Clients will be still a main focus. So no worry…

3) In the upcoming weeks a “small” cloud-client.info App will be available in the Windows App Store (Windows 8(.1) and RT), work is nearly done (~90%). The App will be for free with no Ads and no in-app sales crap. Stay tuned! The App will not be available for Android or IOS but if someone is intrested to port it just send me an email. 😉

4) UMS Online is still continued… 🙂

 

Cheers

Michael

 

Tip: How to add Broadcast Driver Architecture (BDA) support to Windows Server 2012 R2

Saturday, May 24th, 2014

Hello Folks,

for a project i needed to use a DVB (TV Card) device together with Windows Server 2012 R2.

One big issue here is that Server 2008/2012 (R2) do not support BDA devices out of the Box, so you can install the TV Card drivers, Direct X, and Codecs but you can never use this device thru the lack of the BDA support at all. I don’t know why Microsoft doesn’t offer the support as feature but who cares…

After some researches i found a very cool blog here: How to: Add BDA Hardware Support to Server 2012 R2.

I downloaded the package and after the Installation it works like a charm for me.

Great work, thanks for sharing this!

So if you also need to use a DVB-T/C card or USB device with Server 2012 R2 try it out and follow the instructions mentioned in the blog article.

 

Cheers

Michael

P.S.: Of course this solution is not supported by Microsoft… 🙂

Release: IGEL Universal Desktop W7 Firmware Version 3.07.300

Friday, May 23rd, 2014

IGEL Universal Desktop W7
=========================
Version 3.07.300
21. May 2014
Supported devices:
UD3-W7, UD5-W7, UD9-W7, UD9-W7 Touch, UD10-W7, UD10-W7 Touch
UD3-730 W7, UD3-740 W7, UD5-730 W7, UD5-740 W7, UD9-730 W7, UD9-731 W7

=================
Notes:
=================

=================
Drivers:
=================
– Realtek RTL8169 Version:7.43.321.2011
– VIA HD Audio VT1708B: 6.0.01.8700
– Prolific PL-2303 USBtoSerial: 2.0.2.8
– FTDI UsbToSerial: 2.02.04
– OmniKey Cardman 3×21: 1.2.15.0
– Intel HD Graphics: 9.17.10.2875
– Intel PCI Communication Controller : 8.0.0.1262
– Realtek 8168: 7.61.612.2012
– Intel AHCI : 11.2.0.1006
– Gemalto Minidriver for .NET Smart Card: 8.3.1.3
– VIA WLAN VT6656: 1.1.0.2
– Intel Centrino WLAN N-1000: 15.1.0.18
– VIA Chrome 9 VX855: 8.14.14.0141
– D-LINK DWA-131 Nano: 1085.7.0815.2009
– VIA Chrome9 VX900: 8.14.14.0181
– VIA Chrome9 VX900 for TC236: 8.14.14.0231
– Ralink RT309x/2860: 3.02.01.0
– Ralink WLAN RT357x 5.1.7.0
– Intel 945 Express: 8.15.10.1930
– eGalax xTouch: 5.11.0.9020
– RTL8168C: 7.018.0322.2010
– Realtek HD Audio: 2.63
=================
Applications:
=================
– .NET: 3.5 Sp1
– Microsoft RDP Client : 8
– Internet Explorer: 8
– Windows Media Player: 12
– Sun JAVA RE: 1.7 Update 17
– Ericom WebConnect: 5.6.1.1000
– Ericom PowerTerm: 9.2.0.0
– NXClient: 3.4.0.7
– Quest vWorkspace Client: 7.6
– Ekiga VOIP Client: 3.2.6
– SAP GUI JAVA for Windows: 7.10 R 7
– Tight VNC Server: 2.0.2
– Citrix Receiver: 3.4
– Thin Print: 8.6
– VMware Horizon View Client Version: 5.4.0 build-1219906
– Fabulatech USB for Remote Desktop: 3.1.3
– NCP Enterprise Client: 9.30
– Leostream Connect Client: 2.7.129.0
– Client for RedHat RHEV-D: 3.0-26
– USB Redirection for RedHat RHEV-D: 3.0-26
– Sumatra PDF Reader: 2.1.1
=================
New features:
=================
-[System]:
– Product identification for the UD3 (M330C) updated.
– Support for the new USB 3.0 module in the UD3 (M330C) added.
– Support for updated Omnikey Smartcardreader added.
=================
Bug fixes:
=================
-[System]:
– Wireless regulatory domain configuration is now working with
WLAN module Ralink RT 3572.
– Fixed bug: Rotation not possible with UD3 (M330)
(ISUS: 2014043010000651)

=================
Known Issues:
=================
-[System]:
– Xen Desktop Appliance Mode is not working.
-[FABULATECH]:
– Fabulatech USB for Remote Desktop is currently
not working with Citrix XenDesktop.
-[VmWare]:
– USB Redirection: Devices connected to a USB 3.0 Port will not
be redirected.

Tip: Detect a Nutanix Block thru Windows

Friday, May 23rd, 2014

Hello Folks,

i just setup a new Nutanix Block (NX-3050) in our Democenter..

Nutanix

 

If you don’t have a Mac OSX (thru Bonjour) available and you want to detect the block in the Network you can do this thru Windows quite simple.

Download and install the Bonjour Print Services from the Apple Site (Download), this will not detect the Nutanix Block at all but you can add the Bonjour Browser which is a simple to use freeware tool from here (Download). Install the Bonjour Browser too and execute it, the Browser will now detect all devices in the network using the Bonjour Administration Service and you can now detect the Nutanix Block incl. all IP’s and SNr for further configuration in a very simple way.

BonjourBrowser

 Now you can configure the block by following the manuals, quite easy.. 😉

nutanixclustersetupn

 

Cheers

Michael

Video: Surface 3 Pro.. Thinner, faster and greater. :-)

Wednesday, May 21st, 2014

Hello Folks,

the Surface Pro 3 looks to be my upcoming “Laptop” replacement. 🙂

[youtube:https://www.youtube.com/watch?v=1t7rSZT_77E]

 

Cheers

Michael

 

Tip: UD3 / UD5 Mini PCI Express Port and mSata Harddisk

Sunday, May 18th, 2014

Hello Folks,

in the last time i got some reports where user try to connect a mSATA SSD thru the Mini PCI Express Port coming with the IGEL UD3 / UD5 Dual Core Mainboard.

This will not work!!! The Mini PCI Express Port and the mSATA Port are looking equal but they are not.

See also Mini PCI Express Specs and Mini SATA Specs.

There are some Boards offering a “cross” compatible connector but the Port coming with the UD3 and UD5 is a pure Mini PCI Express Port and a mSATA Module will not work with it!

Cheers

Michael

cloud-client.info now offers Disqus.com comments

Friday, May 16th, 2014

Hello Folks,

you can now add comments to the blog thru disqus.com.

cloud-client.info maintenance

I hope you like the new feature.

 

Have Fun

Michael

P.S.: Please note that Ads or Spam thru this way will be handled like in the past.. 🙂

Tip: Fix missing “I want to download Adobe Flashplayer..” setting for LX/OS Profiles in UMS 4.06.100

Thursday, May 15th, 2014

Hello Folks,

maybe you also discovered the issue in the IGEL Universal Management Suite Version 4.06.100 if you create a new Profile for a LX/OS based Firmware and you want to deploy the Adobe Flashplayer.

Local at the Client you have a Setting “I want to download Adobe flashplayers and care about the licensing by myself” setting in the Session->Browser->Browser Plugins->Adobe Flash Player configuration but this setting is not available in the UMS if you create or edit a Profile. So you can not create a working configuration thru the regular UMS Profile GUI (see picture below).

umsflashmissing

You can fix this quite simple, just configure all required settings to deploy the Adobe Flashplayer in the regular GUI and now browse to System->Registry->browser_plugin->flashplayer and enable the download_flashplayer setting (see picture below).

umsflashmissingfix

Now you can save the profile and assign it to the IGEL devices, the Flash Player deployment should work now.

Cheers

Michael

 

 

php issue with www.cloud-client.info is fixed

Thursday, May 15th, 2014

Hello Folks,

i got a php issue with the www.cloud-client.info site, this issue is fixed now. Sorry!

cloud-client.info maintenance

cloud-client.info maintenance

Cheers

Michael

Announcing the cloud-client.info That sucks! Award

Tuesday, May 13th, 2014

Hello Folks,

iam happy to announce a new award:

That sucks! Award

That sucks! Award

The award will be given for any IT Product, Service Provider or Vendor that is noticeable for one or more of the following criteria:

– Bad product design
– Incredible software/hardware bugs
– Useless/not working features
– Useless User limitations
– Announcing wrong product specifications
– Providing bad customer/user service incl. product updates
– Fraud

The awarded Vendor will be informed thru email and of course they can use the award logo on the company/product website or marketing material if they want. The award will only given to vendors working “with intent”, means it will not given for a simple bug or that a support hotline is not available and/or can not be reached for a few hours. It must be a bigger issue and of course you can suggest products or vendors, please provide a detailed description “Why” the award should be given.

Any award will come with a detailed and reproducible description why the award has been given and the vendor can also respond with a public statement which will be published thru this blog if allowed from the “honoree”. There will be max. 12 Award’s per year = max. 1 per month, the price giving location is Zuerich, Switzerland.

 

Have fun!

Michael

P.S.: The award has nothing to do with IGEL, reason is the increddible amount of  products related to/for cloud-computing and the IT world which has been released in the last year’s and can not be fully used or where vendors provide a not working solution.

Migrated with UDC2: HP ProBook 6530b

Tuesday, May 13th, 2014

Hello Folks,

today i migrated a HP ProBook 6530b Intel i7 based Laptop.

hpprobook6530b

Here are the Test results with the IGEL Universal Desktop OS Version 5.03.100:

Inbuild Touchpad: Working
Inbuild Ethernet 10/100/1000: Working, Intel 82577LM
Inbuild Audio Card: Working, Intel 3400 HD chipset
Inbuild WiFi: Working, Intel Centrino N 6200
Inbuild SD/MMC Card Reader: Working
Inbuild GFX Chipset: Working, Intel Arrandale
Inbuild Keyboard: Working incl. Mouse key
Inbuild Webcam: Working, HP Webcam 2MP
Inbuild USB Ports: Working, Intel 3400 USB2 Enhanced Host Controller
Inbuild SATA Controller incl. external ESATA Port: Working, Intel 3400 Series SATA controller
Inbuild PCI-Express Slot: Working

Cheers
Michael

Tip: Using ICA Sessions with IGEL Linux 5.03.100 and XenApp/XenDesktop 7.x

Thursday, May 8th, 2014

Hi Folks,

in the release notes for the IGEL Firmware 5.03.100 IGEL mentioned that “single” ICA session are not possible with the Citrix Receiver 12/13 for Linux and XenDesktop/XenApp 7.x:

"- ICA sessions created on the IGEL device only work
with Citrix XenApp servers up to version 6.5."

This statement is not really true because in Citrix Terms it means only ICA Sessions based on the Citrix IMA Service (XenDesktop or XenApp 7.5 is using FMA), it is not right for sessions based on a Server IP Address or Hostname where the IMA service is not required/used.

This is also mentioned in the Citrix Edocs in the XenDesktop/XenApp 7.5 Feature description:

  • Custom ICA files — Custom ICA files were used to enable direct connection from user devices (with the ICA file) to a specific machine. In this release, this feature is disabled by default, but can be enabled for normal usage using a local group or can be used in high-availability mode if the Controller becomes unavailable. 

If configured right it can be also used as small HA “solution” for smaller installations with only one XenDesktop/XenApp controller server, please refer also to:  How to enable simple XenDesktop/XenApp 7.5 HA Mode

To enable the feature in general follow this article: Enable direct ICA connections for XD/XA 7.x

In the ICA Session configuration in the UMS Profile/local Thin Client configuration use only the Server IP/Hostname for the connection (see picture below), if you have more than one Server you need to create seperate profiles for each server and assign the profiles to different clients. Of course this is a “manual” work but you are still able to use the ICA sessions if required, a Citrix Storefront or Webinterface Server is not required in this case. If HA mode is enabled like mentioned also a XenDesktop/XenApp 7.x controller can be offline for a short time period (for example maintenance).

 

icssession

Disadvantage:

1) It will only work in LAN environments.
2) No Load Balancing, the clients will always connect to “one” server or you have to configure “several” ICA sessions per Client.
3) No “roaming” sessions if the User use several Thin Clients and these Clients are connecting to different server.
4) Not really usefull for large environments.

It will work with Citrix Receiver 12 and 13 for Linux but also older Receiver Versions (any OS) should work with it.

Cheers

Michael