Tag Info

New answers tagged

0

It does look like port 25 open outwards, but possibly not in the other direction, try a site like this http://www.mynetworktest.com/ports.php or this http://www.canyouseeme.org and test port 25 to your servers' external IP address. If it fails, you may have a firewall or ISP configuration issue still.


0

Just create a new PSO with the ADSI editor and a new user group for the user you wish to get this password setting object. To create an PSO: Click Start - run type adsiedit.msc and connect to your domain with FQDN browse to DC=domain_name CN=SYSTEm CN=Password Settings Container and right click it and say new. Fill in your group name to msDS-PSOAppliesTo ...


0

If you can get to the server console while this is happening, you'll often be able to tell from Task Manager. True story! But there's one tweak: turn on the view of the Command Line. This shows the arguments passed to the target process, from which you could typically infer the site/page/consumer. Run Task Manager Go to the tab where you can see process ...


0

I know this thread is a little old, but I personally subscribe to the "Write + Execute = BAD" school of thought, and therefore a upload folder should never execute. With this in mind, any handler beyond the static file handler could be considered a security risk. To remove all but the static file handler (regardless of what the other handlers are called) ...


0

It turns out this issue is due to KB3002657 and KB3046049: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_28642944.html I uninstalled KB3046049 and the problem went away for a few weeks. Recently the problem returned, so I uninstalled KB3002657 and the problem went away again. Hopefully it will stay that way this time. ...


0

It sounds like the printers themselves are not being detected when the process is running. Did you try to add some debug code to output to a file and see where it is getting caught up? I have found that processes that hang in VBA do not generate much information in the event viewer and typically require more error catching in the code. I have seen the ...


0

Elias did you look at the scheduled task and check the box that says "run whether user is logged on or not"? Your issues sounds like it's not checked so when the task tries to run it can't.


7

This largely depends on the underlying hypervisor and the admins who run it, let me explain: It's bad practice to just arbitrarily give you 4 CPU's just because you requested it. Generally speaking, you think you need 4; but resource monitoring says you only need 1. VMware ESXi for example requires locking all pCPUs when a vCPU makes a request for CPU ...


0

Yes, the statement makes sense in general. However, it's something you should test for your exact configuration and workload though. Sometimes more CPUs is better if you can actually take advantage of them. However, if you don't actually have that much parallelism, a VM configured with less CPUs will often perform slightly better as it avoids slowdowns ...


0

That script checks two registry entries. The rest of the script is formatting the output and uploading it to an ftp server. If you're running this from the Domain Controller, use Andy's code to get a list of computer names, loop through that list, and check the registry remotely for each computer.


0

Let me add one thing: You can run a VM with x64 bit OS (Windows Server R2) on a x86 host with x86 VirtualBox: http://www.sysprobs.com/install-run-windows-2008-r2-x86-sun-virtualbox http://www.sysprobs.com/64bit-guest-os-32bit-host-os-vmware I've done it.


0

There is no standard practice for manually copying around Exchange transaction logs because nobody should be doing this; if you need them for point-in-time recovery after a full backup, the correct thing to do is to perform an incremental backup, which will include all transaction logs since the last backup.


0

The Backup plan is entirely dependent on what type of environment your are running. Lets assume it's a MS SQL server, since it's Server2008 and Exchange 2010 in the tags. Info on choosing a strategy: Back Up and Restore of SQL Server Databases Info on Transactionlogs backups: Transaction Log Backups A typical set-up would be a Full Backup, as is now, at 8PM ...


44

This used to be true, but is no longer exclusively true. What they are referring to is Strict Co-Scheduling. Most important of all, while in the strict co-scheduling algorithm, the existence of a lagging vCPU causes the entire virtual machine to be co-stopped. In the relaxed co-scheduling algorithm, a leading vCPU decides whether it should co-stop ...


0

You could create a local admin account on their computers and they could enter those credentials whenever they need to install an app. GP won't do this though - at least not the way you want. You could use restricted group members policy to add an account to all admin group on the computers.


0

You threw a curve ball when you said local accounts work directly over the internet. Then you threw another one when you said the authentication does reach the server when you look at the log. I only can come up with 2 answers. Since you said lock down configuration was done before I would look in 2 places. Have you checked the remote desktop users group ...


0

Without knowing the exact error message I can only assume that the password policy on that server (or domain) are set to have either a minimum password age, length or complexity. It the new password doesn't meet those criteria then it won't be allowed to change it.


2

The term for what you're asking is called preseeding, and yes it is possible. You can do it many different ways, such as using robocopy or Windows Server Backup. To use robocopy, an example command would be: robocopy "<source replicated folder path>" "<destination replicated folder path>" /e /b /copyall /r:6 /w:5 /MT:64 /xd DfsrPrivate /tee ...


0

This is a common issue with Web applications when not initialized after receiving of the first request started. Try the following Create a scheduled task to start the application if it is not already running. such as through powershell $appPath = "c:\mypath" & $appPath "arg1" Install Always Running assuming you have IIS 7.5


0

As said above, you need to enable auditing that will let you track every critical changes occurred into Active Directory. You may follow this informative PDF guide that provides step-wise instructions to enable auditing and obtain the information of such changes into real time.


2

You should be able to query the event log with Powershell to get what you're after. Here's a one-liner to get you started: Get-EventLog -LogName Security -InstanceId 4624 | ? {$_.TimeGenerated -gt '2015-04-14'} You should be able to extend that to filter down to actual real users rather than automated tasks, services, etc.


1

BitLocker works on a volume-level - the entire underlying partition will be encrypted, block-by-block, using a so-called Volume Encryption Key. When the Operating System boots (or when the volume is mounted), the Volume Encryption Key (optionally encrypted by a PIN code, a TPM-stored key or both in combination) is loaded into memory, and from there, access ...


0

I know that this is pretty old but we came across this problem ourselves. We found in the MSI logfile that the information it retrieved regarding the various install folders (favorites) were pointing to an non-existant network drive. Check the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders for issues.


0

I ran into the a similar set of errors recently when my primary DC's system volume filled up (I'd just taken the job, and the DC was previously sitting at less than a gig of HD space and I hadn't gotten around to freeing space). When it happened, the nt file replication system (ntfrs) on the PDC got corrupted. Make sure that the structure of the sysvol ...


0

This seems to be a solution! http://activedirectoryfaq.com/2014/10/ad-attribute-editor-missing-make-search-visible Open de object after using "Find". Click the "Member of" tab. Open a group of which the object is a member. Close the object window. Locate the object in the group and double-click it. The object window should open with the "Attribute Editor" ...


0

Sorry, reputation is too low to reply to comment, so posting this as an answer. The Powershell commandlet New-ADFineGrainedPasswordPolicy requires the active directory module to be loaded. First try "Import-Module ActiveDirectory" If that doesn't work, see if it is available. "Get-Module –ListAvailable" will show you what is available. If it is not ...


0

Default access for "Administrators" and "Remote Desktop Users" doesn't come back if you modify "Allow log on through Terminal Services" settings with some specific account and then again set it to "Not Configured". You need to explicitly define "Administrators" and "Remote Desktop Users" in this case.


0

ESXi and HyperV would both allow you to utilize the spindle drives for a "D" data drive with ease - just store a 2nd virtual disk on those drives, presented to each VM. Server 2012 R2 also offers Storage Spaces, with which you could configure both SSDs and 7.2K drives with "tiering", which would allow for "hot" data to be auto-tiered to the SSDs regardless ...


0

Your clients don't need their own certificate. They just need to trust the Certificate Authority certificate (or certificate chain) that signed the LDAP server's certificate. You didn't need to worry about this on the localhost because the CA certificate was already trusted by default. It's not clear from your question whether the LDAP server is also the ...


0

This wouldn't be a terrible idea, assuming you get SSDs that are rated for the type of use you need them for. I'd assume that not requiring much "horsepower" means both CPU and disk I/O, so there'd be no need to splurge on SLC drives. Are you planning to buy a server from a vendor, or build one yourself? If you don't buy vendor-certified SSDs (or you build ...


0

If using the Desired State Configuration File Resource as suggested by @Davidw, I recommend using the Checksum property as well (https://technet.microsoft.com/en-us/library/dn282129.aspx). If you don't use the Checksum property, the file will never be updated because you're comparing only the file or directory name, which I'm assuming you're not changing ...


-1

No need to waste time for searching. Demote Outdated domain server Metadata cleanup Promote it again


0

There could be a missing attribute for that user. How do you do the transformation? Do you also take into consideration some group membership? Another think that it might help you is trying to get something to see the responses when the user tries to access it and looking on the ADFS server for the event where the user accesses it(like fiddler or IE ...


0

If you look at the question, these are not pushed out or linked through GPO. After renaming the printer on the print server, and on the web interface, after a reboot the printer will map to already-connected users with the new name. If you do this in the middle of the day, users will get an error message saying the printer has been deleted, until it maps at ...


6

Enable Advanced auditing on the domain controllers for Account Management: Audit User Account Management Note that if you enable Advanced auditing, you must not use legacy auditing. Here are some of the events of interest: 4723: An attempt was made to change an account's password ...


0

You can enable auditing for Directory Service Changes. I don't know definitively if password resets show up there. They'll certainly be changed, but the auditing may only capture "normal" modification of attributes, meaning that the auditing may have the view that the change was performed under the authority of a DC, rather than in the context of a ...


0

I'm guessing from your description that C: and D: are partitions of the same local drive. If that's the case, there is little to worry about. Leave 300MB on the C: drive if you want to avoid the warning message that says "If the pagefile on volume C: has an initial size of less than 126 megabytes, then the system may not be able to create a debugging ...


1

To answer your specific question, yes, you can view application pool recycle events in the Windows System event log. Filter for event source 'WAS'. By default only the following recycle reasons are logged; Private Memory Limit Exceeded Regular Time Interval Virtual Memory Limit Exceeded You can change the defaults and enable logging for other recycle ...


0

'Users' is not a group, it is a container, anyways coming to your question, if you have added your users to a group then set the permission of that group as per your need. For setting permission right click on group, go to properties->security.There you can see permissions and options to apply or deny them. Hope this helps.


0

You can export the certificate authority database also. Here is the in-depth Microsoft Technet documentation for that. You will want to read it carefully. The table on the first page of the link indicates that migrating from 2008 32-bit to 2008 R2 64-bit is supported.


0

[I can't add comments yet, so a moderator can make this a comment if needed.] Have you excluded the files from antivirus scanning on the server and the clients? If you have three or four antivirus trying to scan the files all at the same time that would be ugly. I know that doesn't explain why the XP machine is still doing OK, but it came to mind and it's ...


0

You can save the users with "addusers" get it off ms site, by saving to a csv file etc. then restore them fairly easily You can get the shares (if you have many) out of the registry, just find the relevant areas and back it up. Id also recommend using another drive if youve got one machine, and if you take that route make lots of notes, text backups and ...


2

Unfortunately, it's going to have to be a fresh install. I think it's unlikely that you're going to be able to automate this process, and I think it would be a case of setting everything up manually. Personally, I would recommend a new box, but failing that, a new hard drive would be the best solution. That way, if there is anything you've missed off, you ...


-1

Ah, same thing here. I solved by disabling public access to RDP, allowing only private network connections to the server. Which is, by the way, recommended as soon as you get access to your brand new server.


1

Your DNS server isn't authoritative for the ip address that your server is using, your ISP is authoritative for the ip address. You need your ISP to create the PTR record for your server in their Reverse Lookup zone.


1

You will need to use the 'Feature Delegation' or IIS Remote Management to enable users access to this without making them local admins.


2

Make sure you set the alternate crashfile (HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl) otherwise memory dumps get interesting when the pagefile is not on C. You can move it, however the larger question is do you have partitions or separate disks?


2

You should be perfectly fine to move it. If you manually delete it while the OS is offline Windows just re-creates it.


2

Have you used the same hostname and IP address for the secondary? If so you need to remove the secondary as a DC, remove all GUID/references in DNS/ADDS to the old name...or you can use a unique name.


0

I don't believe there is any downside to having two print queues for a single printer. I have made seperate queues for each papertray of a printer, to avoid the "grouping issue". Create a TCP/IP print queue manually and add a descriptive tag; 192.168.1.100_tray1.



Top 50 recent answers are included