DNG

i have searched on , can't seem find similar trying do. using windows server 2003 active directory. when create new user account on domain, use profile tab specify home directory user. when user logs in first time, active directory creates folder in specified path. working correctly. problem gives user full control on folder. has caused lot of problems because "clever" users have discovered thay can change permission on folder or subfolders beneath it. because don't want staff looking @ "sensitive" files. of course doesn't work since can take ownership of file , give myself permissions. causes trouble failed backups, inability scan these folders viruses, migration new storage etc. on occasion 1 of these users call me , ask file or folder restored, , @ point discover not have backup of files , cannot restore them. give them lecture, have on 2500 users, , can't talk them all. right have create account , login teh folder created, go take away full contr...

i had question redirected here microsoft community, although more general microsoft server: right off bat, wizard tells me can't use multicast address, when destination i'm interested in securing.  here want do--no more, no less (although may use transport mode instead of tunnel @ point): #!/bin/bash echo 2 > /proc/sys/net/ipv4/conf/eth0/force_igmp_version # note: avoid possibility of breaking igmpv2 snooping, src should defined senders, not receivers!  otherwise, joins compromised ipsec encryption, , switch not detect them. ip xfrm state flush; ip xfrm policy flush ip xfrm state add src 10.0.2.15 dst 239.192.1.1 proto esp spi 0x54c1859e mode tunnel reqid 0x67cea4aa auth-trunc hmac\(sha256\) 0xc8a8bf5ce6330699c3500bd8d2637bc1fa26929bab747d5ff2a1c4dddc7ce7ff 128 enc cbc\(aes\) 0xfdce8eaf81e3da02fa67e07df975c0111ecfa906561e762e5f3e78dfe106498e # aead rfc4106\(gcm\(aes\)\) 0x123456789abcdef0baddeed0deadbeeffeedface900df00d0fedcba987654321 128 #error: duplicate ...

 hi have 80 clint pcs &  want purchase server is(clint access license) compulsary each clint pc add in active directory domain controller 2012 ? is(clint access license) compulsary each clint pc add in active directory domain controller 2012 ? generally, yes. some references: http://www.microsoft.com/licensing/about-licensing/client-access-license.aspx http://www.microsoft.com/licensing/about-licensing/windowsserver2012-r2.aspx (read datasheet) http://blogs.technet.com/b/volume-licensing/archive/2014/03/10/licensing-how-to-when-do-i-need-a-client-access-license-cal.aspx there various options choose from, should consult reputable reseller/partner, various options considered, depending on current investments, , future plans. don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!) ...

in server 2003 sbs, there feature called "monitoring reports , alerts" configure server send me daily reports of warnings , alerts event log.  equivalent feature in server 2012? if there no equivalent, there recommended additional microsoft or third party product can same thing?  i'm talking about: https://technet.microsoft.com/en-us/library/cc707952%28v=ws.10%29.aspx it known event log subscription - https://technet.microsoft.com/en-us/library/cc748890.aspx?f=255&mspperror=-2147217396 . : | : . : | : . tim Windows Server  >  Windows Server 2012 Setup

i scripting active directory membership. but, whenever user happens in group, 4 line error. need ps ignore these errors, want told of more critical ones (i.e. user account not exist). possible suppress errors, while displaying more simplified customer error message? thinking might have using -erroraction cilentlycontinue if statement, uncertain.... well, makes me sad. installed quest ad snapin , works beautifully. why can't native cmdlets work 3rd party ones? going move forward initial answer , hope using 3rd party stuff not come , bite later. thanks help! Windows Server  >  Windows PowerShell

hello everyone, i have problem on our 2012 server. outbound server traffic pegged , coming dns. here screen shot. <a href=" http://s1265.photobucket.com/user/pbohrer/media/dns.png.html " target="_blank"><img src=" http://i1265.photobucket.com/albums/jj504/pbohrer/dns.png " border="0" alt=" photo dns.png"/></a> our symantec software has found nothing. advice helpful. hello, this forum directory services, networking please ask in http://social.technet.microsoft.com/forums/windowsserver/en-us/home?forum=winservernis&filter=alltypes&sort=lastpostdesc and describe in detail how network built , post unedited ipconfig /all in other forum. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. ...

i have problem server if user logs on or off through rdp or rdweb sessions freezes 30-60 seconds , if in freeze well. ive tried kinds of things avail. found out if disable print spooler problem goes away cannot figure out how resolve issue. server running in vmware environment.   thanks hi,   we need check following steps:   1.        whether of printer installed on server, if yes, please update latest version or uninstall of printer driver. 2.        are there anti-virus software installed on server , doing real-time scanning? if yes, please close , try use rdp log in server whether problem exists. 3.        to ensure client computer using latest remote desktop connection connect rds server. http://support.microsoft.com/kb/969084/en-us   more information: terminal server , connected terminal services clients pause when terminal services client l...

when running gpupdate /force see error.  but.....only sometimes.    some users see others not. windows failed apply internet explorer zonemapping settings. internet explorer zonemapping settings might have own log file. please click on "more information" link. we running windows 7 workstations , 2008 gpo's. i've googled , points permissions happening on users power users or on 1 domain admin's account.  another thing mentioned site zone assignment list has entry has trailing *.   i've checked , no entry has trailing * what causes , how fix it? mqh7 some great articles joseph moody here: http://deployhappiness.com/series/ie-preferences/ don (please take moment "vote helpful" and/or "mark answer", applicable. helps community, keeps forums tidy, , recognises useful contributions. thanks!) Windows Server ...

hello, i in process of building unattended server 2008 unattend file. part of process customizing default system service states upon installation. unfortunately, have not been able find wonderful 'featurepack' list select how , want disabled / manual / automatic. the solution use 'sc config'. i drop in 1 'synchronous command', using && seperate commands not xml friendly, translates &amp;&amp; useless when entered in command line. is there way have: sc config aelookupsvc start= disabled && sc config alg start= disabled execute somehow within , during unattended installation? obviously if have i'll manually make 70 modifications manually own independent synchronous command. cheers, -aaron hi aaron   i following on issue after long time. temporarily closing thread , marking answer part of forum moderation. please feel free visit thread if still facing problem  , unmark question answered,or write solution others gets benificial. ...

hello, 2 weeks i'm facing extremely slow webpage loading on computers + servers in windows server 2012 r2 network (up 15 sec). once when page loaded it's possible normal browse on it. still haven't found out causing problem or started cause problem. seems if web page has more external connections load (analytics, ajax...) other sources, more page loaded. if page form 1 source loaded normaly. external dns configuration on client computer not solving problem. if pull both servers 2012 r2 out network , set clients use external dns seems web browsing works smoothly. pings time normal/ok. download speed normal. any suggestion? hi, based on description, we have protection or security software @ internet gateway? the following thread focused on similar issue , can referred more information. slow internet/web browsing performance while on active directory domain http://social.technet.microsoft.com/forums/windowsserver/en-us/eb36e...

hi, i not sure if has come across issue windows remote app. when user uses remote app integrated outlook setup on user terminal server profile, user pc sort of hangs when sending out emails outlook. so when user click send on remote app software, messages start sending out , user cant clieck else or work on local pc until messages finishes sending. note there no direct answer great if can more ideas on troubleshooting. outlook version installed on server 2003. thanks everyone. cheers, pwint. did use install outlook in install mode? http://technet.microsoft.com/en-us/magazine/ff432698.aspx thanks, jeremy Windows Server  >  Remote Desktop Services (Terminal Services)

i have rd web access , rd connection broker on 1 server , rd session host on 2 other servers.  have configured 2 servers in farm config , pointed web access connection broker.  configure calc.exe remoteapp on both servers.  in web access see 2 icons calc.  doing wrong? i have right machines in right groups, see farm (rdsfarm) in powershelland see server count of 2.  web access server has cert rds.domain.com , 2 other servers have cert rdsfarm.domain.com used server auth , remoteapp signing.  these issued internal ca.  remote desktop connection manager has rd connection  broker configured remoteapp programs, shows 1 rd web access server, , remoteapp sources shows 2 servers.  both backend servers configured server name of rdsfarm.domain.com , sign apps rdsfarm.domain.com cert. thanks i found note in file remote desktop connection manager: "do not enter name of each rd session host server in rd session host server farm.  if do, users see multiple instances of remoteapp program icon...

hi i have windows server 2012 r2 loaded in hp dl389 gen 9 server. i faced problem in windows server 2012 r2 , automatic roboot after bugcheck. the computer has rebooted bugcheck.  bugcheck was: 0x00000133 (0x0000000000000001, 0x0000000000001e00, 0x0000000000000000, 0x0000000000000000). dump saved in: c:\windows\memory.dmp it corrupt application software. regards, maunik sorathiya this 1 might help. https://support.microsoft.com/en-us/kb/3078584 otherwise if you're debugging these ones may help. https://blogs.msdn.microsoft.com/ntdebugging/2012/12/07/determining-the-source-of-bug-check-0x133-dpc_watchdog_violation-errors-on-windows-server-2012/ https://msdn.microsoft.com/en-us/library/windows/hardware/jj154556(v=vs.85).aspx       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, ,...

hi there stuggling work conversion of server core gui , again the command seems be import-module dism            enable-windowsoptionalfeature –online -featurename servercore-fullserver,      server-gui-shell,server-gui-mgmt however error not being able find source. i added -source d:\sources\sxs above command still cant find source. has managed work? this posting provided "as is" no warranties, , confers no rights. check out blog @ - http://chrisbeams.wordpress.com/ you can use -source option on non-internet connected machine.  here steps: create folder mount windows imaging file (wim) in command mkdir c:\mountdir determine index number server datacenter using command @ elevated command prompt: dism /get-wiminfo /wimfile:<drive>:sources\install.wim mount wim file using command @ elevated command prompt: dism /mount-wim /wimfile:<drive>:\sources\install...

i have following event literally thousands of times on exchange server: winevtlog: security: audit_failure(560): security: system: nt authority: servername: object open:     object server: security     object type: key     object name: \registry\machine\software\microsoft\windows nt\currentversion\perflib     handle id: -     operation id: {0,3015636319}     process id: 4976     image file name: c:\windows\system32\wbem\wmiprvse.exe     primary user name: network service     primary domain: nt authority     primary logon id: (0x0,0x3e4)     client user name: servername$     client domain: domain     client logon id: (0x0,0x3e7)     accesses: %%1542     %%1543     ...

i have question values in ldap policies. the ldap policies caught attention when investigating issue exchange address lists. the value maxpagesize set 10000, while recommended value should 1000. aware value means , there bit of discussion whether or not should increase it. not sure root cause of problem, note maxvalpage set zero, shouldn't 0 in opinion. current settings: maxpoolthreads                  4 maxdatagramrecv                 1024 maxreceivebuffer                        10485760 initrecvtimeout                 120 maxconnections                  5000 maxconnidletime                 900 maxpagesize                     1000 maxquerydurat...

while attempting turn on bitlocker os partition on member server , there 2 options on recovery file ; save file , save usb drive.  attempting select "save file "option , trying save in shared folder on different domain controller (root domain ). file not getting saved , says " file not found".  idea on issue? want recovery file stored on shared folder on root domain controller. servers running 2012 , dc on 2012. hi, we have tested saving bitlocker recovery file windows 8.1 machine folder located in windows 8 machine, successful. i suggest create new folder on root domain controller, grant full control permission. after that, try save recovery file new folder. if action above completed successfully, problem encountered permission issue on former shared folder. adjusting permissions should able solve issue. please feel free let know if there further requirements. best regards, amy wang ...

i have mail contact on exchange server. when inside network sends contact email, email forwarded external address. has been tested , works fine. need control happens when external party sends contact email. there way forward incoming email outside network being sent contact external address have associated contact? want forward external email coming contact external address. thanks. hi, please check if following link helpful: https://technet.microsoft.com/en-us/magazine/dd547068.aspx besides, seems question more related exchange, better help, please try post question on forum below: https://social.technet.microsoft.com/forums/exchange/en-us/home?category=exchangeserver best regards. steven lee please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows Server ...

i'm building new network scratch , have decided run windows 2008 server.  can't seem find products antivirus protection.  know of being offered?  i'm running x86 on 1 server , x64 on other. hello,   currently, windows server 2008 certified anti-virus software list has not been published yet. however, following anti-virus software application claims support windows server 2008. may contact manufacturer more information.   kaspersky first jump in defense of windows server 2008 - kaspersky anti-virus 6.0 windows server enterprise edition http://news.softpedia.com/news/kaspersky-the-first-to-jump-in-defense-of-windows-server-2008-79773.shtml   symantec antivirus 10.2 windows vista , windows server 2008 http://shop.symantecstore.com/store/symnasmb/en_us/displayproductdetailssmbpage/themeid.106400/productid.78527800/pgm.13197500   meanwhile, before windows server 2008 certified anti-virus software published, may consider using anti-virus software certified...

hi all, have responsibility server running (an oem version of) sbs2003 std r2; in last few days 2003 sbs o/s (on raid5) disks, crashed , remaining 2 disk became corrupted , left absolutely dead system; site uses appassure back-up/recovery solution, trouble managed restore c drive new single drive (not raid 5array) temporary fix replacement server arrived to be installed soon; on trying boot restored o/s getting "missing or corrupt ntoskrnl.exe" error;  have add seems of original system, driver & utilities (including os) cds have been lost; therefore not able run repair routine set disks; did try taking older back-up copy of ntoskrnl.exe, , replacing on restored drive seems file ok , throwing error message due other dependency? my question is: feasible i'll able repair restored drive, using copies of backed c: drive taken few weeks before died , therefore file/s condition should considered "healthy"? have no other copy of install or or...