Bit

hi, i need find users active directory "password never expires" feature set. servers windows server 2008. there command use? please help. thank you, nikki. nilakshi s. batuwitage you can use dsquery * command line of domain controller:   dsquery * -filter "(&(objectcategory=person)(objectclass=user)(useraccountcontrol:1.2.840.113556.1.4.803:=65536))" -----   this displays dn of users have bit set "password never expires" in their useraccountcontrol attribute.   richard mueller - mvp directory services Windows Server  >  Windows Server General Forum

hi, this happens laptop users, far aware. think perhaps logging off when there's poor network connection triggers it. the folders "local" , "locallow" copied user's profile folder on server. these folders large, containing copy of user's outlook profile, profiles can swell perhaps 100mb several gb. the thing can think of @ moment caused (somehow) users disconnecting wired connection during logout , switching wireless, although why result don't know. whatever cause, though, need way prevent subsequent logoff , log on slow, wasting considerable staff time. thanks..! hello, prevent happening again, i guess either educate clients not disconnect during the log off process or configure these laptop users not use roaming profile. thanks zhang Windows Server  >  ...

on win7 client made lot of customozation (views) in wsus 3.0 sp2 console install on client. new win10 client , install rsat settings %appdata%\roaming\wsus can not copied old win7 profile the new win10 profile. settings lost. how can convert old win7 %appdata%\roaming\mmc win10 profile? thanks jochen hi, thanks post. according research, roaming user profiles in windows 10 incompatible roaming user profiles in earlier versions of windows. behavior design , implemented because of incompatibilities between profile versions. roaming user profiles versioning in windows 10 , windows server technical preview https://support.microsoft.com/en-us/kb/3056198 best regards, alvin wang please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server ...

i'm trying allow exe download "internet zone" unable find it's being block in gp.  can enlighten me :) hi, thanks response. if exe file coming particular sites, add site url trusted sites zone list. http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-configure-internet-explorer-security-zone-sites/ regards. vivian wang technet community support Windows Server  >  Group Policy

hello, i'm not being able make work. have dc cohowinery.com domain conditionally forwarding requests test1.local dc1.test1.local. conditional forwarding works flawlessly, problem here is, works when use fqdn test1.local domain. wanted add suffix every name doesn't exist in cohowinery.com, wanted via group policy , option there under administrative templates - network - dns.   i specified test1.local in dns search list that, quote, "when user submits query single-label name, such "example", local dns client attaches suffix, such "microsoft.com", resulting in query "example.microsoft.com", before sending query dns server. "   it doesn't work ... specified suffix, applied domain policy, tried linking gpo dc ou, tried or without "" , gpupdated every time, still doesn't work. every time try ping dc2 (a record existent in test1.local) no reply, unless dc2.test1.local what doing wrong? how did put there su...

could 1 explain me esent data base . could 1 advice if delete server replication not update wins entry ? need delete manually wins. thanks,   hello, start here: http://blogs.msdn.com/b/laurionb/archive/2008/10/29/wikipedia.aspx maybe can describe problem have replication , wins on kind of machine, dc, member server etc.? best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum

i have music stored flac files on ripnas server, runs windows home server 2008 power pack 3.  has been running trouble free 3 years.  until now, is. seen windows explorer in windows 7, folders on ripnas have been replaced shortcuts, whether seen libraries, computer or network. if attempt open folder libraries, security warning - "do want open file?" , if try open it, windows can't find it. if try open folder in mapped drive in computer, same warning, time can open folder, , folders within it, , files themselves, though folder symbols still replaced shortcuts , security warning @ each stage. if open music folder in ripnas under network, still see bunch of shortcuts , once again, windows can't find when attempt open folder. i've tried system restore - no luck. , accessing ripnas second desktop running windows 7 on network gives same results above. work? well, else. kinsky desktop works fine , plays music. dbpoweramp cd ripper rips new fold...

hello - time , effort. i have question in regards adfs , forms based authentication vs windows authentication , getting pop-up chrome , firefox not in ie. we launched adfs in hopes of sso few applications.  however finding out sso works great in ie not in other browsers...such chrome , safari, seem ask authentication required prompt of own. after investigations found webconfig file can control method use....to move forms top. http://www.richardawilson.com/2010/10/adfs-20-login-page.html however when doing breaks sso ie.  so thinking put forms auth on top , enable windows auth in iis , disable anonymous. thoughts? hi, for adfs issue, please post on below forum: http://social.msdn.microsoft.com/forums/vstudio/en-us/home?forum=geneva regards, yan li Windows Server  >  ...

hello, i have small query regarding delegated _msdcs zone. in dns manager, expand server name, , expand forward lookup zones, click forward lookup zone active directory domain (for example: abc.local) ,the delegated _msdcs zone appears greyed out folder, right-click _msdcs zone, , click properties, on name servers tab have 1 server name mentioned whereas have 4 dns servers. should there 1 dns server listed in delegated _msdcs zone if yes 1 should (local) ? or 4 dns servers entries should added ? can please suggest. thanks. hi atulram, the _msdcs delegation under abc.com useful when _msdcs.abc.com not stored in particular dns server , query _msdcs.abc.com was made dns server. name server in _msdcs properties needs hold entire zone of _msdcs.abc.com. usually, name server in _msdcs properties pdc of domain, if want add other name servers hold entire zone "_msdc.abc.com", things ok too. if works well, we may keep original configuration. ...

hi guys, i ask approach regarding below script main goal query given log file , match/find given string in log file i.e. error message. $erroractionpreference = "silentlycontinue" $sys = get-content .\systems.txt $searchstr = "8007000e" foreach ($system in $sys) { $location = "\\$system\c$\windows\windowsupdate.log" select-string -path $location -pattern $searchstr |  select-object -first 1 | format-table -property  path, pattern | out-file -filepath  "c:\results\string_match_results.txt" } in general works single station below: path                                                                        patter...

i need export local users , groups window 2003 server window 2012 server. body can me? install , use windows server migration tools : https://technet.microsoft.com/en-us/library/jj134202.aspx the powershell server migration commandlets @ disposal,   export-smigserversetting , import-smigserversetting etc. https://technet.microsoft.com/en-us/library/jj852154(v=wps.630).aspx Windows Server  >  Directory Services

my problem have email archiving enabled users in our organization, i.e. email send/receive outside or inside organization sent archiving server @ dell. below cmdlet creating report of large emails in organization above 10mb last 7 days total bytes in mb , later excluding emails going archiving server ending address @ems-1.activemailbox.net get-messagetrackinglog -resultsize unlimited -start ((get-date)-(new-timespan -days 6)) -end (get-date) | {$_.totalbytes -gt 10485760} | sort-object “totalbytes” -descending | select-object sender,timestamp, @{name="recipients";expression={$_.recipients -notlike "*@ems-1.activemailbox.net"}}, messagesubject,totalbytes, @{name="size";expression={$_.totalbytes.tomb()}} "mime encoding of email attachments" - email size getting bloated 30-33% due conversion, there way can extract exact attachment size , not total size ? size on email sent user ? please help   as stated in following link:...

i have windows 2012 essentials server. installed smtp feature. have examples how configure things thru gui can send mail internal server , have send out thru comcast's smtp server? thought on smtp virtual server properties page: general tab: select server ip in pulldown delivery tab -> outbound security:  set basic authentication comcast username , password delivery tab -> outbound connections: set tcp port 587 delivery tab -> advanced: set smart host smtp.comcast.net any thoughts on this?  assumption printers can email scans computers can send on smtp port 25 send internal server , route comcast sent. thanks input. steve hi steve, on current situation, please refer following article , check if can you. how set internal smtp service windows server 2012 essentials if misunderstand, please don’t hesitate let me know. hope helps. best regards, justin gu Windows S...

please let me know if have thoughts or suggestions, welcomed. client windows 7 ultimate desktop server windows 2012 essentials. i had issues clients , servers not seeing each other (for backups) , else worked (access files, login domain, etc). 1. removed connector software on client 2. removed computer account in dashboard on server 3. removed client domain now can not join back 1. can not iis website (from either client or server - error 500 , code 0x8007007e meaning have find offending module disable) 2. can not find server when trying run connector software manually 3. can not change domain (ad dc not found). any suggestions? i can 1. connect server , change things on using remote desktop 2. client can ping server, server can ping client . nslookup fails both ends (non-existent domain). network setup 1. run pfsense firewall , wan balancer. pfsense (i.e. 10.1.1.100) runs dhcp server , grants ip addresses both client , w12 server. 2. on server 1...

(i received email suggested ask question here): i'm running windows 2000 pro/sp4 w/various updates , fixes (currently date, think). i've been running coreddraw 8 , corelventura 8 eight years on machine. following error when launching either program: "ole 2.0 initialization failed. make sure ole libraries correct version." obviously, program(s) not run. have uninstalled , reinstalled both @ once, individually, etc. same result. said, 'happened.' may have uninstalled innocuous program or two, can't remember. made mental leap perhaps need update/change existing ole libraries, if that's have can't find out how. i'd appreciate help. thank you. mario in victoria, bc i'd ask them here. http://coreldraw.com/forums/         regards, dave patrick .... microsoft certified professional microsoft mvp [windows] Windows Server ...

jsut created standar root ca, not joined domain. working fine. went ahead , added enterprise subca . if go root ca standard ca, , right click on name , try click on submit new request.... grayed out. have lab setup same way , not experiencing problem. have ideas? checked crl available , there no errors in eventviewer. hope has seen before. thank you just wanted update post. able fix. seems security had administrator not able request certificates. in otherwords, user error.      Windows Server  >  Security

hi all,   in continuing struggles setup working rds farm, i'm in situation in internal users routed succesfully 1 of 4 rds servers through connection broker no issue.  however, externally users connected rds server 1.  everytime.  and, then, connected if they've ever logged on succesfully server 1.     if in c:\users , find profile user, user log on externally.  but rds1.  and under no circumstances users externally able connect of other 3 servers, if they've succesfully logged on them internally.   have advice on go here?  i appreciate it.   taking time listen me whine. hi, have tried use rdc directly connect rds host server through rd gateway? work or error pop up? in addition, please check remoteapp have configured use rd gateway if request external. need configure remote desktop gateway settings in remoteapp manager console . more detailed steps, please refer following article. configure remote desktop gatewa...

 i have dell server nics installed in image below:  i guess need know how set up.  on #38 have server connected router using nat (the servers nat ip address 192.168.x.x) (the static ip address xx.xx.xxx.107 )because outside world need no access server running windows server 2012.  all configuring or other use of physical hardware server done locally.  the outside world needs access sql server 2012 running in vm using xx.xx.xxx.109 plugged #41.    also withing next few days creating vm run web server on #40 using outside world ip address xx.xx.xxx.108 what settings on virtual switch manager best achieve goal? or have wrong?  what need make happen xx.xx.xxx.107 thru .109, xx.xx.xxx.107 being  no access outside world (physical server 198.169.x.x using nat) , second ethernet cable having static address of xx.xx.xxx.108 being web server running in vm , 3rd ethernet cable having static ip address xx.xx.xxx.109 being ...

i'm looking object have contents similar output of netsh wlan show networks mode=bssid i don't want use unreliable parsing of text output, using netsh out.  wmi interface worked in windows xp doesn't work now.  there's api, there no net interface it's pretty difficult work in powershell.  know of couple of adapters, i'd keep contained in 1 script.  don't think find or write type api invoke in powershell. is there else i'm missing? oh, sorry, have said don't want use netsh. i involve familiar further @ issue. hope there way use without usage of netsh. there might time delay. appreciate patience. thank understanding , support. regards, yan li cataleya li technet community support i found working solution using wlan api , managed wlan api code http://managedwifi.codeplex.com/.   site isn't letting me post it. it's timing out when submit. posted http://jordanmills.wordpress.com/2013/09/26/how-to-...

if isn't right forum question please suggest better one. i thinking of converting windows server 2003 systems windows server 2008, , i'm investigating reading existing ntbackup tapes , maybe using dpm write new ones. i'm trying figure out tape models windows still supports, , i have simple question.  if go add hardware wizard, choose "manually select" option, , pick category "tape drives", resulting list blank.  i've tried on vista business 32 , 64 , windows server 2008 64, on systems joined domain , not joined, fresh installs; show 0 available tape drives. there tape.inf file in windows\inf on these systems lists quite number of tape drives, none of them show in add hardware wizard.  can't i've done wrong because see on such variety of systems. i have added remote storage manager feature because read prerequisite ntbackup reader software, still list in add hardware wizard empty.  hoping use list able tell tape drive models going work without...

greetings! does know powershell script list email addresses users in primary , secondary domain? with best regards, bostjanc i have solved script: foreach($mailaddress in get-recipient -domaincontroller domain.company.local -resultsize unlimited | select -expand emailaddresses | %{$_.smtpaddress} | sort) { if ($mailaddress -like '*@domain.com' ) { $mailaddress+' ok' } } foreach($mailaddress in get-recipient -domaincontroller domain2.company2.local -resultsize unlimited | select -expand emailaddresses | %{$_.smtpaddress} | sort) { if (($mailaddress -like '*@company.com' )  -or ($mailaddress -like '*@company.si' )) { $mailaddress+' ok' } } bostjanc Windows Server  >  Windows PowerShell ...

can please @ following 6 lines of code , explain output i'm receiving?  i've been looking @ code segment week trying figure out possibly wrong , can't.  @ point i'm convinced it's weird powershell bug - i'd happy if here prove me wrong, explain i'm seeing , tell me how correct it.  "logit" irrelevant issue - it's simple function calls tee-object print line screen , write file.  added here string code inspect line looks after substitution.  value of $servertype when code snippet runs "core" (as can see in output). > echo "substituting data c:temp\setup-$servertype\updates\media\travel\con.html" | logit > $here = @" > inputfile =  get-content "c:temp\setup-$servertype\updates\media\travel\con.html" > "@ > $inputfile = get-content "c:temp\setup-$servertype\updates\media\travel\con.html" > echo "the here string is: $here" | logit here output above code.....

i'm trying restrict access via group policy our users changing proxy settings. using squid, don't want users removing proxy settings. i've managed restricted in ie, having difficulty in firefox. has come across issues firefox? بسم الله الرحمن الرحيم kindly check these links solved ur problem http://www.raisuman.com/?p=91 http://www.youtube.com/watch?v=pzjidr_qyzk clients http://www.youtube.com/watch?v=9muj3pwjht4&feature=related mohamed abd elhamid abd elaziz microsoft system administrator abdul samad al qurashi co. blog: http://mabdelhamid.wordpress.com/ Windows Server  >  Group Policy

hi all here network setup. i have 2 hyper-v host hyperv01 (192.168.1.173) , hyperv02 (192.168.2.173). have created 3 vm's each on hyperv01 & hyperv02 both host have on nic. hyperv01 vm's are vm1 - 10.1.1.11 , vsid 6001 vm2 - 10.1.1.11 , vsid 6002 vm3 - 10.1.2.22 , vsid 6005 in hyperv02, vm4 - 10.1.1.12 , vsid 6001 vm5 - 10.1.1.12 , vsid 6002 vm6 - 10.1.2.20 , vsid 6005 please let me know how routing traffic between vsid 6001 , 6005? regards, loges  vsid virtual subnet id. part of hyper-v network virtualization package. allows use same ip subnets @ 1 remote site as  you use @ site.    knew nothing either until forum thread mentioned above cropped last september. here posted after commented on fact had never seen post on forum before understood how  network virtualization worked. name samir farhat.   bill, the network virtualization concept needed concept in modern datacenters support multitenancy. for exam...

i've got 3 interfaces different networks. have traffic controlled windows firewall, firewall log logging accepted , dropped connections 1 interface. how can log interfaces. hi, thanks post. please check following article enable firewall logging on server. hope helps. configure windows firewall log http://technet.microsoft.com/en-us/library/cc947815(v=ws.10).aspx step 8: enabling firewall logging http://technet.microsoft.com/en-us/library/cc754451(v=ws.10).aspx enable or disable windows firewall log http://technet.microsoft.com/en-us/library/cc787462(v=ws.10).aspx best regards, aiden   aiden cao technet community support Windows Server  >  Network Access Protection

years ago had sbs 2003 server on small home educational lab modest hardware & software budget.  when server started fad, bought new server , full copy of sbs 2003 r2.  want use w2k3 portion of sbs install on new box, want install w2k3 server software, , imagine demote default pdc configuration.  want use box backup dc , dns server. any suggestions? hi,   as issue related small business server 2003, suggest discussing in our small business server newsgroup.   http://www.microsoft.com/smallbusiness/community/newsgroups/dgbrowser/default.mspx?dg=microsoft.public.backoffice.smallbiz&lang=en&cr=us&r=627fae54-a95e-45ba-b054-e423964b47fa   i hope issue can resolved soon.   tim quan - msft   Windows Server  >  Setup Deployment ...

hi! i seem have problem efs configuration via gpo in  datacenter evaluation of windows server 2012 r2, installed in virtual lab (windows 8.1x64 hyper-v feature, server guest dc+dns+ca+dhcp+iis roles). happens every time , on fresh re-installed server gen2 vm (dc+dns+ca+dhcp roles) no gpo changes ever. when go to group policy management tool: default domain policy -> computer config -> policies -> windows settings -> security settings -> public key policies -> encrypting file system properties -> certificates tab. the moment click browse button change default basic efs cert template mmc crashes. i followed same procedure on both lab , production windows 2008r2 domain controllers ca role in past , works fine without glitches always. on there able duplicate key recovery agent cert template , import cert based on ca, in ws2012r2/ca such certificate coming invalid reason. in lab ws2012r2 (datacenter evaluation) apprash ...

i'm working on ad solution. there company x.com 5000 users, going split company , other company name y.com, here first company ad needs splited, 500 users separated, best solution in case. i haven't tried suggestion recommended paul in production, in lab & worked few instance. if production, don't think mentioned method paul supported microsoft or not, migration looks more appropriate, if anytime in future wish create trust b/w both organizations. secondly, renaming domain not recommend considering complexity & amount of work involved. better bet taking safer approach & perform migration. awinish vishwakarma - mvp my blog: awinish.wordpress.com disclaimer posting provided as-is no warranties/guarantees , confers no rights. Windows Server  >  Directory Serv...

hi, have array contains around five-hundred-thousands values (sorted numbers). want value array , writing values splitting multiple files. conditions are:  - want write 50000 array rows each file sequentially giving file numbers x_1, x_2 ... x_10 etc. - 1 file can contain "multiple id" comes sequentially - but, "multiple files" cannot contain "same id" (value) - if going 50000th line in array see next-few-rows has same values 50000th line, include them writing same file, cannot take same id file - so, write (50000 values) or (50000 values + continuation of same value) 1 file  part of big process, able build until array, facing trouble write values splitting files following logic. can help? sample array ($a): 9001 9001 9001 9001 9002 9002 9003 9003 9003 9003 9003 9004 9004 9004 9004 9004 9004 9004 9005 9006 9006 9006 so, assuming have following data structure: $array[in...

2008 r2 ts server when add printer locally , standard tcp/ip stays grayed out. have added many other printers of same , different models, , fine...  why printer stay gray , not print send it? hi, à when add printer locally , standard tcp/ip stays grayed out. did mean new added printer grayed out? please provide screenshot of it? may me understand better. understanding. when add printer, did error message? did open event viewer , check if find relevant event? if possible, please re-add problematic printer , check if issue still exists. if misunderstand or update, please don’t hesitate let me know. hope helps. best regards, justin gu please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows Server  >  ...

is there way how can enable second network adapter while 1 active? @joachim the thing when error near end of setup , error's out... additionally not want server routing.... wan1 patch update needs , lan1 applying updates network... pc's on lan go through router , lan1 ip grabbing updates... not getting them through server... sorry if situation bit strange performance wise works well... Windows Server  >  Windows Server General Forum

scenario windows 7 users log on workstations @ site. domain controller , domain authentication users across wan. users accessing local(same building) shared directory on windows 2008r2 server, in order open, modify, save new files, etc. then, site loses access domain controller due wan outage. question will users have logged onto windows 7 workstations continue have access shared resources on local windows 2008r2 server cached credentials(assuming don't logoff or restart machines)?? has been case in past, wondering if has changed windows 2008?? thanks hi, the duration can access server depends on when server requires re-authentication. in windows implementation, smb session expiration enforced based upon client’s support of dynamic re-authentication capability [ms-smb]. if client enables cap_dynamic_reauth capability bit, server enforce session expiration. if client not set cap_dynamic_reauth, windows server not return status_network_session_expired.  the s...

ok 8.1/2012 r2 update (kb2919355) is kinda driving me crazy.  here's example, 4 identical 2012 r2 servers, have same updates installed including prereqs kb2919442, 2 of them see need need run 2919355, 2 of them not.  includes through wsus/sccm , windows update. another scenario, 10 identical windows 8.1 computers, have same updates prereqs , should ready 8.1 update, same thing happens, of them want run update, of them not.  few days goes by, no changes made on ones where 2919355 not required or not availbe, of sudden out of blue 1 or 2 of them decide, "hey i'm ready run 2919355 now!" install update sccm/wsus.  , keep in mind, isn't problem sccm/wsus infrastructure, on systems displaying these symptoms if go out windows updates update still isn't published affected systems, until of sudden have available randomly.  i know can install manually, ( http://www.microsoft.com/en-us/download/details.aspx?id=42334 ) but...

hello, in effort set spiceworks installation i've ran problem wmi can't seem find clear cut answer , i'm hoping gain insight here. i've discovered wmi connections work workstation in domain domain controllers not workstation workstation or domain controllers workstation. not familiar configuration wmi services active on machines i'm working with, windows firewall turned off both dc's , workstations (i've turned them on , enabled no avail) , dcom , rpc services running. i'm thoroughly stuck on issue can't seem find pertinent information why communication wmi seems one-sided. can connect wmi fine locally on workstation, also. i on windows server 2003 functional level forest/domain. ad server connecting windows server 2008 r2 , have windows 7 professional 64-bit , windows xp professional (sp3) 32-bit workstations within domain. the error receive when trying connect domain workstation is; code = 0x800706ba the rpc server unavailable fac...

have ad lds running more 3years plus in domain named callmgr.com. syncs 2 domain, name domain , domain b. unable new object domain b. ad lds able new object of domain a.  check adam sync log, stated problem 2001 (no object). error below: renaming conflicting target object cn=admin,ou=ntuser,dc=callmgr,dc=com cn=78ade630-9ed7-43fe-a96d-e3d85573575f,ou=ntuser,dc=callmgr,dc=com.  ldap error occured. s: no such object.  extended info: 0000208d: nameerr: dsid-0310020a, problem 2001 (no_object), data 0, best match of: 'ou=ntuser,dc=callmgr,dc=com' . ldap error occured. s: no such object.  extended info: 0000208d: nameerr: dsid-0310020a, problem 2001 (no_object), data 0, best match of: 'ou=ntuser,dc=callmgr,dc=com' checked ms-adamsyncconf.xml both domain , b, there have no changes done.  suggestion resolve issue? thank in advance hi, just checking in see if information provided helpful. , if replies above helpful,...

hello everyone,<o:p></o:p> if install windows server 2012r2 datacenter edition, can activate sever windows server 2012r2 standard when buy license? <o:p></o:p> the reason i'm asking question because can't find can download  windows server 2012 r2 standard edition.<o:p></o:p> regards,<o:p></o:p> samuel<o:p></o:p> hi samuel, as per research, think need buy different license data center , standard edition activating server 2012 r2. here providing more information. windows server 2012 r2 windows server 2012 r2 licensing datasheet hope helps! thanks. Windows Server  >  Migration

i installed wsus on windows server 2008.  following deloyment guide.   unable find informagtion in applicationhost.config file.   furthermore, file in different folder listed deployment guide.  file in %windir%\system32\inetsrv\config.   cannot seem find <system.webserver> section <modules> under it.   system.webserver listed multiple times in file.  located add name="customerrormodule more once.  i'm not sure how deal this.  addname = " customerrormodule" shows twice in file, not under system.webserver.  configuring iis 7.0 after installing iis 7.0 on windows server 2008, need update iis configuration file. 1. open iis configuration file: %windir%\system32\inetsrv\applicationhost.config 2. in <system.webserver><modules> tag, remove <add name="customerrormodule"> , if present. 3. in <system.webserver><modules> tag, add ...

i have few dfa roots , when looking @ why speeds slow, found clients pointing replica target in remtoe site. doing bit of looking enable falback preferred targets, though when looking @ root dfdutil, not return anthing site of servers. i have servers in sites in ad. seperate subnets too.  why clients jsut grabbing replica vs 1 closest it? c:\dfsutil /view /root:\\ad-domian\dt root name=" \\ad-domian\dt " state="ok" timeout="300"         sitecosting = "1" targetfailback = "1"         target=" \\srv-file\dt " state="online"  [site: (null)]         target=" \\srv-olivet\dt " state="online"  [site: (null)]         link name="fitchdata" state="ok" timeout="1800"       ...

im computer tech in sales , repair store..i built wsus server deploy updates computers repairing , our new builds..i need create batch file auto server , download updates..and second server found? i suggest creating reg file necessary registry entries enable connectivity wsus server (perhaps named enablewsus.reg) and reg file reset wuagent standard au functionality (perhaps named resetau.reg). put both on thumb drive (or cd if deal legacy hardware). script not required, single command load registry values followed reboot, or restart of au service. run reg import enablewsus.reg enable wsus functionality. restart au service (or reboot system ensure registry values written disk). apply updates. run reg import resetau.reg reset au functionality , reboot ensure registry permanently reset. btw. should know that, strictly speaking, such use of wsus outside scope of authorized uses defined in eula, eula restricts use of wsus machines licensed licensee of windows server hosting wsus,...