New answers tagged

1

Based on https://gallery.technet.microsoft.com/Log-Parser-to-Identify-8aac36bd Get-Eventlog -LogName Security | where {$_.EventId -eq "4624"} | select-object @{Name="User" ;Expression={$_.ReplacementStrings[5]}} | sort-object User -unique You can grab other info from ReplacementStrings. You can also specify a remote computer in the Get-Eventlog command.


0

In the BIOS setup, go to the Advanced menu, then Bus Options, and disable PCI SERR# Generation option. Save and exit your BIOS settings so that the computer reboots again.


0

Hi I don't know what FOG is but WDS will allow you to Multicast over unmanaged switches but the unmanaged switches will treat the Multicast traffic like Broadcast traffic. meaning that the unmanaged switches will flood the multicast traffic out of all ports apart from the port the traffic was received on. Also if there are any routers on the network that don'...


1

I just tried to use ODBC logging myself. After following the instructions you mentioned, nothing was logged. I couldn't find much information about ODBC logging online, I guess because you shouldn't really use it. But one of my IIS 8 books mentions: CustomLoggingModule - Loads custom log modules, which can be used to generate custom-formatted logs. ...


3

I'm not sure why @whizkid thinks Microsoft doesn't recommend in-place upgrades. That might have been the case way back in the 2000/2003 era of Windows. But ever since the Win7/2008R2 generation of Windows, in-place upgrades have been pretty well supported. In fact, it has basically become the new default for desktop OSes. Just look in the tech news for all ...


2

What is being backed up? Files, system state, SQL, Exchange? Has there been any change in the quantity of data? Have there been any permissions changes that might cause the application to hang? Are there any issues with the storage that is being backed up? How about the storage you're backing up to? RAID issues can cause slow reads, for example. ...


0

Some what of an old topic but I just ran in to this problem my self on a 2012 R2 server. I was trying to add the script (bat file) to the folder on a domain controller that wasn't the PDC (https://support.microsoft.com/en-us/kb/197132). Once I switched to the PDC I was able to copy the script in to the folder.


0

File screening for .msi files was switched on. DOH.


0

After a lot of trys we noticed that telnet conection to the webservice was failing. We check the router config and the port 80 was blocked.


-4

good answer! Worked for me. Ensure you can ping down upstream servers Double check all your settings within the Options within WSUS


4

There is no right answer here. You should estimate how much space you will need for growth and plan accordingly. For example, you're deploying 2008 R2, which is already 7 years old. So you should factor in enough space for an in-place upgrade to a more modern OS. Also, you'll want to factor in the page file size and whether or not you want full crash dumps. ...


0

I believe I found the answer to my question. I moved one of the vhds to an external USB3 hard drive on the replica server, and it was running on the "Quick removal" policy. I thought I had already set it to the "Better Performance" policy when I originally set up the drive, but this was not the case. So, I: Changed to "Better performace" Restarted the ...


0

SysMon should be able to surface this information, including the executable image and parent image. It would be recorded as an event Id 1, ProcessCreate. https://technet.microsoft.com/en-us/sysinternals/sysmon


0

Unfortunatly no simple solution found. Solved the problem with this instruction: https://4sysops.com/archives/offline-activate-the-built-in-administrator-on-windows-10-without-signing-in/ Re-activated the local administrator and removed the pc from the domain. And added it back in.


2

Yes, you can add a member server to a domain that is using a Windows Server 2008 R2 Foundation as its DC and "primary" server. To "try before you buy" and eliminate the worry of burning money, you can download a free evaluation copy of Windows Server 2012 R2 and then purchase a product key after you confirm that it works.


2

As per the documentation the syntax is as follows: robocopy <Source> <Destination> [<File>[ ...]] [<Options>] There's a few oddities with your script: /S copies subdirectories (but not empty ones) /E copies subdirectories including empty ones. /E implies /S so you can drop the /S However /Mir is described thusly "Mirrors a ...


0

The "obsolete cryptograpgy" message in Chrome, is because of the server supporting weak Diffie-Hellman (DH) key exchanges. More specifically, this is documented in the HTTP/2 spec on the Cipher Suite Black List. When you use the PowerShell script from Alexander Hass (from the current Accepted Answer), then it includes these ciphers which are on the ...


1

This can be done via Hyper-V Manager: https://blogs.technet.microsoft.com/aviraj/2012/05/05/windows-server-2012-convert-vhd-to-vhdx-using-hyper-v-manager/ Alternatively, you can use third party converters such as StarWind V2V converter: https://www.starwindsoftware.com/converter It also has a bunch of extra conversion options (for example VMware to Hyper-V ...


0

Did you find Hyper-V account? There's also another account named Hyper-V that needs to have permission. If it doesn't work, the best way is to simply uninstall hyper-v role and uninstall it again. Post this, import your vms.


-1

Run gpedit.msc, there you have "Computer configuration" node and "Administrative templates" subnode.


0

This is not the answer, but I couldn't fit it in the comments... you need to change the to the location of where those hidden folder with {} are. What this script does is find all the {} (which are hidden, or should be), and then it takes the .lnk and look at where it points to (recycle bin, explorer.exe). This is in PowerShell: $path = "<PATH TO ...


1

Are you looking for ALL types of hotfixes, or perhaps only those that are security related? MS releases ISO images for each month's security updates that are available here https://support.microsoft.com/en-us/kb/913086 To transfer the files more quickly, try using a faster DVD burner, a USB 3.0 thumb drive, or USB 3.0 pocket hard drive.


2

For those who seem surprised that a server could be offline and not able to download patches: There are plenty of installations out there which are not connected to the Internet. Think powergrid infrastructure, power plants themselves, many factory installations, ships, navy ships, anything critical which doesn't need to speak to the outside world really. I ...


0

I figured out the problem. When we use pscp alone on command prompt , this is the prompt we get The server's host key is not cached in the registry. You have no guarantee that the server is the computer you think it is. The server's rsa2 key fingerprint is: ssh-rsa 1024 cc:78:13:a3:68:a6:59:7e:b8:23:2d:13:3e:66:9b:b9 If you trust this host, enter ...


0

As far as I remember, LogParser was not able to extract all event information (I mean both System and EventData that you can see in the xml view for each event in the EventViewer). Therefore, I went with powershell. My script works well, but is very slow: it needs about 80 seconds to convert 10 Mb .evtx file... $a = Get-Item *.evtx $output_file = [System.IO....


0

https://blogs.technet.microsoft.com/heyscriptingguy/2013/06/11/determine-pending-reboot-statuspowershell-style-part-2/ here is the updated link and script https://gallery.technet.microsoft.com/scriptcenter/Get-PendingReboot-Query-bdb79542


0

Ok, I think I figured it out... It looks like a known limitation with Remote Control which does not support multi-monitor mode, and the error is not properly reported to procexp.exe (or even to RDP Services). I have tested unchecking this setting, and Remote Control works again. It seems it was intermittent because users were sometimes remoting in from ...


2

I figured it out. My problem was a missing special permission. The LIST groups need read extended attributes for ABE to work.


3

Consider adding a WSUS server to your environment. The WSUS server will connect to Microsoft update servers and download any approved updates, you can then approve what updates are installed on the clients centrally. You can leave automatic updates off and force the clients to update from the wsus server. https://technet.microsoft.com/en-us/windowsserver/...


-2

Add the column 'Filename' in explorer and you see the usernames


1

If you talk only about the disc, then start stripping out the useless elements - like the server versions. It runs down to "can I convert a VHD to a VHDX". And yes, that is fully supported. Command line, menu in Hyper-V manage (edit disc). If you talk about the VM, it is a 2 step process. Export in 2008, import in 2012R2. THEN edit the disc and link the new ...


0

Solved by this answer: http://superuser.com/questions/409099/is-there-a-log-file-for-rdp-connections Looked the last bad password attempt on a dc and looked the rdp log at same time.


0

This is out of the realm of what you'll be able to fix yourself. As I see it, you have two options: Open a support ticket with Microsoft. If you don't have an existing support agreement, you'll have to pay. Your option 2: scrap their entire local AD. The cost of option 2 in terms of downtime, lost productivity and IT time probably dwarfs the cost of ...


0

what i found was this https://www.apachelounge.com/viewtopic.php?p=21108 hope it helps you Thanks


-1

I tried this simple modification and worked like a charm. Got this from some genius named Thekid2point0 on another site: "Not sure if this would help but I had a user with this same issue and after awhile changing all the settings I could find, I found one that did the trick. Under the Folder options go to the Search tab and under how to search check the "...


0

The problem was i was trying to set that GPO in the Local Group Policy for each RDS Server, once I set the same GPO on the Domain Controller (Domain Policy), it allowed me to have the connections that I want.



Top 50 recent answers are included