Posts

Showing posts from June, 2010

Extending Volume in a Mount Point in Drive C:

ia have dell array 4 x 600 gb disks , yesterday added 1 more disk , reconfigured array use space in same "virtual disk" of controller, fine now, after rebuild windows can see 550gb unpartitioned free space , i´m tryingo extend can´t! windows disks divided in 100 gb c: volume (system, boot, etc) , 1.5 tb volume in mount point called c:\data why can´t extend c:\data ? it´s becausde related c: drive? and if change c:\data to, let´s say, f:, extend , turn c;\data, wil work? i have file server , several apps running on c:\data mount point, , add 550gb space c:\data volume     ia have dell array 4 x 600 gb disks , yesterday added 1 more disk , reconfigured array use space in same "virtual disk" of controller, fine now, after rebuild windows can see 550gb unpartitioned free space , i´m tryingo extend can´t! windows disks divided in 100 gb c: volume (system, boot, etc) , 1.5 tb volume in mount point called c:\data why can´t extend c:\data ? it´s becausde

Disable Logon Locally and Interactively for A User (Not By GPO)

hi ! i going define , use accounts in 2008 domain used sql proxy accounts (running xp_cmdshell) to briefly, these accounts should not able login locally or remotely domain computers they should have log on batch job , service permission on sql servers (which have) i not want define gpo (or change default domain policy) , add 1 or 2 users (disabling logon locally) is there property user or less dangerous little side effects prevent these users log on locally or interactively ? hi, as per understanding, there 2 ways restrict users logon locally. 1. either can set policy “ deny log on locally ” denies user ability log on @ computer’s console using ctrl+alt+del or welcome screen or starting secondary logon session. has precedence on “log on locally” right. 2. way restrict user’s restrict machines user can log on interactively. ad administrators can restrict domain machines domain user can log on interactively using ad “log on to…” user account property. can asse

secure connection failed

Image
when try reach state farm site this: pharmerbill can reach other websites... ok, worked was: turned power supply off modem/wireless router shutting off switch on of 10 seconds ...turned on (rebooted it) , after few seconds able access state farm site... i hope helps else..thanks responding question.. pharmerbill Windows Server  >  Network Access Protection

Private proxy functions

maybe interesting demonstation of scope you'd never want use in practice, throwing out discussion: you can create proxy function quite this: function private:get-acl {get-acl | select  -expand access} when create proxy function cmdlet, have use $executioncontext.invokecommand.getcommand('get-childitem', [system.management.automation.command types]::cmdlet) in function script block invoke cmdlet function going proxy.  because in order of precedence functions resolve before cmdlets, , without function becomes self-referential , goes loop. the private: option prevents function being visible in child scopes.  since functions run in own scope effect hide existence of proxy function itself, and prevent loop. it means function available in scope created in.  added profile, change behaviour of get-acl used command line, same command used in child scope (e.g. using &{get-acl},  invoke-command {get-acl} or used in a called script) not see proxy function , use

MBAM-bitlocker compatible with 2003 functional level

i have my windows server active directory with my ws2003 r2 sp2 and extended the scheme so bitlocker can support the keys in the da , accomplished well, but when install mbam (microsoft bitlocker and monitoring ) on windows server 2008r2 to save in same da , 2003 not let me this configuration is supported ? mbam can manage the keys stored in a da with functional level 2003? hello, bitlocker not impose requirements on domain or forest functional levels. however, domain controllers running operating systems earlier windows server 2003 sp1 should removed mixed-functional-level environments (or upgraded), because backed bitlocker , tpm information not protected on domain controllers. have domain controller running operating system earlier windows server 2003 sp1? if so, either upgrade or remove domain. thanks zhang Windows Server

Unable to set static IP for a role

i'm trying set generic script role cluster. network server on (not controlled me) appears use dhcp assign ips servers mac address, other ips assigned staticly (dhcp not work else on network). when add roll, not given option of assigning static ip.  on step of configuration says effect of, "at least 1 address in cluster assigned dhcp" , option enter static address isn't there.  the role fails because it's unable obtain address dhcp. how can allow me use static ip? the initial cluster configured using dhcp.  if want use static ip addresses roles, need create cluster static ip addresses. . : | : . : | : . tim Windows Server  >  High Availability (Clustering)

Windows Server 2003 SP2 Standard Edition Auto Fail Over - Reg

hi all, happy new year. we have 6 64 bit servers connected in network windows server 2003 standard edition loaded in. our plan set 2 servers database server backup server, 2 servers application server backup server , 2 servers webserver backup server. is possible create , configure server cluster under windows server 2003 standard edition implementation of auto fail on functionality updates needed. any suggestions above implementation highly appreciated. thank in advance. regards, sharat. hi,   windows server 2003 standard , web edition not support cluster. setup cluster, must use windows server 2003 enterprise or datacenter.   http://technet.microsoft.com/en-us/library/cc736714(ws.10).aspx http://www.msexchange.org/tutorials/implementing-two-node-cluster-windows-2003-enterprise.html   tim quan Windows Server  > 

Runspace Permission from C# Web Service

i've got service allows clients call powershell scripts.  runs dandy-like long have permissions set allows domain users access script.  when restrict access specific user, fails. i've checked service , iis , shows service , method calls , running under specififed account.  ntfs shows specififed account has full access rights full path , script.  invoking pipeline fails claiming script not accessible. i can run script interactively under same credentials. something creating runspace not getting setup properly.  assumed runspace created full rights of user under service running... what missing? thanks. j http://digitalcamel.blogspot.com - .net, ilm, sql , else falls out of brain check out: http://www.leastprivilege.com/whatisaspnetconfig.aspx it problem , solution. j http://digitalcamel.blogspot.com - .net, ilm, sql , else falls out of brain Windows Server

File font garbled;

hi using run space run process against multiple machines , logging info temp files, , end of script concenating temp files final log files. notice when script runs temp files have neatly formatted info after concenating final log file text garbled? encoding? way overcome this. noticed new line not preserved , tabs/spaces etc in final file. http://social.technet.microsoft.com/forums/windowsserver/en-us/c0554226-071f-44a7-9f24-4600290d372e/runspace-threading-long-running-process?forum=winserverpowershell i using function write tempfile.  function global:writeloginfo { param (     [string] $msg, [string] $log, [switch] $noconsole = $false, [switch] $notimestamp = $false, [switch] $help   )      if (!$msg) {     return @{"exitcode" = $false; "exitmsg" = "-msg parameter mandatory."}   }   if ($notimestamp -eq $true) {     $outstring = "$msg"   } else {     $outstring = (get-date).tostring() + " - &quo

"The system cannot change your password now because the domain is not available" error message on a Windows 2003-based computer.

hi,   while logging on for cross forest authentication from windows 2003  r2 server user must change password @ next logon option. getting error "the system cannot change password because domain not available" error message on windows 2003-based computer. the msv1_0.dll file version latest. the computer account in "a" forest & user account in"b" forest. the normal loggin process working fine.the issue arise only when user has change password @ logon, when user try logon upn suffix user able change password. when user logon normal login process of keeping option log on domain name gets above error. kindly suggest if else can checked. regards, dharmesh shah       create external trust between 2 domains (the 1 computer accounts , user accounts reside). otherwise, stick upn logons... hth marcin Windows Server

Shadow copies tab is missing from ReFS on Windows Server 2012

Image
we're designing new infrastructure based around windows server 2012 i'm investigating new technologies, including whether should format file server drive in refs format - , problems might encounter. i'm aware it's not choice sql due lack of sparse files plain-vanilla file system, might thing use. however, use scheduled shadow copies allow users recover accidentally deleted/corrupt files during day before nightly backup kicks in. in lab environment, i've created 2 drives. 1 formatted nfts , other formatted refs. when @ properties of ntfs drive, shadow copies tab there: including f: drive - refs drive. however, when bring properties of f: drive, shadow copies tab missing: so configure shadow copies on refs drive, have select ntfs drive , select refs volume. a little bizarre? cheers, rob. hi, does have idea how shadow copy tab in disk properties window of drive. regards, rahul vaish

DFS replication group replicate only in one direction.

recently, discovered 2 rgs (out of 14) replicating in 1 direction. noticed because backlog keeps piling up. no errors in dfs eventlog. did notice in debug log there entries logged these 2 connection objects. [error:9033(0x2349) bandwidththrottler::throttlehelper downstreamtransport.cpp:6987 5628 c request cancelled shutdown] it appears connection attempts rejected sending member. not sure caused this. the remaining rgs seems working normally. please advice. thanks. alex hi mary, thanks reply. we have resolved issue.  both servers windows 2012 r2 servers. it turned out issue started happening after applied patch. https://support.microsoft.com/en-us/kb/3156418 after removing this patch, replications start working on folders. currently, blocking patch on servers until fix provided. alex Windows Server  > 

Microsoft Hyper-V Network Adapter Unknown in device manager

i have  unknow device in device manager in virtual machine on server 2012. virtual machine running server 2008 r2 sp1 exchange. not have network adapter , therefore no email. if try update driver told error occured while attemptiong install , device not configured correctly. (code 1). nothing have tried gets me round this. helpful suggestions appreciated. - ken merry hi - set inccident ms tech support , fixed problem after advising me teamed nics in virtual 2008 servers not advised - thanks Windows Server  >  Hyper-V

Micro Remote Desktop

hi all, good morning. hope well. i've noticed when change sound settings in session tab, not save setting. after quitting remote desktop, changed original setting. kind regards, bart hi, what's version of rdp client? how did change , save rdp sessions? for mstsc, save settings steps below: go rdp client (start --> run --> mstsc). when dialog box opens, change sound settings , click on "options" --> general tab. click "save as". best regards, alvin wang please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Remote Desktop clients

Steps to delete 2012 failover cluster resource

we have 3-node, 2012 failover cluster running on vmware 6.0, using rdm disks on emc vnx storage.  i have cluster resource need delete.  what steps delete resource? i'm thinking it'd this: 1. take resource offline 2. delete resource cluster mgr 3. delete storage cluster mgr. but after that, i'm not sure steps follow delete rdm vm's.  thanks. what resource trying delete?  sounds storage.  microsoft clusters have absolutely no knowledge of rdm disks.  disks clusters recognize ntfs or refs.  i'm not sure trying steps.  if vms have vmdk files on rdm, , want remove rdm esx, have move vmdk used cluster nodes other volume esx can continue present them vms. if misunderstanding trying do, please try explain environment , end goal in little more detail. . : | : . : | : . tim Windows Server  > 

Remote Desktop to server

Image
hi! i deployed windows server 2016 @ hyper-v. have installed ad, dhcp, dns, is, remote access (using nat), wds , wsus (it's test enviroment, don't worry ;) ) after that, changed rpd port 3389 3390 @ registry , work 3 minutes. after 3 minutes information , cannot connect server.    i'm checked logs moment , see error: do have idea can fix it? :( change 3389 work? then; netstat -aon to see might listening on 3390 may need add new inbound firewall rule 3390 tcp/udp     regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, , confers no rights. Windows Server  >  Remote Desktop Services (Terminal Services)

AD CS - user key deleted

i'm messing new pki in test environment.  i logged workstation domain administrator, encrypted file deleted certificate created on workstation in personal certificate store.  i see certificate on ca in "issued certificates" doesn't seem have private key.  how go recovering private key?  perhaps there's way i'm supposed it.  i've read key recovery agent can't find article on how use properly.  any pointers? now not nice of it? ;) it private key still on workstation. if certificate request id ca, can re-install grabbing ca database. 1. on ca, find certificate in issued certificates and request id 2. on client, use certreq retreive certificate again , save file. (certreq -config "<ca machine name>\<ca name>" -retrieve <requestid> <file.cer>) 3. on client, open new certificate file copy serial number. 4. while certificate open, click "install certificate...". tell install in personal store. 5. o

Adding/Replacing Domain Controller

i trying plan upgrade/change of domain controller in following scenario. have 2 2008 dc’s in our environment (dc01 , dc02, reference sake). primary vm running in core mode. secondary physical running in full gui mode. what trying bring new domain controller on network physical server , use same name , ip address dc01. realize can shift master roles dc02 concern lies in fact every host has dc01 primary dns entry not (an unknown amount) have dc02 secondary dns server. inevitably cause resolution issues once dc01 taken off line. question is, options exist bring replacement domain controller onto network configure use hostname , ip address of existing dc01 - since hundreds of servers statically configured primary dns point dc01. there no issue demoting existing domain controller (dc01), installing os on the physical platform same name/ip address , promoting the new server to domain controller (simply make sure remove references original dc01 following demotion - might want keep htt

Storage Array

good afternoon, i have question regarding hanging storage off of virtualized server.  i plan on building 2008 server , running hyper v.  i going create virtual server, 2003 server, , hanging 2 storage arrays off of server want 2003 server use.  the other virtualized slices wont use arrays 1 slice will. will work? thank you  tommy tommy rotunno hi,   your planned storage array should work if not usb devices.   currently, hyper-v vms don’t support usb devices. other types of storage devices supported.   if use usb deivces, try following work around.   1.             copy content host os , use internal network share it.   2.             connect vms using rdp , enable pnp device redirection @ client . open remote desktop connection-> options-> local resources tab-> more button-> select supported plug , play devices.   3.             third party usb on network solution .   please note: third-party product discussed here manufactured company indepe

WDS 2012R2 - WdsClient DHCP server error

we getting following error dell optiplex 7040 when connecting 2012r2 wds server. can boot via pxe , initial communication wds ok, following error: wdsclient:  an error occurred while obtaining ip address dhcp server.  please check ensure there operational dhcp server on network segment. searching around on google it mentions wds client may time out, not case here, left thinking must network driver issue, have tried adding many different network drivers wim file no effect i press alt f10 when error to go the command prompt , when type ipconfig windows ip configuration , no ip address. anyone have ideas? process works fine on optiplex 9020 hi gb1973, according description,it seems driver issue. far know,you should  extract , add the  corresponding drivers boot image,if added them all, getting hardware errors on pc.   best regards, cartman please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tn

Smart Card Auto-Enrollment Policies

Image
hi, setting smart card auto-enrollments , seeing aepolicy on hkcu location not being set 7 (as per technet trouble-shooting article https://blogs.technet.microsoft.com/xdot509/2012/10/18/troubleshooting-autoenrollment/. for certificate template have enabled auto enrollment valid certificate present , set auto-enroll security privilege users.  i able manually renew cert if open certmgr.msc. i getting following entries in registry, (all 2012r2 servers , domain functional level windows 8.1 clients) autoenrollment policy machine configured @ hklm\software\policies\microsoft\cryptography\autoenrollment\aepolicy = 7  (0x00000007) autoenrollment policy user configured @ hkcu\software\policies\microsoft\cryptography\autoenrollment\aepolicy = 39  (0x00000027) for group policies have following configured: is user aepolicy setting of 39 going ok?  if not, why setting 39? how can make 7? i wonder if has 2012r2 settings.  in gp certificate services client - auto-enroll

CPU Management

can dedicate 1 cpu core specific service eg. notpad.exe ? no other program or service can't access core. hello, afaik, it’s infeasible. setting affinity, can force application process use 1 specified cpu core cannot stop windows system processes using core. setting affinity, refer url below. http://www.online-tech-tips.com/windows-xp/set-processor-cpu-affinity/ thanks zhang Windows Server  >  Management

netsh export command 'pauses' clustered DHCP service and the cluster detects the service as failed

we have windows server 2008 r2 failover cluster runs dhcp clustered service. have windows server 2008 r2 dhcp server (not clustered) wish use warm standby dhcp server. warm standby dhcp server used if dhcp failover cluster fails. the idea run scheduled task on dhcp failover cluster performs "netsh dhcp export". export dhcp database file can copied on network warm standby dhcp server. on warm standby dhcp server, use script start dhcp service, run netsh import copy of dhcp database , stop dhcp service. the warm standby dhcp server not authorised in active directory.   in dr event, resume dhcp service, start dhcp service on warm standby dhcp server, authorise server in active directory , enable conflict detection. we have following problem seeking assistance with. when running "netsh dhcp export" command on dhcp failover cluster, netsh command pauses clustered dhcp service duration of export. once export completed, clustered dhcp service resumes normal o

restrict active directory access

i need implement 1 additional dc in 1 of our branch. want give local administrator privilage on adc support in branch. donot want give him access active directory users , computer. how possible there no "local admin privilege" limited individual dc unless referring rodc (as florian has pointed out). even then, though, resulting account is an ad domain account - not local account. the account referring exist - it's dsrm admin account - giving credentials support staff not want - since leaves ad vulnerable exploit/damage so, in short, should reconsider goals - since whatever asking not implementable hth marcin Windows Server  >  Directory Services

RDS VDI setup questions

i looking adding 10 thin clients office new server 2008 r2.  i use hyper-v , remote fx.  my question on vm create in hyper-v need have terminal services on allow thin clients access it? guess don't understand how of thin clients access same virtual image.  is there program handles or terminal services.  i not want co-workers accessing server os terminal services rather co-workers use same vm image  which can restored @ given time(we keep having virus/malware issues in office , im hoping downtime , cost of applying new windows os image of infected computers).   i going run "workgroup" win 2008 server r2 no domain or controller setup hyper-v , remote fx , deploy 1 vm image 10 thin clients.  so ts ok on vm in hyper-v?  i cannot imagine ts not running smoothly basic ms office , other small apps internet use on hyper-v  vm thin client.  i want basic setup cut down on long term hardware cost , eliminate constant re-installs of win7 images computers getting infected.

Windows 2003 upgrade

hi, we having single domain 65 dc's windows 2003. planning inplace upgrade of domain controllers windows 2003 windows 2008. schema updrade done. have few dc's running windows 2008 , windows 2008 r2 in domain. have question failover of upgrade process. if upgrade fails there way rollback of operation , windows 2003 server back. if upgrade fail planning reinstall server windows 2008 , promote dc freshly. take replication over wan. there way take backup of windows 2003 dc before upgrading , if process fails install windows 2008 fresh and use backup install dc media major replication on wan avoided. thanks, . if upgrade fails there way rollback of operation , windows 2003 server back.        in inplace upgrade, there no roll option. you need demote dc , promote again. if upgrade fail planning reinstall server windows 2008 , promote dc freshly. take replication over wan. there way take backup of windows 2003 dc before upgrading , if process fails install

Out of memory error for AD query

hi, i  wrote script fetch information ad computers, when running entire domain using full memory , cashing.  have options to  reduce memory utilization, or how can re-write ? get-adcomputer -properties *  -searchbase "dc=xx,dc=xx,dc=xxxx,dc=xxx ` -filter {objectclass -like "computer" -and operatingsystem -notlike "*server*"} ` |where {($_.passwordlastset) -gt (get-date).adddays(-365)} `  | select-object @{expression={$_.cn};label='systemname'},lastlogondate,operatingsystem,passwordlastset,ipv4address,enabled,distinguishedname ` | export-csv c:\scripts\ad-domaincomputers.csv -notypeinformation -force tojo hi tojo, there 2 things lower memory consumtion of query drastically. 1. try filter as possible in query. query computers ad , remove havent changed password during last year. filtering in query filtering on attribute pwdlastset. 2. limit amount of properites retreived each object. query each , every attribute of each c

Show Virtual Machine (HV) Mac address on phisical switch mac table

hi all, i have little problem hyperv conf, have phisical pcs connected same phisical switch, , 1 of pc 2012r2 have role of hyperv. in hv environment have different vm connected on virtual switch in "internal" way machine on same subnet of phisical lan. the problem if show mac addresses on phisical switch i'm not able see mac of virtual machine, seems virtual switch not forward vm mac address phisical swicth. is there way have mac addresses available on phisical switch mac table? vmware uses bridge type virtual switch, physical nic mac hidden physical switch infrastructure.  see vms.  physical infrastructure see direct vm. hyper-v not this, physical nic mac present, , vm vnic macs present on port (if sniff).  physical infrastructure see forward switch vm. in tables on physical switch, should still automatically update internal routing tables recognize this.  there arp sent out when vm started or migrated force update physical infrastructure routing

WSUS moving updatedservicesdbfiles

how move above files different location , drive, stored on c: drive , filling fast. how move above files different location , drive, stored on c: drive , filling fast. to move database files requires to: stop update services service. detach susdb database. physically move susdb.mdf , susdb_log.ldf files new destination. re-attach susdb database. start update services service. however... database that contributing excessive disk consumption, more storage consumed ~\wsuscontent folder. cleaning out wsuscontent folder of unneeded files first requires removing unneeded update approvals , using server cleanup wizard delete files. suspect more long-term results maintaining approvals , regular use of server cleanup wizard. also, ~\wsuscontent folder can moved volume using wsusutil movecontent utility. lawrence garvin, m.s., mcitp:ea, mcdba, mcsa solarwinds head geek microsoft mvp - software packaging, deployment & servicing (2005-2013) mvp profile: http://mvp.s

The request subject name is invalid or too long. 0x80094001

guys, i'm trying request certificate iphone using scep. whenever, make request following event info. event type:    warning event source:    certsvc event category:    none event id:    53 date:        2011/11/18 time:        3:36:23 pm user:        n/a computer:    myca-root description: certificate services denied request 823449 because request subject name invalid or long. 0x80094001 (-2146877439).  request mydomain\svc_ndes.  additional information: error constructing or publishing certificate more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.   i've looked @ document http://support.microsoft.com/kb/312344 , don't think cause issue i've setup ndes service based on following guides http://blogs.technet.com/b/askds/archive/2010/11/22/ipad-iphone-certificate-issuance.aspx  , http://www.cisco.com/en/us/docs/solutions/enterprise/borderless_networks/unified_access/ua_security.html i've been hun

PDC 2003 SBS Removed from Domain and 2008 R2 SDC cannot assume role.

i have tried active directory schema transfer , "the schema fsmo not found" error.  did netdom query fsmo , got: c:\users\administrator.lit1>netdom query fsmo schema master                   lr1.lit1.local domain naming master        lr1.lit1.local pdc                                   lr1.lit1.local rid pool manager               lr1.lit1.local infrastructure master          lr1.lit1.local command completed successfully. this lr1 server off domain , has been wiped.  how can sdc take on ad , become pdc? you need seize roles. http://support.microsoft.com/kb/255504 if didn't clean metadata need well, have happened if didn't dcpromo http://blogs.dirteam.com/blogs/paulbergson/archive/2009/06/09/active-directory-cleanup-the-most-common-question-i-see.aspx -- paul bergson mvp - directory services mcitp: enterprise administrator mcts, mct, mcse, mcsa, security+, bs csci 2008, vista, 2003, 2000 (early achiever), nt4 http://www.pbbergs.co

Can't send Windows 7 guest ctl-alt-del

i'm new hyper-v.  getting , running , i've installed couple guests.  first 1 server 2008 r2 , other windows 7 (x86).  reason can't send control-alt-delete windows 7 guest while works fine server 2008 r2 guest.  knowledge both os's come integration components in place.  there reason why can't sent control-alt-delete windows 7 guest? right i'm pressing control-alt-end works ok if run virtual machine connection app remotely technician machine.  if first rdp hyper-v host , open virtual machine connection have no way of sending control-alt-delete without going full screen.  minor thing, little annoying. well...for reasons unknown me started working.  maybe bug fixed in reboot...although thought had rebooted.  have no idea.  responses Windows Server  >  Hyper-V

How can I set permission for a shared folder?

hello, i want share folder , set permission shared folder. i've shared folder. i used "net use z: \\server\folder" , "$shares=[wmiclass]"win32_share" $shares.create("\\server\folder","z:",0). both work expected. now want set share permission shared folder. i've use cacls , get/set-acl. can set security permission folder, not sharing permission level. is there cmdlet or other ways modify share permission? thanks, cyril hi  cyril,  to share file, recommend set ntfs permission instead of share permission second link posted, , can set ntfs permission cmdlet get/set-acl, more easy setting share permission cmd.  because access permission of shared file dependent on ntfs permission and  share permission,   set share permission everyone: full controll, can set cmd net share, , limit access permission setting ntfs permission. best regards, anna

Joining Domains into a single Forest

Image
hi all i trying find kb document relates needs joining in 2 domains. have not long taken on role has project bring 2 domains single forest. have domain called emea.local , asia.local both using own ad structures both have same e-mail domain name lets mycompany.co.uk, exchange in uk. project one: bringing both domains single forest minimum disruption end users. project two: placing exchange server in asia.local keeping same namespace of mycompany.co.uk thank you  it technically called migration. may need migration (may more 1 tool) tool achieve this.  have high level flow chart in following location using admt: http://social.technet.microsoft.com/wiki/contents/articles/5310.active-directory-migration-high-level-steps-and-flowchart.aspx?sort=mostrecent&pageindex=1 http://www.sivarajan.com/admt.html santhosh sivarajan | houston, tx windows 2012 book - migrating 2008 windows server 2012 http://www.sivarajan.com/ post provided asis no warran

Cant request certificate on 2008 r2 domain controller through MMC

i added 2 domain controllers new child domain.  both 2008r2 , built using same automated build.   1 dc able access certificate enrollment policy through certificate mmc, pick domain controller template, , install domain controller cert. when attempt same procedure on other server, see the  same enrollment policy listed, when choose next view available templates "enrollment error". "the specified network password not correct".   i couple of stored events in application log _____________________________________________________________________________________ certificate enrollment local system failed load policy policy servers id  {2194c258-e9fd-4265-80c3-415e2ba41553} (the specified network password not correct. 0x80070056 (win32: 86)) certificate enrollment local system failed because no valid policy can obtained policy servers id{2194c258-e9fd-4265-80c3-415e2ba41553} ____________________________________________________________________________________

Wake on Lan (WOL) not working on Hyper-V host

symptom: if last os booted , shutdown machine hyper-v server core, wake on lan (wol) not wake computer once shutdown. however, if swap out hard drive, boot machine linux, shut down, wol work. this seems strange able replicate situation consistently. possible hyper-v server core is, on shutdown, putting network adapter in sort of mode makes unable wol? recommendations how investigate further/resolve? machine: dell optiplex 980. bios updated latest revision, a16 network adapter: intel(r) 82578dm gigabit network connection hi danl, have created virtual switches? if yes, delete , try again. >> is possible hyper-v server core is, on shutdown, putting network adapter in sort of mode makes unable wol? when virtual switch created, binding protocols on nic changed automatically. in brief, nic act as a switch , virtual nic on vm , host connect communicate. in conclusion, nic not same original one, , suppose cause. best regards, leo please remember mark

deploying xp with xml file

hi all, is ther way deploy xp answer file using wds ?? becouse when try add xml file xp.wim getting error message "this image version doas not support adding unattended setup file"   hi all, i have answer !!! you should make sysprep.inf xp setupmgr , locate in c:\sysprep, then run sysprep.exe , chose resel--the computer shutdown. when start again should make *.wim it. then upload wim wds , add install image when deploying image not needed nothing.. enjoy Windows Server  >  Setup Deployment

Hosting Several AD LDS Account Databases on the Same Server

i host several independant account databases various web applications using active directory lightweight directory services.  have several applications each require own signon.  have installed ad lds on server , created several application partitons, can't have 2 user accounts same userprinciplename (upn) in 2 different partitions.  thought creating partitions make these 2 account databases independant.  apparently upn has unique throughout partitions.  how can set independant account databases? thanks my recommendation set separate ad lds instances.  these listen on different ldap ports on same physical server.  can use active directory lightweight directory services setup wizard create new instances. tony  Windows Server  >  Directory Services

Split-Brain DNS Deployment Using Windows DNS Server Policies

split brain dns deployment has been long standing conundrum dns administrators. dns deployment said split-brain (or split-horizon) when there 2 versions of single zone, 1 internal users , 1 external users – typically users on public internet. windows dns server based deployments, such scenarios called maintaining 2 different dns servers, each catering different set of users. if few records inside zone split brained or both instances of zone (internal , external) delegated same parent domain became management conundrum. another variant of split brain deployment selective recursion control dns name resolution. enterprise dns servers expected perform recursive resolution on internet internal users; while have act pure name servers (authoritative) external users , block recursion them. here shall see how these 2 scenarios can accomplished using dns policies. read more @ http://blogs.technet.com/b/networking/archive/2015/05/12/split-brain-dns-deployment-using-windows-dns-se

group policy error

when try open group policy show message . considering domains admin group policy error    failed open thr group policy object. may not have appropriate rights. details:     system cannot find path specified. hi, does error occur when open gpo or particular gpo? may try create new gpo test. please run "gpotool /verbose >>gpo.txt" , paste content here. if wouldn’t share content, please send gpo.txt tfwst@microsoft.com troubleshooting. and: 1. when did issue start occur? 2. is there change made on system? 3. does error occur on other systems? thanks. posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread. Windows Server

How to identify a cluster fail over?

hello, i looking event ids show cluster failed over. log? application, system, cluster, others? what initiated fail over? when fail on happened? etc... thanks, dom system center operations manager 2007 / system center configuration manager 2007 r2 / forefront client security / forefront identity manager critical / error / warning cluster events logged system event log.  informational events logged cluster operational channel. if there failure, see event in system event log thanks! elden Windows Server  >  High Availability (Clustering)

Terminal Services and Sound recording

hi all, i'm beta testing windows 2008 server , terminal services.  i've gotten sound work, but, find there aren't options recording.  true?  2008 terminal service not support sound recording thin clinet.  if case, there suggested workarounds? thank in advance. hi,   unfortunately, windows server 2008 doesn't support bi-directional audio through ts, audio playback.  however, believe citrix presentation server has ability.    one potentially write virtual channel plugin sort audio recording on thin client , have audio stream available on server.    hope helps, drew   Windows Server  >  Remote Desktop Services (Terminal Services)

Connecting Hyper-V to Dell iSCSI

hi, i have instance of hyper-v 2008 r2 hypervisor installed on hp dl360 g7.  i have dell equallogic lun allocated iqn , correct ip address configured allowed connect. i have configured virtual switch connecting hypervisor san , can ping it.  how provision vm in storage through hypervisor management console?  all server sees local or network storage not san. any advice, matt. don't connect iscsi target through virtual switch. use @ least 1 dedicated hardware adapter , ip. if haven't already, use iscsicpl.exe connect lun. once connected, use diskpart mount , format iscsi volume. list disk -- show disks; determine disk number of connected lun. select disk # online disk attributes disk clear readonly create partition primary -- creates partition using entire space of disk -- on destroyed. list volume -- shows volumes, find number volume created select volume # format fs=ntfs quick -- can add label="vm storage" or something, if want volume label assig

I'm currently using a 64bit wep key

i'm using 64bit wep key i've manually entered onto xp laptops in domain. i know not poor way of to wireless laptops onto network it's insecure too. i'm aware of pupils using linux live cd "discover" wep key.  i'm running pure windows server 2003r2 domain , have isa 2006 server used filter web i'm afraid. i know access points support 802.1x "radius servers" i'm afraid don't know radius server is? does know of quick start guide better wireless security in windows environment.  saw wireless settings in gpmc again pointed radius servers.  i'm afraid don't know concept of how wireless security works radius servers? cheers help? hello, if looking information on how deploy secure wireless environment, see following microsoft whitepaper. http://microsoft.com/downloads/details.aspx?familyid=269902e8-fc41-4eb1-9374-44612e64f0fb&displaylang=en%3e a starting place things wireless, see www.microsoft.com/wifi clay seymour - msft

powershell2 new-webserviceproxy soap security header

hi, i'm trying call web service require security header. i try : $appid = "username" $apppassword = "password" $apppassword = convertto-securestring $apppassword -asplaintext -force $credentials = new-object -typename system.management.automation.pscredential -argumentlist $appid, $apppassword $wsp = new-webserviceproxy -uri " file://c:\app\g.wsdl " -namespace "we" -credential $credentials everything seems fine: "$wsp | gm" return web service methods. when try send request, error occur: " blahblah....'no ws-security header found' ...blahblah" in g.wsdl, find this: <wsp:policy xmlns:wsp=" http://schemas.xmlsoap.org/ws/2004/09/policy "      xmlns:wsu=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd "      wsu:id="username_token">     <wsp:exactlyone>       <wsp:all>         <sp:supportingtoke

P2V Quick Migration in Hyper-v

is there specific tool microsoft to do complete physical virtual migration hyper-v?  vsmt virtual server 2005 work hyper-v ok? scvmm 2008 beta supports p2v (and v2v) hyper-v. the p2v hooks vss (volume snapshot service) , allows conversion of running physical machine. you can find here: http://www.microsoft.com/systemcenter/virtualmachinemanager/en/us/future-version.aspx you can find scvmm forums here: http://forums.microsoft.com/technet/showforum.aspx?forumid=1825&siteid=17 brian ehlert (hopefully have found useful) Windows Server  >  Hyper-V

How to insert specific fields on Word 2003 and 2007?

   hello, want insert 3 fields on new documents users produce in word , excel 2003 , 2007. these fields:    1- on field name of employee creating document. take name of user logged session?    2- second field category of document (confidential, restricted, free, etc). can dropdown menu.    3- field contains "distribution list" document. want build list offering field user can access gal contacts word (outlook must opened), pick-up users , @ end listed in front of "distribution list" label.    main questions:    a) how solve 3 questions above? there better not 1 listed above?    b) how guarantee "new kind of controlled documents" being used users? changing "templates" docs exists in word , excel? need reinstall office or can change other way?    best regards, eduardo.     i think need userform.  see following pages of greg maxey's website : http://gregmaxey.mvps.org/create_and_employ_a_userform.htm http://gregmaxey.mv

FireFox and Google Chrome GPO

hello guys ,, want apply gpo firefox or google chrome can ie please , because want restrict websites client users can access thank ... hi,   if want restrict firefox , chrome, can use software restriction policies. please refer article. works in windows server 2008.   how use software restriction policies in windows server 2003 http://support.microsoft.com/kb/324036/en-us   meanwhile, if purpose restricting websites client users can access, may consider using proxy server or firewall/gateway. please refer thread:   http://social.technet.microsoft.com/forums/en-us/winservergp/thread/3d8a9b13-4112-422f-91de-72cac72abe52   if not address concern, please feel free let know.   hope helps.   regards, bruce Windows Server  >  Window

Hyper-V to Hyper-V Network Setting for Guest Machine

dear all, a quick question. i have 2 hyper-v root server, each containg guests machine, want guest machine can communicate each other, let me know how setup network settings guest machine so can access resources of each other. thanks in advance. regards,   rashid kamal, hi,   do want guest virtual machines on 2 different hyper-v host can communicate each other? if so, can perform following steps:   1.     create external virtual network on separately on each hyper-v host machine. 2.     attach network adapter of guest virtual machines external virtual network 3.     with above settings, guest virtual machines ip addresses dhcp server or router in lan.   for more information hyper-v networking, can refer to:   hyper-v: uses different types of virtual networks? http://blogs.technet.com/jhoward/archive/2008/06/17/hyper-v-what-are-the-uses-for-different-types-of-virtual-networks.aspx   understanding networking hyper-v http://www.microsoft.com/do