DNG

i developing vss requestor  on windows2003 server sp2 that creates backup remote computer. seems createvssbackupcomponents way create ivssbackupcomponents. however, can used locally. i can not create ivssbackupcomponents object using cocreateinstanceex can not find the clsid anywhere. searched entired registry, , not find information regarding ivssbackupcomponents.   is possible create requstor vss remotely? due requirement, need use vss interfaces directly. wmi not option.   thanks help,   hw hello ,   according description, issue seems related development of vss. as focus on file services , storage question windows server system , here not best support resource development. recommend may further support in  msdn forum.   msdn forum http://forums.microsoft.com/msdn/default.aspx?siteid=1   for reference, here resource may helpful you.   how to: write requestor http://msdn.microsoft.com/en-us/library/bb417459.aspx   volume shadow copy service sdk ...

hi was  told mve networking section please see question below   hi first of appologies if not exchange issue hyper v issue/networking. we have hyper v infrastructure virtual exchange 2010 ( 1 x cas/hub 1 x mailbox) , on past few weeks our cas server seems stop responding network. you cannot ping the server or remote on it. way access via hyper v manager. when log on via hyper v manager seems ok. network there , can ping self not ping out other servers in domain ( either via name or ip address). the way have got around restart server , starts working perfectly. having through event viewer errors see around time goes down are. dns client 1014 - name resolution name dns server timed out after none of configured dns servers responded. i guess because nothing can contact server , server cannot contact other system any ideas on how troubleshoot this. this server happens in whole virtual environment   also side issue exchange have link mac address...

i learning how configure internet explorer 10 group policy via windows 8 , learned needed use group policy preferences instead of internet explorer maintenance. i made gpp object ie 10 internet settings , first noticed privacy settings cookies grayed out.  first ignored began notice issues opening pages.  thought javascript issues weren't.  after digging through registry noticed hat somehow the grayed out cookies gpp setting cookies security zone set "block cookies." how relax cookie security zone setting?  cannot delete ie 10 gpp need set proxy server. hello, unfortunaltely ie cookies can't controlled via gpp internet settings. anyway, can use gpp registry this. have @ post , screenshot here: http://social.technet.microsoft.com/forums/de-de/gruppenrichtliniende/thread/6e2cef85-910f-473f-9662-10ff1d40a431/ mvp group policy - mythen, insiderinfos und troubleshooting zum thema gpos: let's go, use gpo! ...

hello experts i'm having issue applying gpos specific users when logon computers. i have 1 windows 7 professional n x64 in ou "win7", , there 2 gpos applying on ou. users allowed logon computer because it's public computer, far have 2 users cannot have gpos applied when log onto computer, dozens of users don't have issues. when tried gpresult after 2 users logon, received message below drive z available when ran command, tried drive c , drives users have permissions store data, still have same result. in group policy management console, double-checked gpos applying on ou, , none of them have "apply group policy - deny" below besides, security filtering of gpos have "authenticated users", users log onto computer should have gpos applied. please kindly let me know if have ideas or experience. thank much. hi ricky ly, please check if following method work: try removing gpo history user's profile deleting registry ke...

dear all, i facing strage issue while creating cluster in window servr 2012 standard r2. getting error (in attached file) "the network name 'clustername.domain' used in network". but when ad server inside computers, nothing showing there same name or object. system not accepting name (you can type anythign name or ip) not allowing create cluster , specific step failing.  same error getting when tried add generic service cluster, setup cluster using 1 of same system accept it. stop becuase after not able add after point. "the network name 'servicename.domain' used in network" again no name or ip accepted server there issue having 2 san drive d (data), or e (quorom). configuration validation able pass test harddisk, e(quorom) drive showing in storage. system not allowing me add other storage disk. please note have ad on window server 2008 r2 dns, , dhcp services. mentioned able validate 'cluster configuration' without error pri...

our security departement wants to manage add-ons when moving to ie8 using whitelist approach.  gpo team use blacklist (where block add-ons know malicious).  i've read few articles on headaches caused using whitelist method, looking more relevant feedback. so, wondering if uses whitelist approach , if overall experience (was difficsult manage)? thanks! hi, i used whitelist approach in company , worked well. however, need aware that it requries alot management if want properly. developed ie - add-on life cycle management covered following: - adding new add-on's - adding updated add-on's - retiring add-on's - tracking business need of add-on's - evaluation of risk add-on's - periodic review release add-on's - documenting add-on's - approval of add-on's so, established full change management process around this. , has cost associated it. hope helps, gunter ...

i'm in beginning phases of java remediation.  step 1, identifying numerous java instances living on servers, , applications use each.  it's pretty straight forward on of these, can tell process monitor or name of directories it's installed.  but there couple, give no hints, , make worse they're not installed or running process.  there's directory structure c:\...\...\java\bin or whatever.  anyone have clues on how find info?  it script, tool, anything.  when 'binging' no hits on directory structure, human has done manually.  thanks looking, bobj. ...anyone Windows Server  >  Windows Server General Forum

we migrating windows 2k server windows 2008.  getting new client machines.  use specific naming convention our clients.  once migrate ad win2k server windows 2008 server, eliminating old client computers.  join new client computers network.  new client computers need have same computer names old clients.  predict there problem when try join new computer same name old computer network.  imagine i'll error says name exists in ad.  best steps follow able join these new client computers same names new win2008 domain server using migrated ad.  once migrated, delete computers ad , dns prior joining new clients?  suggestions appreciated. you can delete old computer accounts ad before join new computer – or unjoin old computer domain.   it won’t delete computer account ad can act “pre-created” computer accounts.   but need think user profiles migration.   how going maintain user profile on new wo...

how can change display language (menu's, control panel etc.) on windows 2008 server? i have changed "system locale" under regional , language options language i'm looking menus etc still in english. thanks. pajoryan123 hi,   to install language pack(s) (mui), please refer following steps:   1.open install or uninstall display languages wizard. 2.click on install display languages. next, click on browse button , select lp.cab file. 3.click on next when lp.cab file loaded. 4.accept license terms , click next. selected language pack being installed. 5.click on finish , select new language display. check “apply display language welcome screen , system accounts” check box , click on change display language button. 6.restart windows system language change take effect.   within windows server 2008 there new command line tool let install language packs in silent (if needed) , orderly fashion, please refer following link: ...

i have installed 1 user certificate , 1 web server certificate online issuing ca. both certificates fine without problems on issuing ca server via certificate authority mmc console. however, when ran certificate authority mmc console windows xp sp3 computers, both of certificates contains following info: on general tab, displays           the integrity of certificate cannot guaranteed.           the certificate may corrupted or may have been altered. on certification path tab, displays: this certificate ok offline root ca this certificate has nonvalid digital sgnature online issuing ca , user certificate. have selected rsa#microsoft software key storage provider cryptography ca. , targeted computers running windows xp sp3. , certutil command           c:\> certutil -getreg ca\csp\provider       ...

hi all, apologies if has appeared somewhere - if has, i'm not using correct search terms! i've upgraded clients windows 10. (small office, around 30 clients or so). wsus server running windows 2008 r2, i've read, doesn't (properly?) support windows 10 clients need upgrade this. i've got spare win2012r2 licenses wondered if easiest route be; setup new 2012r2 virtual server loads of disk space updates. install wsus role , let sync up. (i've done on test server 2016 setup should easy enough). this thing i'm wondering - change existing group policy point clients new wsus server , should take effect next time user logs in or runs gpupdate? it seems simpler way proceed go through complications of migrating wsus server w2008r2 machine new w2012r2 machine. ...or there reason dumb suggestion , need go through migration? ;-) many thanks, tony. hello, in order keep history/reporting of clients may follow following procedure: https://soci...

hi team, need advice to migrate dhcp role asa firewall windows server 2003 server. clients: 100+ clients scope : 5 scope different scope options. regards, dj hello, there no problem , should no downtime clients. next renew interval lease request ip address  , dhcp server answer, in case new 1 must authorized in ad. if multiple subnets used devided switches/routers not forget set iphelper address or use dhcp relay agent. just assure provide same options router before , fine. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Network Infrastructure Servers ...

hi all i have romote access of cluster has 2 nodes. i want find out servers physically separate or  virtual mechines(like  vmware on linux). and want know physical disks iscsi /fiberoptic connections sort of things if can guide me, obliged..   thanks in advance snivas i can't speak virtualization on linux or vmware esx (also linux, a modified kernel), know hyper-v , have been sitting hyper-v host , guest , wmi code creator:   http://www.microsoft.com/downloads/details.aspx?familyid=2cc30a64-ea15-4661-8da4-55bbc145c30e&displaylang=en   one difference found win32_bios class, on hyper-v host, version , biosversion properties might give away:   biosversion: ptltd  - 6040000,ver 1.00parttbl version: ptltd  - 6040000   on guest,   biosversion: vrtual - 3000919,bios date: 03/19/09 22:51:32  ver: 09.00.04,bios date: 03/19/09 22:51:32  ver: 09.00.04 version: vrtual - 3000919 ...

hi all, we using smb our nas sharing abe enabled. but if user able find out shared root folder, shared folders visable user. we tried use windows 2003 , windows 2008 r2 no luck on both platforms. created shared folder in "share , storage management" in windows 2008 r2. searched online if folder created in share , storage management, abe disabled default. manually turned on, still not working is there missed in setup. cheers best regards, rw hi, thanks post. are talking dfs folders abe enabled. default, abe not enabled dfs namespaces. can enable access-based enumeration of dfs folders using dfs management. control access-based enumeration of files , folders in folder targets, must enable access-based enumeration on each shared folder using share , storage management. to enable access-based enumeration on namespace, namespace servers must running windows server 2008 or newer. additionally, domain-based namespaces must use windows server 2008 mod...

after replacing first drive, in multiboot environment, larger capacity hdd, restoring ghost 15, i able restore environments -- except last one: ws2008r2. i'm able login correctly admin but desktop not load-- , right lower corner has message: "this copy of windows not genuine." (i did have drive letters reassigned problem corrected registry editing parallel win7u installation). q1: if installation requires re-activation, how do without desktop loading? q2: upgrade install same software correct problem without deleting present configuration , files? what u suggest next resolve issue? thanks. hi,   is there error code?   what edition of windows server 2008 r2? evaluation copy? please check if installed evaluation version taking following steps:   click start , click  run , , then type winver . if running evaluation version, about windows dialog box displays "evaluation version."   to soli...

good day, mistake posted question on wrong forum.. http://social.answers.microsoft.com/forums/en-us/w7security/thread/d3f60946-e87a-461e-a603-2e68d21013eb anyway, windows administrator on small domain in bank. 2 roots , 9 children. , have requirement our security department enable password complexity on group policy users. however, since using many applications, users have number of passwords remember , don't want put complex addition them. so, asked if possible force password alphanumeric only (letters + digits), no need special caracthers nor caps or smalls. microsoft windows 2003 has complexity option, if enabled must meet 3 categories mentioned in article http://msdn.microsoft.com/en-us/library/ms161959.aspx so, possible have password enable minimum alphanumeric , not mentioned in article above? regards, rizaey not without creating own password filter, requires programming. details can found on msdn web site. or there 3rd parties sell custom password filte...

hi we move server 2003 sp1 rc 2 followed update sp2. came across doesnt make sense on here http://support.microsoft.com/default.aspx/kb/912309 . 2/3 s of way down says: "warning take standard failure recovery precautions before try upgrade windows. example, recommend server before try upgrade it. recommend have 1 or more additional domain controllers online , remove active directory domain controller before try upgrade operating system." it doesnt make sense other stuff weve found says ok. help. norman it suggests have backup of server avoid issues in case of failure. reason recommends having additional domain controllers if have 1 domain controller , if have failure there issues authenticating domain while server down. if there still doubts please specify exact part not make sense. Windows Server  >  ...

as beginner, know reserve lookup zone for? know services conversion ip addresses computer names, don't understand why should 1 need service that? if know ip address can access computer (according authorizations) can access desktop remotely. why need dns store me , compare ip address specific computer name? sorry bad english. if have ip , want verify host using ip, reverse mapping helpful.  in cases (to increase security) applications may require reverse lookup record (ptr) exists prior allowing host access resource ensure information being presented appliance/software valid.  there alot of examples.  1 comes mind if interested in documenting network using ip tools, may scan ips on network, reporting purposes, may want display hostname of device using ip. a reverse lookup zone not required in network deployments, serve many purposes.  since ddns (dynamic dns), "up-keep" of zones has dramatically reduced amount of administrative work required. visit blog: ...

hey all.... inherited pretty messed domain.  scouring ad find domain users (now set primary group new users) member of domain\administrators group.  removed 30 users \domainadministrators group.... i'm little worried happen when remove default group here.  is legacy thing 2003 or before?  installed 2012 dc wasn't replicated that's fixed i'm trying figure out how clean permissions.  they're pretty in domainusers group... since builtin\users isn't in there don't know if removing domainusers administrators going affect. lastly since domainusers primary group now... decent way test on users (my thought removing users domain users group) before remove domainusers (everyone) administrators group? it not legacy , no said domain users added domain administrators.  there reason why these 2 separate groups. saying every ad user domain admin. this is pure lazy action of unable of unwilling find out needs admin. consequences of removing it, however...

hi everyone, i facing problem terminal services application. i have users, not all, take long when log off application. their sessions have process responsible behavior, net.exe. i saying this, because ones have process , when quit application, if kill net.exe process associated session, log off immediate. i know have tskill, how can kill specific process through script when user quit application?!   ps: terminal server implemented in windows server 2003.   thanks, jn hi,   from post, understanding is: users take long time logoff terminal server, , found issue can resolved killing net.exe. forward making script kill specific process when quit application. if misunderstand question, please let me know.   based on knowledge, can assign logoff script users in gpo. script implement kill specific application when user logoff.   please refer following microsoft technet articles understand how make logoff script.   tskill.ex...

the  server manager\remote desktop services\collections view gives me information, in windows 2008 r2 , earlier see following per client: 1) ip address 2) host name 3) screen resolution , depth 4) client name (pc name) 5) client build number when right clicking on name , selecting status in remote desktop services manager.  where find similar information in windows server 2012 r2? thanks links.  i looked none of built in utilities have required info.  i did find link: http://archive.msdn.microsoft.com/psterminalservices running get-tssession in powershell resulted in detail needed - both client name , ip address per session, client build number. thanks help. Windows Server  >  Remote Desktop Services (Terminal Services) ...

hi, i'm designing clustered hyper-v environment 2 nodes. i'm using san storage (dell equalogics) , dell pe630 servers (8 nics on each).  i'm planning use converged network management, cluster , migration traffic. run on 4-1gb member nic team have virtual switch associated , invidividual vnics each management, cluster , migration. i'll using bandwidth weight , vmq weights ensure qos.  for storage traffic i'm planning create 2 2-1gb nic teams , set virtual switch on top of each. i'll create vnic on each switch.  the basic diagram looks this clustered equalogics <----> clustered switches <---> clustered hyper-v hyper-v node (4-nic team) ==> vswitch lan ==> vnic1 cluster, vnic2 migration, vnic2 management (2 2-nic teams) ==> vswitch1 san1 ==> vnic1 iscsi1                           ==> vswitch2 san2==> vnic2 iscsi2 these questions plan: - based on e...

windows server 2008 r2 in article, interactive logon: require domain controller authentication unlock workstation mentions that: "set interactive logon: require domain controller authentication unlock workstation enabled , set interactive logon: number of previous logons cache (in case domain controller not available) 0. when console of device locked user or automatically screen saver time-out, console can unlocked if user able re-authenticate domain controller. if no domain controller available, users cannot unlock devices." reading seems easy implement comes mobile users. if outside company, how going authenticate without cached credentials? how others implementing account lockout then? hi, yes. after implementing fine grained password policies worked. thread https://social.technet.microsoft.com/forums/en-us/244b0f71-a5f7-4f77-bf76-ecc4e2539328/ad-user-still-not-getting-lockout?forum=winservergp thanks help. regards, ...

hello i setup gp preference delete old office template files. looks this: "<path>\*.pot" problem deletes .pot files, new .potx files! for testing changed string "<path>\*.po" here correctly deletes .po files. is bug? thanks hi,   according problem description, can reproduce issue.   based on current situation, report product group. thank feedback regarding our products. striving capture , product issues/product feedback ensure continuously developing microsoft products meet our customers' needs.   regards, please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Group Policy ...

hi have purchased terminal server licenses server 2008 system looks there still enforced limit of 2 active remote users. went through couple of activation processes on server enter license codes first of i'm wondering if other steps required? hi michael, guess never added rds role session host then. please follow step step guide: http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&familyid=1d95a910-72a5-44ec-96db-6853f6f9dc5b   and note. no matter how many cal's install admin mode limited 2 concurrent connections. pubforum.net founder , bible of remote desktop services! love microsoft &its people bits! Windows Server  >  Remote Desktop Services (Terminal Services) ...

hi guys, there way list folder permission active directory user? or freeware out there? thanks. every second counts..make use of it. hi, can use  accessenum microsoft.     http://www.windowsitpro.com/article/registry2/accessenum.aspx http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx regards, rafic if found post helpful, please give "helpful" vote. if answered question, remember mark "answer". posting provided "as is" no warranties , confers no rights! test suggestion in test environment before implementing! Windows Server  >  Windows Server General Forum

while attempting run adprep server 2008 r2 cd, adprep returns error message after attemting modify base domain object. error looks this:  adprep call following ldap api. ldap_modify_s(). entry modify dc=aa,dc=bb,dc=com. [2011/05/13:11:11:16.392] ldap api ldap_modify_s() finished, return code 0x13 [2011/05/13:11:11:16.408] adprep unable modify attributes on object dc=aa,dc=bb,dc=com. [user action] check log file adprep.log in c:\windows\debug\adprep\logs\20110513111116 directory more information. [2011/05/13:11:11:16.408] adprep encountered ldap error. error code: 0x13. server extended error code: 0x20b5, server error message: 000020b5: atrerr: dsid-03152395, #1:  0: 000020b5: dsid-03152395, problem 1005 (constraint_att_type), data 0, att 9054f (otherwellknownobjects) . [2011/05/13:11:11:16.423] adprep unable update domain information. [status/consequence] adprep requires access existing domain-wide information infrastructure master in order comp...

i have 2700 page file contains names, addresses, , email addresses , want extract names correct email addresses , export excel.  sample of file below: john doe 1     123 street                      town, state 11111                      johndoe1@domain.com john doe 2    456 street                     any town, state 22222                     johndoe2@domain.com john doe 3    789 street                     town, state 33333 ...

this event 1 second in 20 times repeat, other logs blocking investigation log name:      system source:        microsoft-windows-hyper-v-vmswitch date:          7.12.2015 22:57:07 event id:      25 task category: (1018) level:         information hi, “information” event, notification instead of error you. event viewer itself, there no configuration/option can specific disable event id. event might caused current configuration. below thread similar yours, reference: https://social.technet.microsoft.com/forums/windowsserver/en-us/681708f1-8fa7-4fcf-b6fc-5c56788d6dfa/hypervvmswitch-event-25-continuously?forum=winserver8gen best regards, eve wang please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows ...

according doc "https://technet.microsoft.com/en-us/library/hh831700.aspx" "exchange backup volumes great candidate deduplication." in mind setup new drive , configured windows server backup backup exchange volume the new volume. setup deduplication run against files older 3 days. i went view deduplication stats few days later , noticed \windowsimagebackup folder automatically added excluded folder. means backup drive not deduplicated. going posted article of exchange backup volumes being great candidate deduplication, how can if deduplication process automatically skipping backup folder? thanks advice! hi mphilli7823, you check thread discussed in exchang forum. "servers running sql server or exchange server not candidates. you can run deduplication evaluation tool (ddpeval.exe) evaluate effect on exchange server backup volumes." https://social.technet.microsoft.com/forums/windowsserver/en-us/008acddf-9970-48ad-99b1-3420496361c7/e...

hi, we using simple rds setup gateway/web server, connection broker , sessions hosts. gateway forwards request mfa server (radius) to provide added layer of security. internal , vpn users want them bypass gateway avoid mfa. this working clients, clients (and based on location, not username/password) not bypass gateway no matter what. we have tried changing firewalls (in case of site-to-site issues), have changed ip-range on client site , nothing works, clients won't connect directly connection broker. (these windows clients , have tested 1 client on 2 locations, works in one, not other) now first thought blocked in firewall or network wise. ping has been checked ok, port 3389 cb open, dns ok. client can rdp directly session host without issue. reason rdweb icons not bypass gateway client sites. what else client do/need in order bypass rd gateway? please assist. best regards. hi vidar, this working clients, clients (and based on location, not username/p...

i need know if can restrict users accessing internet browsers. yes can - if create new group policy object, can use software restriction policies deny access applications. this guide shows how create new gpo: http://technet.microsoft.com/en-us/library/cc776678%28v=ws.10%29.aspx this guide talks through setting software restriction: http://support.microsoft.com/kb/324036/en-gb if block ie, firefox, chrome etc users - not able access web. alternatively - can consider allowing them open app, not access net.  this, create group policy set proxy local machine , disallowing user change it: 1. create new policy in gpmc right-clicking your domain , pressing new. name policy no internet. 2. right-click no internet , press enforced check it. 3. select no internet in left-hand pane, select authenticated users under security filtering , press remove, , ok prevent policy applying. 4. using group policy implement internet explorer settings, navigate user configura...

hi there, i'm trying to activate kms host, , have installed kms (kmsw2k3.exe) and  windowsserver2003-kb948003-x86-enu.exe, per instructions in document: "key management service v1 1 windows server 2003 step-by-step guide.doc" next typing: cscript c:\windows\system32\slmgr.vbs /ipk <valid kms key copied , pasted eopen> and getting error: error: 0xc004f050 software licensing service reported product key invalid what doing wrong? thanks, steve. in end manually registered it, phone call microsoft , reading out large number them, , putting reply in. convoluted process! and discover this: http://technet.microsoft.com/en-us/library/cc303276.aspx#_key_management_service “kms can activate both physical , virtual computers, qualify kms activation network must have minimum number of physical computers, called activation threshold. kms clients activate after threshold met. ensure activation threshold met, kms host counts number of physical computers requesting activation on ...

hello,   i reviewing logs , noticed that, after installing kb941314 on fresh install of vista ultimate sp1 (x86), .net assembly optimization tool ran error (attached below). there doesn't seem information on can tell, thought see if else has noticed same thing in ngen*.log logs. note same error resurfaces every time gac updated using ngen update. haven't had problems yet running tools, error concerning. indicate assembly image invalid. sfc not report awry actual dll in winsxs.   here output of ngen.log:   code snippet 03/27/2008 09:39:50 [3528]: failed load dependency microsoft.grouppolicy.targeting.interop of assembly microsoft.grouppolicy.targeting, version=2.0.0.0, culture=neutral, publickeytoken=31bf3856ad364e35 because of following error : operating system cannot run . (exception hresult: 0x800700b6) 03/27/2008 09:39:50 [3528]:     compiling assembly microsoft.grouppolicy.targeting, version=2.0.0.0, culture=neutral, publickeytoken=31bf3856ad364e35, proces...