Posts

Showing posts from April, 2015

Group Policy Question

hi all, i have question regarding linking gpo's. i have default domain policy applies ou's in active directory. have 1 particular ou need apply custom password policy (change amount of days before password expires). i have created new gpo linked 1 particular ou. my concern is, gpo created scratch, not have of changes exist within default domain policy. if go , link new gpo 1 particular ou, settings within custom gpo override applied above via default domain policy? i'd prevent sure if so. i appreciate assistance/thoughts/feedback. hello, we can only have 1 password policy per domain unless have fine grained password policies implemented windows server 2008 has fine-grained password policies provide organizations way define different password policies different sets of users in domain. here step-by-step guide: http://technet.microsoft.com/en-us/library/cc770842(ws.10).aspx windows server 2008 – fine-grained password policies https://jorgequestforknowl

WSUS Client Communication to Server 2012

currently setting fresh 2012 box mdt2012 u1, wds & wsus roles. mdt& wds setup , functional after installing wsus role reconfigured gpo new port number , pointed test clients @ new wsus server. looks have communication solarwinds tool im still getting errors. wsus client log: 2013-06-05    15:11:22:720     128    994    au    ############# 2013-06-05    15:11:22:720     128    994    au    ## start ##  au: search updates 2013-06-05    15:11:22:720     128    994    au    ######### 2013-06-05    15:11:22:721     128    994    au    <<## submitted ## au: search updates [callid = {fb0d6c06-c8df-4f05-a546-cef44cfa9d63}] 2013-06-05    15:11:22:722     128    1bb4    agent    ************* 2013-06-05    15:11:22:722     128    1bb4    agent    ** start **  agent: finding updates [callerid = automaticupdates] 2013-06-05    15:11:22:722     128    1bb4    agent    ********* 2013-06-05    15:11:22:722     128    1bb4    agent      * online = yes; ignore down

Can't create a NFS Share on a Hardware Raid 5 with Windows 2012 Server

hello, i have areca arc-1882i raid controller raid-5 setup data device. on raid need nfs share system ssd accepted. how can setup nfs share on raid volume? yours rüdiger oh, that's easy :) cannot create nfs share on refs volume. period. use powershell script... http://technet.microsoft.com/en-us/library/jj603091(v=wps.620).aspx ...to nice "f ile system in target volume not supported nfs" message. p.s. 1 of tiny dirty secrets refs. that's why love :) starwind iscsi san & nas Windows Server  >  File Services and Storage

Naming Your Active Directory: Internal.local or x.External.com

we're creating new ad domain on new forest , want know best practices. our company owns  an external .com domain registered through registrar. i'd prefer set our ad domain x.external.com, advantages/disadvantages of each? (internal.local or x.external.com) hi, i suggest use internal domain (.local) name instead of public dns name (.com) active directory domain. see discussion on name choose between ace fekay (mvp) , todd j. heron, mvp, during summer of 2003. what's in active directory dns name?  choosing same public domain name, ".net" version of public name, or ".local" http://msmvps.com/blogs/acefekay/archive/2009/09/07/what-s-in-an-active-directory-dns-name-choosing-a-domain-name.aspx best regards, abhijit waikar. mcsa | mcsa:messaging | mcitp:sa | mcc:2012 blog: http://abhijitw.wordpress.com disclaimer: posting provided "as is" no warranties or guarantees , confers no rights.

RDWeb Error: The length of the URL for this request exceeds the configured maxUrlLength value.

server 2008 r 2 sp1 iis 7.5 remote desktop services 6.1 ( think that's right version) hey guys, having troubles with remote desktop services after installed new version of account software on our server use rds. got fixed , seems working fine not getting following error message in event log. know can limit amount of characters in http address curious know why keep seeing in address: https://server.website.com:443/rdweb/pages/default.aspx/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/en-us/default.aspx event code: 3005  event message: unhandled exception has occurred.  event time: 27/02/2013 11:56:46 am  event time (utc): 27/02/2013 4:56:46 pm  event id: 59cf01d722de49149bcff1eafc4ded2b  event sequence: 578  event occurrence: 13  event detail code: 0    application informati

Windows Server 2008 R2 Updateproblem

hallo zusammen, windows server 2008 r2 hat sich bei folgendem update offenbar aufgehängt "windows-tool zum entfernen schädlicher software x64 - dezember 2010 (kb890830)" installationsdatum: ‎15.‎12.‎2010 23:18 installationsstatus: abgebrochen fehlerdetails: code 8024000b alle folgenden updates sind fehlgeschlagen mit fehlercode: fehlerdetails: code 800706be neustart und neue updatesuche waren erfolglos. bitte um unterstützung diethard am 21.12.2010 schrieb diethardh: windows server 2008 r2 hat sich bei folgendem update offenbar aufgehängt "windows-tool zum entfernen schädlicher software x64 - dezember 2010 (kb890830)" installationsdatum: ‎15.‎12.‎2010 23:18 installationsstatus: abgebrochen fehlerdetails: code 8024000b probier es mit diesem artikel: http://support.microsoft.com/kb/958040 alternativ im abgesicherten modus die systemwiederherstellung auf einen zeitpunkt vor dem problem setzen. servus winfried c

Windows Server 2012 installation won't start

hi, i'm trying install windows server 2012 downloaded msdn subscription, i'm installing on hp 8100 convertiable mini-tower. windows loading files , when windows icon shows restart computer, , enter endless boot loop. sounds needs bios update.  hp support system running windows server 2012?  have downloaded latest bios machine?  if needs bios, need latest device drivers.  it's hardware vendor provide support platform run operating system.  sometimes, without support runs fine, if requires bios update, comes system vendor. .:|:.:|:. tim Windows Server  >  Windows Server 2012 Setup

Joining Win7 Ultimate x64 to WSE2012 fails

my question similar question posted in thread , op dealing win8. i have 4 workstations i'm trying join new wse2012 domain.  on first machine (x64) started process through http://server/connect.  seemed running along smoothly until end.  checked pre-reqs, asked domain user/pass , started profile migration.  asked restart did.  when came filled-in username "_clientsetup_$".  signed on domain\user had entered , saw old profile had not been migrated.  thought hiccup used user profile migration tool manually it.  looked fine , dandy after , ended doing same thing on next 2 machines (both x64).  came fourth machine (x86), went through same process on restart user profile had been migrated. i noticed launchpad on x86 machine , hadn't noticed on of other three.  went dashboard on wse box , noticed 3 x64 machines listed "offline", x86 machine not.  so, looking @ clientdeploy.log of x64 machines shows: [1516] 121108.125832.9247: clientsetup: makin

Block USB at User level through Group policy

hi have block usb through group policy.the real problem have here how apply @ user level. create gpo every pc in enterprise, how apply such if user object in managers ou, example, logs onto given workstation, can use usb sticks, optical drive etc, if user object in staff ou logs on same box usb storage, optical drive etc locked down, manager logs on again , it's opened again? machines in 1 ou @ moment.can busy me out please hi it not native feature of windows 2000 , xp. you can have better control on if using windows vista or higher. in windows xp , 2000 can try following options controlling @ user level. 1.create group  e.g en_usb_access 2. add users having pemissions use usb storage group. 3.set permission on hklm\system\currentcontrolset\services\usbstor using group policy, and  give allow-read permission en_usb_access group on key. remove other users/group acl or set permissions on following files using group policy in similar way.. %windir%\inf\usbstor.inf %windir%\i

Issue RDP when configuring SSO

ladies & gents, i having small problem on environment. have configured cb in ha mode, seperate web access server , 5 session host servers. when configure sso certificate internal ca , implement in cb, none of remoteapps work anymore. rdp connection cb not function anymore. at cb find following warning the server security layer detected error (0x80090304) in protocol stream , client (client ip: <removed>) has been disconnected. the funny part client ip address points server has absolutely nothing current environment. basically comes down this. if configure certificate coming internal ca not function. if use 'create new certificate' deployment options works. certificates web access , signing rdp files come internal ca , work fine. certificate sso seems prevent access applications , servers when coming internal ca anybody has idea cause of this? hi, comment. have installed rdp version 8.0 on windows 7 client? there 1 requirement sso work, i.

How to extract data in active directory database (ESE) ? ? ??

active directory 2003 server how information in ese database ,like user login , logout time , duration , how many pc , user connect on domain. msdn you can't unless write own utility using ese/jet apis: http://msdn.microsoft.com/en-us/library/windows/desktop/gg269259(v=exchg.10).aspx i have written such utility research , development: http://blogs.chrisse.se/2012/02/28/how-the-active-directory-data-store-really-works-inside-ntds.dit-code-1-3/ enfo zipper christoffer andersson – principal advisor http://blogs.chrisse.se - directory services blog Windows Server  >  Directory Services

Deploy Office 2007 STD via GP: can Office 2003 STD user customisations be preserved

am starting research deployment of office 2007 std via gp.  have office 2003 std deployed via gp working well.  in documentation have seen far, seems recommended if choose deploy (in effect) upgrade, new gp object deploy of office 2007 should configured first of uninstalled office 2003 before installing office 2007. my concern user customisations of office 2003 (e.g. individual user signatures outlook 2003) lost if go uninstall/reinstall option.  reason, considering not deploying via gp, rather putting network-based set of installation files on our intranet , asking people initiate install themselves.  hope preserve existing customisations such outlook signatures. can comment on this?  right in believing if deploy via gp, uninstall of office 2003 cause users lose these customisations? hi, out troubleshoot outlook deploying. suggest try narrow down cause of issue. create test machine , use gpo deploy office 2003 on it. 1. reproduce problem on machine. if couldn’t reproduce it, compa

Printing Issue Across Multiple Sites

hey all, just re-posting question directed forum: https://social.technet.microsoft.com/forums/windowsserver/en-us/ee68e50d-e241-4f15-ae3e-e1f81882aff3/printing-issue-across-multiple-sites?forum=winserver8gen&prof=required i have since managed sort of workaround problem still clarity on causes problem in first place, can implement proper solution. (the workaround install printer driver locally rather via print server) hi all, just wondering if has figured out way print reliably off-site location using windows server 2012 essentials experience print server. scenario site 1 located on coast on-prem hyper-v server hosting server 2012 essentials experience ad , print server, hosting server 2012 r2 remote desktop server. n.b. ad set replica domain controller shutting down existing 2003 sbs box. site 2  located on island off coast no on-prem server. staff connect rd server work copier located on site (xerox brand) issue  staff site 1 need print si

What is the difference between Updates for Windows 8.1 and Updates for Windows 8.1 for x64-based systems

i hope don't sound silly need know difference between 'update windows 8.1" , "update windows 8.1 x64-based systems". thought windows 8 version must running under x64bit system. i managing wsus , decline "update windows 8.1" , approve "update windows 8.1 x64-based systems". found dumb @ these 2 updates, thanks. thang mo i thought windows 8 version must running under x64bit system. desktop operating systems still available in 32-bit editions; server operating systems 64-bit only. as such, difference between "updates windows 8.1" , "updates windows 8.1 x64-based systems" same difference between "updates windows 8" , "updates windows 8 x64-based systems", which same difference between "updates windows 7" , "updates windows 7 x64-based systems", which same difference between "updates windows vista" , "updates windows vista x64-based systems", which

Distribution Group Management

hello, ok... seem having issues wrapping head around one.  have 10 inoffice distribution groups want end users manage though our corporate intranet.  have a sql recordset returns username , string of groups want belong to. i have script set loop through recordset , going have users either added or removed respective groups if needed.  here questions: 1.  how confirm user or not member of particular distributiongroup?  not return whole membership... 2.  logic here loop through 10 groups each user.. querying membership goes... seems large task 800+ users.  that's 8000 queries office 365.  not sure best approach. i not want try adding/removing users these groups without confirming weather needed ahead of time.  any guidance wonderful. thanks, ernst. the user cmdlets don't display group info ad does, have groupmember first.  ($username -in (get-distributiongroupmember $group).name) there isn't sense in doing though can see how long command takes.

Windows update error - 800B001

Image
running windows 2008 r2 x64 (no wsus) , manually ran windows update check new updates.  got following error: windows not search updates code800b001 - unknown error this used work, doesn't.  please advise. hi,   generally, can perform following troubleshooting suggestions troubleshoot windows update issue:   suggestion 1: temporarily disable firewall , antivirus program test issue.   suggestion 2: disable windows update service, rename folder %windir%\softwaredistribution , restart windows update service.   suggestion 3: reset windows update components check result. detailed steps, please refer following microsoft kb article:   how reset windows update components? http://support.microsoft.com/kb/971058   suggestion 4: run system update readiness tool (checksur.exe) scan , repair system files. if files cannot repaired automatically, may replace them manuall

Purple color for Start button and Settings app dissapear shortly after install completes

i have completed reset of latest win10 build 10041 see if fix error of grey colors. settings app grey , start button grey. looks nothing screenshots see on web. after install completed , desktop showed up, color on start menu had purple color. after minute screen went black white square in top left corner. pressed start button , desktop recreated start button grey color. i experienced same previous builds. anyone know how fix this? hi, could please share snapshot can better understand happened? regarding "gray", mean has been changed gray color\usable or button totally gray out\unusable? if related color, right click desktop\personalize\color, can change color want. if not case, settings app totally unusable, please open administrative command prompt , paste following command there , hit enter key: powershell -executionpolicy unrestricted add-appxpackage -disabledevelopmentmode -register $env:systemroot\immersivecontrolpanel\appxmanifest.xml please

Windows 10 Threshold 2 - WHS 2011 no longer connecting to server / showing offline on server

hi after microsoft carried out windows 10 threshold 2 upgrade, connectivity pc , whs 2001 server has been broken. has seen issue , worked out answer ? thanks this 1 might help. http://blogs.technet.com/b/sbs/archive/2015/07/23/client-connector-availability-with-windows-home-server-small-business-server-and-windows-server-essentials-for-supported-client-os.aspx or try asking them on here. https://social.microsoft.com/forums/en-us/home?forum=whs2011       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum

Windows 2003 server not installing any components from CD-ROM SP1 disk

i having trouble configuring , installing components because setup not able files on cd sp1 of disk 1 cd-rom drive. please advice. thank you. i think message deceiving. i'd create integrated install point following instruction , point resulting \i386 directory when prompted. http://technet.microsoft.com/en-us/library/cc784899(ws.10).aspx#integrated regards, dave patrick .... microsoft certified professional -microsoft mvp [windows] Windows Server  >  Windows Server General Forum

Windows Server 2012 R2 VPN. No Internet access for VPN clients

hi, i have following environment: 2 windows server 2012 r2 servers directaccess , vpn installed. directaccess configured in nlb therefore dhcp not used vpn clients , instead static ip range configured on each server delivered vpn clients. my problem is: vpn clients can connect vpn server , able access internal resources. cannot access internet. have been in rras console , configure nat on servers wan interface. can see in when choose “show mappings” on configured nat there traffic on nat interface when try access internet vpn client. can see in routing table in vpn server there route vpn client vpn server , can ping vpn client server. wrong since clients cannot access internet. what can doing wrong? thomas forsmark soerensen hi, this common issue when using vpn. uncheck option "use default gateway on remote network". you cannot connect internet after connect vpn server http://support.microsoft.com/kb/317025 hope helps.

NO INICIA WDS

estimados estoy instalando wds   en windows 2008 server, después de configurar el servidor este no inicia   y sale el siguiente mensaje “el servicio no respondió tiempo la solicitud de inicio o de control”, realizado los   procedimientos que indica el visor de eventos y aun así no inicia , estos son los siguientes:   http://technet.microsoft.com/en-us/library/cc726557(ws.10).aspx http://technet.microsoft.com/en-us/library/cc726739(ws.10).aspx espero puedan ayudarme.   atte.   eduardo gracias atilla.   al parecer solo puedo configurar uno la vez por dominio,   esto debido   a que tenía   un ris instalado   y el motivo era utilizar la nueva   herramienta wds, opte por desinstalar ris y   de esta forma pude instalar wds sin problemas.   las imágenes antiguas me quedaron como heredadas, pero se comportan de manera distinta ya que ahora al terminar me solicitan credenciales de dominio para unirse él y antes no lo hacía (las imágenes ya estaban ingresadas en dominio)   ,

remove the Windows Server Essentials Experience role

Image
our client running windows 2012 r2 standard server microsoft essentials service . liek remove microsoft essentials service. on microsoft website, says: q2: can remove windows server essentials experience role? answer: yes, can. however, need note following. 1. please use clean windows server essentials wizard clean firstly. use remove roles , features wizard remove windows server essentials experience role. otherwise , following error may occur (figure 4). how can find clean windows server essentials wizard or can send step step instruction or link? bob lin, mcse & cne networking, internet, routing, vpn networking, internet, routing, vpn troubleshooting on http://www.chicagotech.net how install , configure windows, vmware, virtualization , cisco on http://www.howtonetworking.com hi, once click uncheck “windows server essentials experience” below screenshot, “run windows server essentials clean up” prompted, click open cleanup wizard: best regar

Are "Refresh" and "No Refresh" intervals checked for DNSTombstoned=TRUE objects?

hello all, thank looking, hope can find clarification understanding of dnstombstone / update scenario. i have been troubleshooting issue in production dns server couple weeks now, , believe have narrowed down.  have made couple of assumptions need verify before able report on issue. the problem: initially noticed our ad-integrated dns zone , dhcp servers having trouble host (a) records, intermittently.  of our client machines write own host records (as configured) , dhcp write ptr records (as expected).  every , there ptr record written dhcp doesn't have host (a) records associated it.  the obvious first step ipconfig /registerdns client in question, doesn't work.  "dnsapi" event error saying request has timed out, , led me on wild goose chase.  have gotten point no longer believe event direct result of cause of problem. so moving on... started looking @ our "partially configured" not enabled scavenging settings.  know deleted record have dn