Tag Info

New answers tagged

0

As you stated that the EXPR is missing, then the commands you need to run should be: Remove-OutlookProvider EXPR New-OutlookProvider EXPR


0

This question is 3 years old, but it has an unsatisfactory answer and it has been view over 25000 times. I think the real issue is that the domain name is a single-label DNS name (one word (billsgs) and then a valid tld (.net)). By default, DNS clients will not register with these domains because they are likely to be public domains. ...


1

Using Event Viewer, you can filter the Application log for Event ID 11707. Search by the particular date/time you think the program was installed and it will also list a user name. Very useful if you need to track who is installing what, when. Alternatively, you can filter the Application log for Event ID 11724 if you need to see who uninstalled an ...


1

what you are describing sounds like bonded authentication. this means that a user can not succesfully authenticate via 802.1x unless they have a valid machine session first. If this is what you need to accomplish it is normally enforced on the WLC as oppossed to Radius in my experience.


-1

No need to waste time for searching. Demote Outdated domain server Metadata cleanup Promote it again


0

I am now looking for a program that can help us prevent, or atleast immediately when download has finnished, scan the file for unwanted files. Start with Next-Generation Firewall Install UNTANGLE as Router. With it, You can prevent downloading files with extensions like mp3, mov etc. Beside that You can setup MIME scanning to block files with fake ...


0

I was having the same issue when using Detect Now. Any time I changed the security filtering on a GPO, the ACLs for sysvol would show as having a problem. On one DC, the policy in sysvol had the permission change, but on the other it did not. For over an hour this was the case. Then when I came to work the next day, everything was fine. In my case, it ...


0

AFAIK Windows Server 2008 R2 has the multiple RDP session disable by default. At the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server fSingleSessionPerUser == 0 -> multiple sessions enable fSingleSessionPerUser == 1 -> multiple sessions disabled


1

Limiting the amount of connections to a single user will make sure only one user can utilize the machine at a time. Start the Group Policy snap-in, open the Local Security Policy or the appropriate Group Policy Navigate to the following location: Local Computer Policy > Computer Configuration>Administrative Templates > Windows Components > Remote ...


1

It's been a while since I used SBS 2003, but I believe if you demote it, you will still be violating the licence (because it's not a DC and doesn't hold the FSMOs), and therefore you will still have the issue of the server trying to shut itself down. Best recommendation would be to install Exchange server elsewhere and migrate mailboxes and public folders to ...


2

This is usually because you have a custom application on top of IIS. If it is an in house built application, speak with the Developers about it. If it is not developed in house, please have a look at .net CLR with counters https://msdn.microsoft.com/en-us/library/x2tyfybc(v=vs.110).aspx and more tips on CLR performance ...


1

my thoughts based on my understanding: pros -- 1) easier to manage ? easier to upgrade - apply bug fixes , security patches etc. 2)save some disk space 3)saves the headache of maintaining same version for all clients: cons: 1)has network dependency 2)what if the server hosting the exe goes down ? we need to worry about redundancy 3)performance issue ...


1

The script is almost right, I would change it to this as the WUServer and WUStatusServer paths need to be in the parent key. example: # Set the values as needed $WindowsUpdateRegKey = "HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" $WindowsUpdateRootRegKey = "HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\" $WSUSServer = ...


5

Enable Advanced auditing on the domain controllers for Account Management: Audit User Account Management Note that if you enable Advanced auditing, you must not use legacy auditing. Here are some of the events of interest: 4723: An attempt was made to change an account's password ...


0

You can enable auditing for Directory Service Changes. I don't know definitively if password resets show up there. They'll certainly be changed, but the auditing may only capture "normal" modification of attributes, meaning that the auditing may have the view that the change was performed under the authority of a DC, rather than in the context of a ...


0

Seems the best way to achieve taking a dump og the process as close to recycling as possible is using ProcDump Command procdump -m -ma -s 10 c:\temp\PrivateBytesLimitReached.dmp


1

If you ran the command as is, wget didn't save anything anywhere. The option -O- writes to standard output, in this case to the pipe connecting to gunzip. Any data downloaded is fed to gunzip. gnuzip extracts whatever it gets from standard input, and writes the extracted content to standard output, this time to the pipe connecting to dd. dd writes to ...


-2

Normally, wget would save to whatever directory you are currently working in so run ls to see the contents, or pwd to see what directory (or just look at the beginning of the line`. EDIT: If you know the name of the file, or part of the name, you can run sudo find / -name 'filename'* to find it, replacing what's inside the quotes with what you know of the ...


0

From the start menu, pick administrative tools, remote desktop services and then remote desktop session host configuration. In that window there's a Connections panel with all of your network interfaces listed. Double click on the connection that you're accessing and check the settings on the general tab. Confirm this is the same as you expect and the ...


2

What do you want is a bidirectional, asynchronous replication/mirroring. The best tool at hand under Win2008+ (without buying special hardware/software) is DFSR. It was designed precisely with that WAN-routed replication in mind.


1

To answer your specific question, yes, you can view application pool recycle events in the Windows System event log. Filter for event source 'WAS'. By default only the following recycle reasons are logged; Private Memory Limit Exceeded Regular Time Interval Virtual Memory Limit Exceeded You can change the defaults and enable logging for other recycle ...


3

You aren't going to be able to synchronize GPO's across forests, although you can copy GPO's across forests if a suitable trust exists. I don't think DFS replication works across forests. DFS Replication: Frequently Asked Questions (FAQ) https://technet.microsoft.com/library/cc773238(WS.10).aspx Must members of a replication group reside in the same ...


2

The documentation for LockoutStatus defines the field like this: Orig Lock: Displays the domain controller that locked the account (the domain controller that made the originating write to the LockoutTime attribute for that user). You can access the attribute properties from replication metadata. $LockedAccount=Get-ADUser [username here - no quotes ...


0

Here is the Microsoft TechNet official info on how to update the clock on a domain controller https://technet.microsoft.com/en-us/library/cc784553(v=ws.10).aspx This is what worked for me: w32tm /config /manualpeerlist:pool.ntp.org /syncfromflags:MANUAL w32tm /config /update w32tm /resync


0

It sounds like your forwarding is set correctly as it is just www forwarding to new IP. if website.domain.com/Final is working, your IIS is not set correctly. When you reach the webserver with new IP, it would look for default site rather than a new site 'final' you have created.


0

If the DNS is correctly configured to point the domain to the new IP maybe it's the Windows DNS caching. Try to run on a Windows machine cmd : ipconfig /flushdns And test again.


2

The error decode is Bh/4Bh/0Bh = ABORTED_COMMAND/NAK_RECEIVED. I wrote my own tool to decode these and try to give a basic assessment at http://scsi.ev-en.org/ These errors indicate that you have a bad link somewhere, most often it is a bad cable but it can also be a bad port on either side (drive or slot).


1

You should use the built-in Windows Firewall and its logging settings. The logs will tell you the IP addresses of all incoming connection attempts. Since you mentioned that all your servers are internet-facing, there really is no excuse for not using the Windows Firewall as a part of your defense in depth strategy. I would specifically recommend not turning ...


0

This is a known limitation with the 4625 event and RDP connections using TLS/SSL. You will need to use RDP encryption for the remote desktop server settings, or get a better IDS product.


0

It is not possible to change the window color when using the basic theme. I don't remember where I read this (it's been a long time since I posted this), but Microsoft did this on purpose because changing colors is a "feature" you have to pay for in some developing countries. The basic theme is the only one supported in the Windows Starter and Home Basic ...


0

All of this is covered in the Windows documentation on shares, file permissions, and groups. Scenario 1: Everyone will have full access. Access is cumulative. Scenario 2: Everyone but Guest will have full access As to why some users only had read-only in Scenario 1, it would have to be that some users have full vs. read-only file (NTFS permissions). ...


0

Phase2 refers to when the VPN endpoint exchange information about the protected LAN segments and the protocol to be used for encryption/authentication of these segments. Typically, you have Phase2 error when: the two VPN endpoint have different views of what should be routed inside the VPN when the ENC/AUTH protocols do not match. Let me do an example: ...


1

You will need to use the 'Feature Delegation' or IIS Remote Management to enable users access to this without making them local admins.


0

Windows 2012 requires newer hardware than 2008. The error 0x00000091 is usually the result of a hardware failure or unsupported hardware.


0

Yes, if they have existing infrastructure use it, DNS, AD, DHCP, etc. make the most of it. If you have to start installing services keep those on your primary domain and also have the trust in place. That way if and when you migrate to a single domain part of the job is done for you.


1

I'm afraid that you're going to have to approach this from the client end. Changing the timeouts is only going to help clients the next time they check in, which is usually after half the existing lease time, or sometimes during boot. You can approach this by manually forcing the clients to check in. You might be able to do this by tweaking some group ...


1

Is your DFS-R staging area on the same volume as the DFS-R folder? For performance reasons, it should be. If not, then DFS-R is having to copy the file from staging volume to the destination volume rather than doing a straight move. Here's where the speculation kicks in. It may be that during this copy operation, DFS-R is creating a sparse file, and then ...


2

Based on my experience of removing items from AD, group policy continues to apply and settings do not revert. Since there was an policy disabling the local administrator account in group policy, this caused no end of vexation at $former_employer. I cannot, of course, speak to every item you might have defined via group policy. You might want to ...


0

DFS namespaces use some referral magic to find \\my.dom.com\somecrap if it is on any of the domain controllers -- not just the ones where the namespace is specifically hosted. Non-DFS shares do not have this feature. Normally, you would make each DC a replica for the somecrap namespace by adding them to the Namespace Servers tab on your DFS Management for ...


2

You ask very interesting question that may need deeper technical investigation. My opinion is that Windows "thinks" \\my.dom.com\SimpleSharedFolder is a part of some DFS namespace. But it cannot find related AD information to build a list of target servers that offer folder's contents. Explorer just displays it as empty folder. What happens is (I suppose): ...


0

We use a service account to manage our servers instead of our regular user accounts. So when you launch Hyper-V Manager you have to say "Run as Different User" and then enter in your service account credentials.


0

Long shot... I know this is NTLM, but there are some aspects of NTLM that might be factoring in time skew (There's this: http://superuser.com/questions/395966/how-inaccurate-must-the-clocks-time-be-for-ntlm-requests-to-be-denied-due-to-th which leads to this: http://support.microsoft.com/en-au/kb/976918). Might want to check the clocks.


1

Most likely you have some open file handles to the server in question, even if they aren't actually connected. The existing handles may have not had access (or are using invalid credentials) when they were set up. Rebooting the client PC is the ultimate solution to resolving the issue, however you could use tools like Process Monitor to search for open file ...


2

When a temporary profile is created, is it just a copy of the "Default" profile folder? If so, can I simply add the file I need to the default profile folder, and have new temporary profiles get a copy of that file? Yes. Tested and verified on Win 7 SP1. For future work I'd strongly encourage setting up a test environment. even if you're short ...


-1

Unable To Boot, Find, Sync Mirrored Volume Once you written a monitoring script to detect the failure, you must you have to change the Boot.ini ARC path that points the computer to the partition in which the system files are located. Mirror the boot and system volume (Step 4) http://support.microsoft.com/en-us/kb/323432


0

Thank you for your solution. This definitely guided me to my solution. We use a pac file to configure IE so I had to run the following command: netsh winhttp set proxy 192.168.1.105:3128 "<localhost>" Rebooted and windows update started working again. Thanks


3

You are probably using a central group policy store. Copy the contents of C:\Windows\Policy Definitions from the newest / most up-to-date server and place them in SYSVOL\domain\policies\PolicyDefinitions. This ensures that whenever you use the group policy management console it will be reading from the same central set of ADMX policy templates. When you ...


0

Well, I answered my own question. After doing some more digging, I found that MDT determines if it was booted via WDS or not by means of its ZTIGather.wsf script. The file is located at: DeploymentShare$\Scripts\ZTIGather.wsf In this file, there is a section of code that checks to see whether or not it booted via PXE. In particular, one line reads the ...


0

You do not need a 2012 domain controller or functional level to get newer Group Policy settings. You can get the newer ADMX/ADML files from Microsoft and install them into SYSVOL. They are backwards compatible. Microsoft Downloads: ADMX for IE 11 As for the nuts and bolts of what you're trying to do an the issues you're encountering: What method are you ...


0

the simple solution in this case would be running the gpupdate /force command throughout the specified OU. although i'm eager to know if you found another solution.



Top 50 recent answers are included