Como

we have large windows 7 deployment bitlocker turned on laptops.  wish migrate retrieval of bitlocker recovery keys our desk.  unfortunately not want them have rights of domain admin. what minimum rights needed view bitlocker recovery keys in active directory?   ray watters, chicago, il.   hello, did saw bitlocker recovery password viewer: http://support.microsoft.com/kb/928202 http://www.microsoft.com/downloads/en/details.aspx?familyid=2786fde9-5986-4ed6-8fe4-f88e2492a5bd&displaylang=en best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Directory Services

my print services installed on w2003 r2 dc.  have fair amount of large format print jobs of multiple file types (dwg, pdf, jpg, tiff).  recently, printed documents started print incompletely.  output ejects 1 of several hp1050c plotters or kip 3100 printer , job restarts.  in cases second piece of output complete.  job failures resemble output of out of memory condition.  usually, several passes of full ink coverage.  i'm trying determine if condition windows print spooler, windows printer issue.  multiple file types , multiple print devices seem point issue away driver or application issues.  have ideas? hi,   thanks post.   here need confirm on issue:   1. please try print text file these problematic printers. work? 2. third party program or driver update installed before issue occurs? 3. please remove newly added printer , uninstall relevant driver printer server if possible.   meanwhile, please perform following steps troubleshoot issue.   suggestion 1: clear spoo...

hi, solve few issues have server tried rename ad server (from compict-dc mail). rename failed , ad wont start anymore, first thougt dns becouse records linked mail. changing doesnt fix it. ran dcdiag check , still saw entry's mail in it. how can fix it? link dcdiag log edit if try edit computername via netdom error: secified domain either not exist or not contacted hi, based on research, if use netdom tool rename dc , it can update service principal name attributes in ad computer account , register dns resource records new computer name.  did use netdom command rename dc before issue occured? if used system properties rename dc, ad , dns replication latency might temporarily prevent clients locating or authenticating renamed domain controller. can try update frs member object see if issue persists. more information, please refer link below: renaming domain controller    in addition, you can ping the fqdn...

i having troubles dcpromo on lh beta 2  build 5384.4. i have tried dcpromo /answer:unattend.txt dcpromo /unattend:unattend.txt but "the unattended  installion file missing dcinstall section name" the core step step links item based on 2003, sample unattend file in core step step in xml format, should dcpromo unattend file in xml format? with [unattended] unattendmode=fullunattended [dcinstall] username=administrator password=password userdomain=longhorn.internal safemodeadminpassword=safepassword replicaornewdomain=newdomain newdomaindnsname=longhorn.internal rebootonsuccess=yes and [dcinstall] username=administrator password=password userdomain=longhorn.internal safemodeadminpassword=safepassword replicaornewdomain=newdomain newdomaindnsname=longhorn.internal rebootonsuccess=yes hi, no need in xml format. if run: dcpromo /?:unattend it print out supported settings longhorn, defaults, etc. the thing jumps out replicaornewdomain should set =domain, not =newdomain. ho...

hello, how can sure new gpo working , taken in count on network? i made 1 on windows server 2003 setup tiny client hours ago @ login, still nothing? also, regarding logon script: applies when logged in locked computer, when unlock computer, 'login' also? thanks! hello, if have linked , enabled gpo in domain or ou, gpo active. post that, question whether group policy applied on clients. what gpresult , rsop says? policy applied on objects. please note logon script should placed in below path: \\domain.com\sysvol\domain.com\policies\{guid}\user\scripts\logon\ logon script apply @ time of users logging in. not while unlocking computer. devaraj g | technical solution architect Windows Server  >  Group Policy ...

we facing replication problem branch office adc central dc. if solution check let know hi ,   according description, understand got ad replication issue on adc.   to troubleshoot issue, can perform following steps isolate root cause.   1.      run "dcdiag /test:replications" command on problem dc. 2.      repadmin /showrepl server1.domain.com 3.      verify if there error events related ad replication on problem dc.   regards, wilson jia     this posting provided "as is" no warranties, , confers no rights. please click "mark answer" when correct reply question. Windows Server  >  Directory Services ...

hi there every1 have issue concerning me. when every cluster test, system hangs @ "list disks" , subsequently restarts server. have 2 identical servers in hardware & software setup , experience problem on both. disk drives 2x 146gb 15k sas drives (mirrored) on lsi logic elp8708 controllers. experiencing similar problem? regards fred jonathon, shared storage not problem. did firmware upgrade on sas controllers , resolved problem. regards frederick Windows Server  >  High Availability (Clustering)

i have windows server 2012 (not r2) kms host. activates our client machines (all windows 7 enterprise) , our servers (windows 2008, 2008r2, 2012, , 2012r2). installed product key windows 10 yesterday (aka "windows srv 2012r2 datactr/std kms windows 10"). today want install key office professional plus 2016, found link provides instructions: http://edhammond.blogspot.com/2015/10/add-your-office-2016-kms-keys-to-your.html . however, nervous hitting "commit" button after putting in "kms host key" because says uninstall existing product key (not sure 1 referring to) on host , install 1 have entered. the terminology confusing: why calling kms host key, key office pro plus 2016. will uninstall windows 10 key , other keys? will kms host still service clients , servers? hdl hi, yes, saw similar kb since office 2013 chose not continue. take snapshot of kms server , proceed suggested. however, since have key, can't install comman...

experts, we want implement max password age group policy entire org. so. if set 90 days, 90 days timer start when policy implemented or when user changed his/her password last time? so, if based on when user change password last time. lock user account users changed password >90 days ago or give them option on logon change password. appreciate  any help!! hello, all accounts password not changed since 90 days be asked change it. so should inform users before change will happen , requested change password. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog: http://blogs.msmvps.com/mweber disclaimer: posting provided no warranties or guarantees , confers no rights. twitter:   Windows Server  >  Group Policy ...

we have windows 2012 r2 virtual machine running on windows 2012 r2 host. virtual machine unable log on windows. boots , before getting alt-ctrl-del keys shows black screen. we able ping machine ip address & reply. not access machine via remote desktop also. any boot machine. is happening on a vm have had running while , started happening, or happening newly created vm? if able ping machine, must have booted.  other thing occurring in situation if there machine on network same ip address.  in case, second machine trying use address given apipa address , not able ping vm, ping address respond machine have address. sure machine responding ping?  check mac address of responding machine see if vm or other machine. can't rdp:  ever able rdp machine?  default, remote desktop disabled.  have enable before can rdp it. . : | : . : | : . tim Windows Server ...

we have been using agpm on year but in last few days it has been giving access denied errors when deploy edited gpo. i made copy of gpo (using template) and deployed without error. next time tried deploy update of it denied access. the error reporting denied access has not been consistent when trying again. latest error msg: deploy gpo: base policies v2.2...failed the overall error was: access denied. (exception hresult: 0x80070005 (e_accessdenied))  additional details follow. [gpmc error] task cannot completed. there error extension [registry]. file [\\xxxxx.xxxxx.xxx\sysvol\isad.isadroot.ex.ac.uk\policies\{a0f4a15e-5c10-4462-b275-588d171478bd}\adm\app_v_v1.adm] cannot accessed. the following error occurred: access denied. any suggestions cause , fix? the problem fixed. there corruption of permissions , ownership on 1 of files in sysvol gpo folder. reapplying permisions objects in folder cleared problem. ...

hi i using wds windows server 2008 r2 until able capture , install windows 7 images....now trying capture windows 8.1 machine after sysprep , "volume capture" empty , not able capture windows 8.1. know should make work , able capture , install windows 8.1 image wds? el   hi never mind i found how capture windows 8.1 wds on windows server 2008 r2. https://www.youtube.com/watch?v=wk0udw9z7x0 10x help. :) Windows Server  >  Setup Deployment

hi my dhcp showing different ip , not showing our domain name. please let me know solution  hi  have other network adapters on dhcp server enabled not connected?if go ahed disable that,then restart dhcp server. also check dhcp server auhorize. this posting provided no warranties or guarantees,and confers no rights. best regards burak uğur Windows Server  >  IPAM, DHCP, DNS

hi there, whenever user looks documents, pictures, or videos, shows empty when there. (for example, create .txt file, press f5, cannot seen anymore , not hidden) we have 2 main types of users: users pulled different domain, guest accounts not pulled different domain. the users pulled different domain, documents should redirected network drive. however, guest accounts not pulled different domain not have network drive. affecting guest accounts. before start messing gpo settings; work of folder redirect? when guests save work documents, saves in c:\users\%username%\my documents. mentioned above when push f5 refresh, folder appears empty. trying redirected null location? is folder redirection gpo causing or 1 (i believe have gpos limit access servers c:\) hi, > mentioned above when push f5 refresh, folder appears empty. trying be > redirected null location? after create new file, right click on launch properties, check location in general tab. location local patc...

hello, yes have seen question asked dont seem getting answers expect. from reading if have windows 2003 domain , want manage windows 7 have 2 options. upgrade schema (adprep) , 1) install windows 7 workstation rsat on. create central store , copy definition files store. 2) create domain controller making in windows 2008 dont need create a central store.   i have tried both options in testing enviornment , have come across thing thats confusing me. right trying lock down services , these service can differ between windows 7 , windows xp goto group policy manager  " computer configuration\windows settings\security settings\system services\" , see list of services. if go rsat workstation , " error reporting service" not exist, in  gpo on windows 2003 does.  now i have 2 problems @ point can either create 2 gpo 1 xp on windows 2003 dc and create gpo windows 7 on  either rsat work station or dc have start making...

hello i have application running on windows 2008 sp2 server. application has 4 processes, 1 of main engine called engine1.exe *32 normally, during day if check resource monitor on server: - 85% used physical memory - 5 hard faults/sec however, after reboot, notice is: - 98% used physical memory if @ engine1.exe, it's got 3000 hard faults/min what don't understand there commit (kb), working set (kb) process. what need know how memory (both ram , page) process using , how of page file use. counter in resource monitor should use? secondly, 3000 hard faults/min much? what's acceptable level? thanks help! hi, thank post. a hard fault (also known page fault) occurs when page of referenced address no longer in physical memory , has been swapped out or available backing file on disk. not error. however, high number of hard faults may explain slow response time of application if must continually read data disk rather physical...

i had installed powershell 5.0 in april 2015 , preview version. the kb is  windows6.1-kb2908075-x64. now, not able un-install update want go powershell 3.0 compatibility reasons. can here. not able locate same msu in windows download center either. programs & features.  kb. \_(ツ)_/ Windows Server  >  Windows PowerShell

server 2012 r2 datacenter 2 motherboard intel gigabit nics i have teamed 2 nics , throughput improved. want move server hyper-v , understand team , hyper-v switch don't work together. if add nic hardware, hyper-v switch adapter , still continue keep team? john lenz i'm not sure gave impression nic teaming cannot used hyper-v switch.  support using them together.  there rules using them though. i'll summarize rules here, read comprehensive nic teaming deployment guide .  i've included citations guide in [brackets]. in hyper-v root partition: the vswitch must put over the team [guide chapter 3.6].  (this makes sense: if tried other way, you'd have 2 vswitches.  guest vms wouldn't advantages of teaming, since guests attached switch sits below teaming feature.) if use vlans, should configure vlans once: @ top of stack.  means in hyper-v, if there's vswitch on stack.  if there's no vswitch, configure vlans in nic teaming...

i having strange errors on new windows 2008r2 controller , after spending 6 hours on phone ms support , getting decided i'd demote , rebuild it.  the problem is, 2003 server didn't see server has been demoted , still believes on network.   on edit...i went ntdsutil , can see server has been removed still showing in sites , services...is safe delete there? there still ns entry in dns _msdcs...i assume safe delete? hi you should clean environment previous dc meta data. please check links below more info: how remove data in active directory after unsuccessful domain controller demotion clean server metadata domain controller demotion & metadata cleanup delete failed dc's ad mahdi tehrani loves powershell please not hesitate click on vote helpfull if post helps or mark answer if post answers question. Windows Server ...

[warning] failed query spn registration on dc what specific dns records missing?  before run netdiag /fix following first. dc try running dnslint /ad /s  "ip address of dc" description , download http://support.microsoft.com/kb/321045 should determine records missing. can automate refresh (wouldn't recommend know why is happening though) via nltest nltest /dsregdns /server:--servername-- /dsregdns refreshes registration of domain controller-specific dns records. Windows Server  >  Directory Services

i having rebuild client pc , re-attach pc existing backup , not create new backup. have found procedure windows home server find out if this can used for wse2012? http://www.wegotserved.com/2010/09/28/link-rebuilt-pc-windows-home-server-backups/ is don't want lose pre-existing backups? can archive them. robert pearman sbs mvp | www.titlerequired.com | www.itauthority.co.uk Windows Server  >  Windows Server 2012 Essentials

hello everyone, when run following statement, throws me 400 bad request error on production environment running fine on local environment. $uri (url) different in both cases doing same task. invoke-webrequest -usebasicparsing  -header $headers -contenttype 'application/xml' -method post -body $postparams -uri $uri it returns 400 bad request invoke-webrequest : remote server returned error: (400) bad request. @ c:\script.ps1:107 char:14 + ... resultrun = invoke-webrequest -header $headers -contenttype 'applicat   ... +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + categoryinfo          : invalidoperation: (system.net.httpwebrequest:httpwebrequest) [invoke-webrequest], webexception + fullyqualifiederrorid : webcmdletwebresponseexception,microsoft.powershell.commands.invokewebrequestcommand tried catching exception, using below: try { invo...

hi all, i having issues writing script following. grab sql agent service account , check if service account part of local administrators group. @ moment, have script can both separately, want bring them work together. $sqlagent = get-wmiobject win32_service -filter "name '%sqlserveragent%'" | select startname write-host $sqlagent one issue here if have multiple sql instances. another issue on windows 7 machine, output comes out username@domain.com on windows server machine domain\username. there issue of inconsistent format. i have function returns list of usernames, domain local adminstrators on server. issue need result of script above check out function producing. function get-localgroupmembers { param( [parameter(valuefrompipeline=$true)][array]$server = $env:computername, $groupname = $null ) process { $finalresult = @() $computer = [adsi]"winnt://$server" if (!($groupname)) { $groups = $computer...

hello i have problem in microsoft word 2007 when the closure is , or tries open a file the error message and following : there problem saving file. this error occurs because disk or floppy disk is small for the file is full or not enough ram or there a permission problem with the drive where the file being saved. if there is enough disk space for a paging file , save file to another drive . if there not enough ram , increase the ram available. if you can not save unit due to permissions assigned it , save file to another drive or ask administrator the appropriate permissions to save files on drive . note: error may occur if your computer running a version of antivirus software that not compatible with microsoft office system or needs updated. anyone know how solve? the error message points number of possible causes and, fixing those, solutions. example, have been using external media (cd/d...

hello, i have performed research, , appears can target both xp , 7 clients group policy preferences add shared printer. this article describes presence of shared printer item on new menu in group policy preferences control panel settings item printers, have listed are: tcp/ip printer , local printer. server using create gpo windows 2008 r2. why doesn't new printer option allow me create shared printer? any assistance appreciated. thanks, matt hello, the question seems have been answered here: printers via group policy preferences (differences between user/computer) http://social.technet.microsoft.com/forums/en-us/winservergp/thread/b11e3ad1-7941-48a3-90a5-a40dce0c8c09 regards, cicely Windows Server  >  Group Policy ...

wondering if has come across issue before. recently, 1 of administrators @ site working on reported unable add user group - should not have been case (these administrators have been granted permissions @ domain level manage group memberships).  when looked @ group in question discovered "inherit permissions parent" box unchecked - should not case in environment.  simple matter reverse this, , fixed issue @ stage.  on following weeks however, further groups , users appeared in state - causing administrators bit of headache. i responded running dsacls command against group , user objects in domain force permissions inherit, , seemed resolve issue. however, have morning come across group showing behaviour (not inheriting permissions).  relatively (admittedly not 100%) 1 of same groups showed behaviour , amended (as were). i (again, not 100%) not being configured rogue administrator, @ loss explain otherwise.  has seen behaviour before - if s...

is there problem setting new share @ volume root of large directory tree? largest volume 2.5 tb. i've seen new ntfs permissions on large volume choke server while chewing through it. i have 2008 r2 servers connected iscsi volumes show local mapped drives , permissions set through ntfs. users log individual servers on rdp work. i'm planning set 2012 r2 server cluster couple of file servers , rdc connection broker, that's why need set new shares. hi, a large file server should not issue. just if shared folders placed in same server, heavy workload. instead of combine files same folder, can use dfs (distribution file system) logically combine shares single path (called dfs namespace).  if interested, please see article: what dfs https://technet.microsoft.com/en-us/library/cc779627(v=ws.10).aspx and again, large share work should, no problem if file server powerful.  please remember mark replies answers if , un-mark them if provide no help. if have feedback ...

in numerous sites, including official microsoft w2k8r2 documents, there information new feature of dhcp - dhcp failover. i tried find information in system, documentation, netsh etc how configure it. question is: - feature implemented or it's palnned done? thx information -o((: nexor :))o- hi, dhcp failover can achieved via use of clusters or, extent, 80/20 scope split rule. notes pertaining these 2 options found in following links: http://technet.microsoft.com/en-us/library/dd296696.aspx http://technet.microsoft.com/en-us/library/dd296651.aspx regards, salvador manaois iii mcitp | enterprise & server admin mcse mcsa mcts ciwa c|eh bytes & badz: http://badzmanaois.blogspot.com Windows Server  >  Network Infrastructure Servers ...

our site uses internet proxy automatic configuration script.  installation procedure attempts connect internet in order activate windows , set automatic updates without asking me proxy configuration, , therefore fails.  after set proxy correctly ie (ie->properties->connections->lan settings->use automatic configuration script), i'm still having troubles downloading updates (error code 0x8007007e). this problem, or similar problems, has been around long time in various versions of windows clients , servers.  i've had install hotfixes and/or tweak registry before.  there similar setting should use version of windows server , ie7? -st hi, please try following resolve issue. 1. click start, click run, type regsvr32 inseng.dll in open box, , click ok. when receive regsvr32 confirmation dllregisterserver function succeeded, click ok. 2. click start, click run, type regsvr32 oleaut32.dll in open box, , click ok. when receive regsvr32 confirmation ...

please help, have got server (windows 2003 r2 sp2 enterprize edition) running on dell pe2950. the problem is the cpu gets stuck @ 100%, using process explorer i found that system interrupts are using more cpu time. is there microsoft patch this?  you should call microsoft product support. https://support.microsoft.com/oas/default.aspx?&c1=508&gprid=10394&&st=1&wfxredirect=1 regards, dave patrick .... microsoft certified professional -microsoft mvp [windows] Windows Server  >  Windows Server General Forum

we have share created on domain environment when users try access on network not ask credentials , give me error message  you not have permission access \\lyncarchive.iyogi.net\lync-archive. contact network administrator request access. for more information permissions, see windows , support i have checked credential manager , removed stored usernames , passwords still same error message. any appreciated.... thanks, abhinav hooda riwa hi, did access network share domain member server or non-domain workstation? if domain member server, not ask credentials when user not have permissions access network share. if non-domain workstation, please check if can using following settings on windows server 2012 achieve this. go control panel > network , sharing center > change advanced sharing settings > enable turn off password protect sharing option best regards, mandy  we trying better understand customer views on social support ex...

hi, i have 2 way trusted between 'domain a' , 'domain b'. i have created computer group policy 'domain a'  that installs applications - these applications stored on share on 'domain b'. when policy runs error message ' installation source product not available'. i believe problem due security of computer trying access folder before autheticated user assigned( there no problems accessing folder once logged on). testing have added computer directly folder security , shares. no change. tried adding domain computers domain in well. any ideas? possible or need have these resources in local forest? thanks in advance robin hi, some further digging suggests not possible , need copy in form files share available in local forest. http://www.grouppolicy.biz/2010/04/kb274274-focus-the-cross-forest-program-deployment-problem-using-group-policy/ thanks help. Windows...

hello guys, i have question if i'm doing correct way... please read configuration en tell me think. i have costumer small firms , 1 big firm. big firm has dc & exchange. want create dc can put computers 1 of small firms in domain. make domain sub of big firm dc. then want configure exchange e-mail both domains. i curios comments. greetz vincent bal well big 1 has forest , small 1 not have dc/forest jet. if create trust possible use 1 exchange server both forests? exchange can run in 2 forest far mailboxes shared. constant data transfer made between these 2 forests. if 2 forests kinda linked each other , if mailbox of forest allowed stored in forest b . yes, can go exchange resource forest. https://social.technet.microsoft.com/forums/exchange/en-us/243d36c8-a209-43b8-9d9c-4dec01bd459c/two-forests-and-one-exchange-server but, if cross relm functionality not allowed. wise create new forest , installing exchange server forest. every thing depends ...

hi, i have terminal server under windows 2003 r2 last sp , updates. since 1 week, have problem: when user closes session, printers doesn't disconnect, next time connects terminal server, printer mapped, users end dozens of printers , have printer problems. i have installed user hive cleanup service, has make things worst: now, users needs hours close sessions. i have googled hours, , haven't found solution. can diagnose/solve problem? didn't happen 2 weeks ago, , haven't installed else in server. thank you hi francisco, please check print services related logs, can find under: event viewer -> applications , services logs\ microsoft\ windows\printservices. you may update printer drivers , disable third party software see whether issue persists. best regards, amy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. ...

i have content need export csv file, content contains comma's in other words, have contents such name, location, phone_num testing, hometown, ny, 123-456-7890 when exporting data sees 'hometown, ny' value separated due comma before ,ny -but want 'hometown, ny' goto single cell under location. any ideas on this, or have other options csv file or xlcsv file? when "hometown, ny", "hometown" example, right?  so like, "albany, ny"? a formatted csv file this: name,location,number mike,"albany, ny",1234567 saying whatever creates csv doesn't this, , powershell should compensate?  will every entry in 2nd column have comma?  if not, don't see how work. mike crowley | mvp my blog -- planet technologies Windows Server  >  ...

i have 2008r2 domain, running in 2003 functional mode. i have policy has security filtering set.  whoever created set apply specific computers, there literally few hundred computer accounts listed here.  there way strip out without clicking on each , every computer account , clicking remove gpmc?  perhaps powershell script or command? one option recreate policy completely, there lots of settings in 1 , i'd prefer reset security filtering nothing, can adjust apply systems in cleaner manner. when creating copy of policy asked keep existing permissions or apply default. when choose apply default security filter empty. remove link ou old 1 , link new policy ou. regards whenever see helpful reply, click on “propose answer” / “marked answer” , "vote". microsoft related blogpost on www.vdnieuwenhof.eu Windows Server  ...

hello, is there way audit/log when powershell script launched/executed ? i want see powershell scripts running on servers. thanks, i don't know of way that. might able audit running of powershell.exe, doubt tell difference between running interactively or launching script. , if run interactively, don't see how able determine scripts might have been run interactively. or ise... al dunbar -- remember 'mark or propose answer' or 'vote helpful' appropriate. Windows Server  >  Windows PowerShell

hi there thought love help. no matter how hard google, , read endless amout of information not working. keep hitting wall powershell, runspace , pipeline. goramit! sorry getting frustrated.  right code trying working  string fileserver = servers;                 string exepath = "file path 2 \\ 1 \ due being exit other wise";                 string folder = ou1;                 string subfolder = ou2;                 string root = "root path";                 string path = "$" + root + "\\" + ou1 + "\\" + ou2;                 string template = " thing needed";                 string command = "inv...