Posts

Showing posts from January, 2010

Redesigning OU structure in AD - best implementation technique?

Image
hi, my question regarding implementation technique rather design. have redesigned new ou structure companies ad on paper , required make changes on infrastructure itself. the current set follows: 2 x physical dc servers, dc1 , dc2 (replicating) windows server 2008 r2 no test vlan of yet (planning implemented asap) as per above, plan far to: 1. create test vlan 2. create dc3 virtual machine , put in vlan 3. import objects minus ou folders dc1/2 dc3 via admt 4. organise objects new ou structure. 5. test in development vlan 6. if working ok, add production vlan , enable replication other dc's transfer changes. i know... will work? there better way? , need mindful of?  thanks! i not convinced approach taking friend. if think in place ou redesign, computers affected, same thing happens if migrate them new domain because lose relationship old gpos. if want build clean , fresh environment different story.  but mentioned earlier in place re

KB3159706 with manual steps followed gives System.IndexOutOfRangeException -- Index was outside the bounds of the array

we have sccm 2012 r2 wsus enabled on windows 2012. susdb wid migrated remote sql 2012 cluster. after applying kb3159706 , following manual steps wsus cannot start. opening console error: the wsus administration console has encountered unexpected error. may transient error; try restarting administration console. if error persists, try removing persisted preferences console deleting wsus file under %appdata%\microsoft\mmc\. system.indexoutofrangeexception -- index outside bounds of array. source microsoft.updateservices.baseapi stack trace:    @ microsoft.updateservices.internal.baseapi.soapexceptionprocessor.deserializeandthrow(soapexception soapexception)    @ microsoft.updateservices.internal.databaseaccess.admindataaccessproxy.executespgetconfiguration()    @ microsoft.updateservices.internal.baseapi.updateserverconfiguration.load()    @ microsoft.updateservices.internal.classfactory.createwellknowntype(type type, object[] args)    @ microsoft.updateservice

Windows Server 2012 R2: Stop error 0x133 caused by hal.dll

this caused following module: hal.dll  (hal!halptimerclockipiroutine+0x15) bugcheck code: 0x133 (0x0, 0x501, 0x500, 0x0) error: dpc watchdog violation file path: c:\windows\system32\hal.dll product: microsoft windows operating system company: microsoft corporation description: hardware abstraction layer dll bug check description: dpc watchdog detected prolonged run time @ irql of dispatch_level or above. ************* we're getting on multiple servers @ softlayer. thought may solution (https://support.microsoft.com/en-us/kb/2877237) that's windows server 2012, , won't install on windows server 2012 r2. is there hotfix windows server 2012 r2? or other solutions? looks goserver.exe may culprit.       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, , confers no rights.

Port was prevented from using MAC Address because it is pinned to port SCVMM

observation : issue occurring vms configured in nlb . 1 vm running on hyper v 2 , other in hyper v 3. error coming on these 2 hyper v nodes   action taken : destroy nlb cluster delete nlb network adapters both vms add new network adapter , recreated nlb   still problem coming…………quick response highly aprreciated. i think need more information helpful. as follow, have 2 vms.  these vms participate in nlb cluster.  these vms on different hypervisors (one 2008 r2 sp1, other win8). you error mac pinned named scvmm. are using scvmm manage hyper-v servers? have tried both vms on same hypervisor (to id problem hypervisor)? have made changes within hyper-v manager?  have selected enable mac address spoofing option on virtual nics of both vms? (implemented nlb) are running nic teaming software or driers? have tried vms 1 vnic?  (i cannot tell if have 1 or 2 each vm or if referring nlb 'virtual' nic) etc. brian ehlert http://itproctology.blogspot

DocProperty will not insert correctly

i using word 2010 autofill option. have few document property fields set document. there 1 field not set. set property in advanced properties-custom box along other properties have specified. in template have inserted of properties in several places template "quick parts"-"field"-"docproperty". there 1 field "projectnum" value "project_number" not stay. after insert can click outside it, go , right click it, , in pop has edit-field option display property. go work on part of doc , come to  "project_number", right click , edit-field option not shown! @ point "project_number" field plain text! other property fields work fine. i've saved new document template , have same problem. tried renaming field , it's value well. thanks i'm not sure doing or happening, but  a. if click alt-f9, property field show looking this: { docproperty projectnum \*mergeformat } ? (that's "field code

how to pass a powershell script file to a job created using "start-job" cmdlet

i have script file takes 2 machine names, port number , few other parameters. script runs ntttcp tool between 2 machines. want multiple combinations of machines run in parallel . created a job within loop passing script file,machine pair as parameters can have more 1 machine pair running in parallel. my code snippet looks this: foreach($exclusivemachinepairkey in $htbl_exclusivemachinepairs.keys)     {         $jobname = $exclusivemachinepairkey+"and"+$htbl_exclusivemachinepairs[$exclusivemachinepairkey]         $alljobnames=$alljobnames+$jobname         $jobobj=start-job -filepath d:\powersh\functions\ntttcpstarterscript.ps1 -argumentlist $exclusivemachinepairkey $htbl_exclusivemachinepairs[$exclusivemachinepairkey] $inputport $inputthreadcount $filename -name $jobname          } when running in debug mode, on passing "start-job" line, see error message: [dbg]>>> stopped at: if ($_.fullyqualifiederrorid -ne "nativecommanderrormess

WSUS Version: 3.1.6001.65-Clients not showing up in WSUS console

 hello all, i installed wsus on new server. used whatever sql version comes 3.0 , did installation per microsoft documentation. have setup gpo, set wsus preliminary folder , specified group of 10 computers need show in console. have run job created delete sid (since our computers imaged) , reset unique sid wsus in registry.  clients not showing on console.  out of 10 there 4 showing.  here settings of gpo: policy setting allow automatic updates immediate installation enabled automatic updates detection frequency enabled check updates @ following interval (hours): 12 policy setting configure automatic updates enabled configure automatic updating: 4 - auto download , schedule install the following settings required and applicable if 4 selected. scheduled install day: 4 - every wednesday scheduled install time: 03:00 policy setting do not adjust default option 'install updates , shut down' in shut down windows dialog box enabled do not display 'install updates , shut down'

Is command 'fsutil 8dot3name set 2' performed on cluster node or virtual server or both

we receiving errors in our 3 node cluster group (physical disk resource '%1' not allow disabling short name generation. may cause application compatibility issues. please use 'fsutil 8dot3name set 2' allow disabling short name generation , offline/online resource." i have read tech article @ http://technet.microsoft.com/en-us/library/ee830319(ws.10).aspx  but wasn't clear if command needs run on cluster nodes or virtual machines or both. thx in advance provide. apply nodes, cluster , hyper-v services unaware of happens inside vms regards, samir farhat infrastructure consultant Windows Server  >  High Availability (Clustering)

WinRS over HTTPS and the Windows Certificate Authority

hi guys, under windows 2008 enterprise edition, possible enable certificate authority role sign certificate can use winrs on https? if so, give me step step guide? ca role doesn’t seem work way used to. thanks. nick   hello,   to configure winrm on https may refer to:   configuring winrm use https http://technet2.microsoft.com/windowsserver/en/library/a733d4e9-923a-4b21-addc-057d947c8fa51033.mspx   hope helps.   Windows Server  >  Management

Upgrade Server 2008 R2 STD to Server R2 EE with Exchange 2010 installed and functional

i test out exchange dag feature of exchange 2010. unfortunately, when installed exchange ee 2010, installed on member server, windows 2008 r2 standard. reading, dag feature requires windows 2008 r2 ee. have run test of doing in-place upgrade windows 2008 r2 standard windows 2008 r2 ee , upgrade appears have been successful , simple.   my question : can tell me or if not know, can inquire on behalf – can same in-place upgrade windows 2008 standard r2 windows 2008 ee r2 exchange 2010 ee installed , operational, , certificates installed , operational? smooth in-place upgrade test or left mess , no operational exchange?   thank you! dave hi dave,   it seems not supported change windows server edition after exchange server installed. however, recommend discussing in our exchange server 2010 forum confirmation.   http://social.technet.microsoft.com/forums/en/exchange2010/threads   tim quan – msft technet subscriber support in forum if have feedback o

Counters disappeared on Windows Server 2008 R2 Enterprise

Image
hello friends  i want create datacollector using several counters in server.  when open performance monitor application appear following message: exists way recreate counters modifying regedit or that? please need add counters disappeared. thanks on advice greetings hi, we have rebuild performance counters lodctr elevated command prompt. for more detailed information, refer to: windows performance monitor: "unable add these counters" http://social.technet.microsoft.com/wiki/contents/articles/19374.windows-performance-monitor-unable-to-add-these-counters.aspx regards. please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com Windows Server  >  Management

Change Hyper-V Server 2008 Administrator password

Image
hi! have machine microsoft hyper-v server 2008 running. put administrator password when installed system, now... how can change it? i access hyper-v machine through remote desktop, , can't see option change administrator password in auto launched menu, option add local admin accounts. machine not in domain. can command line? i tried using mmc computer, , selecting "connect other server", gives me error " winrm client cannot process request " thanks hi, the old password change command should still available in hyper-v server. try following command: net user user_name   new_password when so, password changes without prompting again. command enables change passwords in batch file. for more information please refer following ms articles: how change user password @ command prompt http://support.microsoft.com/kb/149427 how reset local administrator password on multiple computers remotely http://social.technet.microsoft.com/wiki/con

Tivoli Directory Server migration to Active Directory 2008 R2 AD DS

hi, i looking forward migration users ibm's tivoli directory server windows server 2008 r2 active directory domain services. steps? guides or links or hints help. thanks, hello, please contact ibm technical support assistance or ask in forums.   this posting provided "as is" no warranties or guarantees , , confers no rights. microsoft student partner 2010 / 2011 microsoft certified professional microsoft certified systems administrator: security microsoft certified systems engineer: security microsoft certified technology specialist: windows server 2008 active directory, configuration microsoft certified technology specialist: windows server 2008 network infrastructure, configuration microsoft certified technology specialist: windows server 2008 applications infrastructure, configuration microsoft certified technology specialist: windows 7, configuring microsoft certified professional: enterprise administrator microsof

How can I give permissions to the user "Network Service" so it can access the local machine root certificate storage?

hello, i trying give permissions user "network service" can access local machine root certificate storage, not sure if doing right. in registry editor in "hkey_local_machine ->software -> microsoft -> systemcertificates" gave permissions user, don't know if right way.  any idea given helpful. thanks, ari. Windows Server  >  Security

TS web access - RemoteApp Disconnected serv 2008

This summary is not available. Please click here to view the post.

RDS Server 2012 Compatibility mode network issue

i have application has needs work correctly. application doesn't support ie 10 , needs ie displays information. running on server 2012 rds because found .net 4.0 on 2008r2 rds not capable of supporting application in rds environment. have repeated crashes application. runs solid under server 2012 rds. when switch compatibility mode xp sp3 loose all network paths for data , not have network connection @ all. interesting thing when use administrator login not have issue loosing network connectivity. have issue when switch other users. run administrator not make difference. have research other issues on 2008r2 rds extensively before going direction. have determined .net 4.0 add on not robust enough rds , application. 2012 server works exception of compatibility mode bug. any insights or appreciated.   hi, you can configure server 2008r2 rdsh server run ie 9 in server 2012 configuration.  please see following link :  http://blog.concurrency.com/featured-post/rds8-add

Files repeately go missing from a server share. Can I find out who/what is responsible?

i have 2003 server site site vpn's xp clients. xp clients have server share on them users store files , data into. every files , data have been updated go missing, @ first put down user error , recovered files shadow copies, 5 time in month now, , data has been lost wasn't shadow copied or backed-up. i tried turn on file auditing share event fire (un)successful deleteions, didn't seem generate event in logs. (not sure have got set right honest.) so wondering how might able track down user or service, machine, , @ time removing these files? users swear "it wasn't me!", , maybe right, other idea had machine might have share sync'd via offline files , when syncs replaces server copy local copy, have no idea how track down. does 1 have ideas out there?   regards hi andrew, here article provided detailed steps setup file auditing: how audit file / directory delete operations on windows system using security auditing http://www.monitorwar

Auditoria de acesso a objetos não funciona

estou com o seguinte problema. tenho uma rede com 3 domínios. vou chamá-los de x, y  e z. tenho um file server que está no domínio x e ultimamente tenho tido muitos problemas com usuários apagando pastas e "ninguém" sabe quem foi. tentei então implementar auditoria de acesso objetos, mas até agora não funcionou. o que já tentei. ativei auditoria de acesso objetos no domínio x para alguns grupos, fui numa pasta file server (que também está no domínio x) e ativei auditoria. criei e apaguei arquivos dentro dela e nenhum log foi gerado, nem no file server, nem no dominio x. tentei ativar auditoria para usuários dos domínios y e z que também acessam o file server que está no domínio x e também não funcionou. alguém poderia me auxiliar? desde já agradeço.abçs hi, explain forum provided english version support only. it’s suggested submit new post in community product language. thanks. this posting provided "as is" no warranties, , confers no rights.

Getting RPC_S_SERVER_UNAVAILAIBLE WHILE DOING WEBENROLLMENT

Image
hi all, i getting below error while doing web enrollment . can suggest suggest pointers fix it. puneet singh assuming web server (/certsrv) site on separate server, ensure that: 1) can run certutil -config cadnsname\calogicalname -ping (tests if can make rpc connection certsrv server ca 2) verify have delegation correctly setup (dns name used connect app server registered spn account used defaultapppool 3) have configured delegation correctly on account's delegation tab use either kerberos or authentication protocol ca computer accounts host , rpcss services brian Windows Server  >  Security

Exporting print logs with username, printer, copies printed etc.

hi, we've enabled logging on our windows 2008 r2 print server (see link below).  windows 2008 r2, logs appear under event viewer > applications , services logs > microsoft > windows > printservices > operational log.  what's best/simplest way export list showing date, username, printer, , # of copies printed ?  otherwise, i'll have bulk export , pull out need using perl http://social.technet.microsoft.com/wiki/contents/articles/1466.windows-server-2008-r2-and-print-logging.aspx thanks this script.  need make changes grab printer stats , 1 geared toward user data http://gallery.technet.microsoft.com/scriptcenter/script-to-generate-print-84bdcf69 for printer specific statistics can use splinfo.exe available in windows resource kit.  counters reset when spooler stopped , started.  data listed total jobs printed.  the event log need go correlated users printers.  splinfo \\printserver /v http://www.microsoft.com/en-au/download/details.asp

Print Drivers Continually Need To Be Reinstalled in Terminal Server Environment

Image
every morning when our users come in, have printers not mapping.  i log in verify driver installed , have to continually log in admin account , manually re-install the driver.  this, obvious reasons, huge problem.  i running citrix xenapp 6.0 environment on win2k8 r2.  i know isn't citrix issue, because happens on rdp session well.  any information appreciated. hi, thanks post. what clients trying mapping printer? client support rd/ts easy print? using easy print driver in scenario? best regards, aiden if have feedback on our support, please click here aiden cao technet community support Windows Server  >  Remote Desktop Services (Terminal Services)

2008 DC refusing to participate in IPSEC (NAP)

hi all. have set nap ipsec enforcement network (lab environment). wanted add domain controller secure zone ensure things worked ok gets lots of audit failures in server01's security log main mode, follows. ipsec main mode negotiation failed. local endpoint:     local principal name:    -     network address:        keying module port:    500 remote endpoint:     principal name:        -     network address:        keying module port:    500 additional information:     keying module name:    authip     authentication method:    unknown authentication     role:            responder     impersonation state:    not enabled     main mode filter id:    69824 failure information:     failure point:        local computer     failure reason:        received invalid authentication offers.     state:            no state     initiator cookie:        ce57abef24a21be6     responder cookie:    5922e54a3539db49 server01: forest root dc, ca enterprise, 2008-32bit, 5 fsm

Windows Server 2012 WSUS, 2K8 virtual failed to update, reverting and 2012 did not find any new update.

i have version: 6.2.9200.16384. there no update wsus virtual server 2k8 32 or 64 failed to update. there 107 updates reverting. if set update direct microsoft, there no problem. virtual servers 2012 have problem. there no update if connect wsus. if check update direct microsoft, there 50 updates. 1. perhaps set gpo wrongly (you have not given here any details on configuration unfortunately.) 2. try simplify setting disabling firewall temporarily. 3. aware wsus slow "machine" , should wait time (not intervals set proces ply role) 4. try reset , force gpo update. 5. log files (wiindowsupdate.log etc.) rgds milos Windows Server  >  WSUS

KMS: KMS status meaning

Image
hi, i checked our kms server , got these message, mean? hi, it shows license state of systems have contacted kms host since activated. refer the  kms host section image: how troubleshoot key management service (kms) http://technet.microsoft.com/en-us/library/ee939272.aspx regards, rafic if found post helpful, please give "helpful" vote. if answered question, remember mark "answer". posting provided "as is" no warranties , confers no rights! test suggestion in test environment before implementing! Windows Server  >  Windows Server General Forum

Active Directory Web Services Service will not start

active directory web services service not start on 2008 r2 server exchange 2010. system specs:  dell poweredge t310 dual xeon 2.67ghz x3450 24gb ddr3 ram perc h700/1gb bbwc 8 disks/ 3 volumes server 2008r2 sp1 rollup 3 exchange 2010 sp1 rollup 7 server has been in production since jan. 2012 no issues. when attempting start service manually, presented with the error "windows not start active directory web services service on local computer.    error:1053: service did not respond start or control request in timely fashion." upon inspection of error log, see following errors after start attempt: system: eventid 7009 timeout reached (90000 milliseconds) while waiting active directory web services service connect. eventid 7000 active directory web services service failed start due following error: service did not respond start or control request in timely fashion. there no log entries in application log, , there hasn’t been entry i

Microsoft VHD HBA - Driver missing

hi forum, i'm struckling hyper-v server. for reason setup new vhd's because of missing driver (i presume). i've tried removing role , adding again, device "microsoft vhd hba" keeps showing in device manager driver missing. i've searched low , high online, no luck. please me i'm stuck , can't continue rest of enrollment. //david  hi david, i have seen similar issue on win8.1 hyper-v host in case there more 1 driver missing , solved "inplace-upgrade" using win8.1 os media (it can remain os configurations ) . http://support.microsoft.com/kb/2255099 you can give try . best regards, elton ji please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  > 

When creating a duplicate lab environment to production what is the file I need to import from a production domain controller? Is this the IMF file??

when creating a recreate windows test environment production file need import?  imf file?? so need to create new lab domain environment mimics production domain environment. i told can export file production domain controller import new lab environment domain controller. and told imf file??--however cannot find on file type?   dsk hi, i not sure file. however, below articles provide steps test lab environment production ad. http://blogs.dirteam.com/blogs/paulbergson/archive/2012/07/03/create-a-test-domain-old-style.aspx http://www.msresource.net/paulw/creating_an_active_directory_test_lab_environment_from_your_production_ad_forest.html best regards, abhijit waikar. mcsa | mcsa:messaging | mcitp:sa | mcc:2012 blog: http://abhijitw.wordpress.com disclaimer: posting provided "as is" no warranties or guarantees , confers no rights. Windows Server

how can I change the default route IP (NOT the interface) to one of the other IP that is bind to the same interface in win2008 Server

Image
here win2008 server routing table: c:\users\xiaoluz>route print =========================================================================== interface list  12 ...00 50 56 b5 71 07 ...... intel(r) pro/1000 mt network connection #2   1 ........................... software loopback interface 1  13 ...00 00 00 00 00 00 00 e0  isatap.{10c5015f-3ff7-4a29-9dfa-05c9806f3c90}  11 ...02 00 54 55 4e 01 ...... teredo tunneling pseudo-interface  14 ...00 00 00 00 00 00 00 e0  6to4 adapter =========================================================================== ipv4 route table =========================================================================== active routes: network destination        netmask          gateway       interface  metric           0.0.0.0          0.0.0.0   203.23.176.193   203.23.176.206    266         127.0.0.0        255.0.0.0         on-link         127.0.0.1    306         127.0.0.1  255.255.255.255         on-link         127.0

Is it possible to control the number of rows in a text form field?

i trying create narrow text form field in word 1 allows number of rows i.e. tall narrow form field. when go properties can change maximum length seems control width of form field , doesn't allow user write text on next or subsequent rows.  is there way of doing that? if appears in wrong forum because none of others appeared relevant.   thanks       the usual way set form table fixed row heights. doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions

Undefined network problem on win 2008 r2 64bit

can body me problem i have server dell r 210 , work domian controller windows server 2008 r2 64 bit the problem when restart server reason network adabter start undefined network   have disable , enable network card can see domain name cannot fix can body help regards    hi, please post unedited ipconfig /all forum, , make sure have configured 1 default gateway in network connection. brent please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. ” Windows Server  >  Platform Networking

The program did not start on the remote computer. For assistance, contact your system administrator RDS 2012

the issue when user tries open program, , it's mapped network drive t:\fixedast\app.exe tittle error message. if log in admin, opens fine. ideas? user can remote desktop rds server , open application correctly. i'm bit lost. ideas? hi, have enable drive redirection? can clear checkbox under connection –> redirection in rdsh configuration. can disable option “ do not allow drive redirection ” under below mention path. disabling drive able redirect path.  please refer this article more detail. computer configuration\policies\administrative templates\windows components\remote desktop services\remote desktop session host\device , resource redirection hope helps! regards. Windows Server  >  Remote Desktop Services (Terminal Services)

Delete only a portion of an object

i new powershell and trying feet wet. i'm trying convert specific objects from .lst file .csv. of objects want convert begin "description=" , omit these words prior conversion. here script far: get-content i:\xxxxx\xxxxxxx\test.lst | select-object -index 42, 46, 50, 58, 230, 414 | set-content i:\xxxxx\xxxxxxx\test.csv output excel file , lines display: description=adobe description=office2013 description=rhapsody ...etc,etc,etc cannot alter .lst file so need script copy portions of data. thing haven't been able find is how omit "description=". hope clear enough help. let me know if need else. get-content i:\xxxxx\xxxxxxx\test.lst | select-object -index 42, 46, 50, 58, 230, 414 | foreach {$_ -replace 'description='} output rhapsody adobe office2013 Windows Server

is it best practice to use account lockout policy

windows server 2008 r2 (will moving 2012 r2) since implementing account lockout policy 2 days ago, we've been bombarded calls unlock accounts. , after few minutes, same users accounts locked again. my question, since using strong password policy (8 chars min, 90 days max expire), @ day , age still best practice rely on account lockout policy? keeping in mind above flood of calls. since implementing account lockout policy 2 days ago, we've been bombarded calls unlock accounts. , after few minutes, same users accounts locked again. my question, since using strong password policy (8 chars min, 90 days max expire), @ day , age still best practice rely on account lockout policy? keeping in mind above flood of calls. account lockout considered un-necessary if have implemented strong password complexity/history policy. there many discussions on topic of password/passphrase "strength", , it's important consider various factors involved, and, how affect org

Domain Controller - Continuous Netlogon error id 5774 an

i installed ad couple of days ago on windows 2008 r2 sp1. after installing lync server , join ad noticed loses connection time time. also resolving hostnames takes 2 seconds time out , resolves!  i have had same ad installed on machine , needed to re-install everything scratch since had issues lync! right after launched dcpromo , installed dc , dns , after restart started receiving errors , still moment im not sure why? any appreciated. ========= the dynamic registration of dns record '_ldap._tcp.default-first-site-name._sites.domaindnszones.mydomain.local. 600 in srv 0 100 389 demoad.mydomain.local.' failed on following dns server:   dns server ip address: 216.92.3.83  returned response code (rcode): 9  returned status code: 9009   computers , users locate domain controller, record must registered in dns.   user action   determine might have caused failure, resolve problem, , initiate registration of dns records domain controller. determine