DNG

hi, i'd opinions , info or reading on best solution inherited problem. our internal domain is a valid external domain, , not ours either ... getting certificates impossible and would have major issues resolving dns issues that internet domain (luckily few , far between). we have several applications need individually tested , migrated, of have been told need reinstalled scratch , have exchange 2010 and sharepoint environment also. so, instead of thinking renaming existing domain, i am thinking along lines of creating new trusted domain .internal or .local suffix , migrating applications , resources across , when testing allows. should allow things applications and remote access continue old environment , trust across new while process underway think. am missing obvious , have reading material make sure i'm on right track? thanks in advance. you can’t (not supported) rename domain if have exchange 2007 or ex2010. if w...

when going boot capture image in mdt unable see sysprepped drive. capturing server 2012 vmware vm. i've taken snapshots after sysprep completes. successful flag appears should can not drive appear when attempting capture. hi, >> when going boot capture image in mdt unable see sysprepped drive.  there 2 common reasons problem: 1.the boot image not contain proper drivers computer’s hard disk drive controller. troubleshoot this, when image capture wizard first starts, press shift+f10 open command prompt. run diskpart, , run list disk. select each disk (for example, sel dis 0 , sel dis 1), , type lis vol list each volume. ensure volume contains offline sysprep image viewable. if not, need add driver mass-storage controller windows pe can detect local disk contains offline sysprep image.  2. the volume not contain image prepared using sysprep. please try run sysprep with  generalize check box  selected again. best regards cartman please...

my windows 7 don't have personalize. want change theme, can do..  windows 7 home basic not support group policy , such not forum asking question. you might want post question windows (client) forum http://social.technet.microsoft.com/forums/en/category/w7itpro,windowsvistaitpro,windowsxpitpro/ alan burchill http://www.grouppolicy.biz Windows Server  >  Group Policy

we using office 2007 professional for our organization. in word 2007 each , every time whne tried insert text box, text direction of text box has changed. how can i change default.  have attached picture this, greatfull. have tried several ways, unable overcome issue. in advance u.l ranmal ok, referring indentation (not text direction wrote in original message). changing defaults works because normal style applied text in each text box created. stefan blom, microsoft word mvp Microsoft Office  >  Word IT Pro Discussions

i publish remote apps pool of vm's. if i log on to rdweb can see of published applications and pooled desktops. however, wondering if there way have pooled desktops available in rdweb , have remote apps available in vm's. able in 2008 r2 deploying applications msi packages; however, seems not possible now. if knows of way please let me know. thanks, scott hi scott, >> i able in 2008 r2 deploying applications msi packages; however, seems not possible now. if knows of way please let me know. correct, creating .msi or .rdp file remote app (to able distribute those) has been removed windows server 2012. however, there still methods achieve goal have. there 3 methods of distributing remote apps (and desktops); 1. distribute using rd web access 2. distribute using web feed url in control panel (or remote desktop app) 3. manual distribution the 3rd option suite goals, using not able create .msi, able distribute .rdp file. i wro...

hi all i'm running wsus 3.2 sp2 on server 2008 r2 box out in netherlands (nl).  the wsus replica of master server has groups, updates, etc replicated our hq's server in uk. the problem i've got nl server keeps displaying message "computers have requested following nonexistent computer groups: overseas-desktops,waadenburg-d,overseas-portables,waardenburg-p" in to-do section. the issue though groups there , exist.  in fact they've been replicated master server, i'm looking @ them in left hand pane of wsus console on server. any ideas please? hi, is there computer being assigned unassigned group? normally, if computer has requested none-existed group, redirected unassigned group. if find clients in unassigned group, please run command below check detailed information client-side targeting: gpupdate /force gpresult /h c:\report.html note: procedure needs privilege of administrator. best regards. steven lee please remember mark repli...

hello, i work in environment virtual , physical servers. every ip static, no dhcp domain. 2 dc’s virtual. need stand physical dc. 1 of virtual dc servers primary dns server domain. need change ip of primary dns server, , bring new dc ip of current dns server. dc’s , new dc server 2003. for example: current server dc , primary dns server ip 169.80.20.1 i need change current server 169.80.20.1 169.80.20.2 i need bring new dc primary dns server ip 169.80.20.1   what best way minimal impact on member servers in domain?   thanks,   saahha carry out procedure outside of business hours. if domain member computers have secondary dns entries, should fine (there going be a slight delay in name resolution while primary dns not available). make sure re-register relevant a/srv records both dcs following change... hth marcin Windows Server ...

i not ad expert wanted see others thought situation.  have 2008 pdc in usn mode. official way fix demote, clean meta data, re-promote. plan demote server anyways , build new dc. rather go through entire official process devised work around appears have resolved replication issues.  took system state backup of usn mode server in it’s broken, non-replicating state, rebooted dsrm, , performed non authoritative restore backup. being non authoritative, replicated 2 healthy servers. ceased receiving log errors , tested replication , satisfied state of ad. if reboot server though, still pauses netlogon still in usn mode. @ point, think server okay , no longer needs in protective state. i've seen mention of deleting dsa not writable key stop server being in dsn mode. i've read not supported , "modifying value removes quarantine behavior added usn rollback detection code." i've bypassed quarantine behavior (if i'm not mistaken) unpausing netlogon,...

scenario: have few management xp machines on want control the communication using ipsec policy. first approach use security templates, looks method not support ipsec policy? correct? if so, alternatives available? i guess possible make script directly configures local ip sec policy of workstation, there easier way? think easier sort of template can applied? thanks in advance! /jonas thank support. however, discovered can export local ipsec policy *.ipsec can import computer using ipseccmd. solution put policy (the .ipsec file), ipseccmd.exe , batfile runs import command on usb stick.   Windows Server  >  Print/Fax

we using windows clustering on windows server 2003 sp2.  of file share resources configured on local drive.  have share on server create on cluster. for example:  server (node 1) , server b (node 2) make our cluster.  have created share on server c add file share resource on server a/b cluster.  created file share resource cluster administrator, when attempted bring on-line, failed shut down many of other resources in same cluster group. here how configured resource: 1.  created file share on server c , set appropriate permissions (i gave full control user on cluster). 2.  in cluster group (the default group of other shares located), right-clicked , added new resource. 3.  gave name, description, , selected file share resource type. 4.  clicked next , left default possible owners both nodes on server a/b cluster. 5.  clicked next , did not create dependencies. 6.  clicked next , entered share name. 7.  enter...

hi, been fighting server 2012 certs set in rd.  (overall i'm finding things counter-intuitive on server os.) i have internal public key infrastructure set off-line root ca , issuing enterprise ca.  clients trust root cert. i use certificates (local computer) request 2 certs - 1 gateway , web, , other broker roles.  rd on same server right now.  (i didn't want use same cert on both because gateway outfacing , don't want include machine's internal dns name in cert - gateway's public dns.)  i'm using "web server" template both. i import them issuing ca (it doesn't issue automatically) computer's personal store , export them files in order able them certs page under "deployment properties" in server manager.  (i find little silly can't reference them computer's cert store can in separate rd gateway manager application unfortunately has no analog can find other rd roles.) in "select existing certificate" dia...

hello, i have been trying add bluecoat av equipment in test radius server (nps) running on windows 2008 enterprise r2. problem this, test user not authenticate , generated log this: reason code: 65 reason: "the network access permission setting in dial-in properties of user account in active directory set deny access user. change network access permission setting either allow access or control access through nps network policy, obtain properties of user account in active directory users , computers, click dial-in tab, , change network access permission." now have double checked dial-in tab of test user in active directory , under network access permission, "control access through nps network policy" selected. i have ticked option "ignore user account dial-in properties" in nms policy still same error. any appreciated! regards, toad hi,   want confirm if user can authenticated , authorized connection nps without bluecoat av eq...

i installed new 2008 r2 box network dc , gc exchange 2010 installed. had new box pointing , old 2003 dc/gc (still active) dns. when set windows environment loads right away. none of exchange services start. when remove 2003 box dns settings server takes 10 minutes boot , half of exchange services start. idea why?   fyi ultimate goal rid of 2003 box because 7 years old. first, exchange not recommended on dc. there numerous ramifications. read following more specifics: exchange on domain controller - ramifications , how move exchange off dc   http://msmvps.com/blogs/acefekay/archive/2009/08/08/moving-from-exchange-2000-currently-on-a-windows-2000-domain-controller-to-a-new-exchange-2003-server-on-a-windows-2003-member-server.aspx second, appears there's dns issue going on. based on replication between dcs not working, why may be seeing different results pointing different dns servers. if can post complete ipconfig /all both machines, evaluate both dcs'...

i want know if there way can write web  base programe manipulate infomation in windows server active directory.  want able add new users web base or query users ad , unlock users.  hi,  active directory open customization , manipulation various programming interfaces. not right forum writing web application there many command line tools can leveraged without need web app. dsmod command line tool can perform task , can create vbs or powershell script create basic ui around tool provide lookup , unlock of user accounts. thanks, guy Windows Server  >  Group Policy

okay users connect 1 of 3 terminal servers. click rdp icon , prompted username/password. name shows on terminal server , type password again.... happens on 1 of tss , other user account automatically gets defaulted when rdp opens. ideas? can check following settings on server? open group policy, computer configuration , administrative templates , windows components , terminal services , encryption , security , double-click always prompt client password upon connection setting. should set "enabled" think it's not in case... Windows Server  >  Remote Desktop Services (Terminal Services)

hi,   we have bsod issues exchange vm , planning appy win 2008 sp1. just wanted know if updates : http://support.microsoft.com/kb/979444 http://support.microsoft.com/kb/979903   are part of win 2008 sp1. please reply to me. thanks. thanks hello, the excel sheet in http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=269  contains updates included. , both mentioned ones included windows server 2008 r2 sp1. as forum belongs directory services bettter 1 http://social.technet.microsoft.com/forums/en/winservergen/threads best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Directory Services ...

we have new wsus 2012 trying talk our existing sccm 2007 , scup 2011 , tests , appears working fine until we go publish package. looking through logs of scup see following: publish: fatal error occurred during publishing :publishing operation failed because console , remote server versions not match.$$<updates publisher><thu jan 10 15:55:18.38 2013.7><thread=7> publish: background processing completed.$$<updates publisher><thu jan 10 15:55:18.41 2013.1><thread=1> from of the research i have done error commonly occurs when versions of wsus not match between wsus server , sccm server. both of our servers appear running wsus 3.0 sp2, but on 2012 server version showing 6.2.9200.16384 , on 2008 r2 server showing 3.2.7600.226. know if there a comparability issue because show different versions? how how them work together?  whs we have new wsus 2012 trying talk our existing sccm 2007 , ...

hi all, does know how remove ninja ransomware virus manually on windows 2012 r2 standard server without using spyhunter, etc? any appreciated because our virus infect our exchange server , company emails aren't working since saturday 21st of may 2016. thanking in advance. my advice whenever have machine has been infected flatten , re-install.  if machine has been compromised, knows else might have been installed.  i'd rather safe instead of else coming later. . : | : . : | : . tim Windows Server  >  Windows Server 2012 General

hi all,  want clear point gp replication 1. gpo replication use frs/dfs replication not adhere site boundaries. means replication converge of domain controllers within few minutes. 2. gpo replication not depend on time based replication trigger based changed means change occurr replicate among domains. thanks www.ittechpoint.com pwnkmr 1. gpo replication use frs/dfs replication not adhere site boundaries. means replication converge of domain controllers within few minutes. (below 2 links, 1 frs , other dfs) https://technet.microsoft.com/en-us/library/cc758169(v=ws.10).aspx https://technet.microsoft.com/en-us/library/cc794837%28v=ws.10%29.aspx?f=255&mspperror=-2147217396 https://technet.microsoft.com/en-us/library/cc737087(v=ws.10).aspx 2. gpo replication not depend on time based replication trigger based changed means change occur replicate among domains. no, sysvol replicates other ad data no matter (change or no change) replication time ...

in windows server 2008 r2 can install service (it happens postgresql that's not relevant believe) folder on d: (with appropriate permissions set), set service run domain account, , well. in builds of server 2012 (including dp) this worked fine too. however in more recent builds (including cp , rc) not work, service fails start 'access denied' though permissions identical. case if take working server 2008 r2 server , upgrade 2012. i can make work either changing service run local system or installing c:\program files. is part of dynamic service accounts or other new feature? despite internet searching can't find answer. need install d: disk space management reasons. thanks rick thanks replying joseph. kb written? i'm summarizing problem , answer can 'mark answer' thread: to replicate problem: install windows server 2012 (haven't checked 2012 r2) install wsus -- put content on d:\wsus (we rename dvd drive e:) -- key content must not...

we use localgpo configure our servers , great tool. tried use on w2012r2 , got error message said supportd on wxp, w2003, vista, w2008, w7, w2008r2, w8, w8 server (which assume w2012 because using on w2012). in case won't run on w2012r2. know if going supported. assuming ms update scm since security guides localgpo updated? thanks. roger roger hi, it seems there no localgpo windows 2012 yet. here similar thread: http://social.technet.microsoft.com/forums/en-us/70c4b668-de5b-4ef1-9ed2-0273956fd2c5/localgpo-on-win8server-2012?forum=compliancemanagement in addition, below forum should right place issue: http://social.technet.microsoft.com/forums/en-us/home?forum=compliancemanagement regards, yan li we trying better understand customer views on social support experience, participation in interview project appreciated if have time. helping make community forums great place. Windows...

i started on first live migration of server appeared going successfully.  after performing dcpromo , waiting checked "dcdiag" , found errors on advertisting , netlogon tests, other test passed successfully.  believed dns issue @ first dns pointing old server , new server.  first tried change dns new server , add forwarder old server, realized incorrect removed forwarder , send dns directly old server.  preformed ipconfig /flushdns, ipconfig /registerdns, , dcdiag /fix.  after waiting 15 minutes log same issues finding before.  have attached copy of dcdiag log below new server.  suggestions great!  also, before started did dcdiag , netdiag on old server , both passed successfully.   microsoft windows [version 6.1.7601] copyright (c) 2009 microsoft corporation.  rights reserved. c:\users\administrator.aacsdom>dcdiag directory server diagnosis performing initial setup:    trying find home ser...

if lead or active in user group dedicated to active directory (ad ds), might want add details to table in new wiki article: active directory user groups there similar page other technologies, exchange. main portal user groups here: microsoft user groups portal this allows people find user groups, , gives groups added exposure. richard mueller - mvp directory services thanks posting this, richard! ace fekay mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003 microsoft certified trainer microsoft mvp - directory services technical blogs & videos: http://www.delawarecountycomputerconsulting.com/ this post provided as-is no warranties or guarantees , confers no rights. Windows Server  >  ...

hello, i have been trying connect 2 physical network segments using 2 routers. router 'a' netgear wireless router (192.168.1.0 network), , other windows server 2012 r2 box routing , remote access installed (192.168.11.0 network). made basic vpn using these routers, works fine. when logged .11 network, can ping , access services on .1 network not other way around. i've looked everywhere, , not find solution problem. can let me know if bidirectional communication between 2 network segments possible? if so, how go implementing solution? assistance. mike sure is. mask off 255.255.240.0 or better yet single vlan capable router similar cisco rv180w.       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server ...

hi have number of server core 2008 servers running @ high cpu usage 100% these 3 highest processes running healthservice.exe memory usage , handle count increase lsass.exe process in windows server 2008 svchost.exe how bring cpu utilization down? it appears running scom, have tried restarting health service (display name: system center management) service? also, do have cu2 applied,   http://www.microsoft.com/downloads/details.aspx?familyid=61714687-668a-46e4-b127-ad8519594351&displaylang=en   -- mike burr Windows Server  >  Server Core

i have multi-threaded application performs thread-level impersonation of access tokens each thread has capability of accessing ad unique identity, if necessary.  application running, various threads need find out information ad environment, such checking see if particular schema extension exists before attempting perform operations in ad. to perform test, instance of iads com interface obtained via call adsgetobject() binds com interface instance "rootdse", , iads::getinfoex() method called load value "schemanamingcontext" attribute property cache.  once property value has been obtained call iads::getex() method, schema partition searched specific class , attribute definition class objects. the problem encountering each time iads::getinfoex() called when iads com interface instance bound "rootdse", there leak of 1 handle access token.  using windbg's handle tracing feature, can seen call iads::getinfoex() making additional function ...

hi all; as know, selecting require administrative approval unknown computers option, pxe client sit in pending state until administrator approves or rejects computer in wds console or timeout reached, or request cancelled user. right? now question is, how timeout lasts? how can configure it? thanks please vote helpful if post helps , remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. hi, this article may help? http://technet.microsoft.com/en-us/library/610cac4a-d9a1-445a-b865-df7849087b14#bkmk_3 don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!) Windows Server  >  ...

hi, is possible set environment variables users first name , last name in server 2008 r2? if yes, how done? hi, you can use script reported here http://www.petri.co.il/forums/showthread.php?t=27867 hth edoardo benussi - microsoft® mvp management infrastructure - systems administration https://mvp.support.microsoft.com/profile/benussi windows server italian forum moderator edo[at]mvps[dot]org Windows Server  >  Windows Server General Forum

hello, i trying set server access security in 2008 r2 environment. have created security group , added users need access. under impression create custom firewall rule , add group , allow them access. come find out if user not in security group, in remote desktop users group still able login machine remotely. there way lock down security group can access server? i've read little nps, i'm not sure if allow me need. regards , in advance. hi green-tech, nps provide authentication, authorization , accounting services network access server (nas) , use policies limit network access of nas’s clients. according description, want allow specific user groups access (log on) servers, , seems didn’t set nas provide network access servers. may not suitable use nps directly. to achieve goal, maybe can use user rights assignment to manage local log on , remote logon. may use following steps open user rights assignment: run gpedit on the server, in local group ...

just installed hyper-v sever 2008 r2 on dell vostro 230. upon starting "no active network adapters found". network adapter broadcom netlink, ive tried installing driver using pnputil command, says successful still same problem. when running sc query type= driver command cant find anywhere either. suggestions? the problem has been solved, turns bank of computers ordered dell should same in fact not. wrong driver! help, core config, making life breeze. Windows Server  >  Hyper-V

server windows standard edition 2008 r2 w/sp1 , critical updates date.   have symantec endpoint protection client v12.1 ru1 installed, ant-virus part.   machine domain controller , hosts fsmo roles. there was issue 12.1 ru1 running on domain controller , windows backup told install 12.1 ru2.   did started receive capi2 errors opened ticket symantec.   symantec said capi2 errors result of corrupt installation of sep , should run repair.   tried run repair , failed sep still functioning.   @ point started getting ntfs events listed below.   symantec said reboot , rerun repair, did , solved capi2 errors not ntfs event following in system event log: ntfs event 134 transaction resource manager on volume \device\harddiskvolumeshadowcopy20 encountered error during recovery.  resource manager continue recovery. number of shadow copy changes each time.   vss writers stable , ok. ...

ok, i'm quite new @ rras, pretty experienced windows server platform. installed rras , misconfigured it. after removing , reinstalling damned thing, every time right click role , click enable rras , configure, says "incoming connections enabled. use rras, must first open network connections , delete incoming connections." however, when open network connections, incoming connections not there!!!! doesn't show anywhere!! netsh interface ipv4 show interfaces   doesn't show it. can't figure out why doing , need fixed asap. any appreciated, cbiss sounds or else in past has created inbound connection, such vpn or sort of dialin access, it's hidden. when looking @ network connections, have under folder view, show hidden connections set? may have set in control panel, folder options. what shows in device manager if opt show hidden devices? ace fekay mvp, mct, mcitp enterprise administrator, mcts windows 2008 & exchange 2007 & exchange ...

i doing new installation using 443 , 8530. when tried access console manager received following error. have followed instructions in error. last thing done delete wsus file in mmc. when done server in update services disappeared. when tried connect server name told me "the server may using port or different secure sockets layer settings. next step going delete wsus shortcut on start menu. wasn't sure on procedures recreating it. have been working issue couple of weeks , keep running wall. the wsus administration console unable connect wsus server via remote api. verify update services service, iis , sql running on server. if problem persists, try restarting iis, sql, , update services service. system.net.webexception -- request failed http status 403: forbidden. source system.web.services stack trace: @ system.web.services.protocols.soaphttpclientprotocol.readresponse(soapclientmessage message, webresponse response, stream responsestream, boolean asy...

hi, suppose company has 500 employees , 300 use server software authenticate. 300 cals enough, right? does each user in ad require cal? if non-active? cheers i recommend reading explains when need cal: http://blogs.technet.com/b/volume-licensing/archive/2014/03/10/licensing-how-to-when-do-i-need-a-client-access-license-cal.aspx?pi69947=4 this posting provided no warranties or guarantees , , confers no rights. ahmed malek my website link my linkedin profile my mvp profile Windows Server  >  Windows Server General Forum

hello, i tring activate server 2008 core os , i'm getting following error when run slmgr.vbs -ato. windows script host --------------------------- run 'slui.exe 0x2a 0xc004f050' display error text. error: 0xc004f050  apreciated. thanks... deva deva --self-trust first secret of success. hi, open control panel, open system, click change product key , type mak. once computer connected internet, can activate system. if cannot change key, please let me know exact wording of error message. please confirm trying change mak. tim quan - msft   Windows Server  >  Server Core

on new installation of sbs2008 couple of days ago started getting whea-logger errors event id-19 , said problem memory controller , reading error indicates bank 8 . event appearing every few minutes. real hardware issue or previous update on system. log name:      system source:        microsoft-windows-whea-logger date:          2/2/2011 9:07:17 am event id:      19 task category: none level:         warning keywords:      user:          local service computer:      meserver.meengineering.local description: corrected hardware error occurred.  error source: corrected machine check error type: memory controller error processor id valid: yes processor id: 0x10 bank number: 8 transaction t...

hi! have 2 days of lease time. how can calculate scavanging period , refresh, no-refresh days? dont understand how refresh no refresh works. can explain clearly? second question is: should use dhcp server deleting expired records? problem now, old records remains, clients not updating dns records. use "dynamically update dns , ptr records if requested clients", secure update. domain enviroment , clients xp , windows 7. because of problem, thought turn on scavenging. ok problem? thanks,! mine set dynamically update dns , ptr records.  i'm using secure dynamic updates.  configured user account for dhcp credentials.  check out blog excellent advice... http://blogs.msmvps.com/acefekay/ do search configure scavenging find relevant section. you want add dns servers dnsupdateproxy group in ad. Windows Server ...

i have created data collector set named "test". while creating job gave description of job "test desc". used happen in windows 2003 server, description displayed @ end of each row in counter log file. counter data collector set file of .csv type. the problem in windows 2008 server x32 , x64 is, description field displayed blank " " rather text given in description field while creating data collector. below example "(pdh-csv 4.0) (aus eastern standard time)(-600)","\\ svr1\processor(_total)\% processor time","\\ svr1\processor(_total)\interrupts/sec","svr 1" "06/17/2009 13:59:39.498"," "," "," " "06/17/2009 13:59:54.506","0.9368209681665185","948.06455084213405", " " ------->>>> here problem. should have "test desc" "06/17/2009 14:00:09.513","1.0407697394486104","1032.6818672702109",...

hi guys, is there commands sync internet time specific ip ? (in linux use command " ntpdate x.x.x.x" - x.x.x.x time server ip) i have time server has ip x.x.x.x i deploy 10 servers 2008 r2 , config date time server (check synchronize internet time server - default time.windows.com) ip x.x.x.x above how can obtain using script ? i have tried w32tm net time seems not worked. hello, w32tm should tool. this: w32tm /config /manualpeerlist:x.x.x.x /syncfromflags:manual /update w32tm /resync for additional parameters refer technet article http://technet.microsoft.com/en-us/library/cc773263%28v=ws.10%29.aspx csaba Windows Server  >  Setup Deployment