Posts

Showing posts from August, 2013

LineNumber not reporting correctly

hi everyone i've been working on side project of mine helps me learn powershell , incorporate other languages, , i've hit bit of roadblock. my powershell script reads latest entry (the last line) of logfile everytime logfile has been updated.  when logfile updates, script reads last line of logfile , searches 2 specific words; gamestart , gameend. once finds 'gamestart' supposed remember linenumber , continue read latest entries until finds 'gameend' , remember linenumber. problem i'm having no matter line position, gamestart report linenumber 0 , gameend relevant position of gamestart, , not actual linenumber. (so if gameend found 77 lines down, reports linenumber 77 not actual linenumber) i'm using section of code monitor logfile updates: http://dereknewton.com/2011/05/monitoring-file-system-changes-with-powershell/ for testing purposes, have below lines confirm if position of gamestart , gameen

Event Viewer problem on Server 2003

on 3 server 2003 event viewer not opening , showing service unavailable, have restarted service on 1 server , restarted server still showing same prob, on other 2 servers not able start eventviewer service. have restarted 3 servers.   can expert on this?? please. hi manas,   the error 4201 caused ineffective permission on related registry keys , folders. suggest grant system full control on following folder:   c:\windows\system32\logfiles\wmi\rtbackup   after that, reboot server check issue.   besides, following links can reference:   fix event log service error 4201 instance name passed not recognized http://www.winhelponline.com/blog/fix-event-log-error-4201-instance-name-not-recognized/   windows server 2008 r2 event log not start - error 4201 http://social.technet.microsoft.com/forums/en/windowsserver2008r2general/thread/95d0a0f6-6162-4e86-afd4-579cae0679ce   i wish suggestion can helpful.   regards, cecilia zhou -------------

New-JobTrigger -AtStartup really doesnt work..?? :-(

hi, i tried code, works (at first look) good, jobs created , job "wsusupdate" trigger -at runs fantastic... job trigger, atstartup works never.... can explain me why?? i tried register ist local on myserver doesnt work too.. have idea??? $computername = "myserver" $cred = get-credential invoke-command -computername $computername -credential $cred -scriptblock { $termin = new-jobtrigger –once –at "june 03, 2016 11:35" $start = new-jobtrigger -atstartup register-scheduledjob -name wsusupdate -scriptblock { new-item -path "c:\wsus\jobfolder" -type directory -force} -trigger ($termin) -scheduledjoboption (new-scheduledjoboption -runelevated) register-scheduledjob -name wsusreboot -scriptblock { new-item -path "c:\wsus\jobfolder3" -type directory -force} -trigger ($start) -scheduledjoboption (new-scheduledjoboption -runelevated) } and scheduled-task isnt working me... startup jobs run under system account.  there no log

Windows server 2012 essentials and office 365 or Windows SBS 2011

hi, i setup small office enviroment dads company , having trouble making decision on best way forward software , licences. i have 2 proliant dl380g7 servers, 1 spare, same spec option 1 buy server 2012 essentials , office 365. question, can buy oem copy, issue if server 1 had issue , wanted swap disks server 2 in order things , running quickly? question2, can use existing office licences connect office 365 services exchange or need buy premium 365 suit , desktop versions included. option 2 use sbs 2011 , local mail services question, can still buy it? , same question regarding oem licencing. any advise appreciated. regards dan hello, about licensing issue oem windows server essentials edition, first of all, cannot have mor ethan 1 essentials edition on domain. windows server 2012 r2 essentials edition entitles run 1 instance in physical ose , 1 instances in virtual ose. if want run more 1 virtual ose (for example, have lightly or highly virtualized envir

short cut are deleted automatically from c:\users\Public\Desktop (Windows Server 2008 R2)

hi, issue :- public desktop folder shout cuts deleted automatically.  pls provide solution or suggest how stop issue. ravi you might try setting auditing. apply or modify auditing policy settings local file or folder       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum

Checksum error receiving frequently

dear all, i observed following error while checking packets transmitting server using 3rd party tool. please explain error: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- header checksum: 0x0000 [incorrect, should 0x34a6 (maybe caused "ip checksum offload"?)] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- what need prevent this... regards, jay jay :) see below article , per article there nothing worry. can disable checksum offloading. error can logged when there packet loss/duplicate or can't verified while routing request source destination. not major if have configured security @ gateway level real time monitoring. http://wiki.wireshark.org/capturesetup/offloading http://www.techsupportforum.com/forums/f137/wireshark-question-tcp-checksum-offload-248812.html awinish vishwakarma - mvp - directory services my blog: awinish.wordpress.com disclaimer posting provided as-is n

determine TCP receive window size

Image
i trying diagnose network performance issue on windows 2008 r2 server. need determine tcp receive window size. know how? realize r2 use auto-tuning parameter , know setting if auto-tuning disabled.thanks. hi hkg04, netsh tool might help. example: c:\windows\system32>netsh interface tcp show global querying active state... tcp global parameters ---------------------------------------------- receive-side scaling state          : enabled chimney offload state               : disabled netdma state                        : disabled direct cache access (dca)           : disabled receive window auto-tuning level    : normal add-on congestion control provider  : none ecn capability                      : disabled rfc 1323 timestamps                 : disabled initial rto                         : 3000 receive segment coalescing state    : disabled hope helps. jeremy wu technet community support

100% Disk usage on Windows Server 2008r2

hello guys! have hp proliant g6 server 4 1.5tb sata disks. 2 raid 1 arrays , 2 logical drives 1.5tb. 1 day ago mentioned twith resmon disk usage 100% , i\o speed not more 4mb\s server hangs.. how can troubleshoot it? perfmon's process counters include disk io data for each process start see what's going on you can run process explorer sysinternals uses same perfmon counters bit easier interpret if you're not big on perfmon analysis normally may able check task manager , processes busy may highest consumers of disk io, not case if you've changed in anti-virus scanning policies recently, allowing network scanning, exclusions dropped real-time scanning or manual scan being triggered in middle of day, can cause lot of high io check if have scheduled tasks running around time happening, backup tasks or other jobs can cause high io finally, if have battery backed write cache module on array, enable it, write performance

Log on as a Service

we have ad accounts used start windows 2003/2008 services. we have defined accounts in log on service gpo, on occasions, service not start. anyone have issue or ideas? thanks bill bacoyiannis hi bill,   in addition santhosh's suggestion, need confirm whether accounts has been granted "log on service" permission. you can run command "rsop.msc" verify it. if accounts has been granted "log on service" permission successfully, it's easier use hookapi capture logs when relevant service gets stopped.   you can follow steps below capture service statues logs.   1.     download files "detoured.dll, hookapi.dll" following path: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=71d6e5dc-f5d3-447d-a37f-e02e1fa22b78 password: uk20ueo1z7jojh 2.     put attached 2 files system32 folder. 3.     set registry key appinit_dlls hookapi.dll. hkey_local_machine\software\microsoft\windows nt\cu

Windows Clustering Failover Issue

environment - windows 2008r2 enterprise host machine a windows 2008r2 enterprise host machine b hyper - v virtual machine - windows 2008 standard (this vm on cluster high availability) i have working environment 1 nic added virtual machine. there no issue when failover clustered virtual machine 1 host host machine. after added 2nd nic virtual machine settings. failover primary secondary node fails on cluster @ 98% generating 2 event id 1069 , 1205. issue because of new network card after add virtual cannot figure causing. if remove network card failover works again. i keep both nic under same name on both host , host  b machine. cluster log during failover 00000fa0.0000166c::2017/03/17-02:45:52.893 err   [rhs] s_rhsrpccreaterestype: error_not_ready(21)' because of 'startup routine restype msmq returned 21.' 00001670.0000194c::2017/03/17-02:45:52.893 warn  [rcm] failed load restype 'msmq': error 21. 00001670.0000194c::2017/03/17-02:45:52.893

FIM CM - agent account creation

hi all! what "best" practice, shall create service accounts manually in ad , set rights need or shall let installation wizards work me? pros/cons? it ssems can specify both location , usernames in wizard, not display name.   i pre-create user accounts, set permissions on 3 certificate templates clmagent , clmenrollagent can enroll specific certificates. let wizard assign necessary permissions though. - allows custom service account names - allows assign passwords accounts - allows pre-enroll certificates if using hsm (designate thumbprints in web.config afterwards trodde att du skulle posta pÃ¥ svenska ;-) also, should posted http://social.technet.microsoft.com/forums/en-us/ilm2/threads brian Windows Server  >  Security

Unraveling the mystery of Group Policies for Windows 7

i have installed remote server administration tools on windows 7 administrator laptop in order install latest version of gpmc windows 7. have created central store on domain controllers admx files. when editting group policy still not see of settings. example, looking "point , print restrictions" setting, not appear. missing? can recommend links bring msyteries of group policy management in meaningful manner? subject matter appears on place. important should not difficult , confusing. actually should not difficult... ;-) what put "central store" will make available settings see underneath "administrative templates" node. all other stuff (e.g. security settings) related version of gpeditor , the registered snap ins.  there no dependency ad level version or schema version, e.g. see "wired network (ieee 802.3)" policies latest gpmc/gpedit anyway, but if ad schema not meet the requirements, warning message appear. so first question is: did use sour

2003 Domain Controller Migration to 2008R2

we have 2 domain controllers, both 2003, 1 primary , 1 secondary , we're planning on migrating 2008 r2.  new 2008 domain controller brand new server, what  happens our primary dc after promote 2008 r2 server be the new domain controller? primary , secondary 2003 dc's demoted member servers or manual process have on both? also, during migration process, dhcp server that's hosted on primary dc migrated on 2008 r2 domain controller? , other member servers have static tcp-ip settings pointing old 2003 domain controller dns? i'll have change dns ip's manually, assume? thanks help. there no primary or secondary dc concept in ad.   all dcs can perform read/write except rodcs. >>what happens our primary dc after promote 2008 r2 server new domain controller? nothing happen existing dcs.   you adding additional dc anexisting domain.   i anadditional dc in domain. >>does primary , secondary 2003 dc's demoted member server no.

Error at remote (RDP) login when "User must change password at next logon" is checked after expired passwords

hello, we have ad on windows server 2012. several users' password expired (!) , unable connect server using ad-account. connect remotely using windows remote desktop (rdp). i resetted password using rightclick on ad account , hit "reset password". leave "user must change password @ next logon" checked! when doing not (leave unchecked), able login set password unable change (maybe due minium password age - group policy. set 1 day, resettet 1 user yesterday still not able change, error occurs saying password not meet gpo, e.g. password restrictions, leglegting point @ moment). but when having option checked (user must change pw) users wont able connect server. raises authentication error. i found same problem here there no solution provided: http://www.experts-exchange.com/os/microsoft_operating_systems/server/windows_server_2008/q_28072013.html i read ports need opened because ports may opened connect connected users able change pw there must op

Workplace Join and Web Application Proxy

hi, i have setup workfolders using adfs authentication, implementing workplace join (hoping microsoft releasing ios client workfolders).  can workplace join test laptop which runs windows 8.1 when i'm connected network (connecting directly adfs server).  when i'm outside network (connecting through web application proxy) error: "confirm using correct sign-in info, , workplace uses feature.  also, connection workplace might not working right now.  please wait , try again." i have looked in event viewer , last log says "workplace join discovery succeeded" it's finding server. one thing have noticed if go https://enterpriseregistration.domainname/enrollmentserver/contract?api-version=1.0  i following: "< discovery xmlns = http://schemas.datacontract.org/2004/07/microsoft.deviceregistration.entities xmlns:i =" http://www.w3.org/2001/xmlschema-instance " > < deviceregistrationservice >   < registrationendp

View rights list of file server.

hi. i have 2 domains in different forests, , configured trusts. , need migrate users , servers between them. there's no problem migration of users (with sid history) , computers. before migration of file server, want take "snapshot" of users rights, if goes wrong edit rights manually. so, question: how can this? text file, or matrix of users rights folders, something, can me manually restore permissions. at moment, file server has difficult permissons list: wihout total inheritables, group access. mcsa 2003 icacls can you:  icacls c:\mydata\* /save aclfile.txt /t   gregor stefka hth Windows Server  >  File Services and Storage

test-connection cmdlet

hello run command ping servers in ad using test-connection  -computername command have read list of server names in text file using  test-connection -computername (get-content "c:\users\username\desktop\serverlisting1.txt") | select address,destination,ipv4address,bytes,times | export-csv "c:\users\eorosz\desktop\serverping.csv" output show results "up" or "down" on export csv file. found script  $inputfile = "c:\users\username\desktop\serverlisting1.txt" $outputfile = "c:\users\username\desktop\report.csv" $servers = get-content $inputfile $collection = $() foreach ($server in $servers) { #$status = @{ "servername" = $server; "timestamp" = (get-date -f s) } if (test-connection $server -count 1 -ea 0 -quiet) { $status["results"] = "up" } else { $status["results"] = "down" } new-object -typename ps

Rebuild of a storage space

hi ! i wondering if of knew this... if build storage space on physical server, , example, motherboard die. need buy brand new mboard, , fresh install of 2012-r2. how recover storage space built ? thanks in advance ! jtd mcsa, mcdst, mcts, mcitp transcript id: 825434 - access code: microsoft i wondering if of knew this... if build storage space on physical server, , example, motherboard die. need buy brand new mboard, , fresh install of 2012-r2. how recover storage space built ? storage spaces transportable between hosts. see: storage spaces faq http://blogs.msdn.com/b/b8/archive/2012/01/05/virtualizing-storage-for-scale-resiliency-and-efficiency.aspx q) can move storage pool 1 pc another, once created? example, if have cage 6 removable drives? yes. connect physical disks comprising pool new pc. however in real life can have issues (like logical volume manager). see: storage spaces migration issue ht

What ports need to be open

what ports need open on member server of child domain it's parent domain allow parent domain user account authenticate through login member server on child domain?   hello, see ports requirement ad. http://technet.microsoft.com/en-us/library/dd772723(ws.10).aspx in addition, active directory replication on firewalls http://social.technet.microsoft.com/wiki/contents/articles/active-directory-replication-over-firewalls.aspx best regards biswajit biswas disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. mcp 2003,mcsa 2003, mcsa:m 2003, ccna, mcts, enterprise admin Windows Server  >  Directory Services

Folder Redirection for Documents

i have ou linked gpo has folder redirection settings documents on windows 7. unfortunately, doesn’t work after run”gpupdate/force”. any ideas, in advance! what error message logged in event log & can try rsop.msc on windows 7 machine & see, exact policy applied. below article might you. http://technet.microsoft.com/en-us/library/cc787386%28ws.10%29.aspx http://support.microsoft.com/kb/910206 else, post in gpo forum better assistance. http://social.technet.microsoft.com/forums/en/winservergp/threads   regards   awinish vishwakarma my blog:   awinish.wordpress.com this posting provided as-is no warranties/guarantees , confers no rights. Windows Server  >  Group Policy

can not find installed icon in metro

i have been suffering issue quite time. because of because schedule, have no time figure out settings change. when installed app on windows 8 or ws2012, app says icon appear in metro screen or whatever crap called browseable list of installed icons. installed programs never show up. 1 thing despite new windows prefer older win7 have use reasons. there way setting can changed command line?  it burden users because 1 has program location explorer , add manually either metro crap or task bar , sometime not evident executable file running program.  hi g_xpe, did check whether have used customized start screen policy? can refer following kb   to realize details: customize windows 8.1 start screens using group policy https://technet.microsoft.com/en-us/library/dn467928.aspx?f=255&mspperror=-2147217396 i’m glad of you! please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com

Minimum & maximum pasword age

hello, i making security policy document , require give short definition minimum , maximum password age. minimum password age defines minimum age of password before can changed maximum password age defines maximum age of password before expires could give me guidance, above definition correct? thanks. yes.   martin mal ein gutes buch über gpos lesen? no not evil, if know doing: or bad gpos? , if bothers me - coke bottle design refreshment :)) Windows Server  >  Group Policy

Need to Enable-PSRemoting without removing duplicate SPNs

Image
hi, i having crm environment in servers holding crm registered duplicate spns per pre requisite installation , proper functionality of mscrm. trying run scritps remotely on these servers fetching few informations. ps-remoting not enabled, not able execute "invoke-command" on remote servers. when try enable ps-remoting on servers, getting following errors , event logs. can please me enable ps-remoting without removing duplicate spns [its not possible remove duplicate spns break crm accessibility through vip]. hi sreeharisreekumar, thanks post. however, far know, don't have solution enabled ps-remoting without remove duplicate spn. by way, hit below link detailed troubleshhooting unable enable-psremoting failure: http://www.sysctr.info/2015/06/troubleshooting-enable-psremoting-error.html hope helps. best regards, elaine please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff

GPO Group Policy Folder Redirection Refreshing in Background on Windows 10?

i noticed files , icons on desktop disappearing , reappearing periodically. i think group policy background refresh reapplying desktop redirection settings. can configured not remove , reapply policy users not temporarily lose access files during background refresh? hello, as far know, when gpo changed reapplied. according description, gpo applied, should not refreshed , reapply @ background. i suspect there other reason caused desktop icon disappearing. may check event log when icon disappear know whether group policy apply again. regards, yan li please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server  >  Group Policy

Printing between 2003 terminal server and 2008 r2 Remote Desktop server

our company has 2008 r2 remote desktop server. users log in server login 2003 terminal server in 2008 session. there way allow printer redirection client through both servers? right users can access local printers 2008 server. when log 2003 server thier printers not vissable. example user on xp client logs 2008 server , local printer shows redirectect easy print printer. when logs 2003 server through 2008 remote desktop... nothing   any opn great. have had hard time finding info on this. not sure how google it.     sorry dave, what doing (the double hop) not supported. even if were, an easy print printer not map anyway because not install equivalent driver on 2003 server. can try using drivers on 2008 server (not easy print) , seeing if see printers if install printer driver on 2003 server, have never done exact thing, can't outcome be. , again, not supported. hope helps, kristin l. griffin super big fan of remote desktop virtualization team!!!)  rds b

Group Policy not installing software on Windows 7

we have added several windows 7 pc's to our 2003 ad.  have several policies working fine on windows xp.  of policies work on our windows 7 workstations.  however, unable software install via gpo's @ system statup.  ran rsop , shows "installation pending".  suggestions?    it may required a reboot.also see events more info. best regards biswajit biswas disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. mcp 2003,mcsa 2003, mcsa:m 2003, ccna, mcts, enterprise admin Windows Server  >  Group Policy

Mirosoft licensing Server 2012 Question.

dear all, i have little issue licensing. i have 4 hyperv servers (physical servers)  and have 6 vms on each server. (that server 2012 vms) . now question is, best licensing option me.  (sever 2012 r2 standard license?  datacenter? or  ? i’m confused microsoft license. regards, massontech datacenter per physical cpu, if have 2 cpu's in each physical machine need 8 datacenter licenses @ $4500 each, or 12 standard licenses @ $800 each,  need talk microsoft licenses pro make sure. try sell datacenter because allow unlimited on every host , if decide want to move vm host covered. because technically not have rights run more 6 @ given moment on hosts if it's 1 second. if decided purchase standard license each host allowing them run 8 each still cheaper 8 datacenter licenses. if math right need more 45 vm's total make datacenter licensing cost effective. Windows Server

Internet explorer redirection feature for Remote Desktop Services in Windows Server 2012

hi! do you know does windows server 2012 support internet explorer redirection feature remote desktop services?  the feature important our rds environment. if isn't can find feature rds? there no such feature in windows server 2012.  if running remoteapp , click on link within remoteapp, registered browser open on server remoteapp. don geddes - sr support escalation engineer - remote desktop services - printing , imaging Windows Server  >  Windows Server 2012 General

DNS - Data Exfiltration

Image
we validating one requirement in our test environment , like one help. requirement:  disable resolution of public dns name of internal dns server , proxy, allowing consult public dns name.  "after execute nslookup command address of domain, returning "non-existent domain"  and when run nslookup command address  of internet returning message  "server failed". "  need message "non-existent domain" appears when run nslookup command address internet , when run nslookup command  address of domain (dns), appear correct information, as the file attached. information, don´t have "forward" , "root hint" configured in dns.  the forward , reverse zones configured bruno vasconcellos batalha mcp/mct/mcts/mcitp-sa 2008/vcp 4.1 it´s solved. i create root zone , it´s over. thanks help bruno vasconcellos batalha mcp/mct/mcts/mcitp-sa 2008/vcp 4.1

Multiline registry keys not importing newline characters with Group Policy Preferences

we have program holds address in reg_sz, it's real pain in bum setup address our users. i trying use group policy preferences set address, however, when gpp applies registry key, newline characters seem replaced spaces. instead of this: 123 street road suburb city 45678 i get: 123 street road suburb city 45678 is there way can gpp apply registry key correctly? thanks! good idea. unfortunately didn't work :-(. everyone, answer no . cannot gpp. Windows Server  >  Group Policy

KRB_AP_ERR_MODIFIED between 2008 R2 DCs and a 2012 DC

for last month have been experiencing problems our ad replication. replication between our 2008 r2 dcs works doesn't last long between 2008 r2 dcs , 2012 dc. the significant error appears in event viewer kerberos krb_ap_err_modified. have reset account passwords netdom many times after replication doesn't last more couple of days before failing again. showrepl says -->  the target principal name incorrect . all dcs have configured primary dns , dc secondary dns server. if kdc service activated in 2012 dc, works fine. after activating kdc service in other 2008 r2 dc, kerberos errors begin in server's event viewer. net view \\windows2012_dc returns "access denied" when 2008 kdc service enabled. stop service , perform klist purge, everything works again.  none of dcs have been restored. no snapshot has been reverted either. gobl1n the issue got solved after modifying registry on w2008 servers  and giving priority ipv4 instead of ipv6: hkey_

RDS Image Quality; lossless or lossy?

hello, windows 2012 server rds desktop session lossless or lossy? in other words compressed desktop image/data of remote desktop reconstructed compressed data? use rds  for remote medical viewing task, desktop viewing must replicated across multiple hi-resolution monitors. image quality can not lossy or degraded in way. if had bandwidth lan&wan (which do), possible windows 2012 server rds... remotefx? thanks frank hi frank, you may set the rdsh server(s) to lossless using below group policy object: computer configuration\ administrative templates\ windows components\ remote desktop services\ remote desktop session host\  remote session environment configure image quality remotefx adaptive graphics     enabled image quality: lossless please see article below more information: remotefx adaptive graphics in windows server 2012 , windows 8 http://blogs.msdn.com/b/rds/archive/2012/08/06/remotefx-adaptive-graphics-in-windows-server-2012-and-windows-8.aspx

NIC Binding Issue?

i'm working on few servers 2012 r2, , having issues when ping host name it's coming vnic on private subnet , not vnic on lan subnet. causing issues application runs on lan @ times looks @ , when hits private side , not lan side errors. i have tried change order no avail, no matter replys 1 on private. have run following cmds; nbtstat -r , -rr, flushed dns. have not rebooted after actions. other information cisco ucs b series environment. any appreciated. thank you! @ tim; having same results @ adrian not acting dns server itself, no features enabled such. with said got working today. looking @ route print table noticed metrics same, in nbtstat different values (10 in route, 20 in nbtstat). prior changing metric value of 10 on nic trying work no avail. route metric defaulted 10 nics wasn't changing anything. changed value 5 , flushed, responded correct nic interface. (this in test lab) in production had change value on 3 nics. 2 iscsi nics showi