Posts

Showing posts from March, 2014

Add/Remove security privileges on domain via command line

Image
hello list domain security privileges can use "gpresult /z" command. example result of command below: add workstations domain adjust memory quotas process debug programs how can add privilege "enable accounts trusted delegation" or remove secuirty privilege domain user via command line? note:  we have domain admins privileges. don't want add user domain admins group. want escalate his/her privileges. note: i not interest in permissions gporead/gpoedit.  (for more read: "set-gppermissions" article ) regards hi, i agree setting via gpo. far know manage gpo using powershell not group policy settings, please use get-command -module grouppolicy to commands used manage group policy. it seems set-gpregistryvalue command manage group policy settings: the set-gpregistryvalue cmdlet configures registry-based policy setting under either computer configuration or user configuration in gpo. policy setting c...

Multiple DHCP scopes with seperate NIC's

Image
hi, are there known issues using dhcp server (windows server 2008 r2) 2 nic's serve clients different network ranges? know use ip helper on router (which remote sites), without 1 on local network. additionally, the previous (novell) dhcp server setup way. server nic's -nic1: 192.168.1.1/24 gateway 192.168.1.254 -nic2: 10.10.1.1/24 gateway 10.10.1.254 scopes: - 192.168.1.10-100/24 - 192.168.2.10-100/24 (remote site using ip helper) - 10.10.1.10-100/24 thanks help. /lakend hi lakend , firstly, please feel free run multihomed dhcp server. have multihomed dhcp server in lab, , works properly. and, fyi multihomed dhcp servers design option 4: multihomed dhcp servers multihomed dhcp server not allocate ip addresses a windows server 2008-based multi-homed dhcp server not authorized in dhcp mmc snap-in though authorized dhcp server using server manager multihomed dhcp server assigns duplicate ip addresses howeve...

Scheduling the automatic download and installation of updates through Group Policy for Windows Server 2012 R2

hi, i'm looking in-depth understanding of how use wsus , group policy update windows server 2012 r2. more specifically, what's best practice. the key issue can see, if have agreed maintenance window of 30 minutes starting @ 5am every sunday (for example), how can ensure updates downloaded wsus server before maintenance window, @ 5am, updates installed , (if required) server rebooted afterwards? also, if updates take longer 30 minutes install, reboot happen outside of maintenance window. can avoided? i suppose, ideally... updates should scheduled download whenever they're available, installed on sunday @ 3am, reboot carried out @ 5am. possible? know can delay reboot through group policy... i'd need specify exact time. when using option 4 "configure automatic updates" in group policy... updates download @ scheduled time, or download whenever they're available (approved) wsus server? thanks tony  with wsus , gpo settings, can define start ...

Unable to Export certificates as Personal Information Exchange - PKCS #12 (.PFX) file format.

we using windows 2003 certificate authorities, , unable export certificates .pfx, our options are, der encoded binary x.509 (.cer), base-64 encoded x.509 (.cer), or cryptographic message syntax standard - pkcs #7 certificates (.p7b).  .pfx option grayed out in certificate export wizard on ca. posses problem because our windows 2008 server running iis 7 wants import certificate .pfx can explain happening , how fix please this means microsoft listened when people stated wanted able export web server certificates. in *newer* build, able that. in *older* build cannot remember said earlier, decision whether private key exportable made **before** request event sent ca. can override option in certificate template. windows server 2008 does. windows server 2003 not. brian Windows Server  >  ...

DHCP

i use windows server 2003. how can configure multiple scope on single dhcp server? i tried following: scope 1: ip address range 192.168.0.1 192.168.0.254 , subnet mask 255.255.255.0 scope 2: ip address range 192.168.25.1 192.168.25.254 , subnet mask 255.255.255.0 but scope 2 not assigning ip address when scope 1 full. can problem?   thanks hello, if use different scopes /24 subnet you must have them devide vlans or routed networks. how network built? if have single lan have change subnet mask more ip's disadvantage of getting large broadcast domain. best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum ...

Return Value of Powershell with Batch file

i want verify ad credentials given in batch file.  i got powershell script 2.ps1 function test-adcredentials {       param([string]$username,[string]$pwd,[string]$domain)       add-type -assemblyname system.directoryservices.accountmanagement       $ct = [system.directoryservices.accountmanagement.contexttype]::domain       $pc = new-object system.directoryservices.accountmanagement.principalcontext($ct, $domain)       new-object psobject -property @{            username = $username;            isvalid = $pc.validatecredentials($username, $pwd).tostring()       } } and tried call ps1 file batch file. @echo off set r_machine=xxx set password=******* set r_user=administrator powershell.exe -executionpolicy bypass .\2.ps1 -username %r_user% -pwd %password% -domain %r_machine% if credentials t...

Static IP address assigned to remote desktop session by user id or by remote client name or IP?

i working on rds implementation of software designed run on standalone pc's , requires known ip addresses and/or tcp/ip ports inter-program communications.  software relies on knwn ip address, have unique each remote session.  being able ensure same virtual ip address assigned remote session each time client connected 1 way make these communications work.  may able make work setting different configuration files each session , assigning different sets of ports each session, trying cover options @ point.      hi, rd ip virtualization not provide ability assign same virtual ip address each time particular client or user connects.  instead of using dhcp specify virtual ip address range or list of ip addresses in registry, however, give control on the pool of ip addresses, not 1 assigned each user/client/session/program. -tp Windows Server ...

Guest VM is not shutting down properly on Windows 2008 R2 Hyper-V cluster

we have 2 data centers, 1 windows 2008 r2 hyper-v , other windows 2008 r2 hyper-v cluster. when shut down guest virual machine on single hyper-v host, shutsdown proplerly , sync settings our profile location. if shutdown vm on hyper-v cluster, it is not getting shutdown , no settings getting sync profile path. , everytime vm stats, we see unexpected shutdown message while booting. is there special setting on hyper-v cluster prevent this. in advance hi,   as mentioned “if shutdown vm on hyper-v cluster”, confirm whether shutdown vm hyper-v manager console or failover cluster manager console.   note: if want perform operation on vms on cluster node, recommend use failover cluster manager console instead of hyper-v manager console.     best regards, vincent hu   Windows Server  >...

Cannot install FSRM on RODC on Windows SErver 2012 R2

hi, we unable install fsrm role service on windows server 2012 r2 rodc. have tried install both server manager , powershell, shows error "the operation cannot completed, because server specified requires restart". there discussions necessary install fsrm before promoting server rodc, not option, because have many rodcs.. are there other solutions? so there 1 more workaround needs less administrative effort.  the solution install fsrm role on writeable dc , let "access-denied assistance users" group replicate rodc. another option create "access-denied assistance users" group on writable dc , let replicate rodc. after group replicated rodc possible install fsrm on rodc. however not possible uninstall fsrm rodc if don't remove "access-denied assistance users" writable dc. Windows Server  >  ...

DFS (VSS & Stand Alone)?

i have variety of questions dfs. use de replacement since decided rid of in next version of windows home server. anyways here questions:   1. replication work stand alone? have identical hard drives can setup share on each drive , have files replicated across shares type of redudancy? 2. replication work vss or locked files cause problems replication? i'm trying work?   thanks, choclabs 1. replication work stand-alone, should in domain replication group not work under workgroup. 2. can enable vss on target folder. vss not replicated, if needed should enable vss on target folders. 3. replication start after closing file, if "locked" in question 2 means "running file", not cause replication problem. if same file on different target folders both modified, 1 modified later win , replicated other folders. shaon shan| technet subscriber support in forum| if have feedback on our support, please contact tngfb@microsoft.com ...

Can WSUS server provide updates to windows server 2012 r2

hi my current wsus server os 64bit windows 2008 r2 standard and wsus version is: 3.2.7600.226 , i'd know if wsus server can provide ms updates windows server 2012 r2 ? need install kb pre-condition ? thanks if you're supporting server 2012 believe should fine , find wsus has "windows server 2012 r2" available in products , classifications list, can enable there. if you're not supporting 2012 servers , don't see listed may need install http://support.microsoft.com/kb/2734608/en-us enable support 2012. far can find there's no updated required enabling r2 (and know didn't on wsus server enable it, it's appeared). Windows Server  >  WSUS

Cant open backup schedule, The windows server backup service has stopped.

every time try open backup schedule, notification appears stating windows server backup service has stopped. ideas on how fix it? os windows server 2008 r2 faulting application name: wbengine.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc537 faulting module name: wbengine.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc537 exception code: 0xc0000005 fault offset: 0x0000000000121c97 faulting process id: 0x2f70 faulting application start time: 0x01cdf7d99df8db0a faulting application path: c:\windows\system32\wbengine.exe faulting module path: c:\windows\system32\wbengine.exe report id: e841a05c-63cc-11e2-80e2-0026b95326e6 renamed backup folder , opens, not sure issue was. Windows Server  >  Management ...

Windows 2008 Server upgrade

Image
hi, i upgrade 1 of servers windows 2008 r2 enterprise windows 2012 not sure if can , if implications be. the server in question hyper v server host , has several other servers running stored on external storage unit. will able upgrade server? if not options far reinstalling goes? virtual servers production servers want reduce down time. thanks help. alamb00 hi alamb200, you can upgrade windows server 2008 r2 enterprise sp1 windows server 2012/2012 r2 standard or windows server 2012/2012 r2 datacenter no problem. upgrade options windows server 2012 r2 http://technet.microsoft.com/en-us/library/dn303416.aspx however, please note vms not work after upgrade hyper-v 2012 r2 host, need take additional steps move/migrate vms. how migrate/move virtual machines 2008r2 host 2012r2 host ? http://curah.microsoft.com/38398/temp thanks. jeremy wu technet community support ...

MS Remote Desktop Version 8.0.39 (Build 27287)- Various errors using Remote Resources

since rd update im getting various error messages when connecting mac (sierra, 10.12.5) apps using "remote resources" configuration. login , use apps, seems fine, error messages baffling me. log off of server , try again different error, of none logged on server side iis logs, security logs, app logs or security logs. can login server rdp session "my desktops" without error messages.  the errors start "the server denied logon request:" last part changes every time.  the specified disk or diskette cannot accessed; many files opened sharing; attempt made load program incorrect format; process cannot access file because being used process; drive cannot find sector requested; drive cannot locate specific area or track on disk; process cannot access file because process has locked portion of file; wrong diskette in drive. insert %2 (volume serial number: %3) drive %1; 35; storage control blocks destroyed; etc, etc, etc. ive deleted /library...

Remove Multi-Line String from File with PowerShell

hello attempting remove string file using powershell. string file. code can read file not remove string other file. whats going wrong , how can fix it? $inputfile          = ".\usermenutest1.4d" $outputfile         = ".\usermenutest2.4d" $destinationfile     =  "$outputfile.new" # read input file variable $target  = [io.file]::readalltext($inputfile) # replace target in output file (get-content $outputfile) | foreach-object {     $_ -replace $target, ''     } | set-content $destinationfile here proposal: cd <yourpath> $original = (get-content ".\usermenutest2.4d") $pattern = '(' + $((get-content ".\usermenutest1.4d") -join '|') + ')' $original | foreach-object { $_ -replace $pattern} >> <youroutputfile> hope works in test run, wizend yeah, guys moved on... wit...

TS printing

we have server 2003 clients connecting through terminal services (rdp).  clients having issues printers not showing in sessions, therefore can not print. i have tweaked registry ports recognized, however, clients hp lj1020 still can not see local printer.  using usb port. any appreciated purchased several of these printers! you have map these printers. from client side: remote desktop connection - options - local resources. choose printers list of devices connected automatically after logon. from server side check same option in terminal services configuration. Windows Server  >  Remote Desktop Services (Terminal Services)

Server 2012 Essentials or Windows 10 pro

i'm looking solution replace sbs2003r2 server. now exchange not being in essentials client has chosen move email office 365. i have suggested server 2012 essentials prefered new operating system. though in opinion going windows 10 trick aswel. this small company 6 client. the system used file server , run sql express.  dhcp run router. , sharepoint online there no need iis. i might old fashion , have "safer" feeling essentials cant windows 10 isnt able trick. im wondering other people choose for. eelke ros hi: workgroup environments usable small number of systems.  if have dedicated desktop system able sustain file transfers , or sql queries , shared user data files stored on 1 system work.  biggest pain point workgroups when systems sharing files , each user has have logon , password on each system.  managing can tedious. however, consider essentials server offers anywhere access, pc backup, centralized storage, abi...

LHS Build 5600 - DCPROMO - Can no longer sign in.

i'm running windows server "longhorn" build 5600 , ran dcpromo on machine. @ end when reviews of options have selected there note said domain administrator password same current local administrator yet after reboot no longer able log in. how can logged machine? okay, able resolve this. seems when machine rebooted wasn't trying sign domain next time. had click on "switch user" type in "domain.com\admin" , put in password , able logged in. dear microsoft: please go w2k3 version of log in screen sever. it's nice feature vista , consumers @ least wish had way change on lhs. i? thanks! Windows Server  >  Windows Server General Forum

windows server 2008 's adam writer always fail in Windows 8.1 's Hyper-V while Windows Server 2008 R2 will not.

windows server 2008 's adam writer fail in windows 8.1 's hyper-v while windows server 2008 r2 not. i'v had newest integration service of windows 8.1 's hyper-v installed. do know how can fix it? thanks much. i;m charles lee. your question not related directory services. please consider asking them in hyper-v forum:  http://social.technet.microsoft.com/forums/windowsserver/en-us/home?forum=winserverhyperv&filter=alltypes&sort=lastpostdesc this posting provided "as is" no warranties or guarantees , , confers no rights. get active directory user last logon create active directory test domain similar production one management of test accounts in active directory production domain - part i management of test accounts in active directory production domain - part ii management of test accounts in active directory production domain - part iii reset active directory user password ...

Removing Hidden Components In Windows 10 Using Powershell

please help! i searching internet forever script in powershell removing hidden components in windows 10 using dism.exe ( example microsoft-windows-contactsupport-package~31bf3856ad364e35~amd64~en-us~10.0.10240.16384). the first problem making components visible second taking ownership of registry. eventualy after lot of searching found script thx peter hinchley online. i wondering if possible script offline using dism.exe /mount-wim /wimfile:c:\"pathtowim"\install.wim /index:1 /mountdir:c:\"pathtomountwim"\"pathtowimoffline" here's code: function enable-privilege { param($privilege) $definition = @' using system; using system.runtime.interopservices; public class adjpriv { [dllimport("advapi32.dll", exactspelling = true, setlasterror = true)] internal static extern bool adjusttokenprivileges(intptr htok, bool disall, ref tokpriv1luid newst, int len, intptr prev, intptr rele); [dllimport(...

Remote PC running application fails when RDP window is closed.

i have vbscript called application opens web site, navigates download area , downloads file.  when have rdp console open works fine if close application stops when download dialog opens.   the script uses mshtml controls until opens " file download " dialog.  script executes several sendkeys commands, pauses, waits download complete, closes browser session , ends.   when rdp window open executes flawlessly if window closed , script starts, reaches " file download" dialog , stops.  application closes browser window sucessfully , ends, leaving " file download " dialog displayed on desktop.   does windows treat closed rdp desktop differently regular desktop?  unique keystroke emulation?     wshshell.appactivate "file download" wscript.sleep 3500 'tell save wshshell.sendkeys "{left}"   wshshell.sendkeys "{enter}" do while objie.busy  wscript.sleep 1000 loop 'give filename of default file wshs...

Virtual machine HA and Live Migration support after adding iscsi lun and passthrough disk to virtual machine

hi have sql server , exchange 2007 running on 2 different virtual machine .both virtual machine running high available . quick migration , ha working on both virtual machines. planning add 2 iscsi lun /pass through disk both virtual machine data , logs .     can 1 tell me if add both iscsi lun /pass through disk directly virtual machine once,high availablity , quick migration work out issue successfully. hi ravinder, yes can add pass through disks failover cluster , fine.. deployed in different environment , working fine. please check needed configuration using pass-through disks in conjunction clustered shared volumes (csv) in windows server 2008 r2 failover clusters http://blogs.technet.com/b/askcore/archive/2009/12/07/using-pass-through-disks-in-conjunction-with-clustered-shared-volumes-csv-in-windows-server-2008-r2-failover-clusters.aspx adding pass-through disk highly available virtual machine http://blogs.technet.com/b/askcore/archive/2009/02/...

Server 2008 R2 SP1 with the Hyper-V Role & SCSI Tape Drive/Library?

hello, i know question has been answered before post 2008 , different version of hyper-v , windows server. here question: is server 2008 r2 sp1 hyper-v role installed capable of presenting scsi tape library/drive guest os (server 2008 r2 sp1) physically attached host server (server 2008 r2 sp1)? system information: the model of tape library is: ibm system storage ts3310 tape library physical server model is: ibm system x3650 storage controller model: qlogic fibre channel adapter (driver version: 9.1.8.6) tape drive model: ibm ult3580-td4 scsi sequential device thank you, jason answer still same. there no scsi pass-through of devices on host vm. Windows Server  >  Hyper-V

Extra printers created on Server 2003 print server

having major printer issues every morning since rebuilding dc on ad network. in print management app on dc used print server (lafcs1) set , reads follows: kyocera mailroom kyocera rm204 kyocera rm241 (i'm listing 3 problem printers.) the next morning reads follows host of print problems (jammed cues etc.): kyocera mailroom kyocera mailroom on lafcs1 (from 8xnkyj1) in session 0 kyocera rm204 kyocera rm204 on lafcs1 (from 8xnkyj1) in session 0 kyocera rm241 kyocera rm241 on lafcs1 (from 8xnkyj1) in session 0 8xnkyj1 networked laptop remote dc (lafcs1). why these printers being create , how can prevent it? cheers jr   disable printer redirection terminal services manager or can configure client machine not redirect printers (redirection is default) .  on windows 7 ts clients launch mstsc, options, local resourses, uncheck printers   alan morris windows printing team; search microsoft knowledge base here: http://support.micr...

Windows Server Gurus needed for July!

Image
come forth technical gurus , word wizards! it's time show you've got, know, found out! spare fellow professionals same mistake! share revelations , awesome ways of doing things! all have add article technet wiki own specialist field. fits 1 of categories listed on submissions page. copy in own blog posts, forum solution, white paper, or had solve own day's work today. drop nifty knowledge, or superb snippets, , become microsoft technology guru of month! this official microsoft technet recognition, people such yourselves can noticed! how win 1) please copy on microsoft technical solutions , revelations technet wiki . 2) add link on wiki competition page (so know you've contributed) 3) every month, highlight contributions, , select "guru of month" in each technology. if win, sing praises in blogs , forums, similar weekly contributor awards . once "on our radar" and making mark, interviewed greatness , and ma...