ADS running on Server 2008 R2 which is also our KMS server the server does not accept the Windows 8 license key saying it is unrecognized or invalid. We did patch the server according to KB2757817 and
that did help with the Office 2013 key but not with Windows 8. Any suggestions are greatly appreciated.
↧
Windows 8 KMS license key invalid or unrecognized
↧
Remote desktop connection cannot verify the identity of the computer that you want to connect to
Remote Desktop cannot verify the identity of the computer you want to connect to. This problem can occur if:
- The remote computer is running a version of Windows that is earlier than Windows Vista.
- The remote computer is configured to support only the RDP security layer.
Contact your network administrator or the owner of the remote computer for assistance.
↧
↧
AD FS 2.0
After installed ADFS 2.0 in my Windows 2008 r2 enterprise server, I got an error "The secruity database on the server does not have a computer account for this workstation trust relationship". I can't login except using "local" administrator account.
In the process of installing AD FS2.0, I got an error saying "spn is not set". so I did "Setspn –a host/DirSvc00.test.com adfs". After that things work fine. Certificate is being exported.
However, every time I reboot I can't login with "The secruity database on the server does not have a computer account for this workstation trust relationship" error message.
C:\Windows\system32>setspn -L esdirsvc00
Registered ServicePrincipalNames for CN=DIRSVC00,CN=Computers,DC=mycompany,DC=com:
WSMAN/DirSvc00.mycompany.com
TERMSRV/DirSvc00.mycompany.com
HOST/DIRSVC00
RestrictedKrbHost/DirSvc00.mycompany.com
HOST/DirSvc00.mycompany.com
WSMAN/DIRSVC00
TERMSRV/DIRSVC00
RestrictedKrbHost/DIRSVC00
Any suggestions of how to get this resolved?
Thanks.
↧
Simple DNS setup question
I'm almost ashamed to ask this question because I've done this many times before. But something's not working and I want to make sure
I have it right:
I just started at a new company. They have 5 locations, and a server in each location (which are NOT running DNS). Location 1 has their main DC which is a DNS server, and has reverse lookup zones for the other locations (is this valid, even though there are no DNS servers at those locations?)
All servers and PCs in all locations are pointed at this location 1 server for DNS.
I thought it would be more efficient to make each server in each location a DNS server, with a forwarder to the server in location 1. So, I configured location 2 with a DNS server, a forward lookup zone for location 2, and a forwarder pointed at location 1.
I configured a PC in location 2 to use server2 as it's DNS server, and it cannot resolve names at location 1. Server 2 has a forwarder to location1.
Any ideas? I thought it actually might just take some time to update the DNS server at location2 but I don't think that's the problem. If a PC at loc2 requests a name that can't be resolved by server2 then it should forward the request to serve1 but it's still not resolving the name.
I just started at a new company. They have 5 locations, and a server in each location (which are NOT running DNS). Location 1 has their main DC which is a DNS server, and has reverse lookup zones for the other locations (is this valid, even though there are no DNS servers at those locations?)
All servers and PCs in all locations are pointed at this location 1 server for DNS.
I thought it would be more efficient to make each server in each location a DNS server, with a forwarder to the server in location 1. So, I configured location 2 with a DNS server, a forward lookup zone for location 2, and a forwarder pointed at location 1.
I configured a PC in location 2 to use server2 as it's DNS server, and it cannot resolve names at location 1. Server 2 has a forwarder to location1.
Any ideas? I thought it actually might just take some time to update the DNS server at location2 but I don't think that's the problem. If a PC at loc2 requests a name that can't be resolved by server2 then it should forward the request to serve1 but it's still not resolving the name.
↧
Windows 7 Enterprise: 20 connection limit
I want to use a Windows 7 Enterprise PC to offer some services on my company. I have some questions:
On EULA: Device Connections. You may allow up to 20 other devices to access software installed on the licensed computer to use only File Services, Print Services, Internet Information Services and Internet Connection Sharing and Telephony Services.
1) 20 connections simultaneous or I can have 50 devices but only 20 device simultaneous?
2) If I have a custom service that is used by users, and this services uses "Message Queuing" Windows service. Is this supported?
Thanks
↧
↧
When you open a file that has been compresssed does it uncompress the file
If you run disk mantenance on the C rive and a file is compressed if you open it again does it first uncompress the file
JimK
↧
Windows Server 2003 Hangs on Reboot
Hello,
I have a Windows Server 2003 R2 x64 server running Exchange 2007 that hangs when attempting to reboot. It has done this three times, and it requires a manual power-down of the server. Doug
↧
Powershell errors; error code 995 + HTTP_STATUS_DENIED
I've posted this on the PowerShell section but haven't received a solution so I will ask it here as well.
Server is 2008 Std x64. Tried it on 2008 R2 Std x64 with same result.
From the thread: http://social.technet.microsoft.com/Forums/en-US/winserverpowershell/thread/2231118c-84c5-4f83-b5c2-2f835799ca59
Clients are running XP SP3 v2? (See other thread), Server is 2008, running PS v2.
We keep getting the following 3 errors in the server log:
WSMan operation SignalShell failed, error code 995
WSMan operation ReceiveShellOutput failed, error code 995
Received the response from Network layer; status: 401 (HTTP_STATUS_DENIED)
I can generate the 995 error by entering into PSSessions e.g:
---pssession.ps1---
$store = "store-8899-1"
Invoke-Command -ComputerName $store -ScriptBlock {Get-Culture}
---pssession.ps1---
The command doesn't error and returns the culture of the pc.
The 401 error I am not as sure on what is causing it but seems to be related to our scripts as well which uses PSsessions, winrm remoting or whatever it's called.
I successfully ran a PSSession against a Win 7 pc and still alerted with 995 error.?
PS C:\Users\sysadmin> Invoke-Command -ComputerName preceda1 -ScriptBlock {$PSVer
sionTable}
Name Value
---- -----
SerializationVersion 1.1.0.1
CLRVersion 2.0.50727.5456
PSVersion 2.0
BuildVersion 6.1.7601.17514
PSCompatibleVersions {1.0, 2.0}
WSManStackVersion 2.0
PSRemotingProtocolVersion 2.1
--
Log Name: Microsoft-Windows-WinRM/Operational
Source: Microsoft-Windows-WinRM
Date: 28/03/2013 11:41:22 AM
Event ID: 142
Task Category: Response handling
Level: Error
Keywords: Client
User: DOMAINNAME\sysadmin
Computer: vsdom01.DOMAINNAME.com
Description:
WSMan operation ReceiveShellOutput failed, error code 995
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WinRM" Guid="{a7975c8f-ac13-49f1-87da-5a984a4ab417}" />
<EventID>142</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>10</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000002</Keywords>
<TimeCreated SystemTime="2013-03-28T01:11:22.567Z" />
<EventRecordID>1056427</EventRecordID>
<Correlation ActivityID="{00000001-0000-0000-CC60-CE80A219CE01}" />
<Execution ProcessID="11588" ThreadID="1136" />
<Channel>Microsoft-Windows-WinRM/Operational</Channel>
<Computer>vsdom01.DOMAINNAME.com</Computer>
<Security UserID="S-1-5-21-3781176320-1899982851-248831875-2960" />
</System>
<EventData>
<Data Name="operationName">ReceiveShellOutput</Data>
<Data Name="errorCode">995</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-WinRM/Operational
Source: Microsoft-Windows-WinRM
Date: 28/03/2013 11:41:22 AM
Event ID: 142
Task Category: Response handling
Level: Error
Keywords: Client
User: DOMAINNAME\sysadmin
Computer: vsdom01.DOMAINNAME.com
Description:
WSMan operation SignalShell failed, error code 995
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WinRM" Guid="{a7975c8f-ac13-49f1-87da-5a984a4ab417}" />
<EventID>142</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>10</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000002</Keywords>
<TimeCreated SystemTime="2013-03-28T01:11:22.567Z" />
<EventRecordID>1056433</EventRecordID>
<Correlation ActivityID="{00000001-0000-0000-CC60-CE80A219CE01}" />
<Execution ProcessID="11588" ThreadID="1136" />
<Channel>Microsoft-Windows-WinRM/Operational</Channel>
<Computer>vsdom01.DOMAINNAME.com</Computer>
<Security UserID="S-1-5-21-3781176320-1899982851-248831875-2960" />
</System>
<EventData>
<Data Name="operationName">SignalShell</Data>
<Data Name="errorCode">995</Data>
</EventData>
</Event>
↧
id 1096 source userenv on a domain controller
Hi all,
I have the following error in the registry:
source userenv id 1096
Windows cannot access the registry policy file, C:\WINDOWS\System32\GroupPolicy\Machine\registry.pol. (The data is invalid. ).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I found the following post that seems to be helpful but the registry.pol. file is in use and I cannot modify it. How can I unlock it without having trouble? I thought to try safe mode but I would like to find a solution that doesn't stop the server...
http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.group_policy/2008-08/msg00228.htmlThanks in advance
Alberto
↧
↧
policies get replicated in AD but not in SYSVOL so they show (The System cannot find the file specified)
Hello
we have problem in the replication, when we create a policy in the PDC it gets replicated in AD but not in SYSVOL so when you tried to access the policy from another domain controller, it shows you that "The System cannot find the file specified", there are 45 DC's in the domain,
we have demoted and promoted back one of the DC?s actually the one near to the PDC and all policies gets relicated correctly but if i create a new policy in the PDC we have the same problem, the policy is shown in the Group Policuy management in AD but not in SYSVOL.
regards,
Enrique.
↧
File Sharing and correct way to link two computers
Hi all.
I have a server running Server 2008, and one Windows 7 computer. I have set up the domain and more on the server, and now I want to a successful file sharing between these two computers. When I plug the LAN cable into the Win 7 PC, it connects to the network, but it doesnt show the server PC in the network places.
How can I set up file sharing, so that when I plug my LAN cable in, the files show in the network places?
I have a server running Server 2008, and one Windows 7 computer. I have set up the domain and more on the server, and now I want to a successful file sharing between these two computers. When I plug the LAN cable into the Win 7 PC, it connects to the network, but it doesnt show the server PC in the network places.
How can I set up file sharing, so that when I plug my LAN cable in, the files show in the network places?
↧
Forefront Security Client
We are planning on using Forefront for our AV/anti-malware/endpoint protection. We are currently using Symantec SEP. On nice thing about SEP was the ability to prevent users from tampering with the settings we push out. We really don't want them to be
able to remove the app (they have local admin priviliges on the workstation) nor do we want them to be able to stop the service. If found a link (http://blogs.microsoft.co.il/blogs/yanivf/archive/2009/01/09/temper-protection-in-forefront-client-security.aspx)
that is titled Tamper Protection in Forefront Client security. It details protecting Forefront Client Security Services from being stopped and How to prevent Forefront Client Security Services from being installed. It was for Forefront Client Security Services
2012 Will this keep people from stopping or removing Forefront Client Security Services? Is there a different way to do it with Forefront 2012 or is the idea the same? Thanks!
↧
Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft SQL Server 2005 Express Edition Service Pack 4 (KB2463332).
I have multiple errors in the event logs for failed update:
↧
↧
Error loading newdev.dll after restoring server 2003
I restored the system state from a running server 2003 r2 std x64 to a fresh installed vbox with the same OS (it is not connected to the network). The problem is that when I log on (with domain account and all), it prompts to activate Windows (it´s a loop,
because if you click yes, it just takes you back to the same screen).
If I log on in safe mode, it starts with missing newdev.dll, and if I try to access the Device Manager, it then asks for iertutil.dll.
Another issue is that when I try to add this DLLs, I cannot install the vbox Guest Additions (because of the missing newdev.dll), and it is a requirement for enabling shared folders and/or pendrive passthrough.
I don´t know what else to to do!
I need help!
Thanks!
If I log on in safe mode, it starts with missing newdev.dll, and if I try to access the Device Manager, it then asks for iertutil.dll.
Another issue is that when I try to add this DLLs, I cannot install the vbox Guest Additions (because of the missing newdev.dll), and it is a requirement for enabling shared folders and/or pendrive passthrough.
I don´t know what else to to do!
I need help!
Thanks!
↧
Server 2008
I had recently set up server 2008 at my house, I was able to connect another computer with no problems but when I turned on my XBOX there was an error connecting to XBOX Live. I had XBOX working prior to installing server. After manually entering an IP
address outside of the scope I set on the server it worked fine. My cell phone also had issues, it would sense WIFI but would not receive data over it, it was connected to an IP address within the scope, I cannot manually set that IP. Any Ideas?
↧
Terminal Server Cut and Paste issue
Hi all,
We just starting having an issue today where users were complaining not being able to copy and paste (even locally) while connected to a terminal server via Citrix.
For the record this has not been an issue in the past and it's been with various users in different departments.
I did do a little research and found a similar issue where if the terminal session was disconnected, the cut and paste feature was then fine.
Could this be a memory resource issue with a terminal server?
Thanks,
Jeff
↧
Kerberos delegation on a clustered server
Here's my setup.
A web server running ASP.NET web applications. A SQL Clustered server, with 2 physical nodes.
Both of these are on the same domain.
The web server has been enabled for kerberos delegation in AD. The cluster virtual server has been enabled for kerberos delegation in AD.
However, when accessing a web app that uses Windows authentication, I get the "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'" error.
When SQL was on a single server (i.e. not a cluster), the above setup worked.
The only thing I can think of is that the account that MSSQLSERVER and the SQL Agent services are running under is a domain account.
I have tried doing setspn -A MSSQLSERVER/[name of cluster virtual server] [DOMAIN\Name of SQL service account] and then enabling the domain account for delegation, but no joy.
Can anyone who has set up a similar situation help?
Thanks in advance.
↧
↧
Workgroup printing
I'm trying to setup workgroup printing for HP Thinclients running Win7 embedded (32b). I've setup/configured the print server service and now I'm trying to get the thin clients to connect. I keep getting an error saying "User is not allowed
to logon from this workstation" when trying to establish a connection to the printer.
I've followed directions from http://www.softwareshelf.com/news/printmanager/tips/Sharing_a_Printer_in_the_Windows_Workgroup_Environment.pdf
The user account exists on the workstations and the server, and I've resolved my error with the user getting locked out by enabling guest/anonymous access. I just don't know if doing that means I'm not authenticating as the workgroup user account anymore or not.
How do I get around this? I've even tried using the credential manager specifying that anytime the system connects to \\server it uses server\user and the password.
↧
When does the Event Log Readers Group gets created? Is it during the domain prep of 2008 or when you promote a 2008 DC into the evironment?
Thanks in advance.
↧
Cannot Access IIS Website within Internal Network
I have just created a site for my mail server within IIS. When I am on my internal network, it will not load by going to mail.mydomain.com, but I CAN load it from outside my network. Why is this and how can I fix it?
↧