Posts

Showing posts from September, 2012

ADFS 3.0 - Implications of editing the onload.js file

hello. i have seen couple of posts around internet changing sign in input validation adfs 3.0 allow users authenticate without needing supply domain associated account. works well. however, says on microsoft documentation making changes onload.js file change validation not supported. while work, implications of making such changes? thank-you. this forum active directory directory services . you find assistance active directory federation services in msdn geneva forum: https://social.msdn.microsoft.com/forums/vstudio/en-us/home?forum=geneva . regarding question, pretty said on same article. specific modification not supported: adding new ui widgets (buttons, input type=text, etc.) adding custom code events overriding user input validation inject ajax, jquery, etc. and tells why: the same onload.js execute on adfs pages (ex. form-based logon page, home realm discovery page , etc.). need make sure code in script gets executed designed , not ex

Making VM dependent on Storage Volume

hi, i wondering if possible make vm dependent or migrate vm same node csv on hyper-v cluster. for example, have a vm directly attached volumes hard drives. these volumes sit on same storage fabric csv vm resides on. if hba on owner node1 fail, move csv node2. if vm 1 node1 lose attached volumes, if migrates same csv owner node volumes restored. so preferable if vm moved same node csv on after csv comes online. any suggestions welcome, thanks. i ended converting volumes vhds , attached csv vm , copied vhds there. apparently performance not worse pass through volumes. Windows Server  >  High Availability (Clustering)

Delegated "Reset passwords" on an OU

we create group , did delegated group ability "reset password" on particular ou, seems accounts in group.   when reset password, seems passwords not changing.  there other rights necessary accomplish this?   @ windows 2008 @ domain/forest level. you contradicting info provided earlier. if delegated user resetting password of user getting access denied message, implies lack of sufficient permissions. check "effective permissions" tab on properties of user password being reset granted to  delegated user , verify reset password checkbox checked on... if not, either user password being reset member of privileged group - or delegated user has not been granted proper permissions... hth marcin Windows Server  >  Directory Services

SMTPDIAG 10060

i'm kinda new smtpdiag tool , i'm not sure post question. when running tool, if used -d, runs through of our dns servers (which refers mx servers) , of course reports error 10060 because can't connect on port 25. then, when gets dns server can contact, still fails connect on port 25 (error 10061) because dns servers , don't listen on port 25. guess don't know i'm doing tool... thoughts or point me right forum if i'm in wrong place? thanks! hi, issue maked use smtpdiag ? regards, philippe don't forget mark answer or vote helpful identify information. ( linkedin endorsement never hurt :o) ) answer interesting quest ion ? create wiki article it! Windows Server  >  Windows Server General Forum

Windows 2008 R2 Failover Cluster Anti Virus Exclusions

i having difficulty finding authoritative list of failover cluster exclusions windows server 2008 r2.  i have 6 node geo cluster , noticed finally, when anti virus off, worked much better.  looking bit more into, there no directories listed in noscandir reg key.  assuming clusdb , cluster drives being scanned on , over.  can post or valid list of must excludes failover clustering 2008 r2?  also, if there print considerations, nice too. mac macananny 12 year ad , exchange design engineer osd department of defense federal contractor microsoft infrastructure engineer. hi mac, checkout following post where can find "official" av exclusion kbs a.e. hyper-v, failover cluster, sql, exchange, scom... environments. http://ramazancan.wordpress.com/2010/10/15/av-exclusions-in-windows-server-environments/ regards ramazan ramazan can [mvp cluster] http://ramazancan.wordpress.com/ Windows Server

Delete User Object from the Deleted Objects Container

i have user object in cn=deleted objects. need rid of possible causing issues replication. have tried use ldp following error message:   ----------- ldap_delete_s(ld, "cn=xxx\, xxx\0adel:421d9106-6bea-41a2-8c7f-887a4cb45775,cn=deleted objects,dc=xxx,dc=xxx,dc=xxx"); error: delete: no such object. <32> server error: 0000208d: nameerr: dsid-031001cd, problem 2001 (no_object), data 0, best match of:     'cn=xxx\, xxx\0adel:421d9106-6bea-41a2-8c7f-887a4cb45775,cn=deleted objects,dc=xxx,dc=xxx,dc=xxx' ----------- any appreciated. if knows of anyway delete object container, please tell.   thanks jai ................................. regards jai maharaj hi, try below link http://support.microsoft.com/kb/244344 Windows Server  >  Directory Services

DFS Open Files and Server Failure

hello in current setup have dfs name spacing , dfs replication configured between primary data server , secondary data server (located off site). i having discussion 1 of colleagues how dfs works , why , question came couldn't answer. i've had around net , couldn't find the answer... anyways, question "in event of server failure or reboot on primary dfs namespace/ replication server, happen file open? connect secondary server when clicked save? or lose work?" i guess make sense if user clicks save after failure , dfs picks failure , moves saved file replication partner.   does know happen in scenario? zeni   hi zeni, i tested scenario mentioned in hyper-v. created dfsr folder on 2 servers, using client open txt file on server1, pause server1 , try save change. process hang long time , give save option let me choose new place. sorry taking long time on testing. shaon shan| technet subscriber support in forum| if have feedback on our suppor

Terminal Server 2003 RDP port keeps changing

we have windows 2003 terminal server rdp port number in registry keeps changing.  when port changes, nobody can connect remotely.  in order fix issue, registry entry has changed proper port (3389) , server rebooted.  have run several av scans (using symantec antivirus 11) , come clean.  there user account (named "first") keeps popping in user list seems user forcing reboot of server implement port change.  user account gets added administrators group.  have removed account, changed of passwords users members of administrators group, user id keeps coming , port keeps being changed.  have suggestion solve issue?   thanks. you must in university :) remember having stuff happening students against admin's :) script , malware. while looking issue can change permission of registry key responsible system having write permission , admin group no access. disable account while keeping it. finding out running in background. info how find rootkit. also happens

Windows 2008 R2 and SQL Failover Cluster with Shared Storage on Lefthand SAN

Image
we setting few windows 2008 r2 servers sql failover clustering.  use our lefthand san shared storage our sql databases.  not sure how setup shared storage in cluster.  documentation or setting sql shared storage lefthand san appreciated. hi, the storage device mentioned “lefthand”, did mean hp lefthand san storage? from search found iscsi san, can use microsoft iscsi initiator connect storage. refer article connect iscsi storage: (ignore “configuring iscsi target” part in article) creating active/active sql cluster using hyper-v: part1 virtualized storage http://blogs.msdn.com/b/momalek/archive/2012/04/11/creating-an-active-active-sql-cluster-using-hyper-v-part1-virtualized-storage.aspx after that, refer following articles create sql server failover cluster: create new sql server failover cluster (setup) http://technet.microsoft.com/en-us/library/ms179530.aspx how to: create new sql server failover cluster (setup) http://technet.microsoft.com/en-us/library/ms17

Resized image (inserted with IncludePicture field) reverts to original scaling in Word 2016 after saving, closing, re-opening and refreshing (using F9)

the user documentation provide our software (goldsim) has 100s of images inserted using includepicture fields. have discovered image resizing not reliably preserved when using includepicture fields. can reproduced in simple way, describe below. (note, use word 2016, think problem has existed since microsoft went xml-based .docx file format) note: majority of our images scaled down 70%. reversion original scaling significant problem us. converted our images inserted pictures (using insert->pictures) includepicture fields using vba script. reason did 'links' dialog in word shows images in order if inserted using includepicture fields. also, if select image in document , open 'links' dialog, selects/highlights correct image in list (in 'links' dialog)  if image inserted using includepicture field . rely lot on 'links' dialog when have replace images (for example when release new major version of software , have update screenshots). here s

Import-CSV is blank and empty

my csv looks this name,address dave,dave@dave.com dave,dave2@dave.com dave,dave3@dave.com i've stored on c:drive, called 'alias.csv' , ran command: ps c:\>import-csv "alias.csv" | foreach {set-mailbox $_.name -emailaddresses @{add=$_.address}} it goes straight flashing cursor. but addresses not listing. i can add them individually no problem @ all. set-mailbox dave -emailaddresses @{add="dvealias@dave.com"} this works fine i'm thinking there must wrong csv.  try command: get-childitem 'alias.csv' | foreach { $check = import-csv $_ if ($check) { write-host "$($_.name) contains data" } else { write-host "$($_.name) not contain data" } } and comes does not contain data every time....it's not reading csv @ all.  if this: ps c:\> get-content alias.csv it lists contents of csv!! why import not working?  it worked yesterday lol thanks! * tried on pc ,

Redirection port doesn't work when I launch remote desktop from TS gateway

i’ m running windows server 2012 r2 remote desktop services. want redirect serial port. when use remote desktop laptop, port redirection ok. can read , write data on com port when launch remote desktop using published application  on ts gateway can't read , write data on com port. peripheral redirection allowed in  ts gateway strategy com port number 5 . when check server peripherals com 5 there. hi, on rd connection broker server, please open administrator powershell prompt , run commands similar below: import-module remotedesktop set-rdsessioncollectionconfiguration -collectionname "yourcollectionname" -customrdpproperty "redirectcomports:i:1" after making above change, please refresh rd web access page if have open , test launching remoteapp.  on prompt appears please click show details , verify ports checked.  next click connect , see if com port redirection working. please reply results, whether positive or negative thanks.

ISP blocking ports 135-139 & 445. Workaround???

Image
i'm server newbie, thank in advance speaking plainly. we upgraded dsl uverse , unable map our network drive our server (windows 2008 r2).  apparently uverse unwilling unblock ports 135-139 & 445 (why don't block them in dsl service??? idk).  can rdc server, not ideal. i have scoured forums workaround, nothing speaks issue. is there windows based solution?  here following suggestions have gleaned, don't want start installing things , messing around server if aren't going solve problem.  i'm not sure how work, more info great: microsoft loopback adapter ftpuse logmein tunnelier will of these allow me map drive on ports other 135-139 & 445?  or no better rdc? all our clients running win7 , map drive thru other isp. thanks help. hi mopsmom1,   thanks posting here.   a possible workaround never tested not sure if work. consider have host obtained valid internet address provided isp has not such restriction policy , configure p

Single Instance Storage not catching all duplicates

i purchased dell nx3100 nas unit running 2008 storage server r2.  enabled sis on d:\ , migrated of shares drive test out deduplication , performance of unit.  of data migrated deduplicated , shrunk storage down 25% of original amount.  preparing go live , decided configure shares, share permissions , folder security permissions , copy data nas live server on weekend make current , go live on monday new nas.  when tried copy live data receiving error , wouldn't let me proceed.  figured sis disabled , copied new data.  after copying data reenabled sis count of deduplicated files lower before.  dell told me remove sis ran sisadmin /u d:\ command.  disabled sis , when ran sisadmin /v saw no files in store @ all.  enabled sis again , performed scan morning.   showing have 12814 common store files , 62148 link files.  know not possible because when tested sis showing on 200000 link files , there more data.  volume has on 1.5 million files , i'm expecting more 800k of link f

File Server Migration Wizard (FSMW) Woes

hi, need simple file server migration ws2003r2 vm ws08r2 server. there 8 large shares migrate between servers. cannot file server migration wizard work, not close. i firstly add source server , testing choose 1 specific share i'd migrate. how add target server? seem able add source servers. can share light on this. thanks    opps, reliased wizard supposed installed on target file server , not source. i had read somewhere should installed on source going wrong. since installing on target pretty straight forward. although documentation on  the product quite lacking. Windows Server  >  File Services and Storage

Logon scripts do not run across domains

hello, i have following configuration: 1 forest 2 domains (non-contiguous), in 2 locations. i able logon either domain users either domain in each location. logon scripts in each domain work if user in domain logs on within domain. a user in domain1 can logon domain2 - logon script not run. it appears ie security problem if attempt run script manually machine in domain1 netlogon in domain2 presented 'open file' security dialog box. my question how can allow 'trust' instigated - thought domains in single forest intrinsically trusted 1 another. thanks much.   domains 'trust' each other - not mean has access anything....a domain security boundry.  still need specify resources in each domain security principles have access to.   it doesnt sound ie security problem here, permission trusted domain's sysvol directory (or other share) where scripts reside.   ward Windows Server

Powershell Invoke-RestMethod “Unable to connect to the remote server”

i write simple powershell script post json string server. have strange issue when execute script. the server inside our intranet, firewall disable intranet server. server uses http , no authentication required. i tried execute script in different places: powershell window in own computer   (windows 7, powershell 5) powershell ise in computer start powershell.exe in command prompt in own computer start powershell.exe in third party command prompt application in own computer powershell window in citrix seesion   (windows 10, powershell 5) start powershell.exe in command prompt in citrix seesion i checked of 6 places have executionpolicy "remotesigned", but, can execute script in last 3 places, in first 3 place, error invoke-restmethod : unable connect remote server @ f:\temp\test.ps1:46 char:9 + $resp = invoke-restmethod -method post -body $result ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + categoryinfo : no

multiple domains on one machine under one active directory on window server 2008 r2??

Image
hello respected experts, actually want add multiple domains on 1 window server2008(single machine).is possible or not please if possible guide me. thanx... only 1 physical server installation can domain controller 1 domain. however, can virtualize multiple operating systems using hyperv, vmware, etc. doing way, can host multiple guest servers under virtual host server, each own domain/forest. and if purchase windows 2008 r2 enterprise edition dvd, license allows install single physical hyperv host, , using same dvd, install 4 virtual guests. ace fekay mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003 microsoft certified trainer microsoft mvp - directory services technical blogs & videos: http://www.delawarecountycomputerconsulting.com/ this post provided as-is no warranties or guarantees , confers no rights.

Does Win 7 run TS?

i don't mean running rdp in w7 client ws2008 nor want rdp w7 single user only. i have 2 users using w7 machine simultaneously. (i know sounds bizzare question - reason long story). ta tomj01 sorry thomas, this not possible. need move rd session host server on win2k8. hope helps, kristin l. griffin co-author of windows server 2008 terminal services resource kit (and super big fan of microsoft rdv team!!!)  rds blog: blog.kristinlgriffin.com Windows Server  >  Remote Desktop Services (Terminal Services)

How to take ownership of objects with login script?

i need migrate bunch of data out of old user profiles new profiles on 2008 r2 rds session host.  i'd use powershell (2.0) login script calls robocopy ntfs permissions/ownership of source profiles (on server 2003 sp1) inconsistent , messed up.  there on 100 users in question. i'd when user01 logs in:    takeown /f \\my2003server\mydir /r /d y    icacls mydir /t /c /q /reset    call robocopy but... 1) user01 not administrator 2) login script run under user01's credentials 3) there second hop client, rds server, location of data on my2003server. are there features in powershell around these 3 challenges? is possible login script? how messed mean? focus on fixing source permissions first. don't retire technet! Windows Server  >  Windows PowerShell

Wsus Client

hi.. in wsus server console there many client computer not showing 100% updated. how can make 100% updated. zia zia the cause have update needed, but not approved. select updates view, filter on approval=not approved, , status=needed. lawrence garvin, m.s., mcitp:ea, mcdba principal/cto, onsite technology solutions, houston, texas microsoft mvp - software distribution (2005-2009) Windows Server  >  WSUS

SQL Server SP3 was not correctly installed

hi, i running windows server 2003 x64 , ms sql server 2005 enterpreis edition x64. there several local disks on server of sql: С:\ , x:\ ... the sql server installed on c:\program files\microsoft sql server\ the sp3 installed on sql server using wsus. recently have found out there folder on disk x:\ ( x:\596166c4744e026ff11d ) lot of files , folders "hotfixsql", "hotfixdts" etc. i have tried remove folder got error message: cannot delete sqlrun_tools: access denied. make sure disk not full or write-protected , file not in use. in file x:\596166c4744e026ff11d\1033\eula.txt have found following info: microsoft sql server 2005 service pack 3 so these hotfixes have sql server. i have move disc x:\ can not because of these strange files... but why these files not on disk c:\? and why necessary sql server? please me.. thank time evgeniya evgeniya, folder left on sql service pack 3 installation. it's owned system account, explain inability remove standard admin accou

ERR2:7422 The RPC server is unavailable.

i trying migrate user account (the same happens when tying migrate group accounts) , following error: err2:7422 failed move source object 'cn=something'. hr=0x800706ba  rpc server unavailable. info: i doing intra-forest migration. a few days ago migrated number of users (and groups before , computers afterwards) using exact same setup. can migrate computer accounts. using admt 3.2, installed on admt ws running win 2008 r2. both dcs win 2008 r2; both domains @ 2008r2 functional level. have admin rights in both domains (having succeeded migrate groups, users , computers before). explicit domain trusts in both directions verified work. firewalls , antivirus off on dcs , admt ws. admt ws, both dcs can pinged, admin$ shares , remote registry can accessed. dcs resolve thru dns. on three, rpc endpoint mapper , remote procedure call services started. no group policies used. any idea? andrej the problem solved disabling ipv6 protocol through registr

802.1x with MAC address authentication

Image
hello, we have 2008r2 nps authenticating clients via 802.1x (peap-tls - computer based authentication).  working fine. we want to allow non 802.1x supplicants (printers etc) connect network via same nps.  have created user in ad username , password mac address of non-802.1x device.  set following reg values on nps (as detailed microsoft allow nps read calling-station id value username) : hkey_local_machine\system\currentcontrolset\services\remoteaccess\policy\user identity attribute registry setting tells authenticating server use calling number (radius attribute 31, calling-station-id) identity of calling user. user identity set calling number when there no user name being supplied in connection attempt. use calling number user identity, set following registry value to 1 on authenticating server: hkey_local_machine\system\currentcontrolset\services\remoteaccess\policy\override user-name after set these , restart nps non-802.1x client authenticates 802.1x clients fail

Disable WLMS (Windows License Monitoring Service)

hi guys, how can disable wlms service on licensed server? according microsoft service should not suppose there on licensed windows 2008 r2 machine. http://support.microsoft.com/kb/2021579 but have service running on server, how can disable/delete service? the server activated service exist on server, don't know how service onto server. Windows Server  >  Setup Deployment

Problemas on having changed from 2003 to 2008 R2

hi, i'm installing new print server in windows 2008 r2 (x64). now, have installed print server in windows 2003 (x86) i'm using print services migration guide. have installed drivers printers x64 in w2003 server, , have same name x86 drivers. i have exported w2003 file configuration , after have imported configuration in windows 2008 r2. queues have been created ok. there drivers x86 archicture can not install. i have errors in events's viewer: id. 37. print monitor unknow (one every driver can not install) id. 808 error in file \drivers\w32x86\3\hpzpnp.dll (i don't know if driver can not install or driver) i try change print processor  to winprint raw, make new export , import in windows 2008r2 not work.     can me? thanks     you need remove hp copyfiles\hpbidi key printers that points 32bit file w32x86\3\hpzpnp.dll. look other posts file , my name.  hp 32bit driver writes key, 64bit driver never writes this.  normally 64bit clients thro

Local User in Administrators group

i have windows server 2008 r2 server, running application server, non-dc, non-ad. i need add local account administrators group. however, local user out of group after awhile. i have checked gpo , policy applied default domain policy. the way know can manipulate gpo: computer configuration -> windows settings -> security settings -> restricted groups. did not set on this. can me on this? what other machines in environment?   try run "gpresult /h c:\result.html" , see other gpo applied.   regards, ethan hua please remember mark replies answers if help, , unmark answers if provide no help. if have feedback technet support, contact tnmff@microsoft.com Windows Server  >  Security

Server restart

Image
can 1 me find event id find restarted domain controller running 2008 r2 enterprise... check event 4608 (startup) , 4609 (shutdown) also event 1074, give info need see picture below 1 of lab dcs.     thanks mike http://adisfun.blogspot.com follow @mekline Windows Server  >  Directory Services

Microsoft 2003 Enterprise Sp2, changing registered product key

hi, i trying chnage product key of 1 of servers (os version above) had found following information, have tried.   to change you’re current pid: 1.       click start , , click run. 2.       in open box, type regedit , , click ok. 3.       in left pane, locate , click following registry key: hkey_local_machine\software\microsoft\windowsnt\current version\wpaevents. 4.       in right pane, right-click oobetimer , , click modify. 5.        change @ least 1 digit of value deactivate windows. key, modify first 1 aa, make sure know – need in step 12. leave regedit open. 6.        click start , , click run. 7.        in open box, type following command, , click ok . %systemroot%\system32\oobe\msoobe.exe /a 8.        click yes, want telephone customer service representative activate windows , , click next. 9.        click change product key. 10.    type new product key (i use new r2 key) in new key boxes, , click update. when previous wind

Revoking Old Client Authentication Certificates After Workstation Is Reimaged?

what best practice when workstation returned and/or reimaged , reassigned new employee? if there connection or automation between deleting computer account ad , certificate getting revoked? if not, there way set up?  the people reimaging laptops not same people have access revoke certificates, , if were, easy forget step. is necessary manually revoke certificates when device not lost or stolen rather allowing reimaged system enroll new certificate , allow previous certificate expire naturally? what best validity period workstation client authentication certificates? certutil -view allows search certificates in ca database , export search results csv. powershell can used select certificate issued last , revoke others. running on issuing ca itself. short term certificates can describing it, window having 2 valid certificates longer in option above. i dont think there problem, e.g. if people cloned hard drives still have previous certificate , can use it. or has access b

Allow Logon through Terminal Services - Domain Controller

Image
hi, i have grant rdp access , local logon rights team os & hardware maintenance purpose. as part of task, tried grant remote login access normal user domain controller, couldn't not. i have added user id in "allow log on through terminal services" , "allow logon locally" under following location, , verified applied. computer configuration -> windows settings -> security settings -> local policies -> user rights assignment since not working, selected 1 domain controller, , denied other policies it. i.e, 1 policy applied selected domain controller (we have 4 dc's), make sure no other policy causing problem.domain controller could 1 grant access normal user login domain controller? here event security log event id: 4825 failureaudit: "a user denied access remote desktop. default, users allowed connect if members of remote desktop users group or administrators group. .................. . this event generated

How to disable/cancel existing offline folder caching for Windows 7 Via GPO?

i'm looking way rid of offline folders on desktop workstations including windows 7. we have policy disable already, on windows 7 grey out settings in user's interface.  now, offline folders still enabled on redirected folders (my docs), buttons configure grayed out.  syncing has not been disabled. we have these settings: if enable setting, users must manually select files wish made available offline. if disable setting or not configure it, redirected shell folders automatically made available offline. subfolders within redirected folders made available offline. note: setting not prevent files being automatically cached if network share configured "automatic caching", nor affect availability of "make available offline" menu option in user interface. note: not enable setting unless users not need access of redirected files in event network or server holding redirected files becomes unavailable." gpmc_settingname="do not auto

RD Gateway on different IP address

dear all, i have configured rd gateway service on a windows server 2008 r2 datacenter, separate ip address of service of machine. how go this? i understand have add ssl certificate ip address of service (as opposed ip address of machine), not sure need change configuration of iis , rds make happen. ideas? thank help. yours, fd hi, you need change bindings default web site in iis manager.  in iis manager, right-click on default web site, choose edit bindings, , change bindings reflect ip address want listen on.  example, server had 2 ip addresses: 192.168.1.33 , 172.16.10.33, , wanted rd gateway listen on 172.16.10.33.  in case change the https binding unassigned 172.16.10.33. the ssl certificate assign in iis manager , rd gateway manager have subject fqdn has dns record pointing 172.16.10.33. -tp Windows Server  > 

Setting automatic Updates for all computers in WSUS

Image
i work in department law firm, , have wsus , running on 1 of our backup servers.  we have employee computers in wsus , showing , grouped.  we need show reporting of automatic updates done auditors, trying figure out how set computers registered in wsus on backupserver automatically receive , download windows updates @ specified downtime.  i have tried googling around have found various types of answer, , not sure go with. any appreciated, , in advance! hi jerdwyer, if wsus clients domain joined, then, may use gpo configure automatic update, apply gpo wsus clients. gpo path follow: computer configuration > administrative templates > windows components >windows update: configure automatic updates, requirements, may choose option 4, auto download , schedule installation: if clients not domain joined, need configure au policies locally on wsus clients' local group policy, path same gpo. best regards, anne please remember mark replies answers if help. if

Intial App Launch shows logon screen

the initial launch of app shows logon screen title: waiting remoteapp programs start          please review messages appear showing our logon banner, , loading profile etc...is there way not show each user on initial app launch? edit: using windows 2012 r2 gateway , host hi, as far know, there no built-in method remove default messages presented on logon screen. best regards, amy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server  >  Remote Desktop Services (Terminal Services)

Failed Updates - does this log indicate why?

our wsus server (2012) reporting failed updates.  does log indicate direction go troubleshooting? there 11 updates failing. when i've seen similar on other machines, solution sometime select 1 of updates manual install , go through them few @ time until they're installed.  when try here, fails.  the log below trying install 1 of updates.  i've googled of error codes, didn't find particularly helpful.  thanks pointers! 2013-12-20 11:47:20:756 912 19b8 au au received approval ux 1 updates 2013-12-20 11:47:20:756 912 19b8 au au setting pending client directive 'progress ux' 2013-12-20 11:47:20:772 912 19b8 au begininteractiveinstall invoked download 2013-12-20 11:47:20:772 912 19b8 au auto-approved 0 update(s) download (for ux) 2013-12-20 11:47:20:772 912 19b8 au warning: failed wu exemption info nlm, assuming not exempt, error = 0x80240037 2013-12-20 11:47:20:772 912 19b8 au ############# 2013-12-20 11:47:20:772 912 19b8 au ## start ## au: downlo

Terminal Services Remote Apps Dilemma

suppose set user's notebook connect terminal server via ts gateway access published remote apps such outlook, work, excel etc. there icons on desktop each of these remote apps. long connected internet, fine. the problem face working offline. have office 2003 running on local machine, , use "my documents" foldr redirection, local apps have own desktop icons. this confusing users. is there way of having separate profile user can pick when connected network, , when they're not? i trying eliminate need vpn access, , use our existing terminal server 2008.   or there better way of doing overlooking?   cheers,   b the icons remoteapps installed via msi should have different name local programs, e.g. "remote microsoft office word" or effect. if have local version of application installed, 1 of these applications (local or remote) can take on file extensions, increasing confusion user.