Hi All,
I'm looking for a sophisticated server checklist (Daily/Monthly) as a part of preventive maintenance for windows server 2008 R2, Windows Small Business server 2008, 2011. Any suggestions?
↧
Preventive Maintenance for Windows Server 2008 R2
↧
Windows 8 Pro Domain First Time Login is taking 10 minutes
I have a domain with two Windows 2012 domain controllers and several hundred newly imaged Windows 8 Pro laptops. The first time I log
into any of the laptop computers with an account that has not logged into the actual laptop computer before, it says logging in with the user name displayed for about 20 seconds and then the screen goes black for about 10 minutes before it comes back on and
displays the Start screen.
After I log into a laptop the first time, subsequent logins to the same laptop with the same account takes less than 30 seconds. However,
any time I log in with an account that has not logged into the laptop before, I get the 10 minute wait scenario.
When I run GPRESULT /H and look at the result file, it does not list any errors.
All of the laptops are Lenovo Thinkpad Edge E531 units.
Thanks,
Dave
↧
↧
Installing Windows Installer service,
Hello,
I have a windows server 2003 x64, with SP2 and problem with it is on installing applications. It never allowed me to install application properly and I had no luck with un registering & registering Windows Installer service. So I did a re-installation of windows installer 4.5, which turned windows installer service to disabled state (service marked for deletion). :(
Do I have a luck on rebooting the machine and try installing Windows Installer 4.5 ?
Or could you please advice me for a fix. (registry enteries, and msi files under system32 folder looks good). ?
Many Thanks
↧
Remote servers are hanging up after an attempted reboot/restart
Hi All,
We have some remote servers in which we run some services.If any failure occurs with the service remote server automatically reboot/restart.But some of them are hanging after an attempted reboot/restart.
I was able to ping the server but when i try to connect to the remotely either they are showingsome blue screens or a message like this "The requested operation cannot be completed because the terminal connection is currently busy processing a connect operation".I tried to view the task list on that server with tasklist /s 10.4.16.5servername /u username /p Password but i got a message like"The RPC Server is unavailible".
Could anyone suggest us to resolve this?
Thanks&Regards,
Raghuram.
Raghuram.
↧
CAL Licenses
hi guys, if I have an FTP (Filezilla FTP) hosted on a Win2k3 box? I need to buy CALs for those users downloading from the FTP server?
and one more thing, if I have site that is hosted also on a Win2k3 box, what type of License do I need CAL or DAL?
Please help guys, confused on how this licensing works.
Thanks for any input.
↧
↧
Partitioning information (size in percentage) in answer file
Hello,
I am using Windows SIM tool to create an answer file (or unattended.XML). The theme is to make the partitioning of the hard disk automatically as part of the windows Server 2008 OS installation. Because this answer file is going to be used in different places and location, the harddisk size at different locations are not same. In order to make the installation works at all places, hard coding of disk size(in megabytes) is not a good option. It will work if we specify the partition size in terms of percentage. So that, installation would go through without complaining any error during installation.
Could you please suggest me an option how can i achieve my request(defining partition size in percentage instead of megabytes)?
Any suggestions or help is appreciated.
Thank you.
↧
I would like to know how to see server performance by process explorer
We use win2008R2 server.
I am looking paging and paging list by process explorer .
How could I judge the paging is happening and it causes performance degration from process explorer ?
↧
Move GC from win2003r2 to Win2008
Hello
i have this scenario in my network:
- Two domain controller
- the first domain controller have only the Global catalog and have Windows Server 2003 R2
- The second domain controller have the 5 fsmo
- Have Exchange 2003 sp2 in an other server
I want to know the best procedure for move the gc from the windows server 2003 to windows 2008.
thanks
Andrea
oasis in my heart
↧
Windows 2008R2 server in Windows 2008R2 domain picking Linux server as DC
Hello,
I have a Windows 2008R2 server with some (SAP) services configured to run as myserviceuser@ourdomain.local
At every scheduled reboot, the services won't start or will be in "start_pending".
System Eventlog:
The SAPxxx_## service failed to start due to the following error:
The account name is invalid or does not exist, or the password is invalid for the account name specified.
I finally found out that after server restart, it is using an old Linux SUSE test server with SAMBA as domain controller.
SYSTEM eventID 5791: "The domain of this computer, OURDOMAIN has been downgraded from Windows 2000 or newer to Windows NT4 or older. The computer cannot function properly in this case for authentication purposes. This computer needs to rejoin the domain."
Somehow it will find the right DC after logging on to the server using RDP, but it almost never starts the services correctly without manual admin intervention (log on as local user and open SAP MMC). We have checked that the server machine account does at that moment logon to the correct domain controller.I checked the server DNS settings with my domain admin and he showed me, how it was impossible to get the "wrong" DC names from our DNS setup. However, there is no doubt that the server is using the Linux SAMBA server (with only a few test users) as DC during windows startup. My domain admin suspects the SAP installation to have done "mysterious configuration changes to windows" but I fail to see why an SAP AS ABAP server would suddenly connect to a test Linux server we have never before known about.
Please suggest what we should do to fix this.
↧
↧
Help! Windows Activation error message saying "Windows must be reinstalled" - has come up on our primary data server Windows SBS2008
I am Getting 2 Error
1) Reinstall WindowsWindows Must be reinstalled to activate.Inset the Windows Installation DVD or Cd into your computer to Begin the Reinstallation Process.
2 ) Windows SBS 2008 Console Has Stopped Working
Problem Event Name :-CLR20r3
and when i Click okie okie it log off automatically and its my Main Server it Windows SBS2008.
Please Help Me
↧
Can only access home shared folder using IP address
This one is baffling me to no end. I create users all day long and setup their home folders to point to a network share. And all day long these users are able to access their network home folder. I have one user who can not. I have removed and added the
user account several times and still no luck accessing the home folder. If I use the IP address of the server,\\192.168.1.50\home\username, I can get to it, but if I use the servername,\\fileserver\home\username, I can not. I logged into a different computer with that username and everything works fine, so there is something on this paticular PC that is not allowing access. I can get to any
other share on any other server, including other shares on the home directory server, just not the home share. I tried removing the PC from the domain, changing its name, and rejoining. I also, flushed dns, checked hosts file and all seems fine. Any help would
be very much appreciated.
↧
Strange Problem in Windows 2008 Task Scheduler
I have a strange issue with the Windows 2008 task scheduler. Under circumstances unknown, it appears to be triggering two instances of a scheduled task for no apparent reason. The 2<sup>nd</sup> triggered instance fails with an error code 2147750687, which is a “duplicate task already running” message. So, there is no apparent user impact, since we have these tasks configured to NOT allow multiple instances.
I can see nothing in task scheduler, or in the specific task that would account for the task being triggered twice. Here is an example of the task in question:
<?xml version="1.0" encoding="UTF-16"?><Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"><RegistrationInfo><Description>100000;VMS Reports</Description></RegistrationInfo><Triggers><CalendarTrigger><StartBoundary>2009-04-28T01:30:00</StartBoundary><EndBoundary>9999-12-31T23:59:59.999</EndBoundary><Enabled>true</Enabled><ScheduleByWeek><DaysOfWeek><Monday /><Tuesday /><Wednesday /><Thursday /><Friday /><Saturday /></DaysOfWeek><WeeksInterval>1</WeeksInterval></ScheduleByWeek></CalendarTrigger></Triggers><Principals><Principal id="Author"><UserId>INT\bebprdnuts</UserId><LogonType>Password</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals><Settings><IdleSettings><Duration>PT10M</Duration><WaitTimeout>PT1H</WaitTimeout><StopOnIdleEnd>true</StopOnIdleEnd><RestartOnIdle>false</RestartOnIdle></IdleSettings><MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy><DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries><StopIfGoingOnBatteries>true</StopIfGoingOnBatteries><AllowHardTerminate>true</AllowHardTerminate><StartWhenAvailable>false</StartWhenAvailable><RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable><AllowStartOnDemand>true</AllowStartOnDemand><Enabled>true</Enabled><Hidden>false</Hidden><RunOnlyIfIdle>false</RunOnlyIfIdle><WakeToRun>false</WakeToRun><ExecutionTimeLimit>PT72H</ExecutionTimeLimit><Priority>7</Priority></Settings><Actions Context="Author"><Exec><Command>E:\beb\Newt\bin\jobstub.exe</Command><Arguments>/inst_id:41782F0EA57247BFA811921449F51BE9 /job:074102EF98614E08A7D169276F8F455F /ReportName:Billing_Info</Arguments></Exec></Actions></Task>
And here is what happens in the task scheduler log:
Level,Date and Time,Event ID,Task Category,Operational Code,Correlation Id
Information,4/13/2010 1:30:03 AM,102,Task completed,(2),b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler successfully finished ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" instance of the ""\41782F0EA57247BFA811921449F51BE9"" task for user ""INT\bebprdnuts""."
Information,4/13/2010 1:30:03 AM,201,Action completed,(2),b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler successfully completed task ""\41782F0EA57247BFA811921449F51BE9"" , instance ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" , action ""E:\beb\Newt\bin\jobstub.exe"" with return code 0."
Information,4/13/2010 1:30:00 AM,129,Created Task Process,Info,00000000-0000-0000-0000-000000000000,"Task Scheduler launch task ""\41782F0EA57247BFA811921449F51BE9"" , instance ""E:\beb\Newt\bin\jobstub.exe"" with process ID 5320."
Error,4/13/2010 1:30:00 AM,101,Task Start Failed,Launch Failure,00000000-0000-0000-0000-000000000000,"Task Scheduler failed to start ""\41782F0EA57247BFA811921449F51BE9"" task for user ""INT\bebprdnuts"". Additional Data: Error Value: 2147750687."
Warning,4/13/2010 1:30:00 AM,322,"Launch request ignored, instance already running",Info,b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler did not launch task ""\41782F0EA57247BFA811921449F51BE9"" because instance ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" of the same task is already running."
Information,4/13/2010 1:30:00 AM,200,Action started,(1),b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler launched action ""E:\beb\Newt\bin\jobstub.exe"" in instance ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" of task ""\41782F0EA57247BFA811921449F51BE9""."
Information,4/13/2010 1:30:00 AM,100,Task Started,(1),b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler started ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" instance of the ""\41782F0EA57247BFA811921449F51BE9"" task for user ""INT\bebprdnuts""."
Information,4/13/2010 1:30:00 AM,319,Task Engine received message to start task,(1),00000000-0000-0000-0000-000000000000,"Task Engine ""S-1-5-21-154405328-2802981858-2054149546-68593:INT\bebprdnuts:Password:"" received a message from Task Scheduler service requesting to launch task ""\41782F0EA57247BFA811921449F51BE9"" ."
Information,4/13/2010 1:30:00 AM,107,Task triggered on scheduler,Info,30b595e8-d91c-4c3f-a4a3-8d23729821cf,"Task Scheduler launched ""{30B595E8-D91C-4C3F-A4A3-8D23729821CF}"" instance of task ""\41782F0EA57247BFA811921449F51BE9"" due to a time trigger condition."
Information,4/13/2010 1:30:00 AM,107,Task triggered on scheduler,Info,b46876c1-db78-45a2-8430-713eed5110f7,"Task Scheduler launched ""{B46876C1-DB78-45A2-8430-713EED5110F7}"" instance of task ""\41782F0EA57247BFA811921449F51BE9"" due to a time trigger condition."
Information,4/12/2010 1:30:06 AM,102,Task completed,(2),c8e3b8e0-32fe-4e49-8e38-04c3dfb01291,"Task Scheduler successfully finished ""{C8E3B8E0-32FE-4E49-8E38-04C3DFB01291}"" instance of the ""\41782F0EA57247BFA811921449F51BE9"" task for user ""INT\bebprdnuts""."As you can see, the task completed successfully the day before on 4/12. Then it triggered twice and creates two instances of the task on the 13<sup>th</sup>. One fails, and one completes. The next day, only one instance gets kicked off.
The server is running Windows 2008 standard SP2. Very vanilla HP server hardware. 4 gig of RAM, and 2 CPUs. The task scheduler does this approximately 2-5 times per day on (seemingly) random tasks. I would estimate that the task scheduler on this system kicks off approximately 2000 tasks per day. I do not think it is load related. The example task above runs at a very slow time of the day for tasks.
Any insight would be appreciated.
Regards,
-aspolivka
↧
IPSec between Windows Server 2008 R2 / Forefront TMG
I have set up two Windows Server 2008 R2 machines with Microsoft Forefront TMG SE SP2. I also deployed an IPsec tunnel between the two machines. Both machines have static, public addresses, and both have an internal network adapter that connects the machine to a local network.
The tunnel runs fine, I can a) ping both public addresses from both sides, seeing with Network Monitor that traffic is encapsulated into ESP packets. I can b) ping the internal addresses from the other side, so again I see ESP traffic running between the machines, getting delivered to the destination machine in the local network, and the reply again gets encapsulated into the IPsec tunnel and reaches the other machine. What does not work is pinging the internal network address from the other machine.
So in essence, the setup is:
Machine A:
Public IP: 12.34.56.78
Internal IP: 172.20.0.1
Machine B:
Public IP: 76.54.32.10
Internal IP: 10.0.0.1
If I ping from Machine B (76.54.32.10) to 172.20.0.1, the Windows Event Viewer shows this audit warning:
The Windows Filtering Platform has blocked a packet.
Application Information:
Process ID: 0
Application Name: -
Network Information:
Direction: Inbound
Source Address: 76.54.32.10
Source Port: 0
Destination Address: 172.20.0.1
Destination Port: 8
Protocol: 1
Filter Information:
Filter Run-Time ID: 361187
Layer Name: Transport
Layer Run-Time ID: 12
The associated filter ID items are as following (NetSh.exe WFP Show State):
<item>
<filterKey>{7e8d057c-e6e8-4304-9f4d-a43e1b025bce}</filterKey>
<displayData>
<name>ISA VPN S2S tunnel to network ATLAS</name>
<description/>
</displayData>
<flags numItems="1">
<item>FWPM_FILTER_FLAG_HAS_PROVIDER_CONTEXT</item>
</flags>
<providerKey/>
<providerData/>
<layerKey>FWPM_LAYER_INBOUND_TRANSPORT_V4</layerKey>
<subLayerKey>FWPM_SUBLAYER_IPSEC_TUNNEL</subLayerKey>
<weight>
<type>FWP_UINT8</type>
<uint8>0</uint8>
</weight>
<filterCondition numItems="2">
<item>
<fieldKey>FWPM_CONDITION_IP_LOCAL_ADDRESS</fieldKey>
<matchType>FWP_MATCH_EQUAL</matchType>
<conditionValue>
<type>FWP_V4_ADDR_MASK</type>
<v4AddrMask>
<addr>172.20.0.0</addr>
<mask>255.255.0.0</mask>
</v4AddrMask>
</conditionValue>
</item>
<item>
<fieldKey>FWPM_CONDITION_IP_REMOTE_ADDRESS</fieldKey>
<matchType>FWP_MATCH_EQUAL</matchType>
<conditionValue>
<type>FWP_V4_ADDR_MASK</type>
<v4AddrMask>
<addr>76.54.32.10</addr>
<mask>255.255.255.255</mask>
</v4AddrMask>
</conditionValue>
</item>
</filterCondition>
<action>
<type>FWP_ACTION_CALLOUT_TERMINATING</type>
<calloutKey>FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V4</calloutKey>
</action>
<providerContextKey>{df911c7b-590a-40ea-a042-bb978f376352}</providerContextKey>
<reserved/>
<filterId>361187</filterId>
<effectiveWeight>
<type>FWP_UINT64</type>
<uint64>864655944083046400</uint64>
</effectiveWeight>
</item>
<transportFilter>
<filterKey>{7e8d057c-e6e8-4304-9f4d-a43e1b025bce}</filterKey>
<displayData>
<name>ISA VPN S2S tunnel to network ATLAS</name>
<description/>
</displayData>
<flags numItems="1">
<item>FWPM_FILTER_FLAG_HAS_PROVIDER_CONTEXT</item>
</flags>
<providerKey/>
<providerData/>
<layerKey>FWPM_LAYER_INBOUND_TRANSPORT_V4</layerKey>
<subLayerKey>FWPM_SUBLAYER_IPSEC_TUNNEL</subLayerKey>
<weight>
<type>FWP_UINT8</type>
<uint8>0</uint8>
</weight>
<filterCondition numItems="2">
<item>
<fieldKey>FWPM_CONDITION_IP_LOCAL_ADDRESS</fieldKey>
<matchType>FWP_MATCH_EQUAL</matchType>
<conditionValue>
<type>FWP_V4_ADDR_MASK</type>
<v4AddrMask>
<addr>172.20.0.0</addr>
<mask>255.255.0.0</mask>
</v4AddrMask>
</conditionValue>
</item>
<item>
<fieldKey>FWPM_CONDITION_IP_REMOTE_ADDRESS</fieldKey>
<matchType>FWP_MATCH_EQUAL</matchType>
<conditionValue>
<type>FWP_V4_ADDR_MASK</type>
<v4AddrMask>
<addr>76.54.32.10</addr>
<mask>255.255.255.255</mask>
</v4AddrMask>
</conditionValue>
</item>
</filterCondition>
<action>
<type>FWP_ACTION_CALLOUT_TERMINATING</type>
<calloutKey>FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V4</calloutKey>
</action>
<providerContextKey>{df911c7b-590a-40ea-a042-bb978f376352}</providerContextKey>
<reserved/>
<filterId>361187</filterId>
<effectiveWeight>
<type>FWP_UINT64</type>
<uint64>864655944083046400</uint64>
</effectiveWeight>
</transportFilter>
I am at loss at to what is actually happening that Windows decides to drop this single packet that is actually directed at the gateway machine's internal address. I tried different approaches, like changing the definition of the "Internal" network in TMG, excluding the local address from the other machine, and most of all, I am pretty sure this configuration worked with Windows Server 2003 with ISA.
Any hints are appreciated.
Regards, Alexander Gräf
↧
↧
Hidden share vs standard share intermittent issue
Hi,
I have a strange issue I don't understand, I have always had a "home folder" set for users to\\server\share$\%username% - a hidden share on the server for all my users. There are around 800+.
For some users, randomly they get the "H:\ refers to a location that is unavailable" message.
If I manually go to the client and type \\server\share$\%username%in the run box, it is indeed not available. Or even if I try \\server\share$
BUT - if I try \\server\othershare (any share that is not hidden) this still works.
I then shared my share folder as both share and share$ -with the exact same permissions I could access share, but not share$ (the same physical location)
What would block hidden shares from being accessed when its not a permission or network issue? All my clients are images - in the same GPO, they should all be the same yet most users 90% are fine, just some are not?
↧
Clean up all users on a 2008 R2 Terminal Server
I have a few Terminal Servers running Windows Server 2008 R2 x64 Enterprise that don't have roaming profiles and people log in and surf the web, use outlook, IM, word, etc... and before you know it I'm getting disk space alerts.
I found a great app called Bleachbit that really finds the junk and gets it out. Problem is, its per user, not per server. Cleanmgr doesn't do enough and even then its the same way.
I did find a program ICSweep that did all users, but doesn't get enough junk.
Anyone have any better ideas? I really don't want it to run when they log in or off. I'd rather run it as administrator on my schedule and not have to deal with RunAs.
↧
telnetting to SMTP server
My SMTP is configured in one of the server with 10.10.10.53. I had one oracle database server which is oushing mail from ERP appliaction to the user using this internal SMTP. Now we are trying to upgrade the database sever from Windows servrer 2003 to windiws 2008 R2.
In the new test server we cannot able to telnet to port 25 of 10.10.10.53 . The connection canot be able to establish.
I already exluded the port in the firewallfor both incoming and outgoing traffic. What else will be the problem blocking the communication to SMTP server fro mnew test database server
↧
PKI: Auto-enrollment of Smart Card Certificates
Hello,
I have a problem with the auto-enrollment of certificates.
My aims are:
1) Enrollment On Behalf Of... other user
2) auto-enrollment of the same certificate
Environment:
I want to enroll a certificate on behalf of another user to a Smart Card and if this certificate will expire it should be renewed with auto-enrollment.
But unfortunately I couldn't find a solution because I need to configure "Issuance Requirements/Application policy/Certificate Request Agent" to provide the function"Enroll On Behalf of ...".
Consequently an auto-enrollment isn't possible anymore and I think it is because there is noCertificate Request Agent on the Computer which tries the auto-enrollment. Am I right?
Have anyone a solution?
Thanks,
KranzerM
↧
↧
KMS actiavation problem
Hi all,
I have a problem with activating my windows 7 Ent VDI VM's. VDI is on 2012 Server. KMS is on 2008 R2 server.
I have created one win7 Ent as template then I did sysprep with generalize. I have created new collection in VDI. When my new VM's has been created I cannot activate them through KMS.
I've got an error 0xC004F038 meaning that count is insufficient. But I have activated more than 5 2008R2 servers. And if I try to activate new installation of win 7 Ent, I can successfully do it.
I have checked that my new VDI VM's have different CMID's, as describer here:http://blogs.technet.com/b/askcore/archive/2009/10/16/kms-host-client-count-not-increasing-due-to-duplicate-cmid-s.aspx
How can I solve my problem with KMS and Win7 clients?
↧
Network shares not working correctly on one PC
We have a network with three domain controllers and about 250 PCs. Two of the domain controllers are running server 2003 R2 and one is running server 2008 R2. The clients are running a mixture of Windows XP Pro and Windows 7 Pro,
One Windows 7 PC, which was running perfectly well up to yesterday evening, now cannot access its redirected desktop on server2.
Logged on to the PC as network administrator, I get the following:
If I try to go to "\\server2\desktop" I get "You do not have permission to access \\server2\desktop"
If I try to go to "\\192.168.1.64\desktop" (where 192.168.1.64 is the ip address of server2) the folder opens without a problem.
If I try to go to "\\server2\users" (where users is another shared folder, with the same permissions as desktop) the folder opens without a problem.
If I ping server2, the name is resolved correctly to 192.168.1.64.
I get exactly the same results when logged on as a user. Any suggestions?
↧
Problem with msg.exe (Err:5) under Server 2012
Hello
We use a Server 2012 with Remot-Desktop-Services (RDS) in Session-based mode.
We would need to use msg.exe to send all RDP-Users some messages, but we are not able
to use this tool (gives Error [5]:Access is denied).
In Server 2008 / R2 this Problem could be solved with a Right Adjustment
- RDP Config Manager -> RDP-Tcp config -> Reg.Security -> Advanced ->
Remotedesktopuser edit -> add: allow messages
This configuration i did not found in Server 2012 ...
How can addjust this in Server 2012 (Tool, Group-Policies, Power-Script ...)
Thank in advance for any help, best regards
Markus G.
↧