KCC

hi, we need way push wallpapers out via gpo.  the issue is, there multiple jpegs within folder. far know gpo can single images. there option use gpo target theme instead. company wants able change images displayed on monthly basis.  we want less hassle possible without them ringing change theme manually. > issue is, there multiple jpegs within folder. far know > gpo can single images.   set gpo image defined path , file. replace file (through scheduled task or whatever means :-))   Windows Server  >  Group Policy

hello there, just trying write concept consolidate 32 physical servers 4 hyper-v hosts. i guess start th dcs , migrate member servers 1 one (mostly w2k3 severs). now question: kind of role should 4 hyper-v hosts have in network? should create seperate domain them or should i isolate them security reasons. i also have hp msa san fiber channel adaptors. can connect guest os (e.g. file server cluster) direct san? any thoughts appreciated ! chris  sysadmin i'm not aware of specific microsoft recommendation. i'm inclined go separate hyper-v server dmz. if 1 physical hyper-v server used virtual machines, should have dedicated network adapters dmz virtual machines. wouldn't want network adapters shared machines in , out of dmz. you've raised issue of dmz, i'd expound on concept generically. presence of dmz indicates @ least degree of concern security. sake of discussion, i'll postulate medical records or credit card data must secured hackers. have experience defend...

hi all, i receiving failure audits on exchange server every 1.5hours or legitimate ad user machine on network user not log on to. servers domain controller 2003 sp2 32bit exchange server 2003 sp2 32bit application server 2003 sp2 32bit i have checked outlook exchange account name , scheduled tasks on pc in question and the logs not reveal clues. event type: failure audit event source: security event category: logon/logoff  event id: 529 date: 15/05/2012 time: 12:49:19 pm user: nt authority\system computer: exchangeserver description: logon failure: reason: unknown user name or bad password user name: (ad username) domain: exchangeserver logon type: 3 logon process: ntlmssp  authentication package: ntlm workstation name: computername caller user name: - caller domain: - caller logon id: - caller process id: - transited services: - source network address: 192.168.10.29 source p...

hi , i add following text sharepoint web.config file using power shell. i have tried of forum,however couldnt able find exact information please me on this above /system.webserver line add text::   < httpprotocol >       < customheaders >         < clear />         < add name = " x-ua-compatible " value = " ie=11 " />         < add name = " x-frame-options " value = " sameorigin " />       </ customheaders >     </ httpprotocol >       </system.webserver> regards, bashaibm       hi jrv, thank reply. i new powershell.if possible please provide me entire script add text? the text add under  </system.w...

i trying rid of last windows 2003 server (i know should have done earlier). have moved 5 fismo roles yesterday windows 2003 server windows 2008 domain controller. want dcpromo of windows 2008 server. when try message:" must first prepare forest using adprep /forestprep. when , adprep /domainprep server telling me has been done. when check adsi edit see schema version object version not set. when dc diag not error messages. i not know do? thank help. hi hammondmis; let's absolutely we're on same page: verify forest , domain functional level using adsiedit.msc: 1. open run command, , type adsiedit.msc 2. expand domain object, right-click domainname (where domainname distinguished name of domain want check), , click properties. 3. under attribute column, scroll until locate msds-behavior-version attribute. check value of attribute, , let know tells you. best regards, todd heron | active directory consultant *please remember mark replies answers if re...

here's scenario: have ous based on locations of our facilities, have sub-ou(?) underneath users need group policy applied them whitelist applications allowed run. time time have need pull users out of sub-ou short period of time let them run applications wouldn't able , won't need run long term. forget add these people policy controlled sub-ou because busy other things. server 2008 r2. here's i'm looking for: script prompts users name, pulls user out of sub-ou, puts them in main ou 24 hours. after time limit up, script/command runs puts user in policy controlled sub-ou. i'm thinking ps script best way this. research: looking @ these posts  here and  here  i'm thinking should able frankenstein have limited ps scripting experience. can me create this? you've figured out, we're not typically in business of writing complete solutions people. said, there projects find particularly interesting, such one, willing started if willing take t...

hi, have coded wmi script retrieves , displays active ip address, published in sharepoint "web content web part". challenge when load page in ie message telling me have "unsafe" activex component. there way somehow can "sign" code become "safe" , thereby avoid message? best regards jens :-) hi,   according description, issue seems related coding development. focus on the server core question windows server system , here not best support resource coding development, recommend further support in corresponding community can qualified pool of respondents. understanding.   for convenience, have list related link followed.   msdn forums http://social.msdn.microsoft.com/forums/en-us/categories/     best regards, vincent hu Windows Server  >  ...

hello: i'm having problem trying install windows 8.1 professional on new gen 2 vm. created new gen 2 vm using hyper-v manager running on windows server 2012 r2 , told boot off dvd drive pionts iso file copied e: drive.  iso file mounted in virtual dvd drive windows 8.1 professional x64 vl iso downloaded off of technet. when start vm install os, receive error: "synthetic scsi controller (instance id 7512b228-f7bc-4dd8-b4f4-72a5b042c2e9): failed power on error 'the file or directory corrupted , unreadable.' (0x80070570). (virtual machine id 4195a398-3531-4a34-8588-d1fc3f3dd2d4)" basically scsi controller can't read iso file. however, ide controller on gen1 vm can read , boot iso fine. has else run problem? there way resolve issue , allow me boot iso scsi controller? or there bug hyper-v scsi controller makes unable boot isos properly? -jp hello all: i fixed out problem.  toying file permissions see if problem.  found article on web pointed...

i have several 2012 vm's, 1 exchange 2013 and a few dc's. want make check , see if can perform inplace upgrades of vm's 2012 2012 r2 rtm without breaking ad or exchange. vincent sprague so i've been able perform inplace upgrades of 2012 2012 r2 have not gone 100% smoothly. updated wsus server , ended having remove , reinstall wsus. rras server fine. i've decided not upgrade critical machines. vincent sprague Archived Forums W  >  Windows Server 2012 R2 Preview and RTM - Setup

folks, is there tool find workgroup computers in windows domain environment? have road warriors in company , of times computers unmanaged (not on domain). identify computers, let me know if guys have used tool accomplish task, or if there way can query windows 2008 dhcp or dns servers information because dhcp assigning lease computers. thanks help. hi,   thanks posting here.   deploying 802.1x authenticated network , dynamic vlan assignment automatically redirect non-domain joined computer individual vlan when try connect network. should first purchase 802.1x compatible network devices , set infrastructure up.   may know how these hosts obtain address in order access network ? , kinds of network devices using ?maybe can start form basic network service , dhcp , wins   or hosts table on manageable network device.   thanks. tiger li please remember click “mark answer” on post helps you, , click “unmark answer...

i installed 2003r2 64 bit scvmm r2 uses hyper v. after install go system/device manager , network card driver not there. can download 64 bit version of hyper v network card in can install in in 2003 r2 x64 bit vm? hi,   it seems using legacy network adapter within vm, if so, that’s expected behavior, because there no legacy network adapters drivers 64bit of windows server 2003, need use network adapter(synthetic network adapter) , install integration services.   for more information, can refer to:   legacy network adapter in hyper-v http://blogs.technet.com/chenley/archive/2008/07/18/legacy-network-adapter-in-hyper-v.aspx     best regards, vincent hu   Windows Server  >  Hyper-V ...

hi. we have large rds deployment installed office 2013 (curr. ver. 15.0.4701.1000 32-bit). i have noticed significant cpu load winword.exe process. further investigation showed load generated during users typing. takes 15% of core. it seems not much, not on terminal server. wondering, if draft view using (instead of print layout) cpu usage decreases. maybe, there settings decrease cpu load during usage of print layuot (users don't want using draft)? or hotfix? hi, in regarding of issue, have couple of questions. 1) issue occurred word? 2) have logged on local rds check if issue still exists? 3) have tried open blank word file in rds , tested issue? this issue might caused factors. please try method: in word 2013, open file | options | advanced scroll down "display" section check box disable hardware graphics acceleration (may disabled based on previous discussions on , other threads.  can set gpo disable it.) hope it's helpful. re...

hello, i wondering how enabling option "grant user exclusive rights ______" affects windows server backup. my concern windows server backup won't have permission copy files during backup.  does know if case? hello, backup uses system account , account still has access files, if "grant user exclusive rights" setting set. you test make sure works excpected. hope helps, gunter Windows Server  >  Group Policy

i have admit, i'm not versed in how kms used.  i'm guessing allows use central server hand out windows server licenses machines in domain?   my problem this, install windows server enterprise (or in latest case datacenter).  on of these machines start spamming publishing key management service (kms) dns in 'mydomain.com' domain failed. info: 0x8007232d the thing is, don't think have kms infrastructure set here , aren't interested in right now.  buying wrong w2k8 server licenses dell? is mandatory enterprise , above win2k8 use service in way? i rid of these errors.   any appreciated hello statistic, use ctrl+c copy data dialog box, long focus on dialog box copy. it sounds key used activate machine 1 enables them become kms host key or rather multiple kms hsot machines.  sounds preference mak key, both should available vl site got vl key.  vl both mak , kms host keys, mak vl keys activate microsoft activation servers, numb...

hi, i have problem domain, group policies aren't applying. i have 2 security groups; 1) 32bit clients 2) 64 bit clients in these 2 groups our different computers, running 32bit , 64bit windows 7. in gpmc have made 2 policies affect both user’s desktop , computer settings. want set 32bit group 32bit policy, , 64bit computers 64bit policy, isn't working. following various guides online set security filtering, linked gpo domain, went delegation tab, opened acl, unticked apply authenticated users, added 32 or 64 group, clicked read , apply them. went client (in case 64bit pc), , once gpupdate /force had been completed, ran gpresult , says gpo hasn’t been applied due "access denied (security filtering)". this has baffled me, i've checked pc in 64bit group, checked read , apply settings no luck. i've tried adding , removing authenticated users security filtering tab, no luck. it's annoying me because should simple! any appreciated. jake ...

we using win7 sp1 clients configured directaccess. logging on (no roaming userprofile) takes 10 minutes. try make client detect slow networkconnection , skip loading gpo settings. i measured client have latency of 450ms , tranferrate around 12kb/s i have set gp slow link detection multiple values in both machine user part of gpo's, first 2800 kbps later 250 kbps (both more 12kb/s. when running gpresult can see gpo applied because treshold slow link matches configured. problem client still showing connecting using fast network. event: 5314 (grouppolicy) logged: "a fast link detected. estimated bandwidth o kbps. slow link treshold 250 kbps. especially part of redirecting folders takes long, eventhough setup homefolder available offline offline files. any ideas why slow-link detection not working? or ideas speed logonprocess directaccess users working remotely on high latency / low-bandwidth links? thanks. hi, >>i have set gp slow link detection multip...

the main server crashed (dc , exchange 2007 , documents ) want restore backup new server . boot windows 2008 , repair ----> windows complete pc restore on new server can't see ex-backup ( restore point ) usb external hdd when tried old server can see restore point . can me thank much hi,   i suspect there issue backup files. did perform full backup crashed computer?   performing full server recovery of domain controller http://technet.microsoft.com/en-us/library/cc772519(ws.10).aspx     best regards, vincent hu   Windows Server  >  Windows Server General Forum

i hoping give desktop support rights check off property of distribution group. “managers can update membership list”. they have rights delegation control. you chose delegate control of objects in following active directory folder:     domain.local/ the groups, users, or computers you have given control are:     it_usersonly_gr (cmp\it_usersonly_gr) they have following permissions:     read     write     write properties for following object types:     contact     group     user if try modify existing object groups under security read managedby , write managedby allow , out of ad , check allow property removed. any ideas how enforce? hi, in test, have read, write, write properties privilege not enough modify group permission, permission check box grayed out , can’t modify. after grant full control permission delegated acco...

we in middle of installaion project , when validating the created  failover cluster volume got error 15. understood because not have enough sas 6gb cables(only pair) redundance when we proceded with  creation of virtual servers getting error 20 message say; "kerberos access: access denied" ip address given new object online,however, cannot bring server online.what problem? please help! explanation on forum not quite related our scenario.we tried when used object disappears , objectguid value different in ad found in registry.we tried match them, error changed "access denied" "there no such object on servers" all done on dell powervault md3200 running dell servers 2900 series. your understand situation highly appreciated. thanks alot guenthner, we appreciate suggestions! running windows 2008 r2 sp 1 , after lot of checks , verification added spn , fixed. once again thank , enjoy day! chimula ...

hello. i'm wanting migrate our current wsus server new box has different name. ive found several articles on migration part not on rename part when doing both. here have. currently windows 2003 standard sp2 want go windows 2008 enterprise r2 x64. using current wsus version 3.2.7600 since new server has different name old affect anything. looked here , wsus db points here: sqlsvrname= %computername%\microsoft##ssee sqldatabasename=  susdb i want make sure approvals, declined updates, groups , rules pull over. not sure naming part. going post links i'm using migration, started, ie crashed , lost tabs. go figure. thanks! if move wsus server need update gpo with new wsus name (edit specify intranet microsoft update service location policy), clients know go updates; if not try old server name. follow guide move wsus server new box http://social.technet.microsoft.com/wiki/contents/articles/how-to-move-wsus-from-one-server-to-another.aspx adrian costea - mcp...

we have several remote sites , each has 2 or 3 computers not members of our corporate domain.  windows xp professional, there couple windows 2000 computers still out there.   had script run 'net time \\anothercomputer  /set /y.   realized script although running not updating time.   ran manually, , received message... "access denied"  i've tried making connection computer @ \\computername\ipc$ thinking may establish communication, doesn't seem help.   i have tried calling internet time server directly, not seem help.  has synchronized stand alone xp machine domain controller (in domain it's not member)? , if not, have suggestion how can sync of these machines single source.  (if not correct forum, please me identify appropriate one.) thanks in advance.  i've used w32tm, windows time service, http://support.microsoft.com/kb/314054 cheers, florian microsoft mvp - group policy (http://www.frickelsoft.net/blo...

we facing challenges creating forest trust between 2 forest scenario is   forest using windows 2003 server  domain , forest functionel level win 2003 forest b using win 2008 r2  , domain , forest functional level win 2003 conditional forwarding configured on both forest. when trying create trust forest b  ..it shows realm trust and  not forest trust or external trust...but when have tried create forest trust forest mean win 2003 server based forest . forest trust has been created successfully............ please 1 tell me why  can not configured forest trust forest b(win 2008 r2).............................. please make sure configuring on root domain of forest. see that:  http://social.technet.microsoft.com/forums/windowsserver/en-us/dbb3da8e-6d0e-490d-be21-45962243a96d/do-not-get-option-to-create-a-forest-trust this posting provided "as is" no warranties or guarantees , , confers no rights. get active directory user la...

networking isn't specialty, @ loss. , not have log in information server itself. i have 3 windows 98 computers ping server, can't connect; , have 3 windows xp computers can connect, print, , else. 98's can (i.e. connect internet, emails, etc...), except has deal server. the printers grayed out , "use printer offline" checked , cannot unchecked. have pinged server , printers successfully. assumption there update security yesterday on server , either messed or hasn't finished , needs restarted (which guessing running server 2003.) any ideas? not sure forum belongs in, sorry. hi, the best recommendation of course to upgrade or replace windows 98 computers. os no longer supported , lacks of important security measures needed. you can use http://support.microsoft.com/kb/555038  as guideline on how configure server acces windows 98... bot no-one guarantee work up-to date 2003 server. be sure configure ntml used on both client server mcp/m...

hi guyz in company have around 1500 windows machines. in domain. testing purpose have deployed few windows 10 machines in our organization. 1 issue have noticed logon vb scripts not working in windows 10. in company have plenty of vb scripts various purposes , receive 350nos windows 10 machines in our organization. out of issue. server : windows 2012 r2 domain , forest functional level : windows 2008 r2 client os : windows xp,7,8,8.1 , 10 please let me know if need further details. thanks in advance. shanif salim > in our organization. 1 issue have noticed logon vb scripts > not working in windows 10.   do fail run @ all? , aware of newly introduced delay logon scripts on w8.1 , above? http://blogs.technet.com/b/platformspfe/archive/2014/03/08/windows-8-1-logon-script-delay-group-policy-setting.aspx and http://gpsearch.azurewebsites.net/#10686   Windows Server ...

hi all, i have strange issue. have windows server 2012 core domain controller in lab. had installed below security patches released ms part of microsoft security bulletin may & june 2015.  below patches installed. see except kb3002657 rest install post installation fail configure , when verify see kb3002657 installed. patches installed. windows8-rt-kb3002657-x64.msu windows8-rt-kb3045171-x64.msu windows8-rt-kb3050514-x64.msu windows8-rt-kb3051768-x64.msu windows8-rt-kb3055642-x64.msu windows8-rt-kb3057839-x64.msu windows8-rt-kb3059317-x64.msu windows8-rt-kb3061518-x64.msu  windows8-rt-kb3063858-x64.msu command used verify: - get-hotfix kb3002657,kb3045171,kb3050514,kb3051768,kb3055642,kb3057839,kb3059317,kb3061518,kb3063858 has 1 faced issue ? how can on come ? gautam.75801 hi all, i have got solution, this seemed o/s corruption in os. post fixing corruption updates installed without issue. actual solution answer: ...

hi, i planning roll plan using admt v3.2 interforest migration. visited multiple sites & option provided enabling source account & move migrated objects target domain source domain. below quires not find answer.  1)only users:-   user exist in source , if enabled should fine & delete users in target domain.(do not consider resources & computer accounts) 2) objects :- per info in admt migration doc reveres migrate users & add computer source domain. i)while moving objects via admt migration wizard gives error object exist object cannot moved ii)what needs done object entries created in target domain, should delete objects.   iii)if objects deleted in target domain there impact if migrate same users target domain source domain. regards, sntsh hi, thanks post. please refer following information , articles: “ you can use active directory migration tool (admt) remigrate accounts target domain source domain. in case,...

hi, we trying install hotfix kb958911 of gdi+ on windows server 2008 data center edition 64bit. prerequisite says should windows 2008 server sp2. make server compatible,  applied patches kb971512 , kb971513 should make version equivalent windows server 2008 sp2.  however when tried applying hotfix kb958911, gdi+ gives error : "the update not apply system" , not allow apply patch. need hotfix image compression. please revert asap. highly appreciated.  thanks, hi, based on research, hotfix can applied on windows server 2008, not sp2. there might mistake in article. can add registry entries manually test. sorry inconvenience. niki han technet community support Windows Server  >  Security ...

we have windows server 2008 ad ds workstation using windows 7 , legacy system lay around. my background in development , i'm been reassigned work in security policy implementation , netwrok security configuration settigns. in last month, have noticed fear on management's face when comes behind in security policies demanded government. last month had upgraded of internet browser (i9) , bunch of user turn-out either block sites or missing internet settings. heard month before when upgraded adobe, encounter conflict settings security policies , prior month have problems implementing security patches microsoft. my question forum, there impementation guide wehm comes addding patches... obviously test first, sounds when come implement in production encounterproblems didn't show-up in development. i know how works....... new policy objects are upgraded in security patches microsoft? are there guidelines companies can follow reduce burden , kee...

currently have use network connections part of control panel check "network load balancing (nlb)" in order bind nlb adaptor, or have create new cluster in nlb manager. my problem centres around fact nothing in powershell module networkloadbalancingclusters work unless nlb bound adapter, there doesn't appear powershell way of doing this. every set of instructions can find says human has come along , it. i'd write program it. nlbmgr when creates new cluster, it's indicated lines: going bind nlb... bind operation succeeded. any ideas? pls refer link http://technet.microsoft.com/en-us/library/cc772833(v=ws.10).aspx darshana jayathilake Windows Server  >  High Availability (Clustering)

i'm in process of copying lot of files between old , new server. i'm using 2008 r2 version of robocopy the 979808 hotfix. i'm seeing i'm getting quite few entries in logs:   2011/02/09 01:05:02 error 5 (0x00000005) copying file \\server\i$\photographic\file.jpg access denied. when (logged on domain admin , i've checked security) have access file.  the file appears have copied over. however, noticed today destination file corrupt in has attributes of source, in 1 case image black/empty half way down, in case didn't render. copying file manually same source worked fine. i'm wondering if anyone's encountered similar before? the thing leaps mind we're using /mt option robocopy , may co-incidence i'm seeing more of error on volumes i've upped thread count 16. of course leaves question of how on earth copy catch files failed presumably attributes when compares source , destination identical? thanks. hi, first may need ...

i not professional please forgive basic question.  have installed server 2008 on separate server in order use terminal server.  have 2 purposes server: 1. have employee working in state , want able log in , have desktop applications served her. 2. enable employees able log in home computers access workstation time time.  may want set user account or destktop these employees well, in #1 above. i have installed , enabled ts role on server.  can access server home right using vpn , remote desktop access.  when this, lists user accounts server.  questions are: 1. assume not using ts right when vpn in , access server.  if so, program use on remote computer find , log ts remotely?  assume not use rda. 2. ts allow multiple users logged in , working on ts @ same time? i guess have installed ts, looking quick description of mechanics of how work.  thanks! pwncpa, first, sounds need reading on terminal services in general in order learn can it, , how work it. glad have visited can give places ...

need different troubleshooting cases on windows server 2003, 2008 , exchange 2007. common problems occur on daily basis  activities , if major problem occurs needs done sort out. hello tip: install scom server , agent , monitoring package for os/hardver , exchange monitoring. scom test servers , alert if have got common problems. sorry english Windows Server  >  Windows Server General Forum

we installed 2 new pc's on network office 2013.  everyone else running 2007.  when existing file opened on either of 2 pc's running word 2013 formatting , layout changed.  the font changed though same font available , layout changed little , document not fit on 1 page more.  it shifts 2 or 3 lines @ bottom next page.  when open same file in word 2007 still good.  word 2013 opens file in 'compatibility mode' still layout changed.  we have hundreds of documents need able open in both word 2007 , 2013.  any suggestions on how can make work?? hi, as far know, if open word 2007 file in word 2013 compatibility mode, preserve layout of document. recommend try convert document word 2013 mode test. steps: click file tab. to convert document without saving copy, click info , , click convert . reference: https://support.office.com/en-us/article/use-word-2013-to-open-documents-created-in-earlier-versions-of-word-609bbdba-96f2-407b-baaf-d8e...

when settings these parameters <willshowui> - possible had show choise image , not screen install after pres enter on select image - can´t turn off again in same settings - error message on f12 boot , installation fails , reboot.     <imageselection>                     <willshowui>always</willshowui>                         <installimage>                         <imagegroup>laptop</imagegroup>                         <imagename></imagename>      ...

i'm trying modify default domain policy previous administrator set password age 0 days. i want enforce password change users rebuked management limit finance group first. i changed password age 90 days , set security filtering (removed authenticated users) newly created global security group. however, did net user check on users within group. password expires still showing "never". did wrong? will appreciate if can enlight me on this.. regards, dan password expiration computer setting, not user setting. in other words, have apply group of computers, not group of users. , yes, means if user logs on workstation a, may asked change password if logs on workstation b, it's fine. you use known 'fine grained password policies' http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx but need bit more work since more complex set creating policy , applying group. ...

i'm using server 2012 backup backup hyper-v server , 2 virtual machines.  i'm concerned because status of backup successful, 2 virtual machines , host component show 0k data  transferred. suggestions appreciated. i'd post picture can't due being new account.  kevin hi, please check backup log , show size of data. did receive error when backup? if so, please provide detailed error message research.  regards, we trying better understand customer views on social support experience, participation in interview project appreciated if have time. helping make community forums great place. Windows Server  >  File Services and Storage

hello all,   i setup shared storage 2 node hyperv server cluster.  both nodes connected shared cluster volume.  on hyperv1 had several vms running on local storage.  once cluster setup went scvmm , requested migrate storage of vm point new location of c:\clusterstorage\volume1\cluster\  migration began , reached 72% , failed error of 12700 "vmm cannot complete hyper-v operation on hyperv1.odleasing.lan server because of error: import failed. required permissions missing directory 'c:\clusterstorage\volume1\cluster\exchcorp01'. " , event shows in event log event id 18380 source hyper-v-vmms event text: import failed. required permissions missing directory 'c:\clusterstorage\volume1\cluster\exchcorp01'.   i have restarted vmms.exe service 1 article told me do.  still no luck on fixing , scvmm wont allow rollback @ point.  how fix? hi,   according description, issue seems related scvmm. focus on hyper-v quest...