KCC

i purchasing new hardware wse 2012 r2 server need configure before installing wse. 1 example nic teaming, new box has 4 nics , want team them redundancy , speed. cannot set teaming until os in place (unless there way of doing during wse setup). setting file space of 4 drives raid 5 array. is possible install wse on configured 2012 r2 standard box , promote after have accomplished these tasks? thanks, bob hessenauer hi bobhessenauer, could clarify question? not quite understand question “and promote after have accomplished these tasks?”, not use nic teaming, if want improve deploy speed can use multicast. more information: windows deployment services getting started guide windows server 2012 http://technet.microsoft.com/en-us/library/jj648426.aspx wds multicast server http://technet.microsoft.com/en-us/library/cc726564(v=ws.10).aspx windows server 2012: master windows deployment services http://technet.microsoft.com/en-us/magazine/dn163597.aspx how i:

hi in domain controller appear service called "pgnpxhfeb" wich terminated errors. domain controller frozen. "el servicio pgnpxhfeb terminó con el error: no se puede encontrar el módulo especificado. " the server windows2003 32b its virus please there not type of service default mentioned in post restart computer in safemode , scan. downloand melicious worm removal tool here.   http://www.microsoft.com/downloads/en/details.aspx?familyid=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en Windows Server  >  Windows Server General Forum

we created new site in ad new location, , prepped domain 2008 r2.  dcpromo'ed new server.  i'm able see server in sites , services in new site, if view properties of ntds settings it's replicating 1 of pre-existing domain controllers, replicate empty. ideas? if login other domain controllers , view connections 1 of primary domain controllers, can see it's "replicating to" , "replicating from" new domain controller.  have feeling hasn't sync'ed yet. Windows Server  >  Directory Services

we have windows server 2008 r2 remote desktop in "per user" licensing mode. user goes remote desktop web access , starts exel 2010 remoteapp on server. user clicks on items in ribbon display drop down menu (for example "sort & filter") or right-clicks in cell. many times menu briefly displayed , disappears again, making impossible use. problem occurs word 2010 well. problem more occur if user has multiple remoteapps started in same session. this problem not occur in regular remote desktop sessions same server. when got reports of users on windows 7 sp1 suspected kb2592687 update, , sure enough, when uninstalled update problem no longer occurs. noticed our windows 8 users have same problem. there appears severe incompatibility between rdp 8.0 client , rdp 7.1 server when using remoteapp. has else noticed problem and there workaround other upgrading our server windows server 2012? gerard have same problem, haven't got workaround it. belie

hi there, i've created following function , created following parameters go it.. function start-precheck7{    [cmdletbinding()] param(    [parameter(mandatory=$true,position=1)]    [string]$filepath, [string]$computername ) using parameters i've got following lines of script - get-itemproperty $filepath | select length | foreach-object {[math]::round($_.length / 1mb,2)} and.. get-wmiobject -computername $computername win32_logicaldisk -filter "deviceid='c:'" | select freespace | foreach-object {[math]::round($_.freespace / 1mb,2)} the $filepath line runs expected , $computername seems run but.. script have wont run if don't specify $computername want optional parameter may want run scrip on local machine. could or advise tips make more effective any questions please ask.. thanks function start-precheck7{ [cmdletbinding()] param( [parameter(mandatory=$true,position=1)] [str

i have been told ask question asking in link below here. https://social.technet.microsoft.com/forums/windowsserver/en-us/32a9acc0-09b8-440c-ac7c-5ea83f1ca2f1/automaticlly-show-details-when-connecting-to-remote-dekstop-machine?forum=w7itproui there has been several occasions when have waited remote window connect machine until mstsc window disappears no message.  each time, find due message have been rectified if had noticed press "show details" button (sometimes, greyed out @ beginning of connection). is possible have expand automatically when available, , how accomplished? below screenshot of issue having. thanks hi keith, have try use latest version of rdp 8.1 better functionality , feature. can download, install , check result. http://support.microsoft.com/kb/2830477 checked in environment , seems it’s default , can’t change option elsewhere inside server setting or policy setting.  hope helps! thanks. dharmesh solanki please remember

hi,  i'm having trouble connecting readynas 2100 via iscsi windows server 2008 r2's iscsi initiator. error "authorization failure" in sever 2008 r2 when trying connect.  i've set-up access control , set iqn iqn.2010-03.readynas2100:store on readnas. i've tried setting iqn.2010-03.org.uk.xxxx:readynas2100, initiator name in windows showing wrong (it's showing iqn.2010-03.readynas2100:store when trying connect).  chap isn't set-up, should settings configured haven't configured? i've asked question on readynas forums also, have had no response.  thanks much, dan you may need re-create initiator. post may help: iscsi authorization failure  - http://www.chicagotech.net/netforums/viewtopic.php?f=1&t=13582&p=19161#p19161 bob lin, ms-mvp networking, internet, routing, vpn troubleshooting on http://www.chicagotech.net how setup windows, network, vpn & remote access on http://www.howtonetworking.com

what work gc in single domain model ldap process queries in single domain/multiple sites/multiple dcs? 1) here  talking single domain scenario..what use of gc in case. 2) gc required user log on in single domain? logon process in single-domain forest in single-domain forest, domain controllers can service logon requests, including upn logons, without requiring global catalog server. however, domain controllers configured global catalog servers can respond ldap traffic on port 3268. source:  http://technet.microsoft.com/en-us/library/how-global-catalog-servers-work(ws.10).aspx 3)can please explain seach process gc nad ldap involvement?   refer articles gave. 4)can please give scenarios gc requirement in single , multidomain environments? all details given in article in first link , related links.   this posting provided "as is" no warranties or guarantees , , confers no rights. microsoft student partner 2010 / 2011 microsoft ce

hi all,   i facing issue while renew windows 2003 ca certificate , gives me below error the system cannot find file specified. 0x80070002(win32:2) please advice me how resolve issue   regards jeevan jeevan singh hi all,   i facing issue while renew windows 2003 ca certificate , gives me below error the system cannot find file specified. 0x80070002(win32:2) please advice me how resolve issue   regards jeevan   jeevan singh Windows Server  >  Security

hi there, the problem started when have promoted server domain controller/ dns server. the share folder cannot accessed, ip \\ipaddres\sharefolder but can access via server name as \\servername\sharefolder previously working fine promoted server dc, can remote desktop , adds working fine. when want access network drive via ip, receive network error, windows cannot access path , access denied. windows firewall disabled.   i can access via name without problem hi renafatma, >>the share folder cannot accessed, ip \\ipaddres\sharefolder can access via server name please try ping server name , check if ip of server name same ip entered. >>the problem started when have promoted server domain controller/ dns server. did server install 2 adapters? >>windows cannot access path , access denied. please check if there error event on event viewer. best regards john please remember mark replies answers if help. if have feedback techne

hi i work in @ small company.  have domain consisting of single dc , 50 workstations.  mix of xp sp3 , win 7.  have been attempting apply new policy rename , change password of local administrator account.  of computers in domain updated.  win 7 machines , half of xp machines.  have 10 xp machines claim have updated policy, still using default administrator account.  spent last several days trying find pattern, have not been able find causing this.  ran gp result on 1 of working xp machines , 1 isn't working.  identical (excepting computer name etc...) except component name section.  machine implements policy has 2 other components:  group policy local users , groups , software installation.  created new policy enabled logging group policy local users , groups component shown on site http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx the working machine creates log info.  other machine says in report

i want configure gpo allows admins install applications under: microsoft appliations (all) mcafee symantec how achieve configuration using gpo p.s: using windows server 2008 r2 standard edition you create allow policy group of users conditions specific publisher, make 3 different policy 1 each , mcafee symantec , microsoft. have @ link, give bit of detail on it, http://h30565.www3.hp.com/t5/feature-articles/harness-the-power-of-applocker-locking-down-applications/ba-p/382 please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. if find answer helpful please "vote helpful" Windows Server  >  Group Policy

hi guys   we use dfs in our company. can following done in dfs. lets have domain namespace \\domain\finance\folder (folder contains 5 folders) if users in main site click on folder must see contents ie. 5 folders if user in 1 of regions go \\domain\finance\folder  they must able see maybe 2 folders , 2 folders must replicate specific site i had , looks cannot done - can confirm or please tell me i'm wrong :) thanks in advance   hi, i dont think possible dfs. can enable access-based enumeration on dfs. access-based enumeration filters list of available files , folders on server include requesting user has access to. this feature allows users of file servers list files , folders have access when browsing content on file server. eliminates user confusion can caused when users connect file server , encounter large number of files , folders cannot access.   how implement windows server 2003 access-based enumeration in dfs environment http://support.microsof

hi, we midsize business on 25 users. use windows sbs 2003 standard on our server. outdated software. migrate windows server 2012 standard edition. know there may not solution allows migrate directly. machines 32-bit systems. how feasible migrate , run existing applications , 32-bit machines on windows server 2012 essentials , windows server 2012 standard? please , suggest find guidelines without affecting regular work? hello, for sbs please ask experts in http://social.technet.microsoft.com/forums/en-us/home?forum=smallbusinessserver best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Migration

hi, we found out 1 of our customer´s rds server (server 2012 non-r2) unable updates microsoft windows update or wsus. svchost.exe running 1 core @ full load, windows update shows searching updates never stops we did test , installed blank server 2012 non-r2, windows updates work fine add remote desktop services windows updates work fine add desktop experience feature windows upadate broken described the same error eccors when using wsus offline update tool (http://wsusoffline.net/) any hints? thanks andreas hi, how's workload on server? may check system resources via task manager. i suggest reset windows update components see whether issue persists: how reset windows update components https://support.microsoft.com/en-hk/help/971058/how-do-i-reset-windows-update-components if issue persists, please check windowsupdate log under %systemroot%\windowsupdate.log further troubleshoot issue. more information you: windows update error code li

here want (have do): in order use adfs 2.0 have upgrade active directory 2003 active 2008: - have 3 domains managing , 4 sites: a) domain.com = ny b) domain_1.com = va c) domain_2.com = ma - ny, ma, va , nc d) nc site site connection dc @ site my question is, can upgrade ny (primary site , dc) ad 2008 while other sites still function @ ad 200? in addition, have windows 2000 servers if have them in environment? any guidance matther appreciated. thank you hello, my question is, can upgrade ny (primary site , dc) ad 2008 while other sites still function @ ad 200? when upgrading, have run: adprep /forestprep which prepares forest ad ds 2008 adprep /domainprep which prepares domain ad ds 2008 adprep /rodcprep if planning add rodcs. also, if want avoid having failures in ncsecdesc in dcdiag tests, have run it. note prepare ad forest rodcs. as see here, there updates made @ forest level , such changes replicated dcs. however, can prepare root domain add

if have other active directory already. i want share new active directory active directory. can it? if can it. have link reference? thank much. not sure mean "share" trust can established between forests/domains, have at: http://technet.microsoft.com/en-us/library/cc736874(v=ws.10).aspx enfo zipper christoffer andersson – principal advisor http://blogs.chrisse.se - directory services blog Windows Server  >  Directory Services

please guide me on how assign administrator level of access in group policy. i need assign administrator level of access 1 perticular user in user configuration of group policy. currently i've added user on security group-->administrators on computer configuration, reflecting on desktops. so, guide me on how assign administrator level of access in user configuration on perticular group policy. thanks, regards, karthik. karthik j.v prashanth, yes, 1 user should have administrator level of access , i've added user on restricted group in group policy in computer configuration. all want know is, can same in user configuration in group policy? so, ever user logs in should administator level of access. currently, desktops shows perticular user in administrators group, don't want :) thanks again, regards, karthik karthik j.v karthik,  afaik,   computer side setting. nothing user configuration. dont think can in user configuration.

i have 50 suite pcs installed redirected start menu lots of software installed, have 30 laptops  have installed, there way of preventing laptops loading redirected start menu, though same user logs on both?   if apply gpo containing user settings computer , enable "computer configuration/administrative templates/system/group policy/use group policy loopback processing mode : replace" user settings in gpo overwrite settings in users other gpos. so, if apply gpo above setting laptops, , create a user folder redirection setting in same gpo redirect the start menu to 'basic - redirect everyone's folder same location' , target of 'redirect local userprofile location' should achieve correct results, setting replace redirect setting users policies.  i'm not 100% sure option 'redirect local userprofile location' exists in older versions of group policy, type in location of '%userprofile%\start menu' or somesuch same effect. let

i considering using wmc dvr dish network tv.  don't have tv tuner notebook. thinking of using s video connect notebook tv.  will connection work or need tv tuner , different set up?  if so, how set up? hello,   i highly suggest post in our windows vista forum. people there have better knowledge on windows media center related questions , may share useful information you.   http://forums.microsoft.com/technet/default.aspx?forumgroupid=204&siteid=17   thank cooperation.   best regards, chang yin Windows Server  >  Windows Server General Forum

hello,  i struggle with  try catch sequences,  where failure ? thank comments erhy #test_path_in_registry function regkeyhklmexists ( [string]$regp ) {   $found = $false   $acceptederr = $false   try {     $private:o = get-item -path $regp # why error messages when in try sequence?   }   catch [pathnotfound] { # exception never catched in tests     out-host -inputobject ( 'catched: pathnotfound' )   }   catch [system.security.securityexception] { # exception never catched in tests     out-host -inputobject ( 'catched: system.security.securityexception' )   }   catch { # catched if 1 catch statement    if ( 'pathnotfound' -eq $_.exception.gettype() ) {      $acceptederr = $true      out-host -inputobject ( 'not found' )    }    elseif ( 'system.security.securityexception' -eq $_.exception.gettype() ) {      $acceptederr = $true      out-host -inputobject ( 'access denied' )    }    else

the software company requiring update insist use web installer machinces. claim version provided in windows update services not include extended package. disagree because installs client profile , extended package. example on windows xp pro 32 bit machine, updates approved through wsus kb982670(client profile) , kb982671(extended). here link web installer http://www.microsoft.com/downloads/en/details.aspx?familyid=9cfb2d51-5ff4-4491-b0e5-b386f32c0992&displaylang=en to me web installer looks universal link detects operating system , downloads/installs correct version. looks same me. correct? the extended package includes client profile. necessary install one, or other, on system. after installing extended package, client profile should reported not applicable. as correctly note, kb982670 client profile , kb982671 extended (read: complete) package. a simple observation of "file information" kb982671 lay question rest. in wsus server, note contents of cab fil

we have windows server 2003 use fileserver. keep our software license files on there , pc's need access info pointed directory on file server. there no major application on server or web apps need worry about. can go directly windows server 2012  , please advise! http://technet.microsoft.com/en-us/library/dn303416.aspx lists options.  no direct upgrade 2003. .:|:.:|:. tim Windows Server  >  Windows Server 2012 General

hi, i have activex control (safeview) appears require it's installed each user logs in - have logged in admin, installed it, tested website requires it, logged out, , asked standard user login , test, , website asks activex control installed again. so setup group policy install safeview.msi activex user config > software installation. when standard user login, software install fails following error: event type: error event source: msiinstaller event category: none event id: 10005 date:  13/12/2011 time:  11:56:49 user:  domain\test.user1 computer: testpc1 description: product: safeview -- administrator can run setup event type: error event source: application management event category: none event id: 102 date:  13/12/2011 time:  11:56:49 user:  domain\test.user1 computer: testpc1 description: install of application safeview policy swi - safeview deployment failed.  error : fatal error during installation. i thought group policy sof

i'm working on powershell script , getting above error, not understanding. appreciated! $down = "c:\script\log\down-hosts.log" $computers = get-content "c:\script\list\computers.txt" $sourcefilename = "source_file.csv" #ftp server $ftp = "sftp://servername" $user = "user" $pass = "pass" $webclient = new-object system.net.webclient $webclient.credentials = new-object system.net.networkcredential($user,$pass) # create empty log file down hosts (overwrite if exists) new-item $down -type file -force foreach ($computer in $computers) { if ( test-connection -computername $computer -count 1 -erroraction silentlycontinue ) { write-host "$computer up" write-host "uploading \\$computer\c$\ups csv exports\$sourcefile..." $sourcefilepath = "\\$computer\c$\ups csv exports" $uri = new-object system.uri($ftp+$computer+"_"+$sourcefilename) $webclient.uploadf

hi i trying achieve complete roaming user profiles environment. typical scenario user logs-in on pc-1, creates new text document (for instance) in his/hers documents folder , logs-out. logs-in on pc-2 , able view new text document (created on pc-1) in documents folder. preferable if profile travels him pc pc. is, if instance changes desktop background on pc-1, these changes effective on pc-2 well, , forth. currently server (with complete ad-dc) setup follows: == folder created locally (on server) user james (\\server\james) - shared - james has 'full control' of shared folder, , no 1 else. == user james added ad-dc - attribute: 'profile path' set shared folder - \\server\james == home folder attribute on james profile set local. unfortunately when log in account on 1 of pc's (added domain), receive notification stating logged in 'temporary account'. also, have picked creates account locally under c:\users\temp (and removes data account @

there areas of group policy locked down.  one example lan manager hash value.  is there way unlock them? i have tried change lm hash in registry setting reverts enabled on reboot. my goal here disable "do not store lm hash value" , disable smb signing make domain compatible dos based machine tools.  i realize i'll take security hit here, small (1 server, 40 workstations) private network.  please advise. thank you hi richard, before going further, worth noticing known there security risk if disable do not store lan manager hash value on next password change and smb signing. if have enabled the do not store lan manager hash value on next password change from active directory group policy, local policy of setting greyed out. to check out, may run command gpresult /v >c:\gpresult.txt see in gpo policy has been enabled, , can disable setting in gpo. regarding setting, following article may referred information. network security: not store lan mana

hi, i'm looking guide configure snmp settings servers via gpo? servers have role installed, need policy deploy. i assume via gpp, can please describe settings need apply this? i need apply following in gpp - if somneone can descrive in gpp need configure this: - community string (read only) snmp hosts community name trap destinations contact location services > ideas how can remove 'key'/folder within registry via gpp?   simply chose "delete" , not enter value name.   martin mal ein gutes buch über gpos lesen? no not evil, if know doing: or bad gpos? , if bothers me - coke bottle design refreshment :)) Windows Server  >  Group Policy

i create new class in active directory resource managment.  need include projector, conference rooms, , speakers.  can provide steps.  have opened active directory schema, , clicked create new class.  i'm prompted enter x500 id, parent class, , class type.  not know how fill these in. robert arroyo hello robert,   here detail step step guide on adding schema class http://technet.microsoft.com/en-us/library/bb727064.aspx hope helps, isaac oben mcitp:ea, mcse,mcc view mcp certifications Windows Server  >  Directory Services

hi, the goal vdi infrastructure able move desktop vm's 1 node other when have patch server , move vm's patch other server without downtime user. kicker use differencing disks feature vms. possible or can done? otherwise have disrupt users , kick them out until reboot server. thanks dejan it depends on differencing disk stored, right? store on csv (or smb3 file server if 2012) , nodes have access resources , machine fails on , back. the differencing disks on local storage lose that. brian ehlert http://itproctology.blogspot.com learn. apply. repeat. disclaimer: attempting change of own free will. Windows Server  >  Remote Desktop Services (Terminal Services)

i don't know if i'm missing simple thing or if there's major problem server install.... basically, share it's database files, sage installs special 'connection manager' mysql. listens on port 13531 , opens additional connections on ports 13540 - 13575 (that range may vary). that (and having file , print sharing) should that's needed client pc running sage 50 accounting open company file. so on server, right-click network icon, select "open network , connection center", click "windows firewall" , configure rules needed of course, if worked, wouldn't here. the "help protect pc windows firewall" dialog has notice reads: "for security, settings managed system administrator." checking that, find have firewall control through: "administrative tools", "local security policy", "windows firewall advanced security". here have almost, not quite, same controls other dialog seems higher p

hello all i need shutdown of domain controllers in domain extended period of time , i'm wondering if there worry about.  i aware tombstone issue when shutdown 1 domain controller, want sanity check expect if domain controllers shut down. thanks p.s. purpose domain exchange, no client pcs or servers.  exchange server shutdown. heriberto contreras do if setting 0 make infinite? >>> don't think so,please don't set 0 :-))you should modify long time interval..(so plan that.) also check article modify tombstone lifetime domain; https://technet.microsoft.com/en-us/library/dd378821%28v=ws.10%29.aspx?f=255&mspperror=-2147217396 and should take full backup of pdc before process. this posting provided no warranties or guarantees,and confers no rights. best regards burak uğur Windows Server  > 

hello, i'm facing issue permission set on drive security group readonly permission. permission on drive(g) of server. now, whenever create folder under drive, permission inherited permission set on drive. it make work bit tedious whenever create folder security group inherited , have manually remove inheritance permission on each folder. is there way can turn off inheritance permission object being created under drive(g)? thanks, hi, as have permission edit ntfs permission settings, modify permission of drive g restrict inheritance? such change permission of security group "this folder only", or delete entry if not needed. technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com. Windows Server  >  File Services and St

hello, i'd insert ppt clip art images, can't find them. no clip art tab anywhere.. clicked 'online image' in case, had 'bing image search', , 'onedrive folder'. expected 'office.com clip art'. should do? thank reading. you on right tab , online image indeed way go now. have here: http://blogs.office.com/2014/12/01/clip-art-now-powered-bing-images/ hth maurice Microsoft Office  >  Word IT Pro Discussions

for testing purposes need learn how remote access works in windows server 2012 r2. i created small la environment windows server 2012 r2 dc, windows server 2012 r2 remote access server (member of ad domain) , windows server 2012 r2 server (member of workgroup) used remote access client. i made several attempts no success. i want start simplest configuration implement more complex features (like nps). is there step-by-step guide can use? regards marius there important limitations note regarding remote access: 1. when setting vpn using remote access, accept defaults , make sure clients can connect on ports required protocol want use. vpn configuration in remote access wizard install , configure *all* vpn protocols. determine want want use limiting port access server. recommend using sstp on port 443, if want (and have full pki set up), port 500 ipsec using ikev2, runs quicker most. have have certificates installed on connecting computers work. 2. users have allo

i having trouble installing wsus role on server 2012. i have checked topics find relevant topic have been unable find similar log file posted.   installer launched using powershell  install-windowsfeature -name updateservices, updateservicesui -includemanagementtools install state = true after completion. i use wsusutil.exe set content directory. .\wsusutil.exe postinstall content_dir=d:\wsus the post install task fails with  fatal error: failed start , configure wsus service if try manually start service in powershell, following error:  log file below: 2013-08-02 20:24:38  postinstall started 2013-08-02 20:24:38  detected role services: api, ui, widdatabase, services 2013-08-02 20:24:38  start: loadsettingsfromparameters 2013-08-02 20:24:38  content local is: true 2013-08-02 20:24:38  content directory is: d:\wsus 2013-08-02 20:24:38  sql instname is:  2013-08-02 20:24:38  end: loadsettingsfromparameters 2013-08-02 20:24:38  start: run 201