KCC

i'm attempting migrate existing windows server 2012 essentials install new windows server 2012 essentials install on piece of hardware.  when run migration tool on existing wse2012 server, tool stops error message microsoft baseline configuration analyzer 2.0 must first installed on server.  problem mbca2.0 won't install on wse2012; install fails error install not supported on installed os. mbca2 docuonmentation says can installed on earlier versions of windows server or sbs. any suggestions on how work around problem?  can't migrate without successful completion of migration tool routines. hi, towards windows server 2012 essentials migraton new hardware, microsoft publised article towards kind of scenario: title : migrate windows server 2012 essentials new hardware url : http://technet.microsoft.com/en-us/library/jj730387.aspx please make sure have followed guide above migration. , let me know procedure failed in. share snapshot better. , post windows s

we had installed hp laser jet 1020 printer on win xp pro sp3 32bit , shared it. able print xp clients unable print windows7 pro 32bit installed using add printer - local printer attached computer - create new port - local port - \\computername\printersharename after win7 users able print sometime after sometime same thing happens unable print. then tried install printer through other ways. example - 1)add printer - network printer or printer attached computer - find printer in directory   2) add printer -  network printer or printer attached computer - connect printer (or browse printer....) - selecting printer.. 3) using unc path start - run - \\computername or ip add - shows shared printer right click , connect.   failed install printer showing error "print processor not exist". please provide guidance on issue. hi, thanks post. please check below thread. hope helps. can't install network printer on windows 7 http://answers.microsoft.com/en-us/wind

i have configured adfs 3.0 environment , working great. users can sign in username , password (no @domain.com required) code 'example 2' found here: https://technet.microsoft.com/en-us/library/dn636121.aspx . used code in onload.js , works great. i've setup password reset function described here:http://blogs.msdn.com/b/samueld/archive/2015/05/13/adfs-2012-r2-now-supports-password-change-not-reset-across-all-devices.aspx . works well, except users required enter there username@domain.com / email address here. want them enter sam account name (like example 2 listed above). need further code in onload.js file, or need edit/create script in different file acheive this? hi,   adfs related issues, suggest post in dedicated forum, can more experienced responses:   https://social.msdn.microsoft.com/forums/vstudio/en-us/home?forum=geneva   the reason why recommend posting appropriately qualified pool of respondents, , other partners read forums regularly can ei

hello, i trying figure out how deal increase in mobile clients in building. want them have network access, taking many ip addresses our current .1-.254 scope. the way these devices connect through wap tagged our dhcp server (2012r2) assign them address. lot of administrative reasons, connecting wap different dhcp server not option (i know easiest need alternate solution). so question: there way in can filter wireless "untrusted" clients different scope? currently, scope filled 2 types of devices: active directory trusted computers , these pesky mobile clients. i'd separate 2 if possible. thoughts? appreciated. thank you, matthew you'll need create separate vlan "untrusted" clients, it's own subnet , gateway address. tricky part assigning correct vlan clients: you'll need 802.1x support on waps , radius server can check client's identity/attributes , tell wap vlan client should connected to(windows nps example). gleb.

hello, i try migrate hsm microsoft ca uses. i running microsoft ca on windows server 2008 (32bit) eracom protect server external. i managed export certificate+privkey , import new hsm, safenet lunasa. (i know, evil , keys compromised...) i ran certutil -csp "luna cryptographic services microsoft windows" -repairstore <serial> now can see in certutil -store my certificate correct associated lunasa csp. looks fine far. my goal now, have ca find certificate on new hsm, lunasa. i think there should 2 possibilities: 1. reinstall ca , choose existing certificate , private key, when initializing ca 2. voodoo , edit registry, altough "there no direct supported way change csp ca." ;-) anyway: when reinstall ca , choose select existing certificate privkey, ms ca installer not see private key nor certifcate. so wondering how ca installer tries locate existing ca certificates on machine on why not find mine. any hint deeper understanding h

first background explanation: 1. microsoft have announced can publish remote desktop gateway through web application proxy using adfs preauthentication, part of blog post entitled, "introducing next version of web application proxy" dated 1st october 2014. section titled "remote desktop gateway (rdg) publishing" says august 2014 rollup package makes changes available customers. see: http://blogs.technet.com/b/applicationproxyblog/archive/2014/10/01/introducing-the-next-version-of-web-application-proxy.aspx 2. instructions achieving above seem outlined in technet post titled, "publishing applications sharepoint, exchange , rdg" dated 1st october 2014. in section titled, "how publish application using rdg preauthentication" instruction 1 says obtain "httponly update" points kb2982037. in kb article, says fix can obtained rollup package, quote: "the update rollup fixes many other issues in addition issue hotfix fixe

we using vamt on 2012 server. see computers under windows products.  these computers running windows 7 , office 2010. historically, when ran update license status, detect windows , office , report status each.  report windows on these specific computers.  none of these devices show under office products in vamt activated , licensed.  i'm not sure how or when reporting date is. don't want them show unlicensed in month or 2. these computers in computer lab , having trouble getting them report month or 2 ago.  have other computers running windows 7 , office 2010 , reporting successfully.  have 21 successful though, showing gvlk product key.  not meet 25 threshold. interestingly, 6 of these computers had fresh install of office 2010 in aug 2016 show "date of last license status" sept 2015.  showing license status unknown genuine  , there no 'not activated' warning when open office on computers i using vms key office 2010 , 2013 lead problems using mak

can please advise how can setup windows 2012 internet gateway our local domain network? following present topology: windows 2012 4 nics. nic1 connected lan switch. ip address 10.36.65.21, subnet 255.255.255.255, no gateway address, dns 127.0.0.1. nic2 connected dsl router. ip address 85.190...120, subnet 255.255.255.248, gateway 85.190...121 (adsl router) client computers in network automatically configured dhcp on server, gateway 10.36.65.21 as per above topology client computers should connect internet using windows 2012 server internet gateway no success. server has connectivity internet without problem. can please advise other settings should configured in windows 2012 server ensure client computers connect internet in present topology? what roles installed on server? if server provides dc/dns not recommended multi-home server , cause great amount of grief experience. better use hardware appliance routing.  posting unedited ipconfig /all of server , problem client

i'm currently in process of writing powershell scripts managing our environment, , want make use of 'warningaction' common parameter. doesn't seem work :-(. i'm using [cmdletbinding()] attribute in script enable common parameters ( http://msdn.microsoft.com/en-us/library/dd901844(vs.85).aspx ). consider following powershell v2 ctp3 script test.ps1: ============== [cmdletbinding()] param() write-host "warning: $warningpreference" write-host "error: $erroractionpreference" write-warning "b" write-error "c" ============== if execute script follows: ============== ps > .\test.ps1 -erroraction silentlycontinue warning: continue error: silentlycontinue warning: b ============== as expected, $erroractionpreference set 'silentlycontinue', , output write-error cmd suppressed. however, if execute: ============== ps > .\test.ps1 -warningaction silentlycontinue warning: continue error: continue warning: b d:\misc\s

i have domain controller has been having domain resolution issues.  periodically our exchange server lose connection active directory , can't autheticate users.  today sql server lost trust relationship , can't log onto network user.  know can take machine off domain , on again, not right here.  might wrong domain controller? shawn hi please check event on dns server run dcdiag on dc check if good please check connectivity form exchange dc ping please create log file , see if have request time out (increase package ) example:  ping "server name"  > c:\log.txt if ok run antivirus , spyware on servers  try malewarebytes , 1 of antivirus software . let know   Windows Server  >  Windows Server General Forum

hello, i ask again, joined windows 2008r2 64 bit sbs 2008 member server,now want prmote him domain controller, run dcpromo tells me run adprep /forestprep.   see adprep tool 64 bit on disk of windows 2008r2. try run on sbs 2008 not responding @ . copy adprep.exe path in sbs server c:\windows\system , tried run command prompt not responding too. i  searched  in google adprep.exe 64 bit tool download. don't find site download it. unblievable. see documentation windows server adprep failure,adding 2003 r2 x 64 server 2000 domain kb919151 more can't find other documentation adprep.exe 64 bit tool,neither download it. asked  question in forums on windows server category telling me have ask question sbs category,because want join server2008r2 sbs server2008. , when ask question on sbs server category no 1 giving me answer.so don´t no anymore ask question. has idea how can solve problem or can download adprep.exe 64 bit tool. or maybe have update sbs 2008 rollup let function

when run a  group policy results query see what's getting applied on 1 of servers, particular user, results return there 2 gpos denied because inaccessible.  guid each listed , not friendly name.  when guids in ad under system\policies ... don't exist, blocked translating guid friendly name.  fine. but  why system keep trying apply these policies if don't exist? "additional info:  policies applied ou copies of other gpos.  purpose of doing way test new settings in said gpos when applied test servers prior , without making same changes on systems in our live environment, appears 2 of these gpos not being applied @ all.  looks have issues 4 policies, 2 don't exist, 2 aren't being applied, , all have unique guids." please check gplink attribute on ou. think see guid , please delete guid don't want. Windows Server  > 

i have bring business critical application @ dr site using same hostname , ip address in production site. purpose, plan use block replication software replicate data production servers san @ dr site. dr invocation or testing, planning take snapshot san, create virtual disks , attach them newly created vm's @ dr site. this application depends on active directory , hence need have domain controller @ dr site. if create new domain controller dr site, in separate ip subnet, have in separate ad site , application servers not able use domain controllers, domain controllers in ad site (which production site). if put domain controller in same ip subnet application servers, same ip subnet has user workstations , hence user authentication requests production site start coming dr site across wan. in scenario, proposing replicate domain controllers production site dr site, application servers. not sure if block replication of production dc's dr site , when required testing/invoc

hi,    reason want disable the remotefx feature or disable ms-rdpegfx traffic windows 2012, how that? there 2 related topics: enable/disable remotefx usig scripts microsoft remotefx however for windows 2012 or windows 2012 r2, configure remotefx not exist in group policy more. how disable remotefx or disable ms-rdpegfx traffic? me? thank much! it right in theory. however, there no official method disable remotefx in windows server 2012 since built-in. sorry inconvenience. we trying better understand customer views on social support experience, participation in interview project appreciated if have time. helping make community forums great place. Windows Server  >  Remote Desktop Services (Terminal Services)

i have windows 2003 server software installed in server system.now had planned change server system. format old server , install windows 2003 server software in new server system.please let me know whether software valid new system or valid in old system.(reason question is, had activated software microsoft while installed in old system.) able activate once again after had installed in new server system. thanks. dominic.s hi,   it depends on type of windows server 2003 license purchased.   you need contact microsoft license center check type of license.     best regards, vincent hu   Windows Server  >  Windows Server General Forum

hi, have customer has open password policy implemented in ad. eg : non complex, number of character, unlock after 5 minutes, never expires.. i've configured fine grained passwd policy, customer modify @ once. can perform change on default domain passwd policy directly. know happen non compliant passwords users when perform gpupdate after enabling modified policy? eg : users blocked or prompted change passwd, or need compliant when need change passwd next time? hi  these settings can seen user without logon, logoff, reboot, or gpo refresh.  policy written , replicated (fgpp or domain policy) changes following settings in effect , can impact or soon. - minimum password age - maximum password age - lockout duration - lockout threshold - observation window these settings in effect immediately, users not impacted until password change occurs. - minimum password length - password must meet complexity requirements - reversible encryption also

hello everyone. i have been replicating quite few servers new 2016 environment. has gone swimmingly apart 1 vm. i cannot hrl log file go away, after removing replication still growing in size. is there can force remove file? still open process cannot deleted! many thanks si hi sir, i tested in lab . i can delete hrl file without remove replication , needs put primary vm off state . please give try . best regards, elton please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Hyper-V

hi we have windows 2008 environment, 2008 ca enterprise, windows xp, vista , 7 clients. if want enable autoenrollment of comuter , user certificates correct thing haveto enable following in gpo computer configuration \ policies \ windows settings \ security settings \ public key policies \ certificate services client - auto-enrollment (enable this, , mark renew expired certificates... , update certificates user certificate templates) do havto enable certificate services client - certificate enrollment policy ? i have setup tempates autoenroll spesific group, , have tested manually works mmc. thanks reply regards ole   yes, need configure gpo & make sure been applied workstation. http://technet.microsoft.com/en-us/library/cc731522%28ws.10%29.aspx if auto enrollment not working, can use below link troubleshoot. http://blogs.technet.com/b/instan/archive/2009/12/07/troubleshooting-autoenrollment.aspx   regards awinish vishwakarma| my blog dis

i wondering if there setting uac in windows 7. if user gets   login screen installation software  there grace/caching  period remembers install credentials for  time (30 min?). there no such setting in uac, can set administrator under "elevate without prompting"  applications have been marked administrator applications, applications detected setup applications, automatically run full administrator access token. other applications automatically run standard user token. http://msdn.microsoft.com/en-us/library/windows/desktop/aa511445.aspx Windows Server  >  Group Policy

we're using nps on 2008 r2 authenticate our internal laptops able connect our internal wireless network.  we're using cisco wireless lan controller.  i'm selecting certificate under policies --> network policies --> private vlan --> constraints (tab) --> authentication methods --> edit on "microsoft:  protected eap (peap)". if select cert purchsed through thawte, authentication fails on laptop , event id 6273 on nps server.  event says, "authentication failed due user credentials mismatch. either user name provided not map existing user account or password incorrect." if select cert issued our internal ca, works fine. i hope provided necessary information.  nps experts out there (not me) have ideas on might causing this? good point trust, tiger. may need install third party intermediate trust certificate, because many of public cas using method protect root ca. example, purchasing cert digicert customers' exchange servers

i have been having pc problem when using iexplorer.  started v.8, when shut down window, program continues run in memory.  unable open desktop applications until start taskmanager , end running iexplorer.exe.  until open , close iexplorer again.  today loaded v.9 (beta) see if fix problem didn't.  no problem other browsers use.  have tried use automatic repair resource.  running vista current mods. i'd ask them here. http://social.answers.microsoft.com/forums/en-us/category/windowsvista       regards, dave patrick .... microsoft certified professional -microsoft mvp [windows] Windows Server  >  Windows Server General Forum

we use iscsi initiator connect 2 thecus nass backup disk. on period of time, iscsi driver consume stupid amount of non-paged pool memory (up 18gb) , server slow down , nothing usable. there hotfix ( http://support.microsoft.com/kb/981357 )  thats meant resolve issue when running it says not compatiable version of windows server 2008 r2. hotfix article says works w7 , 2k8 r2 go figure. used poolmon.exe tag (is1f) of driver , used strings.exe search driver tag name msiscsi.sys. ideas on how can resolve this?  impacting our backups , reliability of our server. regards, adrian we use iscsi initiator connect 2 thecus nass backup disk. on period of time, iscsi driver consume stupid amount of non-paged pool memory (up 18gb) , server slow down , nothing usable. there hotfix ( http://support.microsoft.com/kb/981357 )  thats meant resolve issue when running it says not compatiable version of windows server 2008 r2. hotfix article says works w7 , 2k8 r2 go figure. used poolmon.e

hi there, is there way protect winos against tool:  http://blog.gentilkiwi.com/mimikatz  (sorry in french first print screen relevant...) according author (no ntlm, no admin /system/debug privilege, no local admins) in real life have grant users admin, , using tool right escalation may devastating can dump , reverse password stored in memory... is there native way protect stuff except using strong authentication , uptodate av software ? thanks feedback! uac not protect you, because if tool can installed via an exploit. attacker launch privilige escalation attack. possible solutions: * keep server patched, can exploited * if tool copied server, let av software remove automatically * remove devops local admin group , assign them rights need johan loos Windows Server  >  Se

i have purchased proliant dl 370 g6 , installed windows server 2008 r2 without issues. has 4 nics on 1 card in back. assigned ip our private network , when connected our network came message asking me assign type of network. (nla) assigned to work type , ok. after downloaded software hp, installed it, , rebooted nic says unassigned , network access gone. how set work.  cannot seem find answers work on internet. hi eric,   thanks posing here.   which software installed ? , please verify current network settings (ip address, default gateway entries..etc) still correctly listed.   meanwhile, profile using now, mentioned not assigned, mean “unknown”?   http://blogs.technet.com/b/networking/archive/2009/02/20/why-is-my-network-detected-as-unknown-by-windows-vista-or-windows-server-2008.aspx   if oem software cause connectivity issue, may check settings in make sure not been misconfigured . further suggestion, may consult hp support service.

does know how can manage other iis servers without having re-enter my credentials to connect each server? i.e. open iis manager click on server have added , have connect server out having dialog come asking username , password.  when manage bunch of servers not fun having re-authenticate each 1 every time re-open iis manager. why can't pass my credentials, or have other security mechanism in place? i suggest post in iis forums. the official microsoft iis site http://forums.iis.net/ thanks Windows Server  >  Windows Server General Forum

hi, wonder if there limits cifs protocol ie numbers of locks, number of shares, number of concurrent connections. use unc share repository web sites don't want hit limit of cifs protocol? consider i'm hosting thousands of different web sites, each 1 different ftp user , different app_pool identity. roberto hi,   for detailed information cifs protocol, please refer following article:   http://msdn.microsoft.com/en-us/library/ee442092(prot.13).aspx   tim quan Windows Server  >  File Services and Storage

:) thanks& regards, selpri | india | +91-9986655633 future looks bright... if subject proper, how computer data, if want export name of computer name ad, can use oldcmp tool joe richards, apologize, if got question incorrectly. if looking stale computer joe richard's tool best.  example oldcmp.exe -b dc=domain,dc=com -age 90 -llts -format dhtml -report http://awinish.wordpress.com/2011/03/09/joes-tool-adfind-oldcmp-for-ad/   http://blog.joeware.net/2007/05/01/864/   regards awinish vishwakarma| my blog disclaimer : posting provided as-is no warranties or guarantees , confers no rights. Windows Server  >  Directory Services

 hi, have following scenario: 2 dc in same site both dcs dhcp server both dcs in dnsupdateproxy group on both dhcp server use credential delegeation dynamic update registration on ipv4 tab. account (sa-dhcp) domain member option 81 on ipv4 , on scope self configured dword value 23 have on both dhcp server set openaclonproxyupdates 0 on dns zone domain.local, have @ moment no scavenging enabled. zone allowed secure updates wont dhcp server make alle dynamic updates on dns zone clients , non windows device printer etc. have problem dhcp leases appear dynamic dns records written delayed in dns server. there parameter decrease time in witch dhcp server update or create dynamic dns records help. regards 7 option 081 not option in scope or server, rather it's whole dns tab under dhcp properties. did set part force updates devices whether ask dhcp dynamically register or not it? assuming have 2 dhcp servers 80/20 redundant solution, have set on both

hi all, compiled posh script gathering ideas other scripts , putting together. goal monitor automatic services on 2008r2 servers exceptions , if service down send email identified services down on particular machine. the group of servers want monitor, have several services exceptioned. in case biztalk , sql services. this script; cls $serverlist = get-content "d:\sysappz\servicemonitorchecks\servers.txt" $report = "report.htm" clear-content $report add-content $report "<html>" add-content $report "<head>" add-content $report "<meta http-equiv='content-type' content='text/html; charset=iso-8859-1'>" add-content $report '<title>multiserver service monitor report</title>' add-content $report '<style type="text/css">' add-content $report "<!--" add-content $report "td {" add-content $report "font-family: tahoma;" add-c

hi all, i'm in process of setting hyper-v cluster failover. have 2 dell r710 hosts connected dell ps4000i san 2.1tb of usable storage (in raid 50 config). have configured csv, , far of our trials have worked well. failover & live migration working great - has not become production platform yet. have few questions i'm hoping people can assist with: 1) have assigned 500mb quorum , 2000gb single lun on san (shared using csv). if ever run out of room can add plenty of physical disks, can increase size of lun without losing data on it? or have backup lun, wipe , setup new larger lun , share again csv? 2) should leave unallocated space on san other volumes (instead of allocating whole 2.1tb)? 3) there benefit storing vhds , vm on seperate luns? there other tips can suggest or think of? we're using scvmm if helps. in advance, steve hi,   the following posts you.   how extend cluster shared volume (csv) http://social.technet.microsoft

i have deployed windows server 2012 essentials rc server.  have gone through setup anywhere access.  wizard reports server not connected internet , provides link assistance.  link connects technet web site instructions connecting switch, router , host internet.  link works server , can browse any  other web site i've tried server.  i'm using rdp across internet remotely manage server reports not connected internet.  have suggestions here? thanks, gerri somehow, issue seems have cleared itself.  have not applied updates or fixes or made changes configuration @ all, problem no longer exists. Windows Server  >  Windows Server 2012 Essentials

i have 2 windows 2008 r2 enterprise 64-bit servers setup with ms clustered , in windows system event viewer getting kerberos error follows -- how fix this?: the kerberos client received krb_ap_err_modified error server host/dc name. target name used host/dc name. indicates target server failed decrypt ticket provided client. can occur when target server principal name (spn) registered on account other account target service using. please ensure target spn registered on, , registered on, account used server. error can happen when target service using different password target service account kerberos key distribution center (kdc) has target service account. please ensure service on server , kdc both updated use current password. if server name not qualified, , target domain (domain name) different client domain (domain name), check if there identically named server accounts in these 2 domains, or use fully-qualified name identify server. can run setspn -l <accountname>. , se

my web service reference atl com dll(provide many interface access ms sql server). i create atl activex control call web service. when test iis server, problem appears: 1 when use win2003 (no server packs). activex call web serivce fast, less 1s. 2 when use win2003 (sp1).   activex call web serivce fast less 1s. 3 when use win2003 (sp2).   activex call web serivce slow, test same function cost more 3s. 4 when use win2008. got result same 3. why ? can me?   thank u all! chinese fairy tale for iis issues, please post problem in official microsoft iis site .   posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum

i have 2 windows 2008 r2 servers in production enviroment.  printers all  network printers , consist of hp laserjet 2035's , laserje 1022's.  these printers working fine 2 weeks ago.  got 2035's printing again changing hp driver laserjet 1320.  still can not 1022's print no matter driver use.  went far connect 1 of printers directly server through usb cable.  still doesn't print.  have removed reference 1022's registry , reinstalled , still didn't work.  when go print, job sent printer, says printing real fast , goes away nothing prints.  there no errors in event viewer.  out of ideas try. any apprectiated. hi, thanks post. before going further, confirm following points: 1. have tried separately install problematic printer on both server machines win2k8 r2 test? 2. does issue occur on laserje 1022 printers? 3. have tried print text file or test page for test? 4. have contacted hp support verify if there hardware issue? thanks, miles

hi, migrated our 2003 r2 ias 2008 r2 nps , calling station id field in gui has limit of 256 characters?! field in 2003 r2 ias has no limit, desperately need! have export config xml file, edit file , import back, nonsense!! there tool without limit? or know how can change config in more convenient way? hi, the calling station id have limited 256 characters, can use “pattern matching” instead of actual (exact) mac strings. the related information: nps server migration: migrating nps server http://technet.microsoft.com/en-us/library/hh831346.aspx nap enforcement exemption printers , other network appliances http://blogs.technet.com/b/teamdhcp/archive/2008/06/15/nap-enforrcement-exemption-for-printers-and-other-network-appliances.aspx ias authentication , authorization http://technet.microsoft.com/library/bb742382.aspx nps: user identity attribute http://technet.microsoft.com/zh-tw/library/dd197523(v=ws.10).aspx the similar thread: called-station i

hi, we have problem in production enviroment. in production environment have windows service developed in c#.net. windows service access microsoft word i.e winword.exe mail merging , sending documents persons via email , printers. service running sucessfully last 70 days. windows service becomes idle state when process first word document that means when it access winword.exe,  not getting exceptions also. client applied of latest updates microsoft office 2007, windows server 2003. the task manager has around 10 to 20  winword.exe processes. logic in windows service follows wordapplication =   reflectionhelper .createobject( "word.application" );     reflectionhelper .setproperty(wordapplication, "visible" , objfalse); worddocument =   reflectionhelper .getproperty(wordapplication, "documents" );     object saveformat = "dot" ;     reflectionhelper .setproperty(wordap

if our windows server 2008 r2 rds server fails, know default amount of time before windows 7 remote desktop clients recognize they're no longer connected , give prompt remote desktop session has ended? , can time period modified , prompt suppressed somehow? if possible, i'd happen remote desktop client exit within 10-15 seconds if can no longer contact server, , not give prompt session has ended.  is possible? hi, thanks post. if rds server failed, session connect server disconnect immediately. on client side, session freeze, after trying reconnect server fails, disconnect error prompt. , there no way control session when disconnect.  best regards, aiden if have feedback on our support, please click here aiden cao technet community support Windows Server  >  Remote D