KCC

i able query event log using log parser (or simular tool) , store query sql database - simular post: http://myitforum.com/cs2/blogs/maikkoster/archive/2012/09/28/compare-active-directory-computer-accounts-with-configuration-manager-resources.aspx the events want in forwardedevents log file when run query against database don't returned. have ideas how can query event log on windows server 2008 r2 server? cheers tom maybe can refer workaround: save logs .csv file, essy import sql database. regarding centralized management, can check if microsoft system center can achieve goal. “please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.” Windows Server  >  Windows Server G

hello everybody, i'm encountering issues add-in in outlook. dll file used signed certificate thawte. @ first certificate wasn't listed @ all, so i updated root certificates rootsupd.exe. start outlook takes more 13000ms (according eventlog) load add-in. the os win7, outlook 2010 in red environment without access internet.   hopefully s.o. can explain why takes long validate certified dll, since correct certificate listed in trusted root certification authorities.   best regards: gunnar hello brian, hello sean kind support. brian, thought have windows trying recheck certificate. it's not nescessary had deactivate option. sean: mentioning mechanism of crl. can disabled in advanced settings tab of ie internetoptions, called check publisher’s certificate revocation. turned off via gpo, outlook starts fast , smooth. app-in loads in 150ms. thank leading way solution! greetings gunnar

to provide access usb sticks/drives need grant local admin privileges users, there other way give users usb sticks access without being local admins? note: using windows server 2003 if windows doesn't know device (aka "driver installed"), expected behaviour. driver installation requires admin privileges. martin no not evil, if know doing: or bad gpos? , if bothers me - coke bottle design refreshment :)) restore forum design - user defined cascading style sheet! Windows Server  >  Group Policy

i set 2-tier pki.  installed sccm.  fortunately, working well.  unfortunately, since followed collection of step-by-step guides, not have full understanding of certs.  have several devices/webui (dell idrac, netvault, etc...) that give me annoying https warning.  i assume can use pki issue certificates these servers (all of them are intranet only) not sure how proceed.  guidance is appreciated.  thanks you must take root ca certificate 2 tier pki , inject trusted root certificate on each of devices warning occurs. steps in documentation device, there no 1 step installation devices brian Windows Server  >  Security

hi everyone, have client that's asking deploy web based application talks sql server securely internet , intranet use. thought on pu tup firewall dmz, install windows 2003 server on dmz has iis running on , accepts connections internet. forwards http/https traffic internal 2003 server running iis , sql on it. i'm looking best pratice procedure here. also, on how implement this. thanks hi,   it seems issue related iis, suggest discussing in our iis forum. best resource troubleshoot issue.   http://forums.iis.net/   tim quan - msft   Windows Server  >  Setup Deployment

hello, our director uses mac os connection remote desktop services on windows server 2012 std more 1 , half year. worked fine until last week when starts has problems printing. trying diagnose it and looks source of problems huge files generated remote desktop client. when hits print on 1 mb pdf file (latest adobe reader dc, redirected printer), generates file 105 mb in printer spooler. i have tried same action windows 10 machine under same user profile , works fine in opinion must problem in ms remote desktop client mac. yesterday have tried update macbook on latest os version (el captain) , uninstall , install remote desktop client , situation same. so last try disable easy print on terminal server without effect. this problem same of redirected printers. does has similar issue? lot help. hi ondrej, thank reporting issue. have @ 1 , keep updated through our release notes.  Windows Server

i downloaded windows server 2012 rc , trying install on uefi raid5 boot drive composed of 5 x 2 tb drives (8 tb available). amd fx-8150 cpu msi 970a-g46 motherboard using exact same hardware able install whs 2011 on single raid5 uefi boot drive. during installation process prompted msi raid driver , once provided see single 8 tb drive.  the installation of whs 2011 completed normally. i have not installed windows hyper-v server 2008 r2 sp1, initial installation screens correct me.  (i not see drive problem mentioned below.)  so believe should work. i under impression windows server 2012 might require uefi boot?  from looking @ iso provided microsoft saw bootx64.efi in efi boot directory. but when try install datacenter core version point of choosing drive , without providing msi raid driver see 5 of 2 tb drives listed individually.  this not happen either whs 2011 or hyper-v 2008.  (in cases don't see drives, after installing msi raid driver see single 8 tb drive.)

whenever non admin user tries change password (not expired) on rds server error: unable update password. value provided new password not meet length, complexity, or history requirements of domain. i have temporarily set password policy to: minimum password age 0 minimum length 8 password history 1 complexity requirement turned off (as confirmed net accounts) nla requirement turned off tried passwords like: edcfrg4%n$ still getting error.  can help? hi brian, whenever non admin user tries change password (not expired) on rds server error: unable update password. does issue happen users or 1 specific user? is user changing password within internal or external network? if it’s internal network, suggest ask user change password on workstation locally see whether works. if it’s external network rd web access deployed, may ask user change password via rd web access webpage. enabling rd webaccess expired password reset option in windows server 2012 http://soc

is possible configure existing/current active drectory users authenticate directory novell edirectory? i have few edirectory users have matching accounts in active directory , them able to authenitcate ad using edir password. not sure if ad can setup to perform authentication via edir using ldap. can it? it seems both novell , microsoft have products sync passwords, there seems cost involved... looking @ built-in soution or other possible solutions. any ideas? tia   hi,   if you’re using windows server 2003, can use services netware synchronize password between novell , ad. however, password synchronization can occur if passwords changed active directory. passwords synchronized when administrator performs of following administrative functions:   -           initial reverse synchronization -           user creation in nds or edirectory -           password changes in active directory   for more information, please refer following microsoft link: http://technet.micro

hi all,  i couldn't find general questions regarding dns know having managed lots of active directory there's bit of dns involved. having learned quite bit dns working active directory thought might see if there's has dealt such class of record before here. feel free set me in right direction if not place start. i wondering if there's proof or reason should believe web browsers chrome or firefox support http srv records? guy seems wanna indicate me: http://www.pantz.org/software/bind/srvdnsrecords.html one might want assume because since guy started admin career in 1999 must true considering led me these findings fact thought have 2 records , browser try 1 , go next if there's more 1 that's not case (in chrome anyway.) i've been told handful of people srv records "hard" , don't know building failover cluster of load balancers other way anycast addresses out of question me. i'd lucky ever # let alone gun history , not mentio

hi guys! where can find option in windows server 2003 r2 std set idle time unlimited login screen when using terminal services? have bunch of thin clients automatically connects our terminal server. login screen appears should on thin clients, if user doesn't enter login/password in about 2-3 minutes time, session time outs , throws back to thin client desktop. not nice @ all, want able see terminal server login screen @ times, no timeouts. note: have tried setting user won't time out terminal server session, not case. in case, it's before user logs on. in other words, it's login screen don't want disconnected. /nick it-support / sys admin hi, this setting best knowledge not configurable. the purpose of 2 minutes time out save resources , in - @ least in 2008 design. your option here might autlogon if can workaround. citrix technology professional, pubforum founder http://www.pubforum.net

to prevent user's automatically connecting rogue access points same ssid , having ad credentials stolen, enable server validation option our wpa2 enterprise wireless using user authentication. which certificate template should use create server validation certificate? hi, >>which certificate template should use create server validation certificate? if using nps radius server, may ducplicate ras , ias certificate template , use enroll certificate nps server. for detailed information, please refer link below: https://technet.microsoft.com/en-us/library/cc754198%28v=ws.10%29.aspx?f=255&mspperror=-2147217396 best regards. steven lee please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows Server  > 

i trying find out see mac address blocked when deny filter enabled , mac addresses added.  i have looked in microsoft dhcp service activity log (dhcpsrvlog-%day%) , see event id's 15 (a lease denied) , 33 (packet dropped due nap policy).  am looking in right place such things , if so, event id 15 or 33 or another? thanks in advance. hi jnlawrence, based on knowledge, event 15 need. hope helps. jeremy wu technet community support Windows Server  >  Network Infrastructure Servers

completely new , trying run simple script take source file , copy\rename new location. sample csv: orginalfilename,newfilename g:\academy\client images\374.jpg,e:\images_renamed\t00002us01_374.jpg g:\academy\client images\374-1.jpg,e:\images_renamed\t00002us02_374-1.jpg script: import-csv e:\scripts\copyimg.csv -delimter "," | % { copy-item -path $_.orginalfilename -destination "e:\images_renamed\$($_.newfilename) error: copy-item : given path's format not supported. @ line:1 char:54 any point me in correct direction help. thanks! ugh, figured out! care, following worked. import-csv e:\scripts\copyimg.csv | % { copy-item -path $_.orginalfilename -destination "$($_.newfilename)" }  Windows Server  >  Windows PowerShell

does know whether if possible install truecolor part of ms webcam studio software only? i'm developing application using ms studio webcam , don't want install entire software package. want webcam , functionality of truecolor software/technology can adjust shutter automatically camera works better in dimmed lights. the reason why don't want install entire package: 1) requires internet connection (not customers have , camera not going used communicating through internet) 2) software can't installed in silence or haven't @ least figures out how 3) disk space issue , installation time of webcam software   br ahr       hi,   did use microsoft lifecam? if so, recommend further support in corresponding community can qualified pool of respondents. understanding.   for convenience, have list related link followed.   support microsoft mouse, keyboards, lifechat, lifecam & more http://support.microsoft.com/ph/7746

hi everyone, i reading lot best practices storage distribution regarding hyper-v in order best perfomance. i need setup host 3 vm's client (35-to 50 user environment) , read seems need following: 1drive host operating system guests: dc: 1 ide drive os, 1 scsi logs+sysvol, 1 scsi page file file server: 1 ide os, 1 scsi for page file rds:(session based desktop deployment) 1 ide os, 1 scsi page file. in addition need separate scsi drive old custom application , additional scsi disk general data. all of above result of endless reading , wondering: small environment needs 10 disks?? , raid? would make difference if raid 10 4 drives (host os separate on raid1) , put each vm on different partition? create different partitions data , applications , different partitions page files? thanks. hi everyone, i reading lot best practices storage distribution regarding hyper-v in order best perfomance. i need setup host 3 vm's client (35-to 50 user environment) , r

i started using powershell couple of months ago, have grown love it. want share 1 useful thing i've been doing it: using of cardinal features write code in other languages. in short, use piping, intuitive enumeration, , expandable strings generate lines of repetitive code slight variations. 2 frequent examples variable declarations , case statements. key points: use implicit array creation. to generate numbered for-loops, whether or not use counter variable to bundle list of inputs, strings use foreach commandlet use expandable strings use clip utility pipe output straight clipboard example one : declaring bunch of constants in actionscript (flash) class: $i = 0; "new_game" , "new_level" , "wait_for_close" , "title" , "instructions" , "game_over" | ` foreach { "public static const state_system_$($_.toupper())`:int = $i;" ; $i ++ } | clip output (already in clipboard):

hi ng, i have question clients brings own routes host-routes on our ts server. appears if client connect through site connect cisco vpn router. sites bound mpls haven't behavior. instance: active routes: network destination        netmask          gateway       interface  metric           0.0.0.0          0.0.0.0     172.21.6.242       172.21.6.2     10         127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1        172.21.6.0    255.255.255.0       172.21.6.2       172.21.6.2     10        172.21.6.2  255.255.255.255        127.0.0.1        127.0.0.1     10    172.21.255.255  255.255.255.255       172.21.6.2       172.21.6.2     10     192.168.44.55  255.255.255.255     172.21.6.241       172.21.6.2     10    192.168.125.13  255.255.255.255     172.21.6.241       172.21.6.2     10    192.168.125.45  255.255.255.255     172.21.6.241       172.21.6.2     10    192.168.220.80  255.255.255.255     172.21.6.241       172.21.6.2     10       

hi every one! i'm using windown server 2012. want config shutdown clients @ 5:00pm gpo. configured solution below: 1. create new gpo ( checked  enforced , link enabled) 2. click right new gpo edit.--> computer configuration > preferences > > control panel settings > shedule tasks 3. trigger  c:\windows\system32\shutdown.exe arguments -s -t 45 4. schedule time shutdown @ 5:00 pm but @ 5:00 pm, don't know server system ( dc, pdc, sql, ....) shutdown clients????? want shutdown clients not shutdown server. can tell why , show me solution? all. the gpo created, have linked to? have linked gpo ou client machines located? server/s shutdown located in same ous? Windows Server  >  Group Policy

we have such configuration: 2  external networks. lan , wifi. in dmz have 1 server 2008r2 rd gateway , web interface remote apps installed. in internal network have 1 ts server , 1 ts + session broker both server 2008r2. remoteapp published wi. using self signed certificates. test (new) farm. when user try connect form wifi via rd gateway ok. when user try lan error : "your computer cannot connect remote computer because error occurred on remote computer want connect to. contact network administrator assistance". but when user click icon second time starts normally.   im not network administrator network resp. peoples both network ports opening similar (to gateway 443 gateway inside dns, ldap, kerberos, rdp). then try decrease security level on rdp protocol rdp , low. , starts work normally.   its mystery here second shot user can run application ext. lan network. can 1 this?   many thx. in advance. can please check event log messages on rd gat

couple months ago, microsoft released update kb941693 (ms08-025: vulnerability in windows kernel allow elevation of privilege). after installation, every windows 2003 server i manage no longer allows excel 97 users save excel files them. users of later versions of excel appear unaffected, through unfortuntely office 97 our office workhorse. (also, far can tell, word 97 files save fine.) when attempting save file, users are presented long pause , microsoft excel error window stating, "save not completed. file rename failed. retry?" they were given option retry or cancel, , have cancel , save file locally until removed update kb941693 server. result of failed save, excel dumps randomly named, extensionless temp file in same server directory excel file. have not seen reporting issue anywhere, , have been looking on , off while now. issue repeatable accross every windows 2003 server , have not seen listed under "known issues security update". is else experiencing same 

muchachos del foro: les cuento un problemón que me surgió: resulta que el servidor dhcp no está dando ip de mi windows 2003 server enterprise edition hice lo siguiente: reinstalé el servidor dhcp desde administrador de servidor lo activé y configuré devuelta el ámbito y nada.   por eso la pregunta, ¿se pueden capturar negociaciones ver si el servidor dhcp funciona como activo (está iniciado y autorizado pero no da direcciones de ip)   gracias por su tiempo, lucas hola, esta autorizado como dhcp de tu active directory tambien? como has configurado el pool de direcciones? que otras opciones tienes configuradas para ese pool? como sabes que no da direcciones ip? quizas son las estaciones las que no las estan recibiendo... yo empezaria verificando que nivel de red ( firewall sobretodo ) no tengas filtrado o bloqueado el puerto 67/68 udp que es el que utiliza el servicio dhcp. revisa y comentanos. saludos mcitp: server administrator (windows server 2008)

i trying run vmware converter , set new virtual machine on windows 2008 64bit r2 server. vmware converter uses port 443. cannot seem open port 443 no matter have tried. can assist?  i have installed world wide web service i have run advfirewall command to open port 443 i have disabled firewall on windows server i have added rules firewall allow access , port 443 i have added telnet server on windows box i can telnet port 445, when try connect port 443 cannot open connection.   i appreciate matter.     i think should ask question in vmware forum instead of here. Windows Server  >  Network Access Protection

the ability administer windows 2008 failover clustering improved on windows 2003 failover clustering (single copy clustering exchange 2007 system engineers).  since intent post number of subsequent blog entries on windows 2008 failover clustering thought offer introduction several of administrative consoles windows 2008 failover clustering referenced @ future time.  in entry not using windows powershell failover cluster administration.  intent offer insights powershell @ future time. i outline complete installation of 2-node windows 2008 failover cluster several blog entries planned coming weeks steps long, not point of being worrisome.  find 30 screen captures in post 'just right' working professionals, consultants, system engineers , architects.   figure 1 - using windows 2008 x64 enterprise edition 2 node failover cluster introduction.  analysis of screen captures confirms use of 2 nics (public , private) on 2 separate ip subnets.  addit

i reviewing windows event found there no event id=4625 , logon type=2 (interactive logon) since anlayse failed logon normal users. lateron, have enabled audit policy in active directory gpo follow: audit account logon events - success/failure audit account management - success/failure audit directory service access - failure audit logon events - success/failure audit object access - success/failure audit policy change - success/failure audit privilege use - failure audit system events - success/failure audit processing tracking  - no auditing but after few days, still cannot see events, 4625 logon type=3 can found. did miss steps or wrong? angus. hi angus, logon type 2: interactive. user logged on computer. used logon @ console of computer. type 2 logon logged when attempt log on @ windows computer’s local keyboard , screen. if want find type2 event on dc, need perform local logon, example, use domain admin account log onto 1 dc. in scenario, please try enab

hello sir, i m naishadh shrimali, i have windows 2003 server.i have problem regarding decreasing space in drive c.. when start it sowing 10 gb free..but after decrising 00 mb.way problem occoured..pls hepl me diskspace problem used misconfiguration - e.g. on sql server keeping database full recovery mode on developer machines not backed up, etc. anyway - can safely remove files in c:\windows\temp c:\windows\softwaredistribution\download you can use 3rd party tool display folders occupies diskspace: http://www.techsupportalert.com/best-free-disk-space-analyzer.htm might identify, what's wrong m. Windows Server  >  File Services and Storage

i have following in security log: code integrity determined image hash of file not valid. file corrupt due unauthorized modification or invalid hash indicate potential disk device error. file name: \device\harddiskvolume1\windows\system32\drivers\tcpip.sys i assume refers c:\windows\system32\drivers\tcpip.sys i tried right click , selected restore previous versions , system said there weren't any. what do now? while doesn't sound hyper-v issue, i'll try...is vista?  if so, try system update: http://support.microsoft.com/default.aspx/kb/952709  you try going sp2 (recenly released). ensure driver file signed well... hope helps, --ryan ryan sokolowski | mct, mcitp x3, mcts x8, mcse x2, ccna, ccda, bcfp Windows Server  >  Hyper-V

hi. have windows 2003 server (all sp2), based forest 1 parent , 1 child domain set up. there 2 dc servers global catalogs (gc) in parent domain, , 1 dc/gc in child domain. within ad sites , services can replicate on parent domain (between parent servers) via default-first-site-name/servers/ntds not child domain parent servers. these events, 40960 (lsasrv) logged periodically: the security system detected authentication error server ldap/dc_server.child.domain.com/child.domain.com@child.domain.com . failure code authentication protocol kerberos "there no logon servers available service logon request.(0xc000005e)". using 'netdiag' on dc in each domain, results marked 'passed'. using 'dcdiag', (everything after passes):  testing server: default-first-site-name\dc_server     starting test: connectivity        ......................... dc_server passed test connectivity ing primary tests  testing server: default-first-site-name\dc_server     starting t

don’t know why never saw setup asking product keys while [ (get-wmiobject -query 'select * softwarelicensingservice').oa3xoriginalproductkey ] returns null slmgr /dlv returns 7fvdg. last keys shared these two... datacenter core               b69wh-prnhk-bxvk3-p9xf7-xd84w standard core                   v6n4w-86m3x-j77x3-jf6xw-d9prv new ones? yup hi, the 2 product keys mentioned above ones can find: announcing windows server insider preview build 16267 https://blogs.windows.com/windowsexperience/2017/08/22/announcing-windows-server-insider-preview-build-16267/ you may more insights other forum community members. best regards, amy please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  > 

i got single machine on experience issues when try access file share. outbound smb connections affected. building initial connection fileshare takes long time (often more 5 minutes). once connected, there no issue. issue not exists. i've found out causing behavior. there third party tool running network discoveries. once stop network discovery tool smb sessions act normal. i'm not sure why occurring. i'm investigating why tool blocking outbound smb traffic. Windows Server  >  File Services and Storage

  hi   i wondering if it's possible have 2 enterprise certificate authorities setup on 1 domain. i have implemented enterprise root ca, using microsoft script, issue server certificates our ias servers. simple special purpose ca formed part of microsoft solution securing wireless lans peap. works , don't want touch it. need implement more general purpose pki solution - install enterprise root ca in our domain? have single forest single domain.   thanks help   martin i have run number of clients have done accidently, can done.   however, having said that, should expand functionality of original ca include new set of techincal requirements or create master pki , roll in old functionality new infrastructure.   managing 2 sets of crls , 2 cas going increasing administrative difficulty.  also, should have offline root each of these cas - managing multiple offline ca roots going increasing cost.   i work hard in short term save kinds of difficulty in lon

hi all, i have .bat file in task scheduler exits code (80) runs daily. task executes when run manually, service account used run task added part of admin group in local system. i tried reschedule/recreate task didn't much. i have created dummy task testing purpose running fine.  system windows server 2003 sp2. let me know if need enable/disable permissions/services. any regarding highly appreciated. hi ntejas2k,   thank posting question here.   according description, understand bat file in task scheduler exits colde 80.   to resolve issue, need increase desktop heap non-interactive window stations increasing 3rd parameter shared section. please follow steps below:   1. @ command prompt, type regedt32.exe start registry editor. 2. in registry editor, locate following registry key:     hkey_local_machine\system\currentcontrolset\control\session manager\subsystems 3. in right pane of registry editor, click windows. 4. on edit menu, click modify. 5. in edit string dialo

experts, i need bit of advice cannot obtain asking friend, mr google. we set 2 kms 2012 servers, 1 @ each of 2 physical sites have, not want affect existing kms setup until d-day. am able complete installation , setup of kms server standard have not "live" until want be? or act of setting make live automatically? essentially, want ideally point flip switch , 2008 boxes hand on 2012 boxes.  is possible? thanks what problem foresee having both 2008 , 2012 active @ same time?  should able co-exist without issues.  when determine 2012 activating software properly, turn off 2008 servers. . : | : . : | : . tim Windows Server  >  Windows Server 2012 Setup

this resource default user profile  http://support.microsoft.com/kb/973289/en-us?wa=wsignin1.0  but have questions. i've followed these procedures on many new installations , work great.  i'm not type moan , complain copy to... button doesn't work, understand why procedure exists , why no other supported. as said i've used it, setting default user profile on stand alone workgroup server prior putting production. i have need update default user profile on 3 domain servers in production , running remote desktop services in server farm.  ultimately i'm going use copy to... , copy network @ \netlogon\default user.v2 need 1 machine on server farm. but believe need sysprep live domain machine? thank you. well, issue installation of office didn't take place until these servers , running.  i had issue couple of existing roaming profiles there when installed office.  i ended user buffalo1 having default save locations of c:\users\template (which local a

i have script right goes through , deletes list of directories (old users home directories).  fine , here code sample: get-content $usersfile | foreach-object { $pathcheck = test-path "$basepath\$_" if ($pathcheck -eq $false){ write-host "'$basepath\$_' not found" logwrite "'$basepath\$_' not found" } else { remove-item "$basepath\$_" -recurse -force -verbose write-host "$scriptcontext has removed '$basepath\$_'" logwrite "$scriptcontext has removed '$basepath\$_'" } } can see i'm using "remove-item <path> -recurse -force -verbose" delete targeted folder , of it's contents.  while working, seems take longer delete single large folder if right-click on large folder , delete permanently.  there faster way delete directory , of contents? when "large" folders, how large large? maybe addi