Posts

Showing posts from September, 2015

Change home folder default permission?

i have searched on , can't seem find similar trying do. using windows server 2003 active directory. when create new user account on domain, use profile tab specify home directory user. when user logs in first time, active directory creates folder in specified path. working correctly. problem gives user full control on folder. has caused lot of problems because "clever" users have discovered thay can change permission on folder or subfolders beneath it. because don't want staff looking @ "sensitive" files. of course doesn't work since can take ownership of file , give myself permissions. causes trouble failed backups, inability scan these folders viruses, migration new storage etc. on occasion 1 of these users call me , ask file or folder restored, , @ point discover not have backup of files , cannot restore them. give them lecture, have on 2500 users, , can't talk them all. right have create account , login teh folder created, go take away full contr

How do I bypass the secpol.msc "Wizard" and set up IPsec state (esp, spi, enc, auth-trunc) and policy (src, dst, in, out, fwd) directly as in the Linux ip-xfrm command?

i had question redirected here microsoft community, although more general microsoft server: right off bat, wizard tells me can't use multicast address, when destination i'm interested in securing.  here want do--no more, no less (although may use transport mode instead of tunnel @ point): #!/bin/bash echo 2 > /proc/sys/net/ipv4/conf/eth0/force_igmp_version # note: avoid possibility of breaking igmpv2 snooping, src should defined senders, not receivers!  otherwise, joins compromised ipsec encryption, , switch not detect them. ip xfrm state flush; ip xfrm policy flush ip xfrm state add src 10.0.2.15 dst 239.192.1.1 proto esp spi 0x54c1859e mode tunnel reqid 0x67cea4aa auth-trunc hmac\(sha256\) 0xc8a8bf5ce6330699c3500bd8d2637bc1fa26929bab747d5ff2a1c4dddc7ce7ff 128 enc cbc\(aes\) 0xfdce8eaf81e3da02fa67e07df975c0111ecfa906561e762e5f3e78dfe106498e # aead rfc4106\(gcm\(aes\)\) 0x123456789abcdef0baddeed0deadbeeffeedface900df00d0fedcba987654321 128 #error: duplicate &

licence

 hi have 80 clint pcs &  want purchase server is(clint access license) compulsary each clint pc add in active directory domain controller 2012 ? is(clint access license) compulsary each clint pc add in active directory domain controller 2012 ? generally, yes. some references: http://www.microsoft.com/licensing/about-licensing/client-access-license.aspx http://www.microsoft.com/licensing/about-licensing/windowsserver2012-r2.aspx (read datasheet) http://blogs.technet.com/b/volume-licensing/archive/2014/03/10/licensing-how-to-when-do-i-need-a-client-access-license-cal.aspx there various options choose from, should consult reputable reseller/partner, various options considered, depending on current investments, , future plans. don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!)

Where are "Monitoring Reports and Alerting"?

in server 2003 sbs, there feature called "monitoring reports , alerts" configure server send me daily reports of warnings , alerts event log.  equivalent feature in server 2012? if there no equivalent, there recommended additional microsoft or third party product can same thing?  i'm talking about: https://technet.microsoft.com/en-us/library/cc707952%28v=ws.10%29.aspx it known event log subscription - https://technet.microsoft.com/en-us/library/cc748890.aspx?f=255&mspperror=-2147217396 . : | : . : | : . tim Windows Server  >  Windows Server 2012 Setup

PowerShell 2 Error Handling

i scripting active directory membership. but, whenever user happens in group, 4 line error. need ps ignore these errors, want told of more critical ones (i.e. user account not exist). possible suppress errors, while displaying more simplified customer error message? thinking might have using -erroraction cilentlycontinue if statement, uncertain.... well, makes me sad. installed quest ad snapin , works beautifully. why can't native cmdlets work 3rd party ones? going move forward initial answer , hope using 3rd party stuff not come , bite later. thanks help! Windows Server  >  Windows PowerShell

DNS highjacked?

hello everyone, i have problem on our 2012 server. outbound server traffic pegged , coming dns. here screen shot. <a href=" http://s1265.photobucket.com/user/pbohrer/media/dns.png.html " target="_blank"><img src=" http://i1265.photobucket.com/albums/jj504/pbohrer/dns.png " border="0" alt=" photo dns.png"/></a> our symantec software has found nothing. advice helpful. hello, this forum directory services, networking please ask in http://social.technet.microsoft.com/forums/windowsserver/en-us/home?forum=winservernis&filter=alltypes&sort=lastpostdesc and describe in detail how network built , post unedited ipconfig /all in other forum. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights.

When logging in or Off terminal services on windows 2008 R2 session pauses or freezes

i have problem server if user logs on or off through rdp or rdweb sessions freezes 30-60 seconds , if in freeze well. ive tried kinds of things avail. found out if disable print spooler problem goes away cannot figure out how resolve issue. server running in vmware environment.   thanks hi,   we need check following steps:   1.        whether of printer installed on server, if yes, please update latest version or uninstall of printer driver. 2.        are there anti-virus software installed on server , doing real-time scanning? if yes, please close , try use rdp log in server whether problem exists. 3.        to ensure client computer using latest remote desktop connection connect rds server. http://support.microsoft.com/kb/969084/en-us   more information: terminal server , connected terminal services clients pause when terminal services client logs on or logs off: http://support.microsoft.com/kb/324446/en-us support policy microsoft software runnin

Error when running gpupdate /force

when running gpupdate /force see error.  but.....only sometimes.    some users see others not. windows failed apply internet explorer zonemapping settings. internet explorer zonemapping settings might have own log file. please click on "more information" link. we running windows 7 workstations , 2008 gpo's. i've googled , points permissions happening on users power users or on 1 domain admin's account.  another thing mentioned site zone assignment list has entry has trailing *.   i've checked , no entry has trailing * what causes , how fix it? mqh7 some great articles joseph moody here: http://deployhappiness.com/series/ie-preferences/ don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!) Windows Server

Server 2008 unattend install - FirstLogonCommands and multiple commands to a line ( && )

hello, i in process of building unattended server 2008 unattend file. part of process customizing default system service states upon installation. unfortunately, have not been able find wonderful 'featurepack' list select how , want disabled / manual / automatic. the solution use 'sc config'. i drop in 1 'synchronous command', using && seperate commands not xml friendly, translates &amp;&amp; useless when entered in command line. is there way have: sc config aelookupsvc start= disabled && sc config alg start= disabled execute somehow within , during unattended installation? obviously if have i'll manually make 70 modifications manually own independent synchronous command. cheers, -aaron hi aaron   i following on issue after long time. temporarily closing thread , marking answer part of forum moderation. please feel free visit thread if still facing problem  , unmark question answered,or write solution others gets benificial.

Slow web browsing on server 2012 R2 domain network

hello, 2 weeks i'm facing extremely slow webpage loading on computers + servers in windows server 2012 r2 network (up 15 sec). once when page loaded it's possible normal browse on it. still haven't found out causing problem or started cause problem. seems if web page has more external connections load (analytics, ajax...) other sources, more page loaded. if page form 1 source loaded normaly. external dns configuration on client computer not solving problem. if pull both servers 2012 r2 out network , set clients use external dns seems web browsing works smoothly. pings time normal/ok. download speed normal. any suggestion? hi, based on description, we have protection or security software @ internet gateway? the following thread focused on similar issue , can referred more information. slow internet/web browsing performance while on active directory domain http://social.technet.microsoft.com/forums/windowsserver/en-us/eb36e

Remote app outlook

hi, i not sure if has come across issue windows remote app. when user uses remote app integrated outlook setup on user terminal server profile, user pc sort of hangs when sending out emails outlook. so when user click send on remote app software, messages start sending out , user cant clieck else or work on local pc until messages finishes sending. note there no direct answer great if can more ideas on troubleshooting. outlook version installed on server 2003. thanks everyone. cheers, pwint. did use install outlook in install mode? http://technet.microsoft.com/en-us/magazine/ff432698.aspx thanks, jeremy Windows Server  >  Remote Desktop Services (Terminal Services)

RDS Farm / RD Connection Broker

i have rd web access , rd connection broker on 1 server , rd session host on 2 other servers.  have configured 2 servers in farm config , pointed web access connection broker.  configure calc.exe remoteapp on both servers.  in web access see 2 icons calc.  doing wrong? i have right machines in right groups, see farm (rdsfarm) in powershelland see server count of 2.  web access server has cert rds.domain.com , 2 other servers have cert rdsfarm.domain.com used server auth , remoteapp signing.  these issued internal ca.  remote desktop connection manager has rd connection  broker configured remoteapp programs, shows 1 rd web access server, , remoteapp sources shows 2 servers.  both backend servers configured server name of rdsfarm.domain.com , sign apps rdsfarm.domain.com cert. thanks i found note in file remote desktop connection manager: "do not enter name of each rd session host server in rd session host server farm.  if do, users see multiple instances of remoteapp program icon

windows server 2012 R2 rebooted automatically after bugcheck

hi i have windows server 2012 r2 loaded in hp dl389 gen 9 server. i faced problem in windows server 2012 r2 , automatic roboot after bugcheck. the computer has rebooted bugcheck.  bugcheck was: 0x00000133 (0x0000000000000001, 0x0000000000001e00, 0x0000000000000000, 0x0000000000000000). dump saved in: c:\windows\memory.dmp it corrupt application software. regards, maunik sorathiya this 1 might help. https://support.microsoft.com/en-us/kb/3078584 otherwise if you're debugging these ones may help. https://blogs.msdn.microsoft.com/ntdebugging/2012/12/07/determining-the-source-of-bug-check-0x133-dpc_watchdog_violation-errors-on-windows-server-2012/ https://msdn.microsoft.com/en-us/library/windows/hardware/jj154556(v=vs.85).aspx       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, , confers no rig

PowerShell to Add GUI to Server Core (ServerCore-FullServer)

hi there stuggling work conversion of server core gui , again the command seems be import-module dism            enable-windowsoptionalfeature –online -featurename servercore-fullserver,      server-gui-shell,server-gui-mgmt however error not being able find source. i added -source d:\sources\sxs above command still cant find source. has managed work? this posting provided "as is" no warranties, , confers no rights. check out blog @ - http://chrisbeams.wordpress.com/ you can use -source option on non-internet connected machine.  here steps: create folder mount windows imaging file (wim) in command mkdir c:\mountdir determine index number server datacenter using command @ elevated command prompt: dism /get-wiminfo /wimfile:<drive>:sources\install.wim mount wim file using command @ elevated command prompt: dism /mount-wim /wimfile:<drive>:\sources\install.wim /index:<#_from_step_2> /mountdir:c:\mountdir /readonly

Security Audit 560 Filling Security Log

i have following event literally thousands of times on exchange server: winevtlog: security: audit_failure(560): security: system: nt authority: servername: object open:     object server: security     object type: key     object name: \registry\machine\software\microsoft\windows nt\currentversion\perflib     handle id: -     operation id: {0,3015636319}     process id: 4976     image file name: c:\windows\system32\wbem\wmiprvse.exe     primary user name: network service     primary domain: nt authority     primary logon id: (0x0,0x3e4)     client user name: servername$     client domain: domain     client logon id: (0x0,0x3e7)     accesses: %%1542     %%1543          privileges: -     restricted sid count: 0     access mask: 0x3000000    my question 2 part based on information above; a) access viloation should concerned with? b) if not serious how should go @ least eliminating event?  thanks. al i have same question.  network service trying access wmiprvse.exe every seco

LDAP Query Values

i have question values in ldap policies. the ldap policies caught attention when investigating issue exchange address lists. the value maxpagesize set 10000, while recommended value should 1000. aware value means , there bit of discussion whether or not should increase it. not sure root cause of problem, note maxvalpage set zero, shouldn't 0 in opinion. current settings: maxpoolthreads                  4 maxdatagramrecv                 1024 maxreceivebuffer                        10485760 initrecvtimeout                 120 maxconnections                  5000 maxconnidletime                 900 maxpagesize                     1000 maxqueryduration                        120 maxtemptablesize                        10000 maxresultsetsize                        262144 minresultsets                   0 maxresultsetsperconn                    0 maxnotificationperconn                  5 maxvalrange                     0 threadmemorylimit        

Bitlocker : Save to file option

while attempting turn on bitlocker os partition on member server , there 2 options on recovery file ; save file , save usb drive.  attempting select "save file "option , trying save in shared folder on different domain controller (root domain ). file not getting saved , says " file not found".  idea on issue? want recovery file stored on shared folder on root domain controller. servers running 2012 , dc on 2012. hi, we have tested saving bitlocker recovery file windows 8.1 machine folder located in windows 8 machine, successful. i suggest create new folder on root domain controller, grant full control permission. after that, try save recovery file new folder. if action above completed successfully, problem encountered permission issue on former shared folder. adjusting permissions should able solve issue. please feel free let know if there further requirements. best regards, amy wang

Is it possible to forward all external email that is being sent to a contact to an external address?

i have mail contact on exchange server. when inside network sends contact email, email forwarded external address. has been tested , works fine. need control happens when external party sends contact email. there way forward incoming email outside network being sent contact external address have associated contact? want forward external email coming contact external address. thanks. hi, please check if following link helpful: https://technet.microsoft.com/en-us/magazine/dd547068.aspx besides, seems question more related exchange, better help, please try post question on forum below: https://social.technet.microsoft.com/forums/exchange/en-us/home?category=exchangeserver best regards. steven lee please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows Server

Recommended Virus Protection for Win2k8

i'm building new network scratch , have decided run windows 2008 server.  can't seem find products antivirus protection.  know of being offered?  i'm running x86 on 1 server , x64 on other. hello,   currently, windows server 2008 certified anti-virus software list has not been published yet. however, following anti-virus software application claims support windows server 2008. may contact manufacturer more information.   kaspersky first jump in defense of windows server 2008 - kaspersky anti-virus 6.0 windows server enterprise edition http://news.softpedia.com/news/kaspersky-the-first-to-jump-in-defense-of-windows-server-2008-79773.shtml   symantec antivirus 10.2 windows vista , windows server 2008 http://shop.symantecstore.com/store/symnasmb/en_us/displayproductdetailssmbpage/themeid.106400/productid.78527800/pgm.13197500   meanwhile, before windows server 2008 certified anti-virus software published, may consider using anti-virus software certified

SBS2003 Standerd Ver R2: missing or corrupt ntoskrnl.exe. Lost CD :(

hi all, have responsibility server running (an oem version of) sbs2003 std r2; in last few days 2003 sbs o/s (on raid5) disks, crashed , remaining 2 disk became corrupted , left absolutely dead system; site uses appassure back-up/recovery solution, trouble managed restore c drive new single drive (not raid 5array) temporary fix replacement server arrived to be installed soon; on trying boot restored o/s getting "missing or corrupt ntoskrnl.exe" error;  have add seems of original system, driver & utilities (including os) cds have been lost; therefore not able run repair routine set disks; did try taking older back-up copy of ntoskrnl.exe, , replacing on restored drive seems file ok , throwing error message due other dependency? my question is: feasible i'll able repair restored drive, using copies of backed c: drive taken few weeks before died , therefore file/s condition should considered "healthy"? have no other copy of install or original dis

cant get credential roaming to work or Roam web credentials

we have ad environment windows2003 r2 sp2 date , windows2008 r2 sp1 domain controllers. i want setup credential roaming store (roam) the web passwords users store in credential manager in our rds2012r2 environment.  setup credential roaming policy , checked registry settings applied user correctly. passwords not roam users. i checked adschema version , correct. checked policy applied users , checked registry settings there checked adsiedit attributes credential roaming there. (but no values set) checked in users scheduled tasks task usertask-roam enabled , ready. no luck far, passwords not roam, stored windows credentials not roamed. use roaming profiles folder redirection (also the application data). when set credential roaming policy said folders excluded roaming profile automatically. i can not find eventlogs errors relating credential roaming. hope can advise? thanks, i'm not using credential roaming, but, found this: http://blogs.technet.com/b/a

Remote access Server Internet Sharing

hi, i using windows server 2008 r2 standard edition, have static address internet connection, before days remote access services abruptly stopped , denied vpn access clients, after reinstalling services our internal internet sharing stopped vpn logging in stopped. vpn clients error message of user not allowed log on server. when rights given user. please solve issue hi,   this network issue , forum focus on terminal services issue. may initiate new post in our networking forum. http://social.technet.microsoft.com/forums/en-us/winserverpn/threads   when vpn access denied, please check event log see if error information.   technology changes life…… Windows Server  >  Remote Desktop Services (Terminal Services)

WSUS 3.1.6 -- SQL Server Cluster Only Showing One Host

i monitoring sql server cluster updates in management console of wsus.  1 of database servers showing @ time.  imagine has being failover cluster how can have both systems display int management console can monitor patch levels? thanks philip it more has nodes of sql server cluster having been cloned same image, having same susclientid. here's how resolve that: 1. on passive node, delete registry values "susclientid" , "susclientidvalidation" in registry key hklm\software\microsoft\windows\currentversion\windowsupdate. 2. restart automatic updates service (net stop/start wuauserv, or use services.msc) 3. run command wuauclt /resetauthorization /detectnow. if you're working 2-node cluster, should resolve issue. if master image these database servers built used clone additional machines, then you should perform 3 steps on active node, ensure active node's susclientid not duplicate of other machine cloned master image. lawrence garvin, m.s., mcitp:ea, mcd

Can we Join another domain controller to the Primary Domain Controller for testing purpose?

actually scenario have 1 main dc running inside organization want test though dc because can not touch pdc testing purposes want make new domain controller , want join or associate pdc so question new dc effect live environment or pdc if test something? , please tell me if wrong please tell me solution problem want test application can not tested in live environment need domain controller testing purpose not affect pdc in case.    hi syed, not if new domain controller added production environment, no (or @ least not without causing severe breakage of environment). if working off virtualised infrastructure, can use backup software statefully existing domain controller, restore segregated environment such can't communicate production @ (i.e. private virtual network). physical resource separation work. requires more physical resources , comparatively speaking, fair amount of additional time configure. if it's solely exercise in ldap testing, @ active directory li

installation fails??

hi there!  i want install windows server 2012 on win 8.1 64 bit system.  setup starts , copies files system. setup reboots system , starts installing, screen shows 2 yellow dashes installation progress.  everythings looks ok, after rebooting again, setup repeats last step?? i read this: installation  is basic concept of getting new operating system on hardware. specifically, a  clean installation  requires deleting previous operating system. what can cope this??? have change e-drive bootable partition? or combination of thow os-'s on 1 system impossible?  kr, gert-jan hi, according description, seems want install 2 operating systems on computer, right? based on experience, able achieve. however, need check if computer meets system requirements both of operating systems. in addition, need install them on separate partitions. furthermore, must install older operating system first, , install more recent operating system. in case, need install w

printer in cluster environment

<!-- /* font definitions */ @font-face {font-family:"cambria math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:1; mso-generic-font-family:roman; mso-font-format:other; mso-font-pitch:variable; mso-font-signature:0 0 0 0 0 0;} @font-face {font-family:calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* style definitions */ p.msonormal, li.msonormal, div.msonormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"calibri","sans-serif"; mso-ascii-font-family:calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:calibri; mso-hansi-theme-font:minor-l

Burn img file to disc

i downloaded image file vista_6000.16386.061101-2205-lrmaik_en.img , instructions burn image dvd. instructions 1. click download button on page start download 2. click save or save program computer. windows aik distributed .img file. 3. burn saved img dvd 4. insert dvd machine 5. click windows aik setup begin installation   software use burn image? here's use. http://www.daemon-tools.cc/eng/products/dtlite -- regards, dave patrick ....please no email replies - reply in newsgroup. microsoft certified professional microsoft mvp [windows] http://www.microsoft.com/protect "wfinnin" wrote: i downloaded image file vista_6000.16386.061101-2205-lrmaik_en.img and instructions burn image dvd. instructions utton on page start download 2. click save or save program computer. windows aik distributed .img file. 3. burn saved img dvd 4. insert dvd machine 5. click windows aik setup begin installation software use burn image?

HyperV HDD Performance in host very slow

i've been happily running hyperv on windows server 2008 & 2008 r2 last couple of years. servers big pcs, nothing special. i've taken mobo used hyperv server, , installed windows 8 on it. has 16gb ram & 3.1 ghz quad core quite capable of running 3 or 4 vms. doing windows 2008. i've added hyperv role windows 8, , hdd performance on host grinds halt when more 1 vm running. disk average throughput measured hd tune pro drops 135mb no vm, 44mb 1, way down 0.7 mb 4. disk access time drops 15.3ms 23.8, 606.8 ms. my new 'server' running same hdd , not show similar drop in performance. it's happily running 6vms. i think leaves 2 possible problems: either hdd starting fail, or hyperv in windows 8 doesn't work in server 2008 r2. any thoughts? time replace hdd? thanks andrew andrew www.pursuittechnology.co.uk still talking myself! i've decided split vms across 2hdds now, without using raid. hopefully, windows 8 have updates improve things

KDC Proxy Server Service

Image
i have looked @ kdc server service dependencies lists http service cannot find service listed under services. missing? or doing wrong? i have attached image of the servers have installed, cannot use active directory because requires dns server , dns server needs a static ip not have. i using server for  development server website , software because running sql server 2014 enterprise edition.   hi, the kerberos key distribution center (kdc) network service supplies session tickets , temporary session keys users , computers within active directory domain. kdc runs on each domain controller part of active directory domain services (ad ds). kerberos key distribution center http://technet.microsoft.com/en-us/library/cc734104(v=ws.10).aspx Windows Server  >  Windows Server 2012 Setup

Unable to add Namespace in DFS server

Image
hi partaner, we have dfs server server 1 , server 2 deleted name space server 2 and when create again same name in server1 not working i unable add namespace server in dfs, on windows server 2012 r2 server2 regards, magdy does server (or was) hosting namespace called "public" ? open computer manager , open shared folders / shares.  have share called "public" ? this posting provided without warranty of kind Windows Server  >  File Services and Storage

Group Policy/Program Compatibility Assistant/PCA

since installing app ran in build 9841 , 9860.  in build 9879, i'm pca pop up.  read on how turn off pca using gp doesn't work in w10tp. a little more reading , disabled pca services , still pops up! found service in registry, start d word value of 4 disabled yet bugger still run! here's direct link app, should open asking key code don't far:  wrsa   have submitted support ticket them well.  being w10tp, not sure how response i'll get.  bill typically, hard block in place reason. bypassing hard block not recommended. if still want install program blocked, can try renaming installer files. brandon windows outreach team- pro windows pros on technet Windows 10 Insider Preview  >  Windows 10 Insider Preview General

SSL cert needed for Windows 2012 RDS environment.

i trying create seamless login experience windows 2012 rds environment.  currently, in collection broker security settings, using "negotiate" under security layer, , have "allow connections computers running remote desktop network level authentication" checked.   when purchase ssl certificate rd connection broker enable single sign on , publishing role services, can use single cert such mybrokerserver.mydomain.com?   rd web access role service , rd gateway, can use single cert such remote.mydomain.com? using wildcard makes more sense here, want use existed go daddy ucc , add additional websites.   please advise if have idea of should get.   thanks. here great blog explain have know certificates remote desktop services https://blogs.technet.microsoft.com/askperf/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services/ hth this posting provided without warranty of kind

The not so Easy, Easy Print Driver that refuses to work.

ok.... i running 2k8r2 standard, have several users work rdp windows 7 32-bit. printers hp 4345mfc, remote users , main users in office have same. my problem when try print rdp nothing happens, the  previous admin patched problem "ts print" not approach slow, , not great. have enabled, disabled, deleted , reinstalled every configuration , driver think of , yet nothing. however, if use imac @ home connect rdp have no problem printing!  what gives??  sorry im rather rusty @ this.. thanks  found fix believe... enabled full control users on system32/spools/printer folder.   Windows Server  >  Remote Desktop Services (Terminal Services)

Domain Sites and IP Site Links

i have 8 sites. have 2 or 3 dcs per site. dcs dns , gcs. building new 2012 dcs dns , dhcp installed putting 1 server in each site , removing rest. how setup sites , site links? cshsysadmin that depends on underlying network topology. basically, create  a site each office location (or set of connected subnets) , then create site links reflect wan topology (network connections between sites.) see designing site topology windows server 2008 ad ds more information.  gleb. Windows Server  >  Directory Services

Portmap service will not start

Image
portmap service not start win32_exit_code 31. exit code means “a device attached system not functioning.” not clear device. there no warning or error seen in device manager, there no error or warning logged in event log specific device except event-3002.  facing issue during of file service , service nfs installation in windows 2008 r2 server. other dependent services of nfs in running state except portmap because of nfs installation fails. there no other process using port 111 when error occurs still portmap service won’t start. following status of different services after installation failed. c:\ >sc query rpcxdr service_name: rpcxdr         type               : 1  kernel_driver         state              : 4  running                                 (stoppable, not_pausable, ignores_shutdown)           win32_exit_code    : 0  (0x0)         service_exit_code  : 0  (0x0)         checkpoint         : 0x0         wait_hint          : 0x0   c:\

Remote application access rights

hi all, i have 1 server windows 2008 r2 remote desktop session host installed. have on 2 application running remote app. 1. internet explorer 2. microsoft outlook how can give user x access internet explorer, , user y access microsoft outlook hi,     to achieve requirement, y ou may consider using group policy. there 2 options:   1.       run specified windows application (user configuration --> administrative templates --> system); 2.       software restriction policies (user configuration--->windows settings--->security settings) , click new software restriction policies.   to apply multiple local group policies different users, can refer following technet article: http://technet.microsoft.com/en-us/library/cc731758.aspx           thanks. Windows Server  > 

GPO Query

dear all, i have 1 query regarding gpo, have 2k3 native domain structure in our organization, have restricted users add in local admin through gpo, no body can’t install s/w in pc. but s/w team require right install software on machines , want give right without provided local admin right through gpo. wants right on single id install software on machines , nothing else. right have added id local admin through gpo , doing task without issue, want maintain compliance also. so please suggest me alternate way. without giving local admin right, able install software on domain machines , can’t on machines regards manjeet singh hi manjeet, thanks posting in microsoft technet forums. i don't think can use gpo grant users permission install software  without giving them local administrative right. here thread reference: how give full permission software users through group policy http://social.technet.microsoft.com/forums/en-us/winservergp/thread/d7ce2d51-2

Comparing text files and adding new text

hi wondering if can have 2 text file want compare. one final 1 , 1 temporary the temp file have new information in , want write these changes final file need insert them in same place in temp file example if final file has 1 2 3 6 7 and temp file has  1 2 3 4 6 7 to insert number 4 in @ line 4 mirrors temp file final file edited out side of script information needs remain intact , new lines added in correct location in file there may more 1 change in temp file great well compare not sure order $a = get-content ".\test1.txt" $b = get-content ".\test2.txt" compare-object -referenceobject $a -differenceobject $b -includeequal | where-object { $_.sideindicator -eq '=>' -or $_.sideindicator -eq '=='}` | foreach-object { $_.inputobject } | out-file -filepath final.txt -width 150 Windows Server

Error number: 0x801901F6

hello, i have windows xp sp3 .  when try windows update on pc receiving following error message on windows update page. error message website has encountered problem , cannot display page trying view. options provided below might solve problem.   [error number: 0x801901f6] thanks 0x801901f6 -2145844746 bg_e_http_error_502  the server, while acting gateway or proxy fulfill request, received invalid response upstream server accessed.   i venture guess either windows xp machine not configured use required proxy server, or proxy server not configured handle requirements of using windows update. the first step identifying device causing error. lawrence garvin, m.s., mcitp:ea, mcdba, mcsa principal/cto, onsite technology solutions, houston, texas microsoft mvp - software distribution (2005-2010) mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin blog: http://onsitechsolutions.spaces.live.com

Unable to reinstall NPS on SBS 2008

nps having problems starting, causing terminal services gateway fail.  thought remove , re-install it, when go reinstall error , need reboot. here clip of server manager log when install fails. stat] ---- cbs session consolidation ----- [stat]           'networkpolicyserver'[stat] installation(s) took '405.9855275' second(s) total. [stat] configuration(s) took '0.001957' second(s) total. [stat] total time: '405.9874845' second(s). 2960: 2011-02-24 21:13:21.690 [provider] error (id=0) sync result - success: false, rebootrequired: true, id: /rmtinstances/http___schemas.microsoft.com_sdm_windows_servermanager_networkaccessservices_2005_09_networkpolicyservertype_bc4b07be-8ee3-4ae3-bcaf-56ce26f0cd61.xml 2960: 2011-02-24 21:13:21.690 [provider] error (id=0) sync message - operationkind: install, messagetype: error, messagecode: -2147021879, message: <null>, additionalmessage: requested operation failed. system reboot required roll change

Group Policy Problem

i don't know begin 1 , looking suggestions on start troubleshooting. school system , have typical group policies desktops mapped drives, shortcuts on desktop etc. out of ever class logs in there 2-3 pc's don't policies session. if run gpupdate on them manually download , work. of ones not policies below error not always. never same machines or users nor time of day etc. , since running manually works there doesn't seem problems. can give me direction at? the processing of group policy failed. windows attempted read file \\domain\sysvol\crcsd.abc\policies\{31b2f340-016d-11d2-945f-00c04fb984f9}\gpt.ini domain controller , not successful. group policy settings may not applied until event resolved. issue may transient , caused 1 or more of following: a) name resolution/network connectivity current domain controller. b) file replication service latency (a file created on domain controller has not replicated current domain controller). c) distribut

My DC and Domain User`s Password Was Hacked

hi, recently find out when run query on  my  active directory and  dsa.msc on primary dc take long time run  , after days  one person claimed dc hacked him . tell me till each user change password can see new password online on application ,i think use pass hash method  or use periodic query dc high user privilege. i dont know name of application , way can see user`s password change on active directory? i changed domain administrator password , told me new password. i use microsoft tcp/view , microsoft processed explorer , did not see suspicious process , seems ok ,i use tcp view show s lots of tcp connection client machine , server . i dont know how solve problem , fin out how hacked , see domain user`s password. i want stop him , solve problem. you kind enough if helping me? regard hi samuel_emi, firstly found computer has hacked must backup important data isolate , cut off network connection because may infect others computer, far know there don’t