Quantcast
Channel: Windows Server General Forum forum
Viewing all 24879 articles
Browse latest View live

Work folders on multiple servers and GPO

$
0
0

I’m trying to set up work folders on multiple file servers and then use GPO for the client settings. I can get it to work manually from the clients if I use the msDS-SyncServerUrl attribute.

But when I configure ’Specify Work Folders settings’ from Users > Policies > Administrative Templates > Windows Components > Work Folders it doesn't work. I leave ‘Work folders URL:’ blank since I can’t specify one unique file server.

I don’t want to use DFS namespace and replication since the file servers are on different location and I don't want to replicate the files.


CPU Utilization is always been High with System Idle Process and NT Kernel & System consuming almost 50% of CPU every time.

$
0
0

Hello,

In recent time (Since couple of days), we are experiencing the High CPU Utilization in Windows 2008 Server R2. Most of the time major part of CPU is consumed by System Idle Process and NT Kernel & System processes. As a result, system responding very slow and the application running in the server is taking lot of time to complete its tasks then usual.


OS : Windows Server 2008 R2

Xeon (4Cores), 8GB RAM

Regards,

Manjunath.G

ALL files deleted from Windows server 2008 (possible insider sabotage)

$
0
0

We are a small business with one server in the office and 10 workstations.

Two weeks ago our internet service was down from Thursday night (or Friday morning) to Monday morning. When the ISP technician finally showed up on Monday, he said it was the modem (he had to replace a part). An on-call IT/computer repair tech said the switch needed to be replaced as well.

When we finally had internet access we found out that ALL the files including a large DB2 database had been deleted from the server. Apparently someone had accessed the server sometime between Thurs night/Friday morning and Monday and deleted all the files, either from the office or via remote desktop.

We have on-site and online backup, but our server admin (the office manager/accountant) said that the external hard drive used for daily backups also failed and no backup had been done for weeks. So, we had to restore some 450gb from online backup and it's still going.

The IT/computer repair tech is convinced it's a disgruntled employee, but he doesn't know if it's possible to determine who did it - he said he doesn't have the expertise. Our server admin said "everyone" in the office could have logged in and deleted all the files - which I know is not true because she's very strict with user permissions - and audit was off as well.

The ISP said they wouldn't have any information. Our online backup service (incremental backup every night) said it might be possible to determine when all the files were deleted by checking the backup logs and server logs.

Our boss wants to find out who did it and obviously we need to secure our server as soon as possible, but since the office manager is not very cooperative nothing has been done so far. The server is as vulnerable as ever and there's nothing we can do about it.

My questions:

Would it be possible to determine who did what and when?
Who should we hire? A network security consultant? We're in San Francisco.
Do we need the server logs (online backups are deleted after 30 days)?
Do we need access to the server admin's computers? She has a desktop computer as well as her personal laptop which she uses at work.

We need to secure our server, and our boss could be the new server admin so he could reset the password (right now only the office manager has the password) and user access, etc.
Do we need a network security consultant for something like that?

Any advice would be much appreciated. Thanks!

Unable to RDP

$
0
0

Hello,

I have a server that kicks out my admin account every time i try to RDP to the server. I soon figured out that its only happening when the admin account is logged on the server, so i had to issue the command below from the another server.

query session /server:myServer

SESSIONNAME       USERNAME                 ID  STATE   TYPE        DEVICE
services                                                    0  Disc
rdp-tcp#1               admin                        1  Disc
                              user2                         2  Disc
                              user3                  3  Disc

console                                                    5  Conn
rdp-tcp                                 65536  Listen

reset session 1 /server:myServer

for me to be able to use the admin account again to RDP to the server.

Any ideas?


For God, and Country.

KMS/DNS Server Problem

$
0
0

Having a problem with our KMS server as follows:

I installed a KMS server without realizing that a former colleague had also installed a KMS server but on a different server.  I uninstalled the original KMS server however the DNS record for that original server keeps recreating itself.  I do in and delete the record from the _TCP folder and then done an AD replicate from that server, then by the next day it has recreated itself.  I have tried running the uninstall command again on the server but this has done nothing.  The new server has a DNS record but each time the old one is recreated it seems to take precedence over the new one so when i try to license a server it doesnt work until i delete the old DNS record.

Will be going to Windows 7 soon and don't want any problems with licensing.

What im i missing?  Is this the old KMS server that is the problem or is it something to do with DNS?

Thanks

windows log file in windows 2008r2

$
0
0
there is logs folder in windows 2008 r2 can I delete file inside this folder? does it will corrupt my system? 

FTP Error and Server Recommendations

$
0
0

Hi!

We need to have a server for FTP access from internet for maximum 20 concurrent users? Which version of windows server will be suitable for this?

Secondly, we are getting the attached message when access our ftp site from internet. Windows firewall is disabled on our server and the firewall is forwarding the ftp port to the server. We are using multiple ftp ports like 21, 2121 and 2122.

21 and 2121 are working fine but 2122 or any other port is not working and showing error. We have assigned full permission to everyone but still not working.

PowerShell and Command Prompt Error after October MS Updates

$
0
0
After installing the latest MS Updates (October 2015) we are having random servers receive "The application was unable to start correctly (0xc000007b)" error when attempting to open PowerShell or Command Prompt. This is on Server 2008 R2. We have attempted to back out the updates in searching for the problem update but it seems that random updates are resolving the issue.  One that is coming up more than others is KB3088195 to resolve this.  Has anyone else seen this behavior after these updates and have any insight on why this is occurring?

the combination of ip address and subnet mask is invalid

$
0
0

we want to use one additional IP Address 100.192.232.65, subnet mask 255.255.255.240

when we put the entry, the system show error message-   

the combination of ip address and subnet mask is invalid in windows server 2008

Error crypt32

$
0
0
Event Type:Error
Event Source:crypt32
Event Category:None
Event ID:8
Date:10/19/2015
Time:4:14:48 AM
User:N/A
Computer:xxxxxx
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Windows server 2012 gives error on creating scheduled tasks

$
0
0

When creating a scheduled task within windows server 2012 based on a event id and selecting action Send email an error occurs.

"An error has occurred for task <task name>. Error message: The following error was reported:
2147750704.

I tried this on serveral windows server 2012 installations, all have the same behavior.......
Any sollution for this issue?

Printers don't show up in the browse list.

$
0
0

We have Windows domain with 3 Win 2008r2 DC's and one Win 2008 DC.

I am pretty sure that in the past when I added printers to Windows 7 computers that I was able to see a listing of printers and select the printer from the list to install.  Now, for some reason I see a couple of misc printers but I don't see the list of printers that we have configured on our main print server.  The main print server is a Windows 2003 server.  Very old but it does a great job as a print server.  I have to select "The printer that I want isn't listed" and put in the unc path \\print-server1\..... to install the printer.  Maybe it has something to do with my old Win2k3 print server.  Not sure.

The printers installed on the print server have the box checked to "show this printer in the directory".  I don't know why they are not showing up any more.

Can someone help me with this?  thanks

Cannot access event viewer- Windows Event log service stuck on "starting"

$
0
0

Good morning,

Having several problems with a server this morning but one of them is that I can't access Event Viewer. I get the following message:

Event Log service is unavailable. Verify that the service is running.

The Windows Even Log service is stuck on "starting". I can't do anything with it and no amount of rebooting the server will make it respond.

Best regards

Katrina

HASP Key problem. I cannot install either Driver Update via Devices Manager or Windows Update.

$
0
0

Hi

Today it turns out that i am not able to install my HASP Key 

- on Windows Update i receive Error code: 800F0248 

- on driver update in Device Manager i am receiving " the installation is forbidden by system polices . Contact System Administrator (It might be different in EN version i was translating it from PL)

I am logged as a Administrator on the DC.

Yesterday everything was ok.



Error installing .NET Framework 3.5 using GUI(Roles and features) and DISM

$
0
0

I'm trying to install .NET 3.5 feature to my Windows Server 2012 R2 Foundation server, and I'm getting some errors 

Error from the GUI and PowerShell:

Error 0x80073701 Cannot find the referred assembly.

Error by cmd DISM:

Image versión: 6.3.9600.17031

Enabling feature

[===============17.4%                                                ]

Error: 14081

Cannot find the referred assembly

I went to the log file in c:\windows\logs\DSIM and c:\windows\logs\CBS

and I found this line errors:

2015-10-19 12:34:21, Error                 CSI    0000000d (F) STATUS_SXS_ASSEMBLY_MISSING #639952# from CCSDirectTransaction::OperateEnding at index 0 of 1 operations, disposition 2[gle=0xd015000c]


2015-10-19 12:34:21, Error                 CSI    0000000e (F) HRESULT_FROM_WIN32(ERROR_SXS_ASSEMBLY_MISSING) #639835# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_PinDeployment(Flags = 0, a = Microsoft-Windows-NetFx3-Deployment-LanguagePack, Version = 6.3.9600.16384, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"de-DE", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral, cb = (null), s = (null), rid = [93]"Microsoft-Windows-NetFx3-Server-OC-Package~31bf3856ad364e35~amd64~de-DE~6.3.9600.16384.NetFx3", rah = (null), manpath = (null), catpath = (null), ed = 0, disp = 0)[gle=0x80073701]

2015-10-19 12:34:21, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80073701 - ERROR_SXS_ASSEMBLY_MISSING]

Any ideas of what's happening?


Cesar K-rrillo



Generic error when using schtask.exe Server 2012R2 only

$
0
0

I wrote a powershell script that creates a scheduled task on a remote host. The script works on all of my servers accept any that have 2012R2 as an OS.

ERROR: The parameter is incorrect.
    + CategoryInfo          : NotSpecified: (ERROR: The parameter is incorrect.:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError

This a generic error that results when this command is run in my script

Invoke-Command -ComputerName $_ -ScriptBlock {
         Schtasks /create /sc Once /st 02:00 /tn PS_Script /tr "powershell.exe -file $Args " /s localhost /ru SYSTEM
    } -ArgumentList $LocalScriptLocation

The task gets created and run on 2008R2, and 2012 servers but not 2012R2. Is this a known issue? My google search were fruitless

Thank You,

Rich


Success is a lousy teacher. It seduces smart people into thinking they can't lose. -Bill Gates

LAN Driver for Windows Server 2008 R2 on Intel DH67BL Motherboard

$
0
0

Hi All,

I cant install LAN Driver for Windows Server 2008 R2 on Intel DH67BL Motherboard.

Any known fix?

Thanks

Windows Server 2008 R2 freezes

$
0
0
Hello,

I am using a Proliant ML110 G6 with 1 processor and 3GB memory. I am using Windows Server 2008 R2 Foundation, installed from the HP Windows Servers 2008 R2 Foundation CD and license.

Irregular the system freezes. When looking at the VGA output (console of the server, with USB mouse and keyboard), I still see the Windows desktop (when logged in on the console of the server), but the time in the system tray doesn't run any further. Also I can't use the keyboard or the mouse, the system just freezes. It is not possible to connect or ping to the server, or connect to RDP anymore when the freeze has occurred. Any still open RDP sessions are getting the same problem: The windows desktop is still visible (or the last running application) but the system tray time isn't correct anymore.

The system can only be rebooted by pressing the poweron/poweroff button for 5 seconds, or use the HP iLO reboot functionality.

The system isn't doing any scheduled tasks when freezing, also, the time of freezing is just random and not always the same. Last time the server did run for like 2 weeks before freezing, but some other time it took only a few days. The server isn't configured for stand-by or such
Troubleshooting steps taken:

I did already apply all Windows (security) updates for this system, also I did update all the HP firmware by using the HP update utility for the HP Proliant ML110 G6, which did update the packages by FTP.

Already got a case submitted at HP, no hardware issues can be found....



Windows Server 2008 R2 - blue screen (no desktop) after Windows Update

$
0
0

Tonight I ran Windows Update on my 2008R2.  after rebooting and logging in as administrator my desktop is completely blue & blank with just a mouse pointer.

I tried logging in as another user but experienced the same problem.  Tried starting in Safe Mode with Networking, but still same problem occurred.  Rebooted several times, including complete shutdowns...with no success.  Can access Task Manager, so tried running explorer.exe with no luck.  Also tried stopping the explorer process and rerunning but no luck.  Did some research that suggested I add from a command prompt localgroup Authenicated User group but said it already existed?

I came home & used Remote Desktop to login with my admin account & everything is fine with the desktop.  One article suggested creating another admin account.  I did this & remotely used that account to login remotely & strange enough the new admin user now experienced the same blank desktop?

Any suggestions on how to fix this?  I tried to boot in safe mode with networking with no luck.  I tried to go back to the last known good configuration, however that made no difference at all (still blank desktop).  The server is up & running and my users can login & connect to their mapped network drives as well as see all their files.  When I login remotely as admin, everything appears on the desktop as usual and everything seems to be running fine (including my online backup).

I can surmise that something has happened at the localmachine level...but I am out of ideas of what I can do to fix this.  Please can anyone help?

Thanks in advance for any assistance in this matter.

WinRM connection issues for domain

$
0
0

Hi,

I am trying to connect remotely to WinRM to enumerate Win32_Computersystem over HTTP.

I have my HTTP listener set on the windows 2008 machine

Initially i was using a local user to connect , but the connection failed.

The issue was with UAC,to resolve this i added the registrykey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\LocalAccountTokenFilterPolicy with value set to 1 .

When i use a domain user, i am unable to connect to the same.

I queried the SPN via setspn -l <hostname> and found the following results,

WSMAN/<shortname>

WSMAN/<fully qualified domain name>

Is there any other configuration that needs to be done?

The domain account is part of local Administrators group.

There is an EventID 168 with the following description.

Sending HTTP 401 response to the client and disconnect the connection after sending the response.

We are using Negotiate with SPNEGO.

And also the issue is for domain user while a local user is working fine.

Firewall is turned off as well.

Tried using Analytic logs in WinRM but it seems to provide the same info as Operational.


Viewing all 24879 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>