Tag Info

Hot answers tagged

6

The command I use to install .NET Framework 3.5 on Windows 8.1 and Server 2012 R2 is: DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:D:\sources\sxs Where D:\ is the mounted ISO or DVD drive. The only difference from yours is the /LimitAccess, but I believe that is the important part, as it prevents it from attempting to contact ...


5

To be a little more technically precise: Each DC that doesn't hold the PDC Emulator role will sync with the DC that does hold the PDC Emulator role. Every other domain joined computer will sync with whichever DC authenticates it, which is not necessarily the PDCe. You do not need to manually configure any non-PDCe DC or member computer.


5

This is how I currently do installs of Windows with virtio drivers at install: Create the new VM with a genuine Windows installation ISO image. I cannot guarantee that anything will work if you use a pirated copy of Windows. Choose to customize the machine configuration before install. Select the IDE hard drive, and change its type to VirtIO. Click ...


5

Yes you may safely ignore it, unless it keeps happening repeatedly long after the domain controller/DNS server has rebooted. The warning should only occur when you reboot the domain controller or otherwise restart AD and DNS. The reason this happens is simple - DNS hosts Active Directory-integrated zones, and therefore cannot finish initializing until ...


4

It's not right or wrong. It's entirely up to you. You can use your router as a forwarder, you can use your ISP, you can use Google DNS, OpenDNS or any other public DNS servers OR you can choose to not use any forwarders and use the root hints (my preference).


4

Group Policy magic. Copy and paste from: https://msdn.microsoft.com/en-us/library/bb530324.aspx#grouppolicydeviceinstall_topic6 Allow users to install only authorized devices This scenario builds upon the first scenario, Prevent installation of all devices, where you prevented the installation of any device. In this scenario, you add a list of ...


4

Microsoft does not support upgrading the OS for Exchange Servers. Assuming you have DAGs setup, it's reliance on fail-over clustering with Windows will be one of the biggest issues with trying to upgrade the OS. Windows 2012 R2 to the soon-to-be released new Windows Server version is the first version to allow upgrades to the OS for Windows Fail-over ...


3

Using an RD Gateway is a superior solution. It should satisfy requirements of infosec as well.


3

I had the same issue when I mount the Windows install disk or use the physical DVD, and here's how I fixed it: Create a folder under root (C:\NetFx3 for example) Copy the microsoft-windows-netfx3-ondemand-package.cab from a Windows install disk .\sources\sxs to the C:\NetFx3 folder Command Prompt as an administrator DISM.exe /online /enable-feature ...


3

This is fairly normal for a single DC environment, due to the order and nature of components as they start up (the networking stack, DNS and AD) and the reliance of AD on DNS. Do you see Event ID 4 and 2 after the Event ID 4013? If so, then everything is OK. As a best practice, you should have at least two Domain Controllers and each Domain Controller ...


3

Microsoft has a scenario of transfering FSMO roles from a "dead" server. It means you dont need approval from old fsmo holder or negotiation. New server simply states that now he holds fsmo roles. According to this scenario, you can simply turn off vswbcdc1 and seize roles by svrwbc To seize an operations master role Open a Command Prompt as an ...


2

This is a bit old, but for future reference you should have run: DISM /online /Set-Edition:ServerDatacenter /ProductKey:XXXXX-XXXXX-XXXXX-XXXXX-XXXXX /AcceptEula Using /Set-Edition:ServerDatacenter instead of /Set-Edition:ServerDatacenterEval because you need to convert from an Eval version to a "regular" version. Reference: Windows Server 2012 ...


2

nltest /dsgetdc:domain.com /server:dcname Will have the TIMESERV flag if it is advertising. You probably need to run: w32tm /query /status /verbose /computer:dcname To get more information about the problem. Potential causes include it may be synchronizing from the hardware/cmos clock, or using the time synchronization of the Hyper-V ...


2

I'm not sure what you mean by applying the opposite policy, but it sounds like what you want to do is to apply a different set of User Configuration settings when this user logs onto a particular computer. If that's the case then you need to look into Group Policy loopback policy processing, which would allow you to do just that. ...


2

I tried to solve the problem with Get-Member, as suggested by mortenya in the comment section, but with no luck. Finally, I ended up with directly editing the WSUS database to change the description. Be careful! Use my solution only if you're absolutely sure what you're doing. Editing the database your server is depending on, is like performing an open ...


2

Generally: NO. Some services at times may be inconvenient (time for a DC was the only case I knew) but the drivers alone are good for performance. Have you ever looked at the hardware simulated for a network card? It is SLOW. The enlightened drivers are the way to go. And they are in any decent OS anyway. This includes recent versions of Linux (Hyper-V ...


2

You should do a metadata cleanup to remove traces of your decommissioned DC from your AD. You should also make sure all FSMO roles are held by either of your active domain controllers, seize roles if they are not. Running a dcdiag could likely also provide useful info as to the overall health of your domain controllers. Based on your dcdiag output your ...


2

You can increase the cached logon count. By default it is set to 10 and the maximum value is 50 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Current Version\Winlogon\ ValueName: CachedLogonsCount Data Type: REG_SZ Values: 0 - 50 You will still need to logon once per account though. Alternatively you can deploy a RODC to the site but it has an ...


2

I think the issue is that the clients are creating the thumbs.db files, not the server. Make sure your GPO is applied to all client OUs.


2

As of Server 2012 and onwards windows prevents you installing both services on the same server successfully. We tried with 2012 and ended up with a partially installed set of services, as it lets you start the install but it crashes part way through. That is particularly annoying for what it does to the rest of the domain, with a partially installed DC ...


2

You can safely disable anything that you do not need. For example, does your server get its IP address and gateway settings from DHCP? If Yes -> You can not disable DHCP. If No -> You can disable DHCP. Do you need your server to response to pings? If no, feel free to disable ICMP rules. Do you use IPv4 and not IPv6 at all? Feel free to disable all IPv6 ...


2

So, I have resolved this after coming to so many blanks. It turns out that there was an external change that I was not aware of - the house move coincided with a new internet connection and thus a new router. The new router seems to be providing IPv6 details via DHCP even though IPv6 is disabled in its DHCP settings. Even though each and every server was ...


1

The 10 GB size limit applies to the database size, and there are separate database for each SharePoint site, so as long as you aren't hosting the data on the site itself you might be ok. However to do that can be tricky, I believe what you would need to do is have an ADFS server (which you will want to provide a better sign in experience for you remote users ...


1

Manually install the client connector as detailed at http://blogs.technet.com/b/sbs/archive/2015/07/23/client-connector-availability-with-windows-home-server-small-business-server-and-windows-server-essentials-for-supported-client-os.aspx


1

Got it working with some assistance..... So the majority of the users are stored in another OU, so even though I'm sure that I tried it, the search string (ldap:// needed to have just dc=domain, and not limit it to the cn=Users AuthName "Dialog-box-name" AuthType "Basic" AuthBasicProvider ldap AuthLDAPURL ...


1

you already almost know the answer: the preferred approach is to have a one to one relationship between an image and an answer file


1

You can use the route command to make local traffic go through the bridged interfaces and non-local traffic through the modem.


1

You want to use Route.exe to specify the interfaces that should be used.


1

Ok, finally figured out what was wrong! Thanks to Chopper3 for pointing me in the right direction. The problem is that the firmware was too old for the Windows Server 2012R2 B110i driver. I had to upgrade the firmware using Smart Update Firmware DVD Proliant Support Pack v10.10 first, then I was able to run SPP to get the latest version. After all that, ...


1

RemoteApp and full Remote Desktop Services will require RDS CAL's. However, as with all licensing questions, please see your local software reseller for full details.



Only top voted, non community-wiki answers of a minimum length are eligible