Synergy - Send CTRL+ALT+DEL to Client
I’m mostly posting this here for ease of finding it in the future. It seems like most people prefer to disable CTRL+ALT+DEL instead of actually allowing the Synergy service to initiate the Secure Attention Sequence (aka: CTRL+ALT+DEL).
Since the location of the Policy setting changes from Win7 to Win8, I’m going to tell you how to search/filter for it. From the client, follow these steps:
- Lauch Local Group Policy Editor
- Browse to: Computer Configuration > Administrative Templates > All Settings
- Click Action > Filter Options, from the Main Menu.
- Check the box to Enable Keyword Filters.
- Filter for the word: Ease
- Click: OK
The only (as of the time of this writing) policy that should show up is Disable or enable software Secure Attention Sequence. Edit the policy and ensure the settings are:
- Options: Services
(Note: Services and Ease of Access applications will also work.)
Once you click Apply, the settings will take affect. Press CTRL+ALT+PAUSE/BREAK to initiate the Secure Attention Sequence on the client.
Salt Stack - salt-grains-environment
During my adventures with Salt Stack, I was having issues wrapping my head around how I was going to control what environment my dev machines were in. I even thought that pillar[environment] returning None was a bug. Turns out, I just needed to think more about what process would work in my environment.
GPO - Not Applying User Policy
We spent the day working on an issue where our User Policy wasn’t being applied to the User AD Object logging into a computer. We confirmed the usual steps:
- User AD Object is in the OU where the GPO is applied.
- GPO is enabled.
- Security Filtering is not filtering out the User AD Object.
The policy was simply not showing up on the computer (would not display with `gpresult /r`). After some more digging, we found the issue:
Salt Stack - salt-osx-grains
Additionally, I decided that it would be useful to store the computer’s Company Asset Number in nvram, and make that available in grains.
Adventures with Salt Stack
I have been in IT for over 15 years. most of that tenure has been managing Windows - mostly in the Desktop/Laptop realm. This means that I’ve got a lot of experience with AD, GPO, SCCM, scripting, etc.
Recently, I took over the management of Apple Desktops/Laptops for the organization that I work for. Before now, Apples were the outlier — just give the user admin rights and good luck. Now that it’s my purview, I’m opting for more centralized management technique. Something to, as closely as possible, mimic GPO (for managing settings) and SCCM (for managing software) for Windows.