This was a bit of a pain so I set about looking to remove this via Group Policy.

The option I settle on was documented here, but basically involved adding the following settings:

• Create a new GPO
• Navigate to Computer Configuration, Policies, Administrative Templates, Printers, Point and Print Restrictions and set it to Enabled.

Then change the following settings:

• Users can only point and print to these servers > Unticked (Disabled)
• Users can only point and print to machines in their forest > Enabled
• When installing drivers for a new connection > Do not show warning or elevation prompt
• When updating drivers for an existing connection > Do not show warning or elevation prompt

You now shouldn’t see the warning message.

It turns out that it was, the fix is pretty simple though (original article found here)

Open up the ASDM and navigate to:

• Configuration
• Firewall
• Access Rules
• Add
• Inside Interface
• Allow
• Source = Any
• Destination = Any
• Service = GRE
• OK
• Apply

Then, add another rule and select TCP and then select ‘More Options’. Change the Source/Service to TCP/PPTP and click Ok.

Select service policy rules and then select Inspection_Default, Edit, Rule Action and tick the box next to PPTP.

Save this config and you should be away. Happy days.

The fix can be found here and is pretty straight forward.

Add the account NT_AUTHORITY\System to have sysadmin priviledges within SSMS.

Once added you should receive no more DPM errors.

I created a desktop pool for some Windows 7 and Windows 8 VM’s and set them to return to the original settings when the user logs off. Behind the scenes, all this does is look for a snapshot that starts with

“RDV_ROLLBACK”

If it finds this, it applies it, and bingo, your VM’s back to it’s original state.

However, when I tried to create a pool of Server 2008 R2 machines, it complained that this could only be used for Windows 7 and Windows 8. To get around this, I manually created 2 Server 2008 R2 VM’s and created snapshots called “RDV_ROLLBACK” for each of these. I then created a managed pool of machines and added these 2 VM’s into that.

It works perfectly and I now also have some Server 2012 temporary machines that can be played with and will reset when the user logs off.

It basically will save the virtual machine if it has been inactive for the specified number of minutes.

Seems pretty obvious now, a bot more documentation from MS on this wouldn’t have gone a miss though.

“RPC Server not accessible”

To resolve this, in TMG add a new rule for TMG Access from the monitoring server. Select it and go to “Configure RPC Protocol” You will then see the following screen:

Enable this and you should then be able to connect from PRTG.

Turns out that it was and it pretty simple to fix the best guide that I found is here, but to simplify things, from an admin command prompt, type:

netsh winhttp set proxy localhost:8080

Happy days.

Turns out that the HP Device Manager sysprep’s the image when it’s creating it and the c:\windows\system32\sysprep_unattend.xml file was set for the US defaults.

So, by changing this file before the clone image is created, all the settings would then be correct.

For reference, my new think client sysprep_unattend.xml file is:

<code><?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:ew="urn:schemas-microsoft-com:embedded.unattend.internal.v1">
    <servicing>
        <package action="configure">
            <assemblyIdentity name="Microsoft-Windows-EmbeddedEdition" version="6.1.7600.16385" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" />
            <ew:packageInfo releaseType="Product" customInfoVersion="1.0" />
        </package>
    </servicing>
    <settings pass="generalize">
        <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
            <DoNotCleanUpNonPresentDevices>true</DoNotCleanUpNonPresentDevices>
        </component>
        <component name="Microsoft-Windows-Security-SPP" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <SkipRearm>1</SkipRearm>
        </component>
    </settings>
    <settings pass="specialize">
        <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <Home_Page>http://internal-vdi-gateway-address</Home_Page>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <ComputerName>*</ComputerName>
            <RegisteredOwner>HP</RegisteredOwner>
            <CopyProfile>true</CopyProfile>
        </component>
        <component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <RunSynchronous>
                <RunSynchronousCommand wcm:action="add">
                    <Order>1</Order>
                    <Path>net user administrator /active:yes</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Order>2</Order>
                    <Path>net user Administrateur /active:yes</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Order>3</Order>
                    <Path>net user Administrador /active:yes</Path>
                </RunSynchronousCommand>
            </RunSynchronous>
        </component>
    </settings>
    <settings pass="oobeSystem">
        <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <InputLocale>en-GB</InputLocale>
            <SystemLocale>en-GB</SystemLocale>
            <UILanguage>en-GB</UILanguage>
            <UserLocale>en-GB</UserLocale>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OOBE>
                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
                <HideEULAPage>true</HideEULAPage>
                <NetworkLocation>Work</NetworkLocation>
                <ProtectYourPC>3</ProtectYourPC>
            </OOBE>
            <UserAccounts>
                <LocalAccounts>
                    <LocalAccount wcm:action="add">
                        <Password>
                            <Value>tempaccount</Value>
                            <PlainText>true</PlainText>
                        </Password>
                        <Name>tempaccount</Name>
                        <DisplayName>tempaccount</DisplayName>
                        <Group>Users</Group>
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
            <TimeZone>GMT Standard Time</TimeZone>
        </component>
        <component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <ExtendOSPartition>
                <Extend>true</Extend>
            </ExtendOSPartition>
        </component>
    </settings>
    <ew:answerFileInfo distributionSharePath="C:\Program Files (x86)\Windows Embedded Standard 2011\DS" footprint="576716800" ecoreFootprint="576716800" />
</unattend></code>

For reference:

• control desk.cpl,1,4
• %windir%\System32\control.exe desk.cpl,1,4

The job is very similar, so I won’t go into too much detail.

Jack up the car and take off the wheel.

Look to the back of the caliper and you’ll want to loosen both bolts using a 12mm socket and remove the bottom bolt completely. You will need to use a 21mm spanner to hold the nuts in place.

Then you can easily pivot the calliper upwards and use a bungee cord or similar to hold it place.

The pads themselves can be popped out, use a flat head screwdriver if required.

If you can’t see the wear mark indicator (the groove down the middle) you probably needed to change them. I forgot to photograph under the bonnet, but take off the brake reservoir cap and place newspaper around it. In the next step when we squeeze the piston back, the brake level will rise and this will catch anything that spills over.There are specialist tools for getting the piston back, but I used a G clamp and one of the old brake pads. By slowing turning the G clamp the piston will return level with the calliper allowing you to then return it to it’s correct position.
You can then pop in the new pads, and put a bit of copper grease on there where the calliper makes contact. Be careful with this stuff as it can easily get everywhere, and you don’t want it on your disks.

Slot the calliper back and tighten the bolts. Do the same on the other side and then replace the reservoir cap, pump the brake pedal a few times and go on a slow drive, lightly testing the brakes until you are happy that they are correct. Easy Peasy.