Posts

Showing posts from April, 2013

No domain logon option after update

hi, after updating new update windows 10. updated no issues did normal reboot , on login no longer have domain option windows live login screen. if switch users asks email address , not take domain\username. have removed , readded domain , reboot/google no avail. can still see profile , files no issue there can not authenticate. anybody else having issue? i've managed isolate how reproduce issue.  appears bug when combining group policy options interactive logon: message, , wireless network policies: single sign on type. i started fresh install using enterprise build of 9879.  installed pending updates, , joined domain.  before rebooting, placed in ou blocked inheritance, , gpo 2 policies.  system boot once , allow me log in via domain account.  upon rebooting, option log in missing.  can view relevant gpo  below 3 relevant settings bolded. it appears bug report needs filed.  in meantime, appears easiest thing create gpo windows 1...

SBS 2003 SP2 Server & Clients can't see each other?

i've got dell poweredge server running small business server 2003 sp2 installed; server , computers on domain working fine until friday , reason complete mystery server , workstations (all windows xp machines) stopped being able see or communicate each other. the server set static ip address , dhcp server network; server , dhcp address pool set in same subnet; dhcp server service running , scope active , authorized. none of workstations seem able ip address dhcp server. the network simple layout: cisco/linksys e1000 router wired hp 24 port switch , server , workstations attached switch. in order rule out problem switch disconnected server , 1 workstation switch , attached them directly router. setup workstation still not able address dhcp server, set workstation static ip address , setup both server , workstation can ping router neither server nor workstation can ping each other , both seem able access internet. as far can tell not can't workstations contact dhc...

cannot connect using LDP.exe to DC on 636 SSL LDAPS

i have 3 server 2012 r2 domain controllers i cannot connect of them ldp.exe port 636 ssl i running tool on dcs , following: ld = ldap_sslinit("my,domain.com", 636, 1); error 0 = ldap_set_option(hldap, ldap_opt_protocol_version, 3); error 81 = ldap_connect(hldap, null); server error: <empty> error <0x51>: fail connect my.domain.com. ld = ldap_sslinit("dc01.my,domain.com", 636, 1); error 81 = ldap_set_option(hldap, ldap_opt_protocol_version, 3); error 81 = ldap_connect(hldap, null); server error: <empty> error <0x51>: fail connect dc01.my.domain.com. i have come across reg hack says add dword hklm/currentcontrolset/control/services/ldap of usehostnameasalias , value other 0.   doesn't resolve issue me. each domain controller has received cert forest level ca, still have issue. please advise # when wrote script god , knew doing. # now, god knows! hi wasisname, have verified successful tcp...

Group Policy batch file / .msi not working properly

This summary is not available. Please click here to view the post.

Update problems

hi, i'm running build 9841 , being told update.  i've downloaded update file when run being told "we ran installation error. might because pc doesn't meet system requirements or language isn't available."   i've run troubleshooter windows update (as administrator) , tells me fixed 2 things; potential windows update database error detected 0x80070490 (fixed) , windows update components must repaired (fixed).   despite still same error trying run update file , running troubleshooter keeps telling me fixes same issues each time.  does have advice? thanks terry edit: i've tried updating in safe mode , doing clean boot non-ms services disabled. terry.r, new development.... anew build 10061 available. after have 10041 installed, go windows update , click @ check updates. build 10061 appear download , install. Windows 10 Insider Preview ...

Manageability "In Progress": Server not loading

server manager displays "in progress" in manageability section of server..  i running server 2012r1 dc/dns server. in domain have 2 accounts; admin , user account. have tried both accounts , when using user account, elevate server manager. works fine both ways netbook. both machines have same gpos applied , desktop machine has fresh install of windows 8.1. have tried turning off firewall on desktop machine. desktop connected cat5 , netbooks using wifi. else works fine. can use shares, rdc, unc, , other services fine desktop. have been searching time resolution issue. hi, for issue, please detail whether encounter issue local or remote client? , whether admin user , normal user experience issue? please refer below link check more requirement server manage on windows server 2012 r2: manage multiple, remote servers server manager http://technet.microsoft.com/en-us/library/hh831456.aspx you can check detailed log below path:  c:\users\<your_usernam...

Server 2008 R2 Powershell version 4 cannot use Get-Net* (anything) commands

brand new ps here. i have new install of 2008r2 , have updated powershell 4 installing  windows management framework 4.0. system has dotnet 4.5.1 on well. i trying run script setting ip part of example shown in following blog: http://blogs.technet.com/b/heyscriptingguy/archive/2013/01/03/use-powershell-to-deploy-a-new-active-directory-forest.aspx so far have run brick wall unable break code using get-netadapter command. in example, following shown:    $ipif = (get-netadapter).ifindex  new-netipaddress -ipaddress $ipaddress -prefixlength $ipprefix -interfaceindex $ipif -defaultgateway $ipgw when running script, ps errors "get-netadapter : term 'get-netadapter' not recognized name of cmdlet, function, script file, or operable program" i found using " $ipif = get-command -module netadapter -interfaceindex" , nothing. when use powershell ise, no error given either , intellisense feature no help. i have executed g...

KMS Client Activation Issues

i having issues few kms clients being able reactivate through single kms host exist in domain.  things have considered , tried: network connectivity issues: dns resolving correctly(it resolves correct server) firewall blocking traffic on port 1688:  there no firewall on internal servers , tested telnet connection through port 1688 clients activation not work. after doing slmgr /ato error code : 0c004f039.   after doing slmgr /dlv notification error 0xc004f00f.  this same every client machine.   the host machines report of dlv normal , should add 98% of machines connect kms server fine , activate fine. every time log on server or workstations have problem tells activation needed due recent hardware or driver change. there have been no hardware changes.  so i'm leaning toward driver change causing it, when manual activation (slmgr /ato) errors out every time. no event logs in event log viewer regarding blocked attempts on host side , client...

RDS 2012 CB HA change SQL Istance port

hi all i have clusterd instance ha connection broker on different port 1433. port 1438. how can specify in string connection different port? it's possible? can somelike this? driver=sql server native client 11.0;server=sqlname:1438;trusted_connection=yes;app=remote desktop services connection broker;database=sql12gp thanks! hi i solved problem. 1. port not necessary specified it. don't how without port works this string: driver=sql server native client 11.0;server=mssql-clu12gp\sql12gp;trusted_connection=yes;app=remote desktop services connection broker;database=rdscbha 2. error attached due active directory group rd connection brokers member. group incorrectly created was domain local server sql , connection broker in 2 different forest have changed group global , worked thanks lot support adn answers. Windows Server  ...

Allowing Anonymous logon to access a file share on Server 2008 R2

hi there, have shared folder on file server holds bunch of images - want boardroom pc's running windows 7 in company connect share anonymously images can used screensaver/slideshow. work's if log on domain user, don't want log on domain user each boardroom computer. i've edited local security policy on file server , enabled "network access: let permissions apply anonymous users" i've configured "network access: shares can accessed anonymously" , configured \\servername\sharename$ this still not working, thoughts? hi reena111,   thanks posting here.   please try grant necessary ntfs , sharing permissions “everyone” group on folder , modify registry entry in article below :   everyone group not include anonymous security identifier http://support.microsoft.com/kb/278259   thanks. tiger li please remember click “mark answer” on post helps you, , click “unmark answer” if marked post ...

Can't access locally to Server 2003 shared folder when internet connection for server is down.

hi, having weird problems @ company's windows server 2003. the server acting active directories+local dns server+dhcp local lan is on. sample setting: server ip: 10.10.1.1 client ip: 10.10.1.150 router 1 internet gateway 1 (for server): 10.10.1.250 router 2 internet gateway 2 (dhcp assign client pc): 10.10.1.249 domain name: example.com these are pluged switch. client login windows will using the user name "example\user" dhcp allocate ip 10.10.1.150 client. gateway assign client 10.10.1.249 dns server assign client 10.10.1.1 client can access server's shared folder thorught local area network. my problem is, when router 1 10.10.1.250 hanged or disconnected internet or having problems. client not able access shared folder in server. have restart router , wait internet connection up. client able access shared folder. maybe have logout relogin again able see shared folder. my confusion that: why above problem ...

2 Certificate Authoritiy servers on a single network with different certificates.

hi all, i 'inherited' network on , and finding lot of problems can't figure out , hope here can me. to give basic idea of network, have 85 users , 9 servers of 2 of them dc's both running windows 2008. have exchange 2003 running on windows 2003. now problem this. 1 of dcs certificate authority on server , need format because not stable @ moment. exchange server happens certificate authority too. when checked certificates have both have totally different certificates , not 1 replicated. now question is possible transfer certificates both servers single server , ca network? worth having 2 ca's on single network? work fail-over each other or anything? another thing, of certificates have expired, best possible way issue renewal? thanks in advance. if have centralized administration think have, there no reason have more single internal ca. also consider may completelly uninstall , discard old cas - there prevent installing new ca , reissuing certifica...

Windows Essential - Install manually XP SP3

hello, i need  regarding ws2012 essential, blocked right 3 weeks. i didn’t succed connect domaine neither xp sp3 machines, nor 7 sp1 machines. here info : -           situation t0 : have sever win server 2000 , domain named “application”. devises xp sp3   are connected , devise 7 pro sp1. working, applications 32 , 64 bit , internet connexion. -           i buyed new server t320 dell , insgtall win server 2012 essentials : -           install mode : new installation : -           company name : loiseau service -           domain name : loiseauservice -           server name : dellt320 -           i created administrateur account , st...

Not Recognized ReFS after TP4 upgrade

successfully upgrade tp3 tp4. however, tp4 doesn't recognize refs vols created on tp3. refs volumes formatted windows server 2016 technical preview 3 cannot mounted on windows server 2016 technical preview 4. in place upgrades unsupported (and other) reasons. see windows server 2016 technical preview: system requirements , installation . if data must recovered, volumes can still mounted tp3. underlying volumes not lost or corrupted.   we changed on-disk format of windows server 2016 refs between technical previews found opportunities further improve refs’ resiliency before final release.   please note refs volumes windows server 2012 , windows server 2012 r2 can mounted without issue. Windows Server  >  Windows Server Technical Preview ...

Official LOL! Lingering Object Liquidator for Active Directory Release Date

i wondering when microsoft going release official version of lol!  beta version works well..  however, bit buggy (obviously) if still beta i'd try on here. https://connect.microsoft.com/directory/       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Directory Services

restricting a sub folder inside the folder to a couple of users

hi guys. have departmental share need restrict access couple of users. have created group on active directory. , on file server removed inheritance , given access group. when users try access can't see folder. maybe missing? please assist hi, general speaking, should: 1. make sure users have permission access (read permission) parent folder of subfolder. example if shared folder named \\server\share, , going share \\server\share\subfolder specific user group, make sure have @ least read permission on "share" folder. 2. \\server\share\subfolder, set - full control in share permission, , give specific user @ least read permission. test firstly give them full control see if can access subfolder. technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com. Windows Server  >  ...

Administrator users can't run vb6 App on Remoted Desktop Server 2012

<p>hi guys,</p><p>absolutely desperate here. inherited vb6 app (which converting vb.net), dept has upgraded server 2012. have not finished upgrade, interim workaround, trying use vb6 version remote users.</p><p>this problem is:</p><p>administrator can run app (either logged in admin or right-clicking , running admin). if other users (even full admin rights, full access folders) run it, run problems when ocx / dlls (i presume) being called. 1 of these emailing function (sending via outlook).</p><p>we temporarily resolved problem running app each station admin (runas). problem solved. except fact because app run admin - wants use admin account profile , not user. users getting active x cant create component error 429.</p><p>any ideas?</p><p></p><p>i have read disabling uac might work, not sure if (seen though had admin rights couldn't run app properly). </p><p></p><p...

Server is Getting restart due to "cpqteam.sys" file

windows server 2008 r2 server got hung. configured memory dump. checked shared memory dump , found server getting restart due cpqteam.sys file. current version of hp network config. utility 10.65.0.6. please required hotfix as hp driver, need reach out support or ask in forums. this posting provided no warranties or guarantees , , confers no rights. ahmed malek my website link my linkedin profile my mvp profile Windows Server  >  Windows Server General Forum

MS Certificate Web Enrollment authentication between domains

hi, i'm trying set certificate enrollment web services give autoenrollment clients. issue clients on separate domain ca. see ces/cep allows 3 options auth (windows, cert, username/password), realistically windows integrated secure enough autoenroll every user. is there way cep/ces can use windows authentication clients coming domain without having two-way trust? i'm not super experienced these microsoft services. thanks, elizabeth. > there way cep/ces can use windows authentication clients coming domain without having two-way trust? no, kerberos (integrated auth) requires two-way trust between forests, because 1 of fundamentals in kerberos. how can expose credentials untrusted realm? vadims podāns, aka powershell cryptoguy weblog: www.sysadmins.lv powershell pki module: pspki check out new: ssl certificate verifier check out new: powershell file checksum integrity verifier tool. ...

LAN connection "Domain network" label shows forest root instead of child domain

good evening, i've observed on windows server 2008, 2008 r2 , windows 7 when domain joined active network connection icon shows our forest root name, instead of child domain server/client joined to. disconcerting because forest root not name our employees would recognize. change local domain name. controls behavior? thank you! hi,   the system contacting forest root dc when network adapter starts work.   meanwhile, network location description stored in following registry value:   hkey_local_machine\software\microsoft\windows nt\currentversion\networklist\profiles\{<network guid>}   if want deploy network location, may consider writing startup script change profilename , description registry values in above key.   for more information, please refer to:   http://social.technet.microsoft.com/forums/en/winserverpn/thread/44cab27b-e2ef-4496-bfa7-add7ac014401   http://support.microsoft.com/kb/980873 ...

Windows 2003 r2 Domain Controller unable to boot

hi, i have 2 dc windows 2003 r2. 1 gc , holding roles , second adc on site. my first dc unable boot , think can't repair because not able log in restore or safe mode. i have 2 month old system state backup of first dc. can u pls suggest me how make our root dc working in short period of time. i new in admin field. regards vinesh you need proceed following: make left dc point primary dns server , 127.0.0.1 secondary one run netdom query fsmo to check if lost dc holder of fsmo roles. if yes, need size them left dc:  http://support.microsoft.com/kb/255504/ do metadata cleanup:  http://technet.microsoft.com/fr-fr/library/cc816907(v=ws.10).aspx make sure dhcp configuration , static ip configuration on servers / computers have no longer pointing lost dc dns server once have new server available, need promote new dc / dns / gc server , update ip , dhcp settings use new dc secondary dns server. for backups, please note important drp take system state backups usin...

WSUS hangs on Cleanup wizard for Unused Updates, then disconnects from console.

i running wsus 3.0 sp1 on windows 2003 , have found running cleanup wizard works of selectable options except "unused updates" option. hangs 1\2 way through , disconnects console. until has worked. i using windows internal database , size of mdf 3193024kb. everything other wizard working fine. please help. after troubleshooting sql profiler, able pinpoint 3 poorly performing queries (including 1 above in previous post).  actually, optimized can be, considering joining across 3 tables clauses on 2 of tables.  each time query run consumes 16ms of cpu time.  problem lies when query run hundreds of thousands, if not millions of times, causes cpu run 100% , sit there little disk byte throughput. to counteract reduced level of normalization between tables.  example, i created rowid field in tbdeployment table , updated match tbrevision table, created index on it, modified stored procedure remove that portion of join.  had 3 separate queri...

Certificate Root CA is expiring

i installed stand alone root ca in october 2003 on windows 2000 server. authenticate machines connecting l2tp/ipsec windows 2000 server. issued few certificates websites using ssl. technicians use web enrollment tool make requests pc's deploy certificates. have grown on 500 machines right now. ca root certificate expire in october 2009 , impossible have technicians go around update 500 pc certificates time october comes around. want move new certificate server using windows 2003 enterprise ca can automatically enroll computer certificates. other issue our domain consists of windows 2000 dc's (10 of them across country). there no budget upgrade these machines in 2009. must wait 2010. have strategy can follow working? there benefit using w2k8 certificate services on w2k3r2? if renew current certificate server's ca certificate, certificates issued still valid? can offer. an issuing ca never issue certificate valid beyond date of own ca certificate: if ca certifi...

Downstream server with Event ID 364 - Connection with the server could not be established

hi all- have existing wsus server working fine. added new wsus box in our dmz can patch our servers there. i've configured downstream of existing wsus server. server in dmz, have port 443 open upstread wsus, , i've configured both servers use ssl. downstream can see upstream server, not download updates despite administration console saying sync successful. download status on downstream remains @ "0.00 mb of 273mb". seeing event id 364 in event logs-  "content file download failed. reason: connection server not established", along lengthy file path. while on downstream server, plugged file path explorer , got looked eula file in foreign language, @ least shows downsteam should able communicate upstream. download performed on unencrypted (non-ssl) connection. need open port 80 between dmz , internal server. lawrence garvin, m.s., mcitp:ea, mcdba principal/cto, onsite technology solutions, houston, texas microsoft mvp - software distribution (2005-20...

Please have more defined application Windows boarders

i have many open apps/applications, overlaying slightly, overlapped, etc. sadly find difficult determine 1 applicaton ends , starts because boarder thin line, in fact don't think there line @ all. there someway user can change thickness of boaders of windows? if not please have feature. want windows 10 best windows yet, far windows 7 still streets ahead in its user interface. the fashion industry huge, why, because , feel means lot people, not technical features , many users find current , feel of windows 10 quite ugly , difficult manage. i realise view, wonder how many other people agree. i have same issue office 2013 , office 2016 same reason, @ least office 2016 appear have thin line boarder, wish wider.  >i have many open apps/applications, overlaying slightly, overlapped, etc. sadly find difficult determine 1 applicaton ends , starts because boarder thin line you're not alone. border disguised in win10 - so, that say, it's become more difficul...

DFS Replication stops replicating on folder for several hours

my dfsr appears disable daily @ various times @ least hour or two.   i have 2 windows storage server 2008 r2 running , on “main” server see following informational message in event viewer under application: 7/27/2012 7:01:28 - dfsrs (864) \\.\e:\system volume information\dfsr\database_b8a2_1de8_a21d_ac3e\dfsr.db: database engine stopped instance (0). 7/27/2012 7:01:28 - dfsrs (864) \\.\e:\system volume information\dfsr\database_b8a2_1de8_a21d_ac3e\dfsr.db: database engine (6.01.7601.0000) started new instance (0). 7/27/2012 7:01:29 - dfsrs (864) \\.\e:\system volume information\dfsr\database_b8a2_1de8_a21d_ac3e\dfsr.db: database engine stopped instance (0). when occurs, (sometimes) under dfs replication see these messages: 7/27/2012 7:01:26 - dfs replication service detected replicated folder @ local path e:\accounting has been removed configuration. 7/27/2012 7:01:28 - dfs replication service has detected replicated folders on volume e: have been disabled or dele...

audit account logon events

the original edition of configuring windows server 2008 active directory dan holmes,nelson ruest , danielle ruest says "the default setting windows server 2008 r2 domain controler audit both  successful , failed account logons" while eastern economy edition of same book says  "the default setting windows server 2008 r2 domain controler audit successful account logons".which on correct? hi, suggest open gpmc.msc on windows server 2008 r2 and navigate below setting under default domain group policy: computer configuration\windows settings\security settings\local policies\audit policy note there 2 different settings: "audit account logon events" , "audit logon events", based on extraction, think latter book refers "audit logon events" instead of "audit account logon events". right click setting , select "properties", go through explain tab for setting, may definite , official explanation i...

Virtual Machine and its snapshot parted

hi, beginner's question: after clumsy copy/paste of vm files toward backup disk, .vhd file , .avhd file got part. in vm, got 6 month ago. possible merge 2 files: .vhd , .avhd retrieve data. thanks hi! yes, can manually merge 2 files together. you click "edit disk" in hyper-v manager , select avhd file. wizard should automatically detect differential disk , give option merge base vhd file. it's recommended leave base vhd file untouched before performing merge. starting vm on base vhd file alone, might have altered in vhd file , cause merge fail. if have other copies of files hasn't been use in hyper-v after copy/paste, should use those.   Windows Server  >  Hyper-V

Data Recovery

hoping can situation in @ moment. have accidently ropocopied /mir on wrong partition on our windows server 2003 standard sp2 server. there important data on drive has been wiped (about 300gb). not have working backup of drive or recovery points. have tried use getdataback ntfs data corrupted. please help. need files desperately reagrds, nick hi, don't boot computer hdd or run risk of system overwriting slack of deleted files. suggest services of data recovery company recover data. , learning point ensure have backup solution in place. regards, salvador manaois iii c|eh mcse mcsa mcts mcitp(x4) ---------------------------------------------------------------------------- bytes & badz : http://badzmanaois.blogspot.com my passion : http://www.flickr.com/photos/badzmanaois my scripting blog : http://sgwindowsgroup.org/blogs/badz Windows Server ...

An net use or LsaPolicy operation failed with error 64,The specified network name is no longer available.

hi .. yesterday faced 1 issue while login on dc24, taking time , when ran dcdiag, got below error.. also not able connect dsa.msc managment server whhich pointing dc24. getting error while opening dsa.msc "rpc server not available". directory server diagnosis performing initial setup:    trying find home server...    home server = dc24    * identified ad forest.    done gathering initial info. doing initial required tests       testing server: deerfield\dc24       starting test: connectivity          ......................... dc24 passed test connectivity   doing primary tests       testing server: deerfield\dc24       starting test: advertising          ......................... dc24 passed test advertising   ...