Light

i have setup new 2008 r2 foundation server on approved dell hardware. being used a domain controiller 9 users. has been running on 24 hours , still showing that "check licensing compliance incomplete" - server did not finish checking licence compliance i have looked at: http://technet.microsoft.com/en-us/library/ee526849(ws.10).aspx i have run various best practice analysers check server. is there a way force a  compliance check , find out issue have expected clear afteer day   thanks   hi,   please understand windows server 2008 r2 foundation available through original equipment manufacturers (oems) on select single processor servers. therefore, not best resource on issue. please contact oem detailed information.   http://www.microsoft.com/windowsserver2008/en/us/foundation.aspx   tim quan technet subscriber support in forum if have feedback on our support, please contact tngfb@microsoft.com    ~...

hi, we have plenty of xp pcs obtaining updates our wsus server. unable windows 7 pcs update. below extract log our test machine. 2011-12-19 16:14:48:902 1116 1d20 misc ===========  logging initialized (build: 7.5.7601.17514, tz: +1030)  =========== 2011-12-19 16:14:49:010 1116 1d20 misc   = process: c:\windows\system32\svchost.exe 2011-12-19 16:14:49:027 1116 1d20 misc   = module: c:\windows\system32\wuaueng.dll 2011-12-19 16:14:48:902 1116 1d20 service ************* 2011-12-19 16:14:49:028 1116 1d20 service ** start **  service: service startup 2011-12-19 16:14:49:029 1116 1d20 service ********* 2011-12-19 16:14:49:249 1116 1d20 agent   * wu client version 7.5.7601.17514 2011-12-19 16:14:49:250 1116 1d20 agent   * base directory: c:\...

i have management program runs on windows server, have 2 server and replicate program data on both servers i can use clustering if not using virtual servers? thanks all fabrizio i have management program runs on windows server, have 2 server and replicate program data on both servers i can use clustering if not using virtual servers? thanks all fabrizio yes, can configure cluster using non-virtualized windows boxes running on bare metal (that's how worked ages before server virtualization came common). starwind iscsi san & nas Windows Server  >  Windows Server 2012 General

hello, i have following environment setup: windows server 2008 r2 sp1 running remote desktop licensing, rd gateway , remoteapp we have 2 problems: windows 8 client users cannot access remoteapps (full remote desktop session works fine). users can login rd web access , receive list of apps cannot access apps. users not prompted credentials again , receive error “remoteapp disconnected: computer can’t connect remote computer because remote desktop gateway , remote computer unable exchange policies. happen due 1 of following reasons: 1. remote computer not capable of exchanging policies remote desktop gateway. 2. remote computer’s configuration not permit new connection. 3. connection between remote desktop gateway , remote computer ended.” sso doesn’t work when logging in outside domain, users must enter credentials each time open new application. i’ve done lot of searching through forums , far can see set correctly. think these related no credentials asked when using w...

hyper-v r2 stand alone installed , configured on machine a. firewall settings set enable incoming , outgoing trafic dns primary set same ip gateway. no secondery dns pinging client server , vise versa  successful on machin b (win7) hyper-v manager in windows 7 using remote server administration tools, installed. trying connect remotely server hyper-v, give following error " accessdenied. unable establish connecton between <server_ip> , <win7 machine> what did miss? can give detalied instructions? thank you zipi    tricky manually. search "hv remote". tool written john howard simplify things.     bill Windows Server  >  Hyper-V

i in process of building file server customer server 2008 standard r2 x64 , require terminal services.  have purchase different os or can order ts cals existing software? hello, file server can terminal server have purchase cals. if have concerns, can call 1-800-426-9400, monday through friday, 6:00 a.m. 6:00 p.m. (pacific time) speak directly microsoft licensing specialist, , can more detail information there. worldwide customers can use guide worldwide microsoft licensing sites find contact information in locations.   http://www.microsoft.com/licensing/contact-us.aspx thanks zhang Windows Server  >  Windows Server General Forum

i have small business running on server 2008.  once week or once every couple of weeks dns stops , needs refreshed rebooting server.  dns filling event id 5501.  that event id indicates received bad packet.  when lookup source these packets coming parked domains 197.com or 135.com.  does mean 1 of workstations has virus?  how fix this?  btw when ipconfig see server shows ::1 , 192.168.03 dns on nic.  it single home.    you should not put dns on public network first thing. should configure forwarders on dns server instead. you should scan client computers, such packets can caused virus with kind regards krystian zieja http://www.projectnenvision.com follow me on twitter my blog Windows Server  >  Network Infrastructure Server...

hey there! i'm having issue server 2003 machine rebooting  expectantly , , error preceding the reboot can't find resolution anywhere on net. appreciated!   system:  version 5.2 r2 (build 3790.srv03_rtm.030324-2048) standalone web server   the following information found in system event viewer: the first of errors (repeated many times concurrently w/ second issue below before system rebooted): event type: error event source: lsasrv event category: security package manager  event id: 5000 date: 7/17/2011 time: 5:23:38 am user: n/a computer: computernamehere description: the security package negotiate generated exception.  the exception information data. for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp. data: 0000: c00000fd 00000010 00000000 77f45a0e 0010: 00000002 00000001 00b62ff4 0001003f 0020: 00000000 ...

we trying rename domain. we have domain abc01.ad.com , want change abc.ad.com the adc.ad.com had exist long long time, have delete through ntdsutil, metadata cleanup. cannot see domain in snip in"domain , trust" anymore. so, follow rename procedure window 2003, rendom /list rendom /showforest rendom /upload rendom /prepare, error happen (parent domain said object "guid xxxxxx" exist , 30113 any idea, one more thing, need create 1 more dns abc.ad.com. or me automaticlly? thk lot. discoverd have trust in domains , trusts. Windows Server  >  Directory Services

hello, i working on powershell script move websites 1 server another. 1 of steps copying data, , use robocopy that. i wanted ask if know how can check if files have been copied correctly, or if there has been error of them. right save log files, need check manually summary of log check if of files copied, , proceed. each of failed file has line on log saying "the filename, directory name, or volume label syntax incorrect.". parse log searching line, think there must easier (and 'cleaner') solution! thank much! cheers hi,   the following blog helpful on checking robocopy log , statuses:   powershell , robocopy part 4   more related series:   robocopy   best regards dale please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. ” ...

hi, i'm trying put design satisfy requirements of customer of mine.  scenario this... they have root domain in forest has resources need accessed multiple subdomains , / or external forest trusts.  of external forests have same fqdn , /or netbios name root forest domain, or same name forest / domain has trust relationship established root domain. i know not possible create trust relationship domain name same root domain / subdomain or other domain has trust relationship root domain. what wondering if following scenarios possible or if else knows of way round this: scenario 1 external domain 1 = abc.local external domain 2 = abc.local internal forest root domain = xyz.local internal subdomain = 123.xyz.local internal subdomain = 456.xyz.local trust relationship can established between external domain 1 , 123.xyz.local.  external domain 1 accesses resources in subdomain 123.xyz.local, , xyz.local trust relationship can established between external ...

i keep on running wsman errors, requesting server create ps shell i’ve tracked events connectivity failure using wsman-api calls. exchange server exchange 2010 client access server responding request remote powershell connection, requesting server failing accept (firewall switched off). believe error below due no internet connectivity namdev domain, based on error receive. “ fatal error : connecting remote server failed following error message : ws-management service cannot process request. resource uri ( http://schema.microsoft.com/powershell/microsoft.powershell ) not found in ws-management catalog. catalog contains metadata describes resources, or logical endpoints. more information, see about_remote_troubleshooting topic., please find complete error @ errorlog file ” thanks, b the iis/asp server 1. creating wsman session. connection string is: http://exchange2010casserver:5985/wsman?psversion=2.0 2. wsman create session operation completed successfuly 3. getti...

hi guys, what safest way remove 1 server 3 node dag. currently planning the following steps:- remove exchange server mail03 dag 1.start exchange management console 2.go organization configuration > mailbox > database management; 3.if mail boxes mounted on mail03, select database ” mounted on server” reads mail03; 3.1.select move active mailbox database; 3.2.select mailbox server i.e. mail01\mail02 host mailbox database copy , select move; 5.when move has finished, select database copy hosted on mail03 in lower pane. there, select remove. 6.remove mail03 server dag. select tab database availability groups; 7.select dag mal03 server member of , select manage database availability group membership; 8.select server , click red cross remove list. click manage proceed actual removal; 9.when finished mailbox server no longer member of dag. 10.rebalance mailbox databases in dag. what guys recommend? also after removal of dag node, best way redu...

i have been following 2 other threads on same topic unable resolve issue. on 11-5-2012 users complained of "internet down" , subsequent investigation pointed @ dns failure. further observation was intermittant without rhyme or reason. affecting different target external sites without exception , starting work again without intervention. we have swapped routers, isp has swapped interface device problem persist. network overview cbeyond iad bundled voice/data services (t-1). 5 public ip addresses. netgear fvs336g2v2 latest firmware assigned xxx.xxx.xxx.106 ip. cbeyond gateway xxx.xxx.xxx.105. lan side 10.0.1.0 router assigned 10.0.1.254. port forwarding set rdc , vnc , 2 ipsec tunnels derived. workstations behind router xp pro sp3 dell t610 raid 1/5 server 2008r2 domain controller , dns active (10.0.1.10). workstations configured point 10.0.1.10 dns. forwarders on dns set cbeyond dns 64.238.96.12 primary , 66.180.96.12 secondary. after reading prior threads ran ns...

hi team,             had shared folder read/change permission. has deleted files , folders under shared folder. wanted know, deleted files/folders.my system in domain.             folder's last modified timing 6:08 pm while checking under security events. can see there few ad ids access different shared folders @ time. so, if can find exact modified time(upto miliseconds), can guess user.            so, requirement is: 1. command last modified time(upto milisecond) of directory. 2. anyother way find deleted files/folders of shared folder. please help. hi , i see audit object access set success / failure required gpo. next step configuring auditing per folder / file specific if havent set under specific folder / file ,you cant it. another option , involve disk recovery agents , recover files , folders ...

hi, i've got single domain forest consists 6 sites 2 dc's in each site. in 1 of our sites both dc's showing event id 1083 , 1955 multiple users. dcdiag not show related errors , i've checked duplicate entries. ideas? could post full error.  there other messages go this? repadmin /showmeta object distinguished name http://support.microsoft.com/kb/296714   (outlined in article) eventid http://www.eventid.net/display.asp?eventid=1083&eventno=919&source=ntds replication&phase=1 repadmin http://support.microsoft.com/kb/229896 -- paul bergson mvp - directory services mcitp: enterprise administrator mcts, mct, mcse, mcsa, security+, bs csci 2008, vista, 2003, 2000 (early achiever), nt4 http://www.pbbergs.com     twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson please no e-mails, questions should posted in newsgroup. this posting provided "as is" no warranties, , confers no rights. ...

0x0000007f (0x00000008, 0x807c6750, 0x00000000, 0x00000000) i error every time tryed reboot  , blue screen why? , can make going again aera51 you'll need call microsoft product support. blue screen stop diagnosis out of scope forums discussion. http://support.microsoft.com/select/default.aspx?target=assistance       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] Windows Server  >  Windows Server General Forum

good morning, i have basic questions certificate templates. difference between enrol , auto enroll permissions. 1.does enrol give permissions enroll via webpage , enrol wizard through certificates mmc? 2. auto enrol give permissions enroll via gpo only? 3. if change permissions of a template (via certificate template console) has been issued multiple issuing servers, permissions update on issuing servers (do use permissions in ad repository of templates) i issuing server authentication certificate , found had give auto enrol permission computer object server able request certificate through certificate enrollment>active directory enrollment policy hi, to questions. 1. yes, correct. 2. correct well, still needs enroll permissions. 3. yes, updated security permissions automatically used during enrollment process. it not necessary give auto-enrollment permissions request certificate mmc. regards, lutz ...

what best free tool central management of event around 20 windows machines. that sounds russinovich 's territory. http://technet.microsoft.com/en-us/sysinternals/bb545027.aspx creativity cannot taught, can learned. Windows Server  >  Security

hi i took on management of domain few months ago , had problems have integrated systems (mail, fnp etc) there 1 server users logon access billing application. this physical server, did p2v off, , in our enviroment. the domain of server has been changed, , applications work expected. the problem getting is, when logging on there rds error: no remote desktop license server available remote desktop services stop working because computer past grace period , has not contacted @ least valid windows server 2008 license server. how resolve error, since domain has changed , on network now hi, i'm not sure specific issue having. in rd session host configuration, first select rd session host configuration in left pane, in middle pane double-click on remote desktop license servers .  open properties window licensing tab selected. on licensing tab can remove old server and add fqdn of new license server needed. -tp ...

hi like title, want upgrade server windows2008r2 sp1 standard windows2008r2(sp1) enterprise. i have tried windows2008r2 sp1 disc. cannot finish error below ---------------------------------------------------------------------------------- windwos cannot install required files, make sure files required installation availabe, , restart the  installation. error code:0x800700b7 ---------------------------------------------------------------------------------- question1 when insert windows2008r2 sp1 boot disc, there upgrade option, can use that? question2 i did research, dism can used change edition. way that? ps, re-install unavailabe. for windows server 2008 r2 , above, recommended way upgrade edition use dism. you can follow article on upgrading edition: http://blog.ylnotes.com/upgrade-windows-server-edition-using-dism/ Windows Server ...

hi there, i'm using following powershell script install iis 7.5 there appear 30 error messages (all same). didn't check every windows-feature because there alot tried webserverrole , no others, , no error message appeared. work of full installation? write-host "installing iis win7 (7.5)..." $array = ("iis-webserverrole","iis-webserver","iis-commonhttpfeatures","iis-staticcontent","iis-defaultdocument","iis-directorybrowsing","iis-httperrors","iis-httpredirect","iis-applicationdevelopment","iis-aspnet","iis-netfxextensibility","iis-asp","iis-cgi","iis-isapiextensions","iis-isapifilter","iis-serversideincludes","iis-healthanddiagnostics","iis-httplogging","iis-logginglibraries","iis-requestmonitor","iis-httptracing","iis-customlogging","iis-o...

i have scheduled powershell script saves files on c:\temp folder , copies directory after script completes.  script works fine if run manually powergui.  if run scheduled task, runs under administrative account, files not created in directories.  have task running "highest privileges".  suggestion on how troubleshoot or may causing permissions problem folder? thank you l lornzo gonzalez hello, did enable powershell remote execution, allow system run powershell scripts created on local machine: set-executionpolicy remotesigned then create .bat or .cmd file content: powershell.exe -command "& 'myscript.ps1' " and configure scheduled task know. also see nioce video: http://get-admin.com/blog/?p=4 check out also: http://blogs.technet.com/b/heyscriptingguy/archive/2009/03/30/how-can-i-create-a-scheduled-task-on-a-number-of-computers.aspx best regards meinolf weber disclaimer: posting provided "as is" no warrantie...

for reason the  record 1 of mail box servers in exchange 07 environment keeps being deleted.  have scavenging turned on , @ first thought problem realized happening after few hours of being created.  @ different times when create record create static or we  logged mail box server , ran ipconfig /registerdns , put record in zone.  in bith cases record deleted after few hours (replication)?  adsi  object still remains in dc=microsoftdnszones,dc=system,dc=<domain,dc=<ciom>.   can audit record se taking out?  repl ring set hub-spoke (each bo server has 1 repl partner) wouldn't suspect morphing or replication error. dns records can't directly audited , because record deleted in dns via gui not deleted same ad object, dnsrecord attributed modified & tombstoned. auditing on dns can enabled on ad-integrated dns, because auditing not directly enabled dns bit object access in directory services. http://blogs.technet.com/b/yur...

i on windows server 2012 r2 when try open local security policy in mmc get the group policy security settings apply machine not determined the error returned when trying retrieve these setting local security policy database (%windir%\security\database\secedit.sdb) was: the parameter incorrect. etc. so ran esentutl /p %windir%\security\database\secedit.sdb still getting same error. did try perform configure using secedit give logon service rights user. , this. did not before secedit op. is secedit.sdb corrupt? hi, you try run command below administrator account reset permission of sdb: secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose here article below may helpful you. how restore security settings known working state? https://support.microsoft.com/en-us/kb/313222 best regards, jay please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@m...

we facing problem of dns service not getting started on domain controllers. below error see on domain controller when try start dns service. dns server error in event viewer: the dns server waiting active directory domain services (ad ds) signal initial synchronization of directory has been completed. dns server service cannot start until initial synchronization complete because critical dns data might not yet replicated onto domain controller. if events in ad ds event log indicate there problem dns name resolution, consider adding ip address of dns server domain dns server list in internet protocol properties of computer. event logged every 2 minutes until ad ds has signaled initial synchronization has completed. directory service error in event viewer: active directory domain services not use following rpc protocol sequence.   rpc protocol sequence: ncacn_ip_tcp   although rpc protocol sequence appears installed, active directory domain services cannot...

okay,  i have script searches ad domain , return if enabled or not. work huge company have multiple ad domain names.  when run script, looks @ 7 groups extracts of users when query status, see status domain, in. how able write out , possible. think possible because find users other domains. this got far.  $adgroupmembers = get-content c:\users\jmateo\desktop\admembers.txt $test =@(foreach($adgroupmember in $adgroupmembers  ){ (get-adgroupmember $adgroupmember).distinguishedname })| out-file c:\users\jmateo\test.txt $itgssi =select-string -path c:\users\jmateo\test.txt -pattern 'domain5' ($itgssi)-replace(".*:") | out-file c:\users\jmateo\itgssi.txt get-content -path c:\users\jmateo\itgssi.txt | foreach-object {     get-aduser -ldapfilter "(distinguishedname=$_)" |     select-object -property distinguishedname,enabled } $itginc = select-string -path c:\users\jmateo\test.txt -pattern 'domain4...

hi bhaskar.. have windows server 2008 service pack 1 32-bit os installed in hard drive... i'm trying raise domain functional level , fores functional level i'm getting error.. uploading pictures see them , tell me problem , solution that..   bhaskar hi bhaskar, how many domain controllers in domain? have other domain controllers before? verify availability of servers, please post command output of netdom query fsmo . brent please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. ” Windows Server  >  Directory Services

respected sir, i've setup group policy on windows 2003 server , have created user: user1 ..with  password. when tried applied group policy on it.... no change made on client pc through user1. i do: 1. assigned policy: "disable control panel" ou having user1 in , run "gpedit" on server. 2. login through client pc through user1, remains same.... 3. uncheck: "block policy inheritance" , try checked it... but no response.... can u plz me in scenario why such problem occurs.... as have newly installed server domain capability in it...nothing else... :: summary:: poilcy not implemented on user1....... plz me ... appreciated. alot sir, hi have run rsop on client server, can check policy applied or not. to run rsop - https://www.microsoft.com/windowsxp/using/setup/expert/rsop.mspx what update rsop, showing applied policy user. try run gpupdate /force client side.... if still not appearing, there event ids , those? so can solve problem...

hi all, i fresh in windows 2008 server, , experienced issues slow network, cannot access shared folder on server. other problem server version, instance client pc (vista os) before working fine when unit joined domain start getting problem when opening documents end not responding during printing. since february 2009, haven't found information rid out of problems. did restarting server fine week! any ideas fellas appreciate it!   regards, john hi john, i agree syed. on these issues, may need collect information. are there anti-virus applications on problematic windows server 2008 based computer? according our experience, reported anti-virus applications, such symantec endpoint protection, may affect file sharing , printing function.     if have installed symantec endpoint protection on problematic server, may check if version of antivirus correct, , may download , install fix on problematic server see if helpful you.   please visit following symantec web site: ...

dear forums, anyone able assist in configuring outlook 2010 (32bit) fax mail transport on server 2012? i not able see options. other machine running different os able see during outlook profile configuration. i have setup , configure windows fax , scan under server 2012, , working happily, want fax able work within outlook 2010. it not outlook issues, function of os. outlook pick if os allows it. look forward having similar issues or has solutions. regards, dave Windows Server  >  Windows Server 2012 General

hello, my goal to populate active directory global security group members contained in csv file. i execute following: $members = import-csv c:\groupmembers.csv $members | foreach-object {add-adgroupmember -identity 'ad_group' -members $_} these errors get: add-adgroupmember : cannot bind parameter 'members'. cannot convert "@{a0100041=a62008}" value of t ype "system.management.automation.pscustomobject" type "microsoft.activedirectory.management.adprinc ipal". @ line:1 char:78 + $members | foreach-object {add-adgroupmember -identity 'ad_group'  -members <<<<  $_}     + categoryinfo          : invalidargument: (:) [add-adgroupmember], parameterbindingexception     + fullyqualifiederrorid : cannotconvertargumentnomessage,microsoft.activedirectory.management.comm    ands.addadgroupmember is saying import-csv p...

hello team, please let me know need done setup vpn using virtual smart card from server point of view ? our current infrastructure has pki server , tpm enabled client machines , proper certificate templates , other required things available. please let me know need configured in vpn server enable vpn using virtual smart card? regards, mubasseer hi mubasseer, >please let me know need configured in vpn server enable vpn using virtual smart card? on server side, in authentication methods, please select "eap", in "eap types", select "smart card or other certificate"; on client side, in vpn connection properties, security>authentication, check "eap" , "microsoft: smart card of other certificate" also enable related certificates stores correctly both on client side , server side. best regards, anne please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff...

hello, i'm new website hope post question in right place. im trying set dental network friend office. goal have 8 10 client destop , laptop can access x-ray images, appointments,  files etc windows 2003 central server.. have software send files server. thing have set server.  i'm thinking setting follow: internet > modem (cable) > wireless router > switch(24 ports) > server , clients (all clients , server wired swicth). server 2003 have file server , dhcp roles activated.  layout sound good? if not recommended layout office? thanks.  sounds good, don't forget backup! miguel fra www.falconits.com Windows Server  >  Platform Networking

hello, i using windows server 2008 r2, 64 bit. my problem can not run .exe file when i'm logged in non-administrator. simply, nothing happens. i've turne off dep , uac. also, i've turne off firewall -> same result. what else can do? greetings, frenky hi,  can capture 2 process monitor log, 1 if administrator account run test .exe, user account run it. can compare them, , find out user stops @ part. please download process monitor following link, , extract zip file. http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx meanwhile, noticed issue still occurs if add user administrator group, means need consider if user account has problem. please try give user full permission registry keys. please test if affected test exe file can run on other server via normal user. “please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading threa...

we provide secure mobile access our file servers.  web access , ipad access of particular interest.  can recommend product allows this?   hi, whether program can user access file server on ipad/mobile phone? if may need ask question on forum specific os using, such windows mobile forum , apple forum. i found on apple forum , may have try: http://itunes.apple.com/us/app/filebrowser-access-files-on/id364738545?mt=8 also windows mobile, default explorer should help.   technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com. Windows Server  >  File Services and Storage

we've recieved interesting query 1 of our users. want restrict access folder on file server on premises only. @ moment users can access data remotely our terminal server farm (which problem). ordinarily use firewall restrict access server problem the file server used other shares  which user allowed access off premises via terminal server , hundreds of other users scenario not apply. appreciated. many thanks hi, please try following configuration: 1. block access folder default.  2. create logon script run after user logon finished.  3. this script check environment variable sessionname, if it’s not console, not change folder permission. (we may need provide administrative account information in script need encrypted script.) if sessionname console, change folder permission allow access.  script encoder overview http://msdn.microsoft.com/en-us/library/d14c8zsc%28vs.85%29.aspx thanks.  this...