Tag Info

New answers tagged

0

Every Google search that we performed always returned the same basic answer, something relating to permissions of the Private Keys... but this was based on the error messages we were seeing. Eventually we tracked the problem down after using WinHttpCertCfg.exe along with Process Monitor to log access to folders and the registry. When one of our developers ...


1

I have not tried the below answer, but it seems reasonable as a starting point for your own investigation. http://www.nonstop.co.il/kb/view.php?kb=66 Solution Open ADSIEDIT and navigate to the OU where your broken user account is stored. Locate the user account, right-click on it and then choose "Properties". Click on the "Filter" button ...


1

Absolutely. Send an abnormally big (>1GB should do it) print file to it. Don't have a file that big? Whip up something in powershell along the lines of: PS C:\Users\BigHomie> 1..1000000000 | for-each {Get-Process | Out-File .\Desktop\test.txt -Append} Should do it, if not jus keep on truckin. For best results, reduce the amount of available RAM the ...


0

Provided you issue route print command on Windows Client machine you would realize that something like this is present: ::1/128 On-link fe80::/64 On-link fe80::/64 On-link fe80::4538:b2f1:41f0:213/128 On-link fe80::88a8:ec4a:b2d:fea6/128 On-link ...


0

Solved. All I needed to do was to remove the URL from the AIAs and the CRLs. This stops the attributes being added to the certificate. All revocation checks are being done from ocsp via Oracle Access Manager.


1

Although, this is not an answer, but I would strongly suggest to include CDP extension in issued certificates: your OCSP server will be a single point of failure. Windows OCSP server is CRL-based, so you still will have to provide CRL references to your OCSP server. you should be aware about one CryptoAPI behavior aspect: when client receives many ...


1

We worked with MS and they created a client hotfix that allows (at least HP) printers that use host based drivers to work with RDS Easy Print. This has been tested successfully in our environment. The hotfix is available here: http://support.microsoft.com/kb/3005781


2

First off, I hope your terminal server is a virtual machine. Before you continue, make sure you have a clean snapshot of the VM. One of your students will take advantage of the ability to run arbitrary applications and screw up your server. You should revert to the snapshot periodically, and always revert immediately before applying patches or installing or ...


0

This would be due to the replication between your DCs not working. Here you can see how to check if its replicating: https://technet.microsoft.com/en-us/library/cc794749(v=ws.10).aspx And here you can find how to trouble shoot it. https://technet.microsoft.com/en-us/library/cc949120%28v=ws.10%29.aspx This would happen if the computer is trying to ...


0

I'm assuming this is a local machine (not domain joined), as you are not using GPO. Open the Local Policy Editor (Start>Run>gpedit.msc) and browse to Computer Configuration\Administrative Templates\Windows Components\Windows Update and look for the Configure Automatic Updates. Enable that policy, and set the option for "Auto download and install" and set ...


0

I would write a small VBScript or PowerShell script that is set in task scheduler to execute at 5:30am every day that grabs a collection of all of the events from the event logs for that day and checks for that specific event id and log entry. If that event exists, execute the reboot. Here are some links that may help you: ...


0

Following the suggestions in the comments, I ended up creating a batch file containing the proper restart sequence with timeouts. Timeouts were necessary because of the dependencies between the services. I scheduled it to run as admin every night at 4AM using the task scheduler. net stop "Service B" net stop "Service A" timeout /T 10 net start "Service B" ...


1

can I have two LUNs from the same SAN attached to the same server Yes, easily - glad you checked though!


1

Simple answer: yes. This is done all the time - there's nothing preventing multiple LUNs (either FC or iSCSI) from one SAN going to the same server. As an added twist to the simple answer: if you have one LUN going to multiple servers, you will have to ensure you either have only one server mounting it read/write or that you have a multi-initiator capable ...


0

I found 2 solutions that worked fine from Windows 7 clients (32/64 bits) Use the Universal Print Drivers PCL5 on your Windows client remove the GPO that forces RDS Servers to use Easy print driver first create a GPO for all domain users that use Easy Print Driver first As a GPO: Administrative Templates/Windows Components/Remote Desktop ...


2

The other answer covers the reasoning behind this - for modern systems, mostly keeping load times within the event viewer GUI somewhat bearable. Copying the current log to a location that gets backed up, then clearing it, is also good. For parsing large log files that end up being generated anyway, two good options occur: 1) Parse the log faster than the ...


0

Apparently this is an intermittent issue with some 2008/2008 R2 environments after a heavy round of updates [insert favourite windows update débâcle anecdote here]. Try this solution on one of your 'less critical' servers, but it is relatively non-aggressive and shouldn't cause any more harm in the event that it doesn't help your particular issue. let the ...


8

Other than the awful performance and ridiculous wait times when you have to load a 4 GB log and the hell it will be if you ever have to search through such a monstrous thing, not much. I think the largest one I've seen in my environments was 10 GB, and although I gave up waiting on it to load, it didn't seem to harm anything. The 4GB caution for Server ...


0

It's 2015, check out some PowerShell. if (!(Test-Path -Path "$Env:ProgramFiles\Microsoft Security Client" )) { Write-Host "Not Installed, Installing..." iex "\\192.168.1.104\Programs\Microsoft Security Essentials\Microsoft Security Essentials.exe /s /runwgacheck" } if (!(Test-Path -Path "${Env:ProgramFiles(x86)}\Adobe\Reader 10.0" )) { ...


3

You'd use netdom. Assuming you don't want to give yourself carpal tunnel... and the most boring day ever. If you had a text file with all the computer names in it, (one per line) you could whip up a batch script like the below to do it all at once. FOR /f %%i in (C:\mylistofcomputers.txt) DO (netdom join /d:mydomain.tld ...


0

I have changed the power management settings for the NIC in the guest OS and recent restarts went without networking issues. I do not know for sure if it is causality or just coincidence, though - other things (like the vSphere patch level) might have changed in the meantime without me knowing.


0

As described by RFC4337 video/mp4 is the preferable mime type for .mp4 BTW for more compatibility (mobile device, etc.) and more functionality (streaming, etc.). If it is possible in your case, I would recommand you to upload your video to youtube or use IIS Media services.


0

On my system, changing the value of IEHarden (REG_DWORD) to 0 in this key appears to have corrected the problem for all new accounts (and possibly some existing accounts): HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\ Internet Settings\ZoneMap This is ...


2

Try the following: function New-DomainSignedCertificate { [CmdletBinding()] param( [parameter(Mandatory=$true)] [string] $Hostname, [parameter(Mandatory=$true)] [string] $Organization, [parameter(Mandatory=$true)] [string] $OrganizationalUnit, ...


0

Reboot the server to resolve this issue ms technet source


3

Here is the documentation on the Remote Desktop Services CAL licensing for Server 2008 R2, from Microsoft. That's as much as we're willing to say about the strictly licensing part of the issue. Regarding the technical question (the behavior of RDS): Generally speaking, the Remote Desktop Services will not block you from using those 2 default sessions you ...


0

RC4 is currently safe. If you don't fight security agencies with thousands of servers full of radeon cards, then you have nothing to worry about. The Cypher4's security problems are a pure speculation at this point. Microsoft wants to dump it because they just want new standards in exchange. In a practical sense, even SHA-1 isn't broken yet.


0

There is a tool to check cipher order in gui : nartac.com/Products/IISCrypto for me he work everytime (try on test machine if you don't trust the exe). Sometime you change in tls client and not in server tls . So check with this tools . And don't forget windows update because there is a schannel update .


-1

After looking more into the event log entry it suggests that DCOM needs more permission to get to solve the access denied message (adding Network Service). See here: http://www.terabyteunlimited.com/kb/article.php?id=563 This solved the first issue. Now in the event log it says: The shadow copies of volume C: were aborted because of an IO failure on ...


0

Well, for one thing, you should probably be using a full-fledged P2V solution for Hyper-V, like Microsoft's Virtual Machine Manager. Alternately, VMware Convertor is something of a standard solution for P2Ving any machine, because it's free, supports most everything you can find to throw at it, and is backed by top virtualization companies out there. ...


1

The RegisterTask method has an update flag that you would use. Something like this: # Update the action with the new working directory and executable $action.WorkingDirectory = $exe.DirectoryName $action.Path = $exe.FullName #Update Task $taskFolder.RegisterTask($task.Name, $task.Definition, 4, "<username>", "<password>", 1, $null) See the ...


2

I kept digging and found a script online where someone wanted to find user email addresses for incidents. I figured they'd have to find the user first (which would give me the AffectedUser), and I was right. Here's the solution: $SCSMclassSR = Get-SCSMClass -Name System.WorkItem.ServiceRequest $SCSMobject = Get-SCSMObject -Class $SCSMclassSR ...


0

Set up multiple triggers in Windows Scheduler. One "Weekly" trigger recurring for 6 Days. A second "Weekly" trigger (Sunday), which will repeat its task every hour for a duration of 23 hours (you don't have to use the pre-defined times, just type new ones into the field). Set start times accordingly to meet your requirements.


1

What you're seeing is perfectly normal. The Local Group Policy editor is for viewing and configuring the Local group policy object and its settings, not for viewing domain based Group Policy settings. Domain based Group Policies override Local Group Policy settings, they do not overwrite Local Group Policy settings. RSOP is the tool for viewing settings ...


1

In your RSOP screnclip, take a look at the GPO State column. Not configured means it's not configured. You have to set the state to either enable or disable for the GPO to actually do anything. If you enable the Remote Assistance GPO, Remote Assistance will be enabled on computers this GPO applies to, and users will be allowed to create Remote Assistance ...


2

Even a better way where you don't need to specify names of the tasks: ($TaskScheduler = New-Object -ComObject Schedule.Service).Connect("localhost") $TaskScheduler.GetFolder('\').GetTasks(0) | % {$_.Enabled = $false}


1

Here's hat I've found will cause the folder to be recreated: Remove the Home folder setting from the user object and apply. Wait for AD replication (which should be near instantaneous between DC's in the same site). Reconfigure the Home folder setting on the user object. Wait for AD replication (which should be near instantaneous between DC's in the same ...


1

Possible errors you made or missed The profile must be allowed to read by Authenticated Users (Apply file security reucrsively to profile folder) The profile folder must be named C:\Users\MandatoryUser.V2 ( and the Set path for Remote Desktop Services User Profile must be C:\Users\MandatoryUser without .V2 for Windows Server 2008 and higher. MandatoryUser ...


0

This is a configuration oversight. While the RD connection broker is using the defined servers as RemoteApp sources, it exercises no control over the actual definitions of RemoteApp items provided by them. The RemoteApp Manager configuration of the respective RemoteApp sources is determining what destination RemoteApp clients will connect to: This option ...


2

You have two options: Install a newer version of PowerShell (version 3.0 and 4.0 is supported on Windows Server 2008 R2) Force PowerShell.exe to use .NET v4 instead of .NET 2.0 (as described in this SO answer), by providing a config file with the following contents: <?xml version="1.0"?> <configuration> <startup ...


0

It never occurred to me that these performance numbers are to be expected. I thought there was some hidden problem that was eluding me. Shame on Dell for selling this junk. This server cost rather a lot, and my laptop can beat it on certain tasks. It would seem this issue is resolved. This is the expected behavior. There is no problem.


0

Got the "no it's not possible" statement from Microsoft. https://social.technet.microsoft.com/Forums/windowsserver/en-US/7ff69b62-59dd-49c1-aa3e-8435076b1cb6/static-ip-injection-to-guest-vm-in-win2k8-r2


3

If you check the whois record for that IP, it tells you: Comment: To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to: Comment: * ...


2

If you are using Intel E5 CPUs check this KB Article: http://kb.vmware.com/kb/2073791 Symptoms When running a virtual machine with Windows 2008 R2, Red Hat Enterprise Linux or Solaris 10 64-bit, you may experience one of these symptoms: •Windows 2008 R2 blue screen events: 0x0000000a - IRQL_NOT_LESS_OR_EQUAL 0x0000001a - MEMORY_MANAGEMENT ...


0

I don't understand the question exactly but if you're trying to see the MAC address of a host on another VLAN then you can't. A VLAN is a boundary between hosts in different VLAN's. Communication between hosts in different VLAN's goes through a router (in your case a layer 3 switch). When communicating with a host in another VLAN/Network a host will ARP for ...


1

The H310 does not have any write cache (compared to the H710, which has 512MB of battery-backed cache), so right off the bat you're not going to get "great" write performance with it. The H310 also doesn't utilize the cache built into the hard drives by default, so everything is strictly "write-through". You could always enable disk caching in Windows, ...


0

Cloud systems such as openstack (and Microsoft Azure) use cloud-init to provision those things. Cloud-init is fairly flexible and should allow you to for instance mount an iso into the vm with the provisioning info. I would look into that. It would require your VM templates to already be setup with cloud-init before you use them to spin VMs.


1

Just Enable VSS Services on Source Machine the Windows Server 2008; Ensure source machine is also ON then Convert using the Option "Powered On Machine"; The ESXi server needs to be standalone not connected to any clusters. Mathews


0

Well, the old rule of thumb is every GPO is typically a registry setting somewhere. You might want to take a look here: https://technet.microsoft.com/en-us/library/ee461027.aspx Start with the Set-GPRegistryValue section. Looks like this would be the primary way to modify GPOs via PowerShell. You could start with a GPO that has some of these software ...


0

First of all, this is a goofy solution and even if you get it working, it's sloppy. You may already even have a layer-3 switch that could do the job of routing for you if you just enable that functionality. That said, you need to enable IP routing (sometimes called IP forwarding) on the server. Nice walkthrough at wikiHow. Then make sure you have a route to ...



Top 50 recent answers are included