Posts

Showing posts from August, 2015

Migration to new Forest

Image
following split our parent company need migrate away ad forest / domain . sit down , plan migration in full in next few weeks following clear in mind. present structure is: (f) parentcompany ¦ (d) parent.local – placeholder domain, no resources in it. ¦ (d) mycompany.parent.local (domain share sister company stay behind when move new forest) above 2003 native. understand process of building new 2008 r2 forest , how use admt migrate resources , objects anyones experience / opinions on following: assuming there trust between mycompany.parent.local , new mycompany domain facilitate migration - can use trust stage migration on longer period of time? concern have large number of laptop users, once start te migration have done in 1 go? or because have trust in place obects sill in old mycompany.parent.local domain access objects , resources have been migrated across aleady? there authentication issues? how sql servers @ being migrated? cause problems...

Best practive for number of queues to create in a 2012 Hyper-V print spooler

we planning deploy 2 node 2012 cluster host hyper-v session running print spooler. there a best practive or white paper guide on optimal number of queues should create on spooler? this depend on number of clients have , volume of printing occurring. having more 2 thousand shares gets hard manage.  i've had 5000 on clustered vm. there several factors consider , not white paper hard numbers. if looking limiting factors, try keep under 20,000 active print client connections.  encounter resource constraints in services other spooler using non-page pool memory. alan morris formerly windows printing team Windows Server  >  Print/Fax

Odd Hyper-V problem on a server running IIS

Image
i have problem trying connect new vm on windows 2008r2 server iis , hyper-v roles installed.  server's primary role running iis.  first vm on server.  when run hyper-v manager , create new virtual machine seems well.  once try connect though receive following message prompt username , password: your system administrator not allow use of default credentials log on remote computer localhost127.0.0.1 because identity not verified. i have tried every username , password have, including localhost/administrator , null password, nothing work.  have tried changing networking settings , removing completely. i have adjusted local group policy settings described on forum , others, nothing seems allow me connect vm trying create.  hi, were tried connect virtual machine in local host or in remote hyper-v server? is hyper-v host server standalone server or domain member? > including localhost/administrator , null password did mean standalone serv...

Unable to update windows 2003 server

Image
hi i unable perform os update of  windows 2003 server internet explorer. saying page cannot dispayed. same time can access websites other microsoft's....what problem try following disable windows firewall disable ie esc check clean boot reset windows update components check proxy settings (if applicable) regards, santosh not represent organisation work for, opinions expressed here own. posting provided "as is" no warranties or guarantees , confers no rights. whenever see helpful reply, click on vote helpful & click on mark answer if post answers question. Windows Server  >  Windows Server General Forum

Website Hacked, Help!!

dears, i have website hosted in windows server 2008 firewall , plesk cp. website hacked replacing aspx files same file names html content have ads. every time recover files, attacker keep replace files files....... please advise. regards, moayyad on wed, 17 sep 2014 08:26:53 +0000, moayyad.faris wrote: i have website hosted in windows server 2008 firewall , plesk cp. website hacked replacing aspx files same file names html content have ads. every time recover files, attacker keep replace files files...... more system has been infected malware or virus of kind. if can't identify , remove whatever anti-malware or anti-virus software you're using i'd suggest your wipe system , restore backup taken before system infected. or rebuild bare metal. paul adare - fim cm mvp q. kind of dog says: "bofh! bofh!?" a. rootweiler. Windows Server ...

Certificate Authority

my situation this: have sccm 2012 r2 , want enable internet based management. my company not have existing pki infra have ca things lync , exchange 2010. issue come in ca built on 2003 standard, not enterprise cannot publish templates. i know answer seems pretty simple, upgrade 2003 box enterprise or better yet, 2012 server. however, here's tricky part; systems team not want change because; 1. it's working right now. 2. don't have lot of server vm or hardware resources remaining 3. have ad upgrade project next year they're not interested in doing twice. 4. office politics (sigh, know) what have small hyper-v environment use testing can stand own enterprise or 2012 server. could enterprise ca subordinate , able publish certificate templates need internet client management? when ad project rolls out, server phased out? > want take 2008 enterprise or 2012 server , make subordinate of 2003 standard box yes, can setup new ca under existing 2003 ca. o...

Build 10240 on Surface Pro 3 i7 still fails to connect to Microsoft Wireless Display (miracast)

i have been reporting issue on each build release hoping have been fixed.  there software patch microsoft wireless display maybe?  updated hp steam 7 tablet.  worked in windows 8.1, has not worked in win10 since started beta testing. in 1 of builds had success if disabled bluetooth.  cant hack work anymore. anyone else have issues this? thanks s i have same problem, after installing vs2015, maybe hyperv bridge... Windows 10 Insider Preview  >  Windows 10 Insider Preview Feedback

Folder Redirection

folder redirection moves users data server i keep copy locally incase dont have connectivity network please help hi eriche,   please assured folder redirection is using offline files,   users open share automatically available offline.   related articles:   recommendations folder redirection: group policy http://technet.microsoft.com/en-us/library/cc785925.aspx   folder redirection feature in windows http://support.microsoft.com/kb/232692 Windows Server  >  Group Policy

What's the difference between folder with a lock and without a lock

Image
this on file server widnows 2008 r2, user's data have lock folder , don't. can access data without issue, there need worry about? thanks. thang mo hi thang mo, thanks post. the lock icon means folder or file has limited user access. , if there no issue user access, can safely ignore lock icon. in order remove icon, can try add authenticated user group under security tab. hope helps. for more information, may refer following thread discussed same issue. how lock icon on folder come off? http://social.technet.microsoft.com/forums/fi-fi/w7itprosecurity/thread/e8347f6f-e835-42e1-8509-eee38f83bb05 best regards, aiden aiden cao technet community support Windows Server  >  Security

SSL Certificates for RDS

hi there! i'm new @ topic ..i need guys..guidance appreciated. i deployed rds environment external users using self-signed certificate.. my network using dynamic ip internet so, we're using dyndns service external access..(ie mydomain.dyndns.org) i have 1 rd gateway , 2 rdsh servers..all of them working ok round robin ts well..implemented ha too my questions are: 1.- self-signed certificate appropriate work in business environment? (about 40 remote users) 've been reading articles , many mentions need have ca certifiacte..for scenario ..what difference? ca certificates work same self-signed? 2.- period last year..what happen certificated due??..will have replace cert , redistribute again on 40 users? wihat ca? same? 3.- how secure connection between users , network? in risk attacked hacker using self-signed??? thanks in advanced fg nacho hi nacho, 1.- self-signed certificate appropriate work in business environment? (about 40 remote users) ...

GPO "Redirect Folders" and "Offline Folders"

hello, i have problem offline folders don't synchronise automaticly. here configuration : windows server 2012 r2 named "server" domain "domain.com" client : windows 7 sp1 (with updates) gpo redirect desktop folders user in z:\\server\group\%username%\desktop everything when online, folders create on desktop on server's folder. when open session elsewhere , create folder on desktop, when latter open session on domain, folders not automaticly synchronize share folder. have manualy synchronize doing right clic on network drive z: i've tried different option in gpo slow connection doen't work. > latter open session on domain, folders not automaticly > synchronize share folder. have manualy synchronize doing a > right clic on network drive z:   most result of wrong permissions in 1 of directories involved. users need @ least "read" permission each directory in redirection path.   martin mal ein...

Determine physical NIC of iSCSI port

i'm hoping can me in right direction.  i've inherited server 2012 r2 failover cluster , we've seen iscsi mpio issues.  i'm wanting verify physical connections server switch, can't figure out way map iscsi connections physical nics. here's have. connectionidentifier          : ffffe0017248c010-0 initiatoraddress                 : 0.0.0.0 initiatorportnumber           : 2496 targetaddress                    : 192.168.xxx.10 targetportnumber              : 3260 pscomputername              : connectionidentifier           : ffffe0017248c010-1 initiatoraddress                  : 0.0.0.0 initiatorportnumber           : 1728 targetaddress      ...

Domain

we have quite unique problem. our organization had windows 2000 server configured 10 years ago. then, 5 years ago, windows 2003 server added domain. previous department never able promote 2003 server. being said, last week 2 of 3 hard-drives in windows 2000 raid5 array failed. because of problem promoting 2003 server, users unable log onto network via 2003 server. network printing failed did path share drives (even though directly attached 2003 server). because of issues have been going on last 5 years, decision made purchase windows server 2008 enterprise , start fresh. pulled 2003 server off network, assigned new server ip address of 2003 server. same domain name well. we tested out today , discovered when pull clients off original domain, add them new user folder created. our plan copy settings original profile , paste them newly created profile. plan failure. many items not copy over, had file names long copy , when rebooted , logged user in, apps did not work, settings...

You don't currently have permission to access this folder

Image
i message trying open share computer management, on local file server what seems strange me, message: the thing local administrators group on file server, has domain group x member, , member of group x domain admin account logged on server with. the shares try access when warning, not have group x added permissions in security tab if group x has been given full control or modify permissions explicitly on other shares (in security tab), can access shares without warning why this? administrator on server because of group x, don't it... freddy hi freddy, thanks reply. uac creates split access token.  users in local administrators group work standard user.  so if administartors group has permission on folder, user group not have permission access works standard account not have permission on folder.  once select continue prompt, permissions user(even if member of administrator's group) added explicitly. if prompt not required need turn...

Password Exporrt Server

Image
hi all, password export server , running spec. today following error msg. ideas? richard parker did verify permissions mentioned in error message? also, review following blog http://portal.sivarajan.com/2010/04/admt-service-account-permission-and.html santhosh sivarajan | mcts, mcse (w2k3/w2k/nt4), mcsa (w2k3/w2k/msg), ccna, network+| houston, tx blogs - http://blogs.sivarajan.com/ posting provided no warranties,and confers no rights. Windows Server  >  Migration

WSUS migration from 2012R2 to 2016

        install updates        c opy wsus folder previous server.        switch off firewall on source wsus server or open port 7000(tcp , udp).        get parameters source wsus:        database location: [sql server].        database name (if changed default): (hklm\software\microsoft\update service\server\setup{sql database name}         iis settings: wsus pool user (network service)        smtp server pass:         code sign certificate:          group membership: (localhost)\wsus administrator, (localhost)\wsus reporters        store: d:\wsus example        on new server install sql management studio,  , mi...

Cannot create 2008 mode DFS namespace

i'm running w2k8 network (forest , domain have been elevated 2008 mode), servers new , date, cannot create 2008 mode dfs namespace. when go create namespace, 2008 mode button grayed out. have 1 namespace running right , it's in 2000 mode, cause new namespaces stay in 2000 mode? 1 2000 mode ns have migrated 2008 before other 2008 mode nss can implemented? any thoughts on why is? thanks in advance! hello, based on research, dfs namespaces different mode cannot co-exist each other (windows 2000 server mode , windows serve 2008 mode). if use domain-based namespace, may have choose 1 of following namespace modes: 1. windows 2000 server mode 2. windows server 2008 mode in addition, in order use windows server 2008 mode dfs namesapce, there prerequisites domain use windows server 2008 mode namespace. prerequisites: 1. domain uses windows server 2008 domain functional level. 2. namespace servers running windows server 2008. since there namespace running windows 2000 server mo...

multiple users without a password

i try , set server @ primary school. want have 1 user called pupil children can use log on without having enter password. possible in windows domain?  and i'd 30 children in class using own pc , signing in pupil @ same time. work? hi please check artical. http://community.spiceworks.com/topic/403925-allow-blank-passwords-on-local-accounts-in-a-domain-member local accounts option once machine domain join not allow have blank password. sure if change default domain policy password settings. might works. thanks  Windows Server  >  Windows Server 2012 General

Powershell Transcription during an SCCM Task Sequence

greetings community, this question has windows powershall , system center configuration manager task sequences - if it's in wrong forum, please move appropriate :) i've got powershell scripts executing task sequence step (command: powershell.exe -file <path> ) , use transcription logging.  outside of task sequence, transcription works great.  however, none of script output being transcribed when scripts execute task sequence.  it is, however, being logged smsts.log.  blog linked below seem indicate there's nothing special transcription in task sequence, nevertheless, without transcription log.  quite use file-cmdlets force logging seperately or other methods - that's not intent.  pasted below short test script calling one-step task sequence should write ttwo lines transcript, can see in pasted transcript, no lines written. help?  :)  thanks! http://blogs.technet.com/b/mniehaus/archive/2009/09/22/running-powershell-scripts...

Logon hour Based Group policy

i want create 2 group  logon hour restriction. under group user can login there account under premited logon hours not able user internet create group policy software restriction in disable internet explorer. under group b have same people permitted use internet time allowed. can me in accomplishing task.   you can control logon hours on per account basis via account tab (logon hours command button) of individual user's properties dialog box in active directory users , computers. i'm not aware of functionality allow accomplish same via group policy. as far internet restritions concerned, efficient way accomplish enforce restriction on internet proxy (e.g. leveraging isa/forefront tmg functionality - or equivalent third party tool). there workarounds can resort (such intentionally misconfiguring proxy settings on per user basis)... hth marcin Windows Server ...

Word changed to draft view on me!

i changing colour of border when word 2010 switched draft view on me , can't change print layout. no amount of clicking on print layout button nor other view buttons (except outline) shift orange highlighter draft. i have map point add in (i saw previous post saying end note add in , possibly being cause) , tried going file, options , start options un-check box. any appreciated!                         hi,   have test word in safe mode? 1.       click start , point all programs , , point microsoft office . 2.       press , hold ctrl key, , click microsoft word in safe mode, office not checks add-in, check extensions won't start or corrupted resource, file, registry, or template. if work fine in safe mode, still need troubleshoot add-in or extension program.   if still not ...

new hard drive driver?

i've gotten new 1tb hard drives run windows server 2003 in raid configuration.  decided reinstall system.  raid setup quick , easy.  when system setup started, couldn't find drivers hard drives (system bought several years ago newer drivers aren't available on setup disk).  installation stops ask if have them if did, think continue on. hard disks samsung hd103sj 1tb.  i've high , low on line hard disk drivers , can't find them.  suggestions? hi,   please contact raid controller manufacturer obtain driver.   tim quan - msft   Windows Server  >  Setup Deployment

Storage Spaces Direct -- nonpaged pool exhaustion?

i have 600,000 pdf files exist in 8 vhd files, mounting (right click -> mount)  and copying storage spaces direct cluster disk individual files. when using robocopy more 64 threads, cluster node barfs "insufficient resources exist", or similar. once error encountered, have restart node, because can't access volume after that. retried operation less threads. ok. now trying out hyperoo, backup program, , when try volume, fails these messages in it's log: [12/12/2016 4:14:28 pm] - *error*- unable access file "arch\2016trim\30-16\25\25-30-16-98396-003-3060.pdf" - system.io.ioexception - error accessing file c:\hrmnt\3a6\volume1\arch\2016trim\30-16\25\25-30-16-98396-003-3060.pdf file information - insufficient system resources exist complete requested service. (exception hresult: 0x800705aa) [12/12/2016 4:14:28 pm] - *error*- unable access file "arch\2016trim\30-16\25\25-30-16-98396-003-3070.pdf" - system.io.ioexception - error accessing ...

Domains and Policies

i've changed domain of server , able transfer group policies. , server keeps giving me id 1001 error not being able find security policy template, because it's trying access previous, , unexistant, domain. same thing applies default group policies. simple local server, didn't create new group policies, cannot access see default policies because gives invalid path error. hi, based on understanding, renamed domain single label domain, based on research, there many limits single label domain, such as: client computers , domain controllers joined single-label domains require additional configuration dynamically register dns records in single-label dns zones. client computers , domain controllers may require additional configuration resolve dns queries in single-label dns zones. more details: deployment , operation of active directory domains configured using single-label dns names http://support.microsoft.com/kb/300684 please refer below links regarding domain...

Terminal server

hello all, i using windows server 2003 terminal services. using grant users access server run different application. best way 1 user can access ts , run assiged application , nothing else. one thing comes mind single application mode - have you had chance to explore feature? the rdp client allows start program (start rdp client-->click on program's tab , specify application) after logon. application runs in user's session. once application closed the session logged off. let me know if works you. thanks, mahadev alladi [msft] Windows Server  >  Remote Desktop Services (Terminal Services)

Unable to install RC1

  i have tried twice install rc1 hyper-v update , gets 80(some) percent on step 1 , says "some changes not saved.  reverting changes.... etc....   has else experienced this?   have vmm on same server , know rc1 doesnt support it, stop installing?   rc0 running perfectly...   ideas?   thanks! can describe system, patches installed? this posting provided "as is" no warranties, , confers no rights. Windows Server  >  Hyper-V

WSUS offering Office 2010 updates for PC where it is no longer instsalled

i have small handful of pcs in office upgraded office 2010 office 2013.  2010 uninstalled 2013 installed.   it has been weeks since update , wsus server still stating these pc's have various office 2010 updates need installed.    why this?  these pcs not have office 2010 installed.   hi joshua, please try install these updates on client manually. if can installed, means system needs update reason. if "the update not applicable computer" appears, please try reset windows update component: https://support.microsoft.com/en-us/kb/971058 besides, have tried update computer microsft update? best regards. steven lee please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows Server  >  ...

Redirector current commands perfmon counter always reads Zero

hello all think have smb queuing issues having trouble monitoring redirector current commands counter, reports zero. 2008rs rds group of servers article http://support.microsoft.com/kb/2523382 confirms problem. last march. has been progressed or there work-around??? any apreciated thanks dave hi,   unfortunately, there no hotfix available issue ( http://support.microsoft.com/kb/2523382 ) @ time.   this may considered in windows 8 or windows 7/2008 r2 sp2.   thank understanding.     technology changes life…… Windows Server  >  Remote Desktop Services (Terminal Services)

How to: Windows 2008 R2 + Dumb Thin Client PXE bootup

hi i've got client old server 2003 setup upgraded 2008 r2 recently. 2003 server used 3rd party software make dumb thin clients. (i.e. old pentium-ii's no harddrive directly boots in ts session on 2003 server). the new 2008 r2 server has 25 rds calcs how do same did 2003? so if workstation user switch on pc, gets network pxe boot, rds main server. in advance, hi,   diskless workstations deployed in windows 2008 ts need third party tool support. point same windows server 2003 ts.   under normal circumstances can use deploy operating system windows deploy service (wds) pxe boot. cannot directly thin client pxe boot terminal services desktop environment. technology changes life…… Windows Server  >  Remote Desktop Services (Terminal Services) ...

Anyone run a beefy SQL box on Hyper-V (ForeFront DB)

what performance like? using local or san? have seen whitepaper? http://sqlcat.com/whitepapers/archive/2008/10/03/running-sql-server-2008-in-a-hyper-v-environment-best-practices-and-performance-recommendations.aspx it should answer of questions. performance r2 better. think find hyper-v supports sql workloads well, limitation being hyper-v limits virtual machines 4 processors. if sql server needs more processing power that, should use physical machine. Windows Server  >  Hyper-V

Non domain XP/SP3 DHCP client’s DNS records not registering

i have windows 2003 domain consisting of 2 windows 2003/sp2 x64 domain controllers using active directory-integrated primary forward (my.local) , reverse (10.in-addr.arpa) dns zones dynamic updates configured nonsecure , secure. i have installed , authorized dhcp server on 1 of domain controllers , created basic dhcp scope following options: 003 router 006 dns servers (both domain controllers) 015 dns domain name (my.local) scope properties dns are: enable dns dynamic updates according settings below always dynamically update dns , ptr records discard , ptr records when lease deleted dynamically update dns , ptr records dhcp clients not request updates (for example, clients running windows nt 4.0) my non domain xp/sp3 client gets it’s dhcp address dhcp server fine no problems, it’s , ptr records not registered in dns unless "register connection's address in dns" , "use connection's dns suffix in dns registration" checkboxes checked within internet pr...

Printer Policy in Printer GPO from win 2008 server not installing all printers on XP

i'm having issue print management, deploy printers gpo area.. i've deployed them gpo called printer policy.. i've linked domain , workstations ou.. i've done user , machine when given option in printer management tool.. all printers deploy vista clients.. but 1 printer gets deployed xp.. hp laserjet 2200 printer. i cant understand going on here. i've tried running rsop.msc see if printer policy listed , is.. however, if try view settings on gpo, dont see windows settings.. policies area printers listed.. i've installed gpo client side extensions , xml install well.. i've tried going xp sp2 sp3.. no avail.. i can double click printers , install them manually on xp machine. any thoughts here? thanks   hi,   form description, understand that: unable deploy printers windows xp clients using gpo windows server 2008.   before going further, i’d confirm following: 1.what os version of windows xp client? 32bit or 64bit? 2.what os version of windows s...

vbscript to list contents of directory and subdirectories

this should pretty easy.   trying write vbscript same thing dos command dir /s /q.  can directory list doesn't come out same command.  have code this. thanks this pretty crappy code modified microsoft example years ago.  "/q" option isn't provided, can modify.  "/s" assumed. ---- start script option explicit dim tabstop dim newline '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' constants returned drive.drivetype ''''''''''''''''''''''''''''''''''''''''''''''''...