Hot answers tagged

7

I can ping6 the IP address noted above from my office. PING 2001:4ba0:cafe:c54::1(2001:4ba0:cafe:c54::1) 56 data bytes 64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=1 ttl=115 time=41.2 ms 64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=2 ttl=115 time=33.4 ms 64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=3 ttl=115 time=34.8 ms When I access the ...


5

You need to open endpoints for the services you want to make accessible from the Internet. In the old Azure portal these are listed under Endpoints. In the new portal under Inbound Security Rules.


5

Windows Server 2012 has a built-in firewall, which can be managed from either GUI (running wf.msc) or PowerShell, using Network Security Cmdlets.


4

Extended support for 2012 doesn't end until 2023, so unless they need 2016 for something specifically you may want to opt with just upgrading from essentials to standard and sticking with 2012. https://support.microsoft.com/en-us/lifecycle/search?sort=PN&alpha=Windows%20Server%202012%20R2&Filter=FilterNO


4

If you are using legacy password policies, those apply to the entire domain. You may want to research fine-grained password policies. (Note: Fine-grained password policies were originally introduced in Windows Server 2008.)


3

With Powershell you can do something like this : Get-ADComputer -filter {*} -searchbase "OU=xx,OU=xx,DC=xx,DC=xx"| Where-Object {$_.name -like "CMP*"} | Move-ADObject -TargetPath "ou=Com,dc=xx,dc=xx" Get-ADComputer selects the computers of your AD. Where-Object only with their name corresponding to the wildcard Move-ADObject and finally you your ...


3

Per your comments and other peoples tests it seems that the most likely explanation is that your client systems simply don't have access to the IPv6 internet. Iain's answer does a great job of dealing with that side of things. This answer take a broader view of the background surrounding your problem and your options for moving forward. IPv4 and IPv6 are ...


3

You want the LastWriteTime property. You could see my somewhat recent answer here using this property to basically write your script. Based on modifying that (but not testing it), something like: $searchroot="[root path you're searching in]" $age=(get-date).AddDays(-60) Get-ChildItem $searchroot | where-object {$_.LastWriteTime -ge $age } | ForEach-...


3

This error is caused by LastPass. The login hooks used by LastPass seem to be incompatible with Server variants of Windows - causing lsass.exe to crash. Note the following related error message (Event ID: 1000) in the Application event log: Faulting application name: lsass.exe, version: 6.3.9600.17415, time stamp: 0x545042fe Faulting module name: lplogin....


2

Switch over to use the URL Rewrite v2 module instead and create a rewrite rule. This module is compatible with IIS 8.5. The downside is that it's only capable of rewriting values, not removing entire headers, so the best you can get is to have the server response with "Server:" instead of "Server:Microsoft/IIS". To entirely strip this header, you'll need ...


2

You can use the same name and IP but as suggested you will need to clean up AD first and remove references to the failed DC. you can use NTDSUTIL to do this. NTDSUTIL.exe allows you to do a metadata clean up. this way you don't have to go through and manually delete stuff. use the link below, it as all the information you need. https://technet.microsoft....


2

In WorkGroup mode all the local username of the remotes PC that connect to the server must be created locally on that server. (with same password off course) As when Explorer try to open the remote directory, it send the username/password, thus lead to the error you see. So if the account Bob with password Hello01 access the server, then Bob with password ...


2

You can demote your DC and run sysprep with generalize option. "C:\Windows\System32\Sysprep\sysprep.exe". Demoting will reset Windows security database, sysprepping will regenerate all SIDs. Time needed for this will be approximatelly the same as rebuilding it from scratch. Somehow it doesn't look like the migration problem is with your new domain if it's ...


2

The easiest, cleanest thing to do would be to wipe the server and start from scratch.


2

Yes, you can add a member server to a domain that is using a Windows Server 2008 R2 Foundation as its DC and "primary" server. To "try before you buy" and eliminate the worry of burning money, you can download a free evaluation copy of Windows Server 2012 R2 and then purchase a product key after you confirm that it works.


2

You may have better luck promoting to DC from media, as described in this MS TechNet article Basically, you will move all necessary data in one go with a packed file, instead of establishing all those connections over your high latency connections. After promotion there will be need of regular replication, which will be retried continuously and, hopefully, ...


2

you can use NTDSUSTIL and try a Metadata clean up. if there are any references in AD to your failed DC then the Metadata clean up can remove them. check out the link below https://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx


2

A DNS cache (sometimes called a DNS resolver cache) is a temporary database, maintained by a computer's operating system, that contains records of all recent visits and attempted visits to Web sites and other Internet domains. DNS Cache Poisoning A DNS cache becomes poisoned (sometimes also called "polluted") when unauthorized domain names or IP addresses ...


2

What you want is loopback policy. Normally, users policies are applied to user containers, and computer policies are applied to computer containers. Loopback policies are user policies that are applied to computer containers, and they affect users that log in to computers in that container. The loopback option is an option that is turned on in the policy in ...


2

Your group policy is giving your users local admin rights to the server because the default domain policy applies to the server, unless you have made some other changes but it would appear you have not. Best practice - Leave the default polices alone (or at least don't add to them). Create a policy for groups of settings, so in this case you might make a ...


2

I'm not sure why @whizkid thinks Microsoft doesn't recommend in-place upgrades. That might have been the case way back in the 2000/2003 era of Windows. But ever since the Win7/2008R2 generation of Windows, in-place upgrades have been pretty well supported. In fact, it has basically become the new default for desktop OSes. Just look in the tech news for all ...


1

On Server 2012 R2, Storage Spaces is not administered via a Control Panel applet, but instead via Server Manager as you've pictured above. The Control Panel applet is visible on Win8/8.1/10 clients only.


1

You can convert an Essentials license to a Windows Server Standard license. https://technet.microsoft.com/en-us/windowsserver/dn527667.aspx You would then have 6+ years to upgrade that before support runs out. Windows Server 2016 hasn't been RTM yet, so upgrading to 2012 R2 now certainly would not be considered a bad move. I'm not sure if you're big ...


1

Disable shared config on all servers - this will result in them being temporarily separated and each storing their own config - this is OK. Export the iisConfigurationKey and iisWasKey from web01 and import on all other servers - these encryption keys need to be synchronized across the farm for shared config to work. If you built the other servers by ...


1

I finally did it using PowerShell. Thanks to the following TechNet posts Exchange 2007 GUID Reference and Update ACL Skeleton I was able to delegate control of the TestUsers organizational unit to a user NickA and give the permissions that I originally posted. $OU = Get-ADOrganizationalUnit -Identity "OU=TestUsers,DC=contoso,DC=private" $SID = new-object ...


1

I haven't tackled ACL building with PowerShell yet, but this can be done with the old DSACLS command that has been part of RSAT and the Support Tools since Windows Server 2003. dsacls "OU=Test,DC=domain,DC=com" /I:S /G "domain\user:CA;Reset Password";user Put the DN of the delegated OU in between the quotes and put the user after the /G (grant) parameter. ...


1

This can be done via Hyper-V Manager: https://blogs.technet.microsoft.com/aviraj/2012/05/05/windows-server-2012-convert-vhd-to-vhdx-using-hyper-v-manager/ Alternatively, you can use third party converters such as StarWind V2V converter: https://www.starwindsoftware.com/converter It also has a bunch of extra conversion options (for example VMware to Hyper-V ...


1

If you talk only about the disc, then start stripping out the useless elements - like the server versions. It runs down to "can I convert a VHD to a VHDX". And yes, that is fully supported. Command line, menu in Hyper-V manage (edit disc). If you talk about the VM, it is a 2 step process. Export in 2008, import in 2012R2. THEN edit the disc and link the new ...


1

You can use the same name and IP address, but before you build the new domain controller, you should go through both DNS and ADSIEdit and make sure (carefully) to remove any references to the old name and IP address. Normally when you demote a domain controller and remove any computer from a domain, the AD cleanup is done for you. DNS doesn't always catch ...


1

You need to override other GPO's If you have your password policy built in the domain GPO then you will need to override that GPO. Hit the checkbox for override. Here an is article on Group Policy and Precedence which discussing what is in the title as well as howto override another group policy that is taking precedence. Points of Interest A GPO can ...



Only top voted, non community-wiki answers of a minimum length are eligible