Combine

hi all, i have nlb set on 2 wfes, vms. 4 net adapters in use as: 1 has 'main' address each of other 3 net adapters has sharepoint web application on it. so, have 3 nlb clusters, have need 1 more. i need add web application, don't have net adapter it. can't fake , add ip list on 1 of other net adapters because of nlb. any ideas how can reconfigure don't need separate net adapter each web application , still have nlb going? can couple of clusters coexist on same nic? i'm using ssl, host headers not option. as per spence harbar: (answered in different thread) hi donia, you don't need seperate nic each web application, can bind more 1 ip address nic using advanced properties pane , therefore avoid using host headers (if wish). can using technique use 2 nics desired configuration. list of addresses show in iis manager 1 address have assigned per nic you use 1 nic if configure nlb in multicast (not reccomended). it's worth noting host headers , ssl possible ...

hello, having problem i'd run community. enviornment: we have server running windows server 2008 r2. domain controller, fileserver, dhcp. running x64 version. have approx 200 users. approx 90-100 working off of terminal servers , rest working off of pcs. of pcs windows 7, still have few xp pcs left around 25 or so. users , printers spread between around  6 sites, connected via t1. have 150 printers installed throughout our network. server , shared. problems consistent across printers multiple manufacturers lexmark , canon copiers. problem: we have users connect our server via rds , terminal services farm , of sudden on monday printers stop responding. send print jobs printers , says "error" in print queue.  1 of terminal servers seems respond lot better other allowing spotty print jobs. if restart print spooler, nothing changes still "error" in print queue. ive tried restarted servers , doesnt help. im not sure do, can me. ...

hi, we have upgraded windows 2003 ad windows 2003 r2. since upgrade xp machines on different subnets can no longer browse network neighbourhood comes error below. workstations on same subnets domain controllers there no issue. i have turned on network discovery on windows 2008 domain controllers any ideas? xp need computer browser service turned on on the  domain controllers? "domain not accessible. might not have permission use network resource. the  list of servers in workgroup not available" celtic this 1 may help. http://blogs.technet.com/b/networking/archive/2008/07/25/netbios-browsing-across-subnets-may-fail-after-upgrading-to-windows-server-2008.aspx       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Se...

hello running windows 7  , windows 2008 r2, i can copy/paste files "my local session" "the remoteapp program (explorer)", , can from "the remoteapp program" "my local session"   but can't copy email outlook 2010 (local session) remoteapp (explorer). nothing happened doing test in rds (complete desktop), runs correctly.it creates .msg file why ? thanks hi,   in experience, email automatically saved *.msg file, requires local running outlook support, conversion cannot directly transferred rdp session.   there work around, can copy email in outlook local session , paste email local path(i.e. folder or driver). it’s create *.msg file in local path. can copy file in local session , paste remoteapp (explorer).   hope helps.     technology changes life…… Windows Server ...

im trying remove powershell pinned item taskbar on 2008 rds server. have setup mandatory porfile 2008 sp2 server (because cannot in r2 more), check default user pinned items folder, check registry powershell.exe, loaded ntuser.dat file default see if thing obious there, tried logon scripts suppose remove pinned items , posted on several forums. has 1 of simplest dumb things have ever worked on , , been week. how remove it? p.s. having user click un pinn not solution yes have checked c:\users\default\appdata\roaming\microsoft\internet explorer\quick launch hi jeramy, the default pinned items created first time user logs in. modifying default user profile won’t here.   the easiest option is to set “remove pinned programs taskbar” disable taskbar pinned items altogether. default pinned items won’t show up, user won’t able pin else either.   if you don't want disable pinning altogether solution little more complicated. 1 option remove shortcuts “accessories\windows powershell\wi...

i change minimum password length our domain in active directory.  i increase length, effect have on users when log in? required change password on next log in. or it cause kinds of havoc on users , become locked out?  have 250+ users , want make change easy possible. hi  users not impacted until password change occurs, also check detailed article question http://blogs.technet.com/b/askpfeplat/archive/2013/10/11/active-directory-password-policies-when-does-a-password-policy-change-affect-a-user.aspx this posting provided no warranties or guarantees,and confers no rights. best regards burak uğur Windows Server  >  Group Policy

folks i'm new powershell though have done programming in other langs.  can me understand difference in following: 1.  $empid = "123456" get-aduser -filter "employeeid -eq $empid" (no output - doesn't seem work) 2.  $test = "employeeid -eq '12346'" get-aduser -filter $test (get standard output seems work fine. i have hard time understanding when variable have string, i'm guessing in 1 of above isn't simple old generic string?  i tried teh following also: get-aduser - filter "employeeid -eq " + $empid and fails also.  says can't figure out how add.. sure miss & type string concat old vbs days. . .  thanks folks!!! not sure brackets do, if read file tells how use cmdlet , parameters get-help get-aduser -detailed if find post has answered question, please mark answer. if find post helpful in anyway, please click vote helpful. ...

i’d know if our certificate server, has network device enrolment service (ndes) role enabled, needs migrated or restored new hardware.   specifically, i’m wondering following 2 certificates issued server during install of ndes: ·          exchange enrollment agent (offline request) (enrollmentagentoffline) ·          cep encryption (cepencryption) if install certificate services (using backup of ca key), web enrollment, ndes, , restore certificate database & registry key, wont newly issued certificates ndes (mentioned above) overwritten part of database restore?   will cause problem when trying use ndes? would make more sense install certificate services (using backup of ca key), web enrollment, restore certificate database & registry key, , install ndes?   if going route, should original certificates (generated during install of ndes) revoked or delet...

hello, i trying test various encryption methods single sign on using windows ad dc server (win2012 r2), windows client machine (windows 8.1) , bs2000 machine. we have created many keytab files various encryption types same domain user using ktpass command. and setup kerberos key on bs2000 machine using /add-keytab-entry command , windows id access authorization defined bs2000 user id single sign on /modify-logon-protection command. but after login in windows client machine domain user used in ktpass command and trying login bs2000 machine without password, login gets failed [with error key version mismatch or encryption type not defined]. we have configured aes128-sha1 , aes256-sha1 using ktpass command , confirmed both supported on bs2000 machine. 1. after login windows client machine using domain user used in ktpass command , windows client machine while trying login bs2000 machine, login gets failed error [with error key version mismatch or encryption type not defin...

im experienced windows server new hyperv. thought i'd migrate home environment first hands on experience , im having real troubble. one of roles server plays file server of media files (like isos, avis etc). play thes files tvs in house pcs via network. has worked 4 servers on period of 10 years. with new hyperv setup streaming of data accross network pauses 30s - 60s every 5-10 mins.  (varies idea) using resource monitor on server can see @ times when palyback 'pauses' disk io , network io drop zero. both bak , normal playback resumes. my setup is: gigabyte z68 mainboard intel core i5 2500k (not overclocked) 16gb ddr3 ram onboard realtek gigabit nic intel  pro/1000 gt desktop adapter (added after problem noticed in attempt fix) adaptec 31205 raid controller 2x 1tb hdd in mirror (boot) 5x 2tb hdd in raid 5 (data) i have installed windows server 2008 r2 sp1 hyper-v role on boot drive , installed updates i have installed virtual sbs 2011 standard o...

hi all i've created virtual machine. not starting following message: "vm not initialize (vm id <my vm id>)" i've tried every thing, haven't got success yet. my remote machine has asus motherboard (virtualization enabled)  on & server machine has intel mother board  with virtual technology option enabled in bios. there no option dep in bios of both machines. still having problem start vm. i've reinstalled hyper-v role on server still no luck.   what missing!! please reply fast. frustrated. thanks.   hi,   first of all, need check whether computer compatible hyper-v. use securable check it.   http://www.grc.com/securable.htm   note: please run tool before enabling hyper-v role.   by way, following post discussed similar issue, can refer to:   http://social.technet.microsoft.com/forums/en-au/winserverhyperv/thread/5e8cbc8c-a0b3-48b2-a759-c903f9f32622 ...

how can build new searcher providing search root , filter? tried this, no luck.. $searcher = [adsisearcher] $objroot "(objectcategory=computer)" tried , , () , wasn’t able construct object more 1 param.  also, basic ad question, why need load properties? i've been able access via $obj.properties.name or whatever. there performance reason or ps doing magic in end me out? thanks justin new-object adsisearcher([adsi]"ldap://ou=test,dc=contoso,dc=com","(objectcategory=computer)") Windows Server  >  Windows PowerShell

i have created scheduled task runs local vbs script following parameters: schtasks /create /ru "" /sc onlogon /tn "myscript" /tr "myscript" the task runs @ logon of user en executed local system account. the problem task runs of users, (random) failed. anyone ideas cause ? i checked scheduled task , found out both setting related "run on battery" checked. that caused problem. laptops got issue on battery.....then task did not run. changed setting , worked. i found out creating task wizard "battery" settings checked. when created schtasks.exe not checked. strange...it pitty can''t set settings schtasks.exe program. Windows Server  >  Windows Server General Forum ...

hi team, we have 2 sites (hyderabad , mumbai). windows server ad 2012 r2 , exchange server 2016 in hyper-v mpls connectivity in hyderabad. hyderabad users connecting ad , exchange server private ip address issues working. mumbai users connecting ad , exchange servers nat ip address. not working dns not resolving , outlook not connecting every time asking password.    please suggest ad , exchange server work nat ip address? regards, suresh. hi, >> please suggest ad , exchange server work nat ip address? it seems could. " network address translation works replace ip header information destination ip different originator knew of. in our scenario network device or server between 2 dcs (represented firewall) network address translation. this acceptable thing long 2 servers can find each other , communicate. without additional steps taken won’t happen well. " you need add records nat device. more info, please refer blog below: ...

we have local admin account on each computer.  these computers part of windows domain.  how can prevent local admin accessing admin shares on computers.  see group policy has option "deny access computer network", prevent local admin account accessing normal shares.  instance, have "programs" share use install applications when computer not connected domain.  our goal deny local admin access admin shares, still allow access normal shares.  appreciated. thanks. hi,   i afraid cannot block local admin account accessing admin shares on remote computers. limit potential damage mentioned, may consider configuring password policy require local admin change password more frequently.   thanks. Windows Server  >  Group Policy ...

dear all, we prevent managed notebooks (member of ad domain, sccm client, running windows 7 pro) short-circuiting networks. idea constellation "connected our lan , wlan (managed or unmanaged us)" never occurs. after research did not find method implement feature via group policy. have idea how can achieve goal using our nps, or other method? thought of implementing health policies, not prevent client connecting wlan after connecting wired network. same if client connects our managed trusted wlan , afterwards additionally less trusted lan. thanks comments hi moreno, thanks posting here. here suggestions reference : ensuring “ip forwarding” feature disabled @ client: enable ip forwarding on windows server 200x http://www.itgeared.com/articles/1066-how-to-enable-ip-forwarding-on-windows/ deploying script below in order to restrict only 1 active interface at client : disable wireless connection when lan connected http://gallery.technet....

i helping friend setup server or servers small number of employees can vpn in , use terminal server run business system application client.   keep getting conflicting answers minimum licencing , hardware needed.  has 1 computer server. i being told need use sbs 2003 or 2008, number of windows cals, number of terminal server cals, , second server win 2003 std server used terminal server/application server.  thing sbs 2003 server provde dc function. is necessary?  can use 1 server using win 2003 std server , not setup domain , group policies sbs server? what best approach this? thank you, kevin if understand correctly, you want have 1 machine (win 2003 std server) , use ts server. can install both ts role , ts license server role on same machine. way don't need dc. long ts server can access ts license server, things work, case if install both on same machine. can install ts cals on license server , clients can connect. thanks! ...

i have following configuration rd web: servera - rdweb/rdsessionhost serverb - gateway serverc - broker ssl certs have been installed , externally, single sign-on works great. internally however, prompted second time login credentials. sso is not working on internal lan. ideas? hi sivle, and take we're attempting launch remoteapp not full desktop session (as per dollar's post?) sso works correctly externally. means gateway fqdn resolvable , certificate trusted. means certificate you're using sign remoteapp working , trusted externally (otherwise sso have failed) sso fails when connecting internally. investigate if internal users being forwarded/redirected internal name/ip rather fqdn , quietly getting certificate error in background you're not seeing directly? know when connect our gateway via internal name rather fqdn on https (ie via browser) certificate error obvious reasons. dan. ...

i have searched around, cannot seem find answer. there 2 ms dhcp servers. each 2 scopes on it. trying setup wds server. wds on different server dhcp scopes. not able pxe boot properly. research issue , says fix error, need set ip helper point wds. access switches no go. can firewall, traffic not go high. well, have background why need it. need know how. have pointers on how on ms dhcp server? ip-helper, or dhcp relay feature of router/switch *only*. actually, *can* use windowsserver dhcp relay https://technet.microsoft.com/en-us/library/dd469685.aspx http://blogs.technet.com/b/teamdhcp/archive/2013/07/24/using-cascaded-relay-agents-with-windows-dhcp-windows-server-2012.aspx but more common use router interface dhcp relay (ip helper) function ;) alternatively configure dhcp option tags 66/67 on dhcp scope, no longer recommended since can produce inconsistent results, , not supported products/vendors. don [doesn't work msft, , they're glad ;] ...

hello, i have storage migration requires dfsr changes.   unsure of how these changes affect dfsr db , thoughts.   it’s bit complicated , hope makes sense.   this applies win 2008 r2 sp1. here scenario.   we have multiple fileservers around 1500 users @ 1 location.   these servers store user h drive data , replicate dfs replica server in our dr site. the 4 host (live) site servers users , broken down last name. server1:   usersa-f server2 : usersg-l server3:   usersm-r server4:   userss-z there 2 replica site servers.   so shares usersa-f , usersg-l replicate single server separate drives each. the issue host site drives full. have new san mounted drives , plan split off data such. server1: d:\ usersa-f becomes d:\usersa-c , k:\usersd-f.   server2: f:\usersg-l becomes f:\usersg-i , l:\usersj-l the replica site has 2 new drives , store 4 drives of replicated data.   usersa-c, usersd-f.   usersg-i, use...

i noticed 1 of 2 domain controllers isn't detecting update status on wsus.  both domain controllers running windows 2008 r2.  wsus server running windows 2008 r2 running wsus 3.2. from can see none of other machines on network having issues, 1 of 2 domain controllers isn't detecting status anymore.  when log onto machine , try check updates code 800b0001 windows update encountered unknown error.  if check online updates machine can see updates online, can't seem check updates wsus server.  found article similar issue , suggested hotfix sounds questionable.  since otherd doamin controller seems detecting fine don't think there wrong wsus itself, rather configuration issue secondary domain controller. any suggestions? should bother install kb 2720211 first or unnecessary since kb2734608 supposedly includes it? kb2720211 incorporated kb2734608, no need both don (please take moment "vote helpful" and/or "mark answer",...

hello, when try enroll certificate, cannot choose modified (new) v2 certificate template enrollment website drop down list. can navigate workstation browser or sub-ca browser (both ie 8.0) http://pkisca.mycompany.ca/certsrv , prompted login;  can login either pki\myself or pki\fzappa.  certificate error (expected, since i'm using self-signed ssl cert on iis side of things).  continue on website , can see microsoft active directory certificate services - pkisca welcome page.  click on request certificate (under select task:), brings me request certificate page.  click on advanced certificate request, brings me advanced certificate request page.  click on create , submit request ca, brings me advanced certificate request page.   click yes on web access confirmation popup (this website attempting perform digital certificate operation on behalf.), , page, again, no issues. however, here things go awry. problem in certificate templ...

gp experts -   aside security, on corporate workstations, , user works on workstation, other key desktop management issues typically governed group policy, , what’s ultimate risk not having such policies in place. want research top level groups of policies applied workstations/thin clients, i.e.   1)       security 2)       desktop management? 3)       ? 4)       ? 5)       ?   so reaching out gp community advice on types of area gp manages/looks after when comes desktops? , risks ineffective policies against each of these categories? im new gp please bare in mind in replies. would prefer speak human being comments opposed endless links if @ possible.   cb howdie!   am 18.07.2011 13:50, schrieb cf090: > - prefer comments , communication as > opposed links - can google links not am...

hi there, need please. installed hyper-v 2008 r2 on host windows 2008 r2 enterprise. first time ok, vm can connect real network, , other pc in same network can connect vm. but now, vm can't communicate each other on same network, , others can't detect vm. try diagnose network, still no effect. any advice please? also, when add network card virtual network, system create virtual private network. best practice configure 1 (a real network card, , virtual private network card)? thanks in advance problem occurs driver. reinstall driver , ..done.thanks Windows Server  >  Windows Server General Forum

when open forefront tmg management consol got refresh faild error 0xc004045e,with details " the list of dns addresses sepcified network includes duplicates error occurred on object 'forefront' of class 'server' in scope of array 'forefront' " please because asks wither run script yes or no , on both cases keeps showing , prevent me work firewall policy thanks please post query on forefront tmg forum .   thanks Windows Server  >  Network Infrastructure Servers

hello, have dc1 (2008r2) in sitea , dc2 (2008) in siteb. sysvol replicated using dfsr. dc2 on siteb missing several group policy folders under sysvol when compared dc1. propagation test completes in few minutes dc2 => dc1 not in opposite direction. test file stays "arrival pending" state indefinetely. there's no indication of recent dirty shutdown on dc2 event viewer logs. before attempting non-authoritative sysvol restore on dc2, try force sysvol replication running command on dc2: dfsrdiag syncnow /rgname:"domain system volume" /partner:dc1 /time:5 worry if i'm running command on dc, lacks few gpo folders compared dc1 deleted partner dc well? thank already! hi, any update issue? if setting authoritative flag on 1 dc, must non-authoritatively synchronize all other dcs in domain . otherwise see conflicts on dcs, originating dcs did not set auth/non-auth , restarted dfsr service. how force authoritative , non-authoritative...

i created couple users on exchange 2010 server, noticed while creates active directory user profiles don't created on domain controller.  recall when domain controller on server 2003 , exchange 2003 profile directories automatically created upon first login.  need profiles automatically created?  domain controller hosts profiles running server 2008 r2. hello, please start http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx , roaming folders , gpo related settings may ask in http://social.technet.microsoft.com/forums/en/winservergp/threads additional please check http://helgeklein.com/blog/2011/12/how-to-configure-a-file-server-for-hosting-user-profiles/ http://support.microsoft.com/kb/555046 best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guara...

how monitor long-term abnormal high cpu usage(e.g.  3 consecutive high cpu usage on 95%,etc)   , memory usage of win2003r2 , win2008r2 servers , send alert mails  windows default function without operation manager ? hi for long term monitoring (other break , fix monitorage perfmon), fall in monitoring's software, pandora fms (they got gpll version, never tested out version), there hobbit monitor (now named xymon) wich opensource. you need server retrieve data, can alert. i n-able such service, can retrieve snmp data hardware alert, think paid product. regards, philippe don't forget mark answer or vote helpful identify information. ( linkedin endorsement never hurt :o) ) answer interesting quest ion ? create wiki article it! Windows Server  >  Windows ...

i have 2008 (original) server sp2 winsxs folder that's taking 14.9gb of 50gb on c: partition.  i cannot figure out how reduce amount of space has taken. i have installed desktop experience role, when run disk cleanup, windows update cleanup not appear 1 of options check. i have run compcln.exe did not reduce size of winsxs folder @ all.  the system doesn't recognize  vsp1cln.exe valid command. what else can reduce amount of space winsxs folder taking? hi, i want confirm current situation? error: "dism" not recognized internal or external command, operable program or batch file. this problem windows not able recognize or find these exe's. to solve problem need is: a.) find path dism.exe or matter program/exe giving error present at. can use windows search dism.exe. note down path. path c:\temp\dism b.) add path systems environment variables. right click on computer, go properties, advanced, environment variables. in environment va...

my laptop using operating system using webspark license. last month, ,my laptop getting saying non genuine. when run microsoft genuine advantage or open control panel  ,it disapper.i call microsoft malaysia support.she said valid , ask email microsoft.. when try email  via web.the system not working.. found way ask microsoft  and writing know what's wrong os. diagnostic report (1.9.0027.0): ----------------------------------------- windows validation data--> validation code: 0 cached online validation code: n/a, hr = 0xc004f012 windows product key: *****-*****-*****-*****-c39pr windows product key hash: assbl5r52ujiig1zr0afpvryxxa= windows product id: 55041-437-0965096-84453 windows product id type: 6 windows license type: volume mak windows os version: 6.1.7601.2.00030510.1.0.017 id: {9717e340-9dc2-4441-a317-2da3c35a21d3}(3) admin: yes testcab: 0x0 legitcheckcontrol activex: n/a, hr = 0x80070002 signed by: n/a, hr = 0x80070002 ...

hi, newbie here apologies forum etiquette may breaking... ;-)   i have couple of scom questions hope indulge me asking them both in same post.   the gist of whole post keeping track of goes on in scom console, respect being able track activities have occurred, potentially catch inappropriate activity on part of otherwise approved user.   first, can please confirm scom specific logs kept (as opposed logs reads report, alert on etc.)?   second, can tell me if indeed actions (approved or not, innocent or malicious) taken admin in scom console (or can be) recorded tracking purposes?   many in advance help.   hello andy,   according description, issue seems related scom. focus on management question windows server system, quick , accurate response question, recommended initial new thread in scom newsgroup further support.   for convenience, have list related link followed.   scom newsgroup http://technet.microsoft.com/en-us/opsmgr/bb839593.aspx   hope...

hey, you know in windows 10 anniversary update can add account things like calendar reminders show in windows notification panel - can push out group policy?  corporate domain on-premise exchange. or need people manually themselves? hi, as far know, there no such group policy complete task in bulk, should tell people manually themselves. mail , calendar windows 10 faq https://support.office.com/en-us/article/mail-and-calendar-for-windows-10-faq-4ebe0864-260f-4d3a-a607-7b9899a98edc best regards, alvin wang please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Group Policy

i trying install trial version of server 2008 onto 1 of our systems. when booting off of disc entire system locks before of disc options. gradiated grey screen mouse cursor can move 30 seconds before freezes. occurs before prompted install or load recovery environment. i doubt cause, have internal raid card need install drivers for. however, since system locks before can begin installation, i'm guessing it's unrelated.   hi,   can boot disk clean install windows server 2008?   sometimes installation process loads , may wait patiently. please wait 10 or 20 minutes check result.   tim quan - msft   Windows Server  >  Setup Deployment

hi, i wondering if using windows 2003 server nap ca server (subordinate ca) supported when using ipsec enforcement with windows 2008 r2 based hps server (e.g. directaccess)? best regards thomas yes. supported. you can use windows 2000 server. for more detials, please refer http://technet.microsoft.com/en-us/library/dd125301(ws.10).aspx , in "server software requirements" section. regards qunshu clarification: microsoft doesn't own liability & responsibility of posting. Windows Server  >  Network Access Protection

hello- i'm running , exchange 2007 server on active/active/passive win2k8 sp1 cluster. we regularly getting following events: log name:      system source:        service control manager date:          12/3/2009 6:37:58 am event id:      7034 task category: none level:         error keywords:      classic user:          n/a computer:      node1.domain.com description: the microsoft exchange system attendant service terminated unexpectedly.  has done 15 time(s). event xml: <event xmlns=" http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provider name="service control manager" guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" eventsourcename="service control manager" />     <eventid qualifiers="49152">7034</eventid>     <version>0</version>     <level>2</level>     <task>0</task>     <opcode>0</opcode>     <keywords>0x80000000000000...

hi there quick way to, programmatically or otherwise, show dfs mode namespace using? i'm looking way work on deployments of dfs. preferably command line, vbscript or powershell. haven't been able find using dfscmd or dfsutil, may have overlooked something. in 2008 example can right click namespace , select properties, , it's diplayed in description bar. in other words, particular solution not i'm looking for. other appreciated. andreas i ended writing script check prescence of msdfs-schemamajorversion attribute last week. here's current version:   if instr(1, wscript.fullname, "wscript.exe", vbtextcompare) set objshell = wscript.createobject("wscript.shell") objshell.run "cmd /k cscript.exe """ & wscript.scriptfullname & "" wscript.quit end if set objrootdse = getobject("ldap://rootdse") set objsysinfo = createobject("adsysteminfo") const mode_dfs2000 = ...