Posts

Showing posts from May, 2015

How to get the NTP server value from powershell for all of the non domain joined server ?

hi all, got mixed environment of windows server 2003 , 2008 joined domain , of them not joined domain, how possible time server value server using powershell ?  /* server support specialist */ try powershell script (save .ps1):   $servers = @( 'server01' , 'server02' ) foreach ( $server in $servers ){ $ntps = w32tm / query / computer: $server / configuration | ?{ $_ -match 'ntpserver:' } | % {( $_ -split ":\s\b" ) [ 1 ] } new - object psobject - property @{ server = $server ntpsource = $ntps } } make sure run script account has permissions on servers , in elevated session.   if found post helpful, please " vote helpful ". if answered question, remember " mark answer ". rich prescott | mcitp, mcts, mcp [blog] engineering efficiency | [twitter] @rich_prescott | [powershell gui] client system administration toolkit

Mass storage drivers included in Server 2012?

where can find list of mass storage drivers included in server 2012 install disk? thanks! frank what see here should pretty close. http://www.windowsservercatalog.com/results.aspx?&chtext=&cstext=&csttext=&chbtext=&bcatid=1362&cpid=0&avc=38&ava=0&avq=0&or=1&pgs=25&ready=0       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Setup Deployment

Drive Mapping GPO Refreshing

i have several drive maps set in gpo replace.  through out day, drive mappings refreshed users cannot save documents after drive refreshed or drives disappear together. is there way change once log in, drives stay long logged in? system windows server 2012 r2 have tried gpo update instead of replace, "replace"  every gpo cycle or 90 mins disconnects , recreates drive mapping "update" disconnects if drive mapping has changed. went through same thing bummer cannot change group policy replace update have recreate preferences update property, since changed replace update no more issues users getting disconnected share while working. Windows Server  >  Group Policy

Windows Server 2012 and Windows Server 2012 R2 in same failover cluster

is still not possible mix versions of windows server in same failover cluster or can join windows server 2012 r2 server windows server 2012 failover cluster part of upgrading whole cluster windows server 2012 r2? is still not possible mix versions of windows server in same failover cluster or can join windows server 2012 r2 server windows server 2012 failover cluster part of upgrading whole cluster windows server 2012 r2? you cannot mix can upgrade w/o downtime. see upgrade matrix here: http://www.aidanfinn.com/?p=14914 hope helped :) starwind iscsi san & nas Windows Server  >  High Availability (Clustering)

server 2012 foundation cd download exist ??

i know there server 2008 cd need 2012 cd download  . i searched internet , didnt understand exist or not . i found on microsoft download of standard,datacenter,essential , it  maybe foundation combined other version ? if have license of 2012 foundation work on other version ? foundation not downloadable software.  available oems. http://technet.microsoft.com/en-us/library/jj679892.aspx   " because windows server 2012 foundation comes pre- installed server hardware, not need separately obtain , install hardware , operating system. " .:|:.:|:. tim Windows Server  >  Windows Server 2012 General

Windows 2012 r2 & 2016 Practice Labs - Video's - Lab Books

i trying discover mysteries of windows group policy, , looking specific training , practice group policy basics intermediate. can have suggestions practice labs, documentation , or video training. ms lab books. thanks , god bless i search books on amazon may want ask them here: https://social.technet.microsoft.com/forums/en-us/home?forum=certgeneral this posting provided no warranties or guarantees , , confers no rights. ahmed malek my website link my linkedin profile my mvp profile Windows Server  >  Group Policy

Error when trying to save files

while trying save edited word files error message states; word cannot complete save due file permission error. c:\users\???\...\???,docx. have give file new name.  what's that? you should tell version of word, operating system , exact wording of error.  here things check out: http://support.microsoft.com/kb/212347/en-us http://support.microsoft.com/kb/311153/en-us   if answer solves problem, please check mark answered. if answer helps, please click vote helpful button. cheers, shane devenshire Microsoft Office  >  Word IT Pro Discussions

win2003 Self signed certificate in the Trusted People certificate store.

Image
hi, when load self signed certificate trusted people cert store on win2003 r2 sp2, says that    "this ca root certificate not trusted because not in trusted root certification authorities store."   this not case on win2008 or vista. these have no error.   is bug, or need change in config on win2003? there store trusted root certificates Windows Server  >  Security

Problem with Start Button after Build from 10014 to Build 10074

Image
after waiting installation, 10014 build, 10074, no longer access start icon, next "ask me anything". when click on it, there no response, , "ask me anything"  is no longer functioning either.  i not sure how proceed point. should try , restore last build? , or wait , find if there cure problem.. thanks in advance dave over bottom right next time, there notification icon. can click open ? if yes, can click open settings ? if yes, select recovery & update > left side, select recover > right side, select refresh. Windows 10 Insider Preview  >  Windows 10 Insider Preview General

Windows HPC Server 2008 Headnode under drining state

Image
we installed windows hpc server 2008 16 nodes on sgi altix xe 250 server hardware, when tried submit new jobs, found our head node continuously under draining state , never comes online or offline while other 16 nodes in online. applied windows server hpc 2008 service pack 1 , applied hot fix microsoft   http://support.microsoft.com/kb/967222 but still problem not resolved.     this forum failover clustering , nlb. i'd recommend posting question on in hpc forums: http://social.microsoft.com/forums/en-us/category/windowshpc   visit blog multi-site clustering - http://msmvps.com/blogs/jtoner Windows Server  >  High Availability (Clustering)

SCEP(system center endpoint)

hi all, we have plan implement scep in our organization , please share document in scep features , how works had configuration document . want know how detects threats , how cleaned . this 1 might help. https://technet.microsoft.com/en-us/library/jj879317.aspx or ask on here. https://social.technet.microsoft.com/forums/forefront/en-us/home?forum=fcsnext       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, , confers no rights. Windows Server  >  Windows Server General Forum

mapped network drive could not be created

Image
i running windows 10 on laptop.  have network drive //mybookworld had been accessing. 2 days ago new updates installed , following errors: the mapped network drive not created because of following error: a specified logon session not exist. may have been terminated. this happened after attempting connect y: (omitting 2 backslashes) mybookworld\public same error z: drive (omitting 2 backslashes) mybookworld\download i have 2nd laptop running windows 10 received same updates.  laptop has no problem getting network drive. any suggestions? hi, how drive mapped on problematic windows 10 system? if it’s mapped via file explorer, please select checkbox connect using different credentials checkbox, should result in pop enter credentials when try access mapped drive, please enter credentials see whether works. in addition, issue specific windows 10, suggest post new thread in windows 10 forum professional support windows 10 experts. here a thread below similar issue

AD LDS performance

hi all, i'm looking documents explain how size ad lds server. there documentation explain how many ldap queries ad lds instance can handle based on hw specs ? thank you, paulo hello, if use basics http://social.technet.microsoft.com/wiki/contents/articles/14355.capacity-planning-for-active-directory-domain-services.aspx should sufficient ad lds. i assume should use less performance normal ad there no specific guide above. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Directory Services

OEM MEDIA OF WINDOWS STORAGE SERVER 2012 STANDARAD

from can download media of windows storage server 2012 standarad. you can here. http://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2012-r2       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Setup Deployment

Setup Primary and Secondary DNS

i work @ school, , our domain having problems. believe has dns. can ping , view file server ip address, not computer's name. sometimes, can ping the server's computer name, but fails. have 1 server file server , doing dns, not dhcp. i have researched online, still looking clarity on how setup dns. have primary , secondary dns settings manually set in our access points, firewall, , server. primary ip of server, , secondary external ip address. don't think secondary should external, since address changes every once in while. i think seconday dns should else on our network, points dns server, not sure. our network: firewall (also dhcp) 192.168.1.1 file/dns/ad server: 192.168.1.103 main ethernet switch: 192.168.1.254 8 access points: 192.168.1.200-240 thank you, dj dj ok, tell me see in tab "forwarders" in properties of server in dns console on server? should put external dns servers there said patris_70. after 1) remove 71.242.0.12 set

WS 2016 dual server scanario

hi how 1 setup dual domain server configuration if 1 goes down other takes over? thanks regards may depend on applications or roles. if you're asking domain controllers i'd make them both gcs , point dns self primary , other secondary. can verify replication tool. https://www.microsoft.com/en-us/download/details.aspx?id=30005       regards, dave patrick .... microsoft certified professional microsoft mvp [windows server] datacenter management disclaimer: posting provided "as is" no warranties or guarantees, , confers no rights. Windows Server  >  Windows Server Technical Preview

How much memory for hyper v host and VMs

hi in couple of months time going deploy first server 2012 hyper v host , virtual machines. host server has 24gb ram. going have 4 virtual servers. dc, file/print server, mdt, , database server. can recommend how ram should give host , each vm? thanks in advance shane it depends. enable dynamic memory , monitor vms, tweak startup memory make startup experience good. you can tune minimum of sql server ensure of database in cache. beyond that, depends.  totally unique. file / print server (first, split role 2 machines (based on experience)).  and, have caching turned on? brian ehlert http://itproctology.blogspot.com learn. apply. repeat. disclaimer: attempting change of own free will. Windows Server  >  Hyper-V

clients not populating in 3.0sp1 console

i hve small client domain 60 machines, none of them showing in console, including wsus server iself.   i ran command "wuauclt /detectnow" on wsus server (similar results clients) and found in windowsupdate.log file: --------- 2008-05-22 10:19:35:237  964 414 au triggering au detection through detectnow api 2008-05-22 10:19:35:237  964 414 au triggering online detection (non-interactive) 2008-05-22 10:19:35:237  964 cf0 au ############# 2008-05-22 10:19:35:237  964 cf0 au ## start ##  au: search updates 2008-05-22 10:19:35:237  964 cf0 au ######### 2008-05-22 10:19:35:252  964 cf0 au <<## submitted ## au: search updates [callid = {42d7723b-b6c6-44df-af29-03b485d1ca77}] 2008-05-22 10:19:35:252  964 19b4 agent ************* 2008-05-22 10:19:35:252  964 19b4 agent ** start **  agent: finding updates [callerid = automaticupdates] 2008-05-22 10:19:35:252  964 19b4 agent ********* 2008-05-22 10:19:35:252  964 19b4 agent   * online = yes; ignore download priority = no 2

Folder redirection NTFS permissions - file issue - Access Denied

here issue. i followed these steps http://support.microsoft.com/kb/274443/en-us the used folder, desktop, documents, etc…are created automatically.   if user creates document on desktop or docs , opens file, “access denied” check permissions on document , have full permissions. missing? scenario                 log in, right click desktop create new text document, open document “access denied” environment:                 server 2008 r2, windows7. folder redirection in gpo. where checking permissions?  on user's computer, or server?  check on server. Windows Server  >  File Services and Storage

DNS records are not 100% correct

Image
for while we've been noticing dns records not correct. records pointing incorrect ip addresses. 1 one open record, update ip, replicate across domain controllers. what cause hostname of 1 machine point ip address? i believe you're seeing dhcp-dns registration. may have duplicates, or incorrect data records can't updated dhcp service or dhcp client due permissions on record. may not have scavenging in place. in summary: configure dhcp credentials. credentials need plain-jane, non-administrator, user account. give strong password. set dhcp update everything, whether clients can or cannot. set zone secure & unsecure updates. not leave unsecure only. add dhcp server(s) active directory, built-in dnsupdateproxy security group. make sure other non-dhcp servers not in dnsupdateproxy group. example, believe dns servers or other dcs not running dhcp should in it. must removed or won't work. make sure no user accounts in group, either. (i hope that's crystal

DNS Dynamic updates on AD migration

hi everybody, i have question dns , dhcp configuration during active directory restructuration. i have 2 different domains, want merge. in fact, target domain empty because new domain new tree on existent forest. both domains in same network subnet. each 1 has couple of dns servers, ad integrated zones ad domain. there 1 dhcp server in network. server in charge of assignate tcp/ip configuration workstations. server, @ moment, configuring dns servers on source environment. in terms of prepare coexistence phase of migration, have created secondary zones on dns servers copy of ad integrated zones other domain. my question is: when user , workstation migrated target environment, need dns servers target environment, because need locate srv records (even old dns server able due secondary zone) , also, , more important, dynamically update own resource record on dns zone. how can manage this? happend dynamic updates if configure 1 dns source , other dns target? thanks in advanced http://xna-p

Split through Powershell on a file content

hello all, need in extracting specific values line. have log file generates big file , need read each line , collect values in it. me on this for example: *error|2017-02-06 10:10:42,942|090jj48e-e8j3-428h-949a-855448adsdf87|webserver001|10.0.0.1|0.9284515|post|500|/mybuildings/api/v1/bookings|{"roomid":"r123456789","owner":" ranji@gmail.com","mandatoryparticipants":["alex.max@test.com"],"object":"reservation on control"}|errormessage: unable create booking roomid, error while checking if owner authorized book room: r123456789,  owner: ranji@test.com ,  startdate: 2/8/2017 3:00:00 pm, enddate: 2/8/2017 4:00:00 pm. exception: system.management.automation.remoting.psremotingtransportexception: connecting remote server exchangeserver001.test.com failed following error message : illegal operation attempted on registry key has been marked deletion. more information, see about_remote_troubleshooting to

Windows Server Docker Containers & Managing Virtual Hard Disks

i work several software engineering groups , want have workflow happen inside of docker containers.  1 of artifacts requires block storage.  workflow utilizes diskpart create virtual hard disk, mount disk, create partitions, formats partitions, adds files. however unable diskpart or powershell disk commands run inside of docker container.  have tried microsoft/windowsservercore, microsoft/windowsservercore:1709, & microsoft/windowsservercore-insider , without hyperv isolation.   diskpart error: "virtual disk service error: service failed initialize." powershell & other errors: "a virtual disk support provider specified file not found" any ideas on how accomplish this? i had success virtual hard disk creation utilizing qemu-img windows.  (https://cloudbase.it/qemu-img-windows/)  have not found way mount virtual disks.   i've been exploring linux containers on windows (https://blog.docker.com/2017/09/preview-linux-containers-on-

how to find out what services are using domain admin account

we looking chnage domain admin account password. there way find out in domain services on server running wih domain admin account user , password? just in case did install service , using domain admin account. how can find out? have edited security policy of each system audit account logons, can done security template or group policy object deployment.  here's instructions gpo deployment of windows event subscriptions. http://msdn.microsoft.com/en-us/library/aa384372(vs.85).aspx you can track in event viewer see if theres logins using domain admin credentials. can delegate client or server host subscription event log. can use instructions below set manually. to configure windows vista or windows server 2008 machine pull events server core machine need perform following steps: on collector computer, run event viewer administrator. click subscriptions in console tree. click add subscription in actions menu. in subscription name , type name subscription. in descr

hyper-v host deploy to bare metal

currently have vmware infrastructure , want switch on hyper-v 2016. i have new server start with.  don't have sccm or vmm installed anywhere.  should install windows 2016 server standard , add hyper-v or there way more stripped down hyper-v hypervisor on bare metal server? thanks nm you can use hyper-v server instead of windows server. that's stripped-down gets: https://www.microsoft.com/en-us/evalcenter/evaluate-hyper-v-server-2016 . eric siron altaro hyper-v blog independent contributor, not altaro employee. accept responsibility content of posts. accept responsibility actions take based on content of posts. Windows Server  >  Hyper-V

unable to create a resource group using power shell in azure

when try run script azure resource manager  getting following error on machine.but resource group got created empty resource group note : using free trial azure.   ps u:\> d: ps d:\powershell> .\ressourcemanagerexample1.ps1 -verbose new-azureresourcegroup : unauthorized @ d:\powershell\ressourcemanagerexample1.ps1:27 char:3 +   new-azureresourcegroup -name $resourcegroupname ` +   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : closeerror: (:) [new-azureresourcegroup], cloudexception     + fullyqualifiederrorid : microsoft.azure.commands.resources.newazureresourcegroupcommand in other vm getting following  ps c:\automation> .\resourcegroup.ps1 -verbose verbose: 11:31:30 - created resource group 'testlab01' in location 'southcentralus' verbose: 11:31:31 - template valid. verbose: 11:31:31 - create template deployment 'microsoft.windowsserver2012r2datacenter.0.2.0-preview'. new-a

Newly installed WSUS 3.0 SP2 downloading updates in languages not selected

i have set fresh install of wsus 3.0 sp2 (3.2.7600.226) newly setup windows server 2008 r2 system.this single wsus server no downstream server configured. using windows internal db , replacing our old wsus 2.0 server. i configured new wsus server download english , japanese language updates. also, no express installation files. after setting few updates install downloaded noticed right clicking on them in wsus console , looking @ "file information" updates being downloaded in languages , express , self contained updates. is common occurrence wsus 3.0 , there way resolve this? appreciate feedback/advice. thank you. after setting few updates install downloaded noticed right clicking on them in wsus console , looking @ "file information" updates being downloaded in languages , express , self contained updates. common misunderstanding of meaning of information. not list of actual downloaded files, rather list of of the files , download urls available

Processes running under user ID

i have rdp users log in run statistical jobs, spatial jobs (arcgis), etc. many start long jobs , disconnect several hours or days. if open task mgr on server, show processes users , sort username, safe if processes user show 0 cpu , user disconnected, no jobs running under user? logged out yesterday had been disconnected several hours , had 0 cpu use of processes, thinks killed job of his. whatever happened, wasn't huge problem , there's no animosity - tell people during training i'll log them out if they're disconnected , not running anything. servers have several users running pretty big jobs, , there users jobs appear have finished (according cpu usage), they're still using lot of memory. when start complaints people working on server, first thing log out users disconnected , not doing anything. any thoughts? curious how other ts admins handle these situations. hi, cpu usage not indicator determine if no jobs running your users.  if have memory re

Unattend file works with Windows 10 UEFI USB but not WDS

when use unattend file below on windows 10 uefi usb stick machine processes correctly creating disk partitions file , leaving me @ oobe.  this correct , expected. when use same unattend file windows server 2012 r2 wds client unattend x64 (uefi) architecture , same machine still set use uefi following: 1.  client boots wds server 2.  i select language @ language selection 3.  enter login credentials 4.  select image install hit next 5.  next windows setup sits on "where want install windows?" screen instead of creating partitions unattend file can see @ following location x:\sources\wdsunattend\wdsunattend.xml i can't seem wds process file though downloads wds.  any appreciated. <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="windowspe"> <component name="microsoft-windows-setup" processorarchitecture=&quo

Weird behaviour with multiple scopes and multiple VLANS

Image
hi, we have central dhcp server multiple dhcp scopes (data 1 - 10.1.1.0, data 2 - 10.1.2.0 & data 3 - 10.1.3.0). have remote building 3 seperate vlans individual gateways (vlan 1 gateway 1, vlan 2 gateway 2 etc). now our issue when laptop plugged vlan (1,2 or 3), picks ip address ( e.g. 10.1.1.50) - far. when we unplug laptop, ipconfig/release delete entry dhcp scope, , plug laptop into a different vlan it retrieves same ip address before (10.1.1.50). the 3 gateways cisco routers , have been set usual dhcp helper addresses. anyone got ideas why our laptops refusing let go of ip address once have issued dhcp? any thoughts appreciated. ok, may need "weeds".  you may consider taking packet captures before , after relay agent on vlan in question verify if dhcp packets being updated correctly relay agent.  there nothing else on dhcp server at. i assume dhcp server has no interfaces on of these vlans. it knowledge base | itgeared.com |

Optimize RDS performance with Server 2012

hello, is possible optimize network utilisation ( compression, video resolution, etcc.) have better performance on wan? in windows 2008 r2 there lot of possibility configure rdp file use rds, saw nothing on 2012... thx hi, by default when connecting server 2012 rdsh server using remote desktop client 8 (6.2.9200) optimizes performance wan connection.  example, during initial connection detects network bandwidth , latency , continues monitoring connection , makes adjustments graphics remoting experience needed.  best results want make sure udp enabled connection.  can tell connecting server in full screen mode , clicking connection info icon on connection bar. you may make manual adjustments remotefx settings using group policy settings on server.  example, try enabling configure remotefx adaptive graphics setting.  recommend try settings @ default , if unhappy experiment see if there improvement. -tp

Network Name fails to come online

the computer account cluster resource 'labfp1' in domain lab.com not created following reason: unable create computer account.   the text associated error code is: access denied.   the cluster identity 'labcl1$' may lack ability create computer objects in default computers container or @ quota of computer objects can own. if there existing computer object, verify cluster identity 'labcl1$' has 'full control' access computer object using active directory users , computers tool. default computer objects created in 'computers' container; consult domain administrator if location has been changed. domain administrator should contacted assist resolving issue.   i have logged in domain admin , run wizard configure service. why use machine account context rather user context?   i missing obvious?   running longhorn beta 3, x64   regards   steve hi steve,   in longhorn network names must have associated computer object created

TS Session Broker Port Change from 3389 to 1000 and other security options

hi, when using ts session broker server farm of 4 servers , hardware load balancers, there way change port used connect terminal services server farm using port 3389 (rdp) port 1000? goal reduce or eliminate unwanted user connections server farm in event user knows server farm name or ip address connect in , since port 3389 known rdp session port, unwanted users can connect in. additionally other security measures or mechanisms can done meet goal? other options or suggestions in doing this? thank you. hi,   this security option, can use ts gateway address scenario. can configure ts cap , ts rap policy inside ts gateway control users can connect resources.   more information: ts gateway step-by-step guide http://technet.microsoft.com/en-us/library/cc771530(ws.10).aspx     technology changes life…… Windows Server  > 

Windows Server 2012 R2 User Profiles Creation Question

we have small rds farm on windows server 2012 r2. we not using user profile disks (upds take space). when user logs in can redirected folder redirection group policy redirected \\file-server\users\%username%, including appdata. so far good. however -- unlike win2k3 , win2k8r2, profile folders not being created in \\file-server\rdsprofiles, no username.domain folders or username.domain.v2 folders or similar. each rds host server having put small profile folder user-specific things outlook profiles -- per server!! contains appdata folder... this means example outlook first-run wizard must run 5 times (once upon each host servers) user's email profile saved properly...will different per host server???? is normal in windows server 2012 r2?? anything/something should differently?? thank you, tom i have learned happens because outlook settings don't redirected appdata on \\file-server... and can fix using prf file outlook...however problem getting prf fi

Unable to Install Oracle

i have installed windows 2012 server on dell latitude laptop. not install oracle 11 gr 2 on it. how can install ? i have installed windows 2012 server on dell latitude laptop. not install oracle 11 gr 2 on it. how can install ? as per oracle community thread, oracle not officially supported on ws 2012. does oracle database supports windows server 2012? step step install: installing oracle database on windows 8  - try this, might work on ws 2012 ( no assurances ) since windows 8 , ws 2012 have same code bases. for further queries w.r.t. installation of oracle, please seek in oracle forums. https://forums.oracle.com/community/developer/english/oracle_database/installation/content?filterid=contentstatus[published]~objecttype~objecttype[thread] regards, santosh i not represent organisation work for, opinions expressed here, own. posting provided as is no warranties or guarantees , confers no rights. blog | wiki

Domain Admin Rights for SAP project

dear all, we have in our environment sap software under implementing, developers ask domain admin rights make clustering; can't give 1 admin rights our domain there way give developers right clustering without give them full admin rights. regards , thanks  hi, you/they should able instructions following article: http://technet.microsoft.com/en-us/library/dn466519.aspx http://blogs.msdn.com/b/clustering/archive/2012/03/30/10289577.aspx let know if need further assistance us! /johan microsoft certified trainer mcse: desktop, server, private cloud, messaging blog: http://365lab.net Windows Server  >  Windows Server General Forum

How not allow an administrator to change password of other users

dear all, i use windows 2012 standard version, how set 1 of administrator not allow change password of other users,including user and administrator.  the server don't join domain. thanks john hi john, thanks post. based on knowledge, all admin accounts equal.  i'm afraid that all admin accounts have ability change any password.  this design , cannot restricted. best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Security

Security Message on workstations when they are rebooted.

in middle of day, of our systems froze.  when rebooted them, see following message:   windows cannot locate server copy of roaming profile , attempting log on local profile. changes profile not copied server when logoff. possible causes of error include network problems or insufficient security rights. if problem persists, contact network administrator.   detail - system detected possible attempt compromise security. please ensure can contact server authenticated you. we no longer can access our server files on our server our workstations.       hi,   based on experience, can temporary problem. may try reboot again after while. if problem continues, please check if can logon user credential. meanwhile, following article might helpful you:   you receive "windows cannot locate server copy of roaming profile" error message when try log on windows xp-based client http://support.microsoft.com/kb/832850   regards, bruce this posting provided "

AD CS Installation: CAPolicy.inf and post installation conf script

happy new year all! ask few questions ca servers installation (offline root ca , onling issuing ca). questions offline ca installation. offline root ca server have 10 years validity period. member of workgroup. online issuing ca have 10 years validity period too. have specified capolicy.inf follows: **************************************************************** [version] signature= "$windows nt$" [certsrv_server] renewalkeylength=2048 renewalvalidityperiod=years renewalvalidityperiodunits=10 [crldistributionpoint] [authorityinformationaccess] [legalpolicy] oid=1.3.6.1.4.1.my_pen.21.43 notice = “legal policy statement text.” url = “http://www.mycompany.com/certdata/cps.asp” **************************************************************** hope right. plan run following post-installation script on offline ca: **************************************************************** set myadnamingcontext=dc.... certutil.exe -setreg ca\dsconfigdn "cn=c

modify script

hi, i use ps script data: get-qaduser -sizelimit 0 -searchroot 'domain.com/ou/ou1test' -includedproperties samaccountname,name,title,parentcontainer,streetaddress,telephonenumber,manager | sort-object -property samaccountname | select samaccountname,name,title,parentcontainer,streetaddress,telephonenumber,manager | export-csv e:\data.csv -encoding unicode   in data.csv in manager column have cn=john johnson ,ou=sales ,ou=hq,ou=company ,dc=domain ,dc=ru but need only john johnson help me please modify script. thanks in advanced try this: get - qaduser - sizelimit 0 - searchroot 'domain.com/ou/ou1test' - includedproperties ` samaccountname,name,title,parentcontainer,streetaddress,telephonenumber,manager | ` sort - object - property samaccountname | ` select samaccountname,name,title,parentcontainer,streetaddress,telephonenumber,` @{n = 'manager' ;e = {( $_ .manager -split ',' ) [ 0 ] -replace 'cn=

Directory Restore Password

our company hit conficker virus , has locked out domain accounts login domain. system administrator in charge cannot remember directory restore password. any recommendations help. cannot login of servers. there anyway reset directory restore password without credentials. domain security policy set account never unlock. hi you can try removing virus. if not working can reboot server in directory service restore mode , try login. if working, take latest before virus attack , restore authoritatively replicate other dcs. if unable login dsrm, freshly install windows server 2003 , restore same. to perform restore http://support.microsoft.com/kb/241594 regards rajesh j s Windows Server  >  Directory Services

¿Como vuelvo una red publica a una privada?

bueno les cuento, la cosa es que tengo una red que me dice que es publica por lo que no me funciona para establecer conexiones lan, me gustaría saber como puedo volverla una red privada hello, sorry forum in english language. either ask in english or choose forum in language. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Windows Server General Forum

Group policy didnt work (SYSVOL replication)

hello experts i need information , help. have 4 domain controller in domain. 1 domian controller runs windows 2003 sp2 other domains windows 2008 r2. today created group policy testing environment gpupdate /force pc. error: user policy not updated successfully. following errors encount ered: processing of group policy failed. windows attempted read file \\golo mtbank.local\sysvol\golomtbank.local\policies\{defbc9a3-f3f4-4598-bf04-adff097bc 04f}\gpt.ini domain controller , not successful. group policy setti ngs may not applied until event resolved. issue may transient , caused 1 or more of following: a) name resolution/network connectivity current domain controller. b) file replication service latency (a file created on domain controller has not replicated current domain controller). c) distributed file system (dfs) client has been disabled. i checked sysvol folders on dcs. folder created on primary domain controller didn't created other 3 servers. primary doma

Windows Server 2012 R2 File Server - checking file share permissions for users

i have windows server 2012 r2 file server setup in active directory environment. the organization has couple network drives , many security groups setup folder access network drives. how can list of user has access besides looking @ security groups 'member of'? can log in user , check access that's cumbersome. there better way check user access on network drives? thanks microsoft have provided 2 tools can list share , ntfs permission on file server. shareenum utility can list share permissions user/groups , share permission on server. accessenum utility can list ntfs permissions users/groups , ntfs permission on server. 1. download shareenum , accessenum following links: shareenum v1.6 http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx   accessenum v1.32 http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx    2. copy shareenum , accessenum utility problematic file server.    3. shareenum.exe    a. double-click shar

DNS server do not forward requests

Image
domain dns server not forwards requests, serves requests domain names served dns server. #nslookup google.com 127.0.0.1                                   --         not resolve dns name #nslookup google.com <external dns server ip>           --         resolves event log not gives errors. forwarder set in dns server. dns server generates following warning: log name: dns server source: microsoft-windows-dns-server-service date: 3/21/2012 1:30:44 event id: 5501 task category: none level: information keywords: classic user: n/a computer: dc01.test.home description: dns server encountered bad packet 192.168.0.1. packet processing leads beyond packet length. event data contains dns packet. event xml: <event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <system> <provider name="microsoft-windows-dns-server-service" guid="{71a551f5-c893-4849-886b-b5ec8502641e}&q