New answers tagged

0

Make sure the proper services in the domain controller is on, and run analyzer to ensure your DC is healthy Make sure your DNS is properly advertised Best Practices Analyzer Active Directory Best Practices Analyzer Test telnet port 389 and 3269 from this new machine to the DC


0

That's correct. A traditional failover cluster may contain multiple instances, and each instance may contain multiple databases. A database is part of only one instance, and an instance only runs on one node at a time.


3

Finding the remote machine is easy: Just use Resource Monitor. Go to the 'Network' tab, expand "Network Activity", sort by Send(B/s). Your culprits will have the highest current Network traffic. Alternatively, you could use TCPView. https://technet.microsoft.com/en-us/sysinternals/tcpview Order by "Sent Bytes". Look for entries where the Local Port is ...


1

Use the Net command in your logon script. Example: NET USE P: \\dfsroot\path\to\folder The GPO for drive maps is at User Configuration/Preferences/Windows Settings/Drive maps


3

I'm not sure that modifying the group value will do what you think it will. The Group value displayed in the output of get-acl refers to the security group of the owner (in your case the security group of Server\user). Also, bear in mind that Get-ACL does only that - it gets ACL records. It does not set ACL records. If you are trying to grant a specific ...


0

configure your receive connector in exchange management console(EMC)>server config>hub transport>"name of your receive connector" to accept communication on 25, set your local addresses to recieve mail from all v4 IPs, on port 25 and your remote servers that has your IP on the linux machine: x.x.x.145 for basic testing use auth TLS and permissions ...


-1

To fix this: Step 1: Locate 2008 R2 installation media. Step 2: Mount installation media on the 2003 Server. Step 3: Upgrade the 2003 server to 2008 R2. Step 4: Profit https://technet.microsoft.com/en-us/library/dd979563%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396 2003 hasn't been supported for years. You should absolutely expect for little ...


0

What I ended up doing was: Configure AD sites for Site A and Site B. Installed Exchange 2010 SP1 on Windows 2008 R2 machine in Site B. Applied SP2 and SP3. Site A server is configured with mail.domain.com so I configured site B server with mail2.domain.com. Added MX record with lower priority for mail2.domain.com. Ensured that my SPF record contained the ...


1

This question already has a million answers, but I'm gonna add another one. Here's a little function I wrote for easily doing reverse DNS with dig. Add this to your ~/.bashrc file, reload your shell, and then you can do reverse DNS lookups with revdns 1.2.3.4: function revdns() { octets="" addr="in-addr.arpa" # split the IP address into an ...


1

Resolution same as JackD above, except on Windows 10 machine. I had to do the add, remove server, tell it to reconnect next time. Otherwise it would not save the list.


0

Here is a cmd-script that extracts the static routes from the registry, and issues route delete commands for each of them. This method removes them both from the stored list of persistent routes, and from the currently active routes. @echo off set key=HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes for /f "tokens=1,2,3,* delims=," ...


0

Try "host" Forward lookup with host: $ host google-public-dns-b.google.com. google-public-dns-b.google.com has address 8.8.4.4 google-public-dns-b.google.com has IPv6 address 2001:4860:4860::8844 Reverse lookup with host: $ host 8.8.4.4 4.4.8.8.in-addr.arpa domain name pointer google-public-dns-b.google.com. Similar to dig Forward lookup with dig: ...


0

From the comments: You have an instance firewall issue that is blocking port 443.


0

The two NICs in the R610s are totally separate... So, if one goes bad, the other one will continue to function. Now, to answer your specific question: No, the Broadcom controller chips do not provide fail-over redundancy. Having the multiple NICs does allow for that functionality though. You will simply need to configure a NIC Team. A NIC Team is a logical ...


0

Yes, I saw this multiple times and after little troublesome research, I landed to MS article which talks about known issues with it. "The Microsoft iSCSI Software Target console does not update when you create a failover cluster". The problem happened for me since I was spawning VHDs from iSCSI target that itself was a VHD. Now all my cluster nodes had these ...


3

Converting my comments/thoughts into an answer. It appears that you have given all of the students: Administrative control over all the computers. Anonymity by allowing them to all share the same admin account. This is probably a suboptimal configuration in a typical classroom setting. Although you claim that the students are not administrators on the ...


0

TechNet lists the ports required for Active Directory Certificate Services as: From CA Web Services to Domain Controllers on 464 for Kerberos From CA Web Services to Domain Controllers on 389 and 636 for LDAP From all XP clients to Certificate Authority on random above 1023 for DCOM/RPC From all clients to Certificate Authority on 443 for HTTPS


0

I managed to get it done by Stopping the instance detaching the drive created a new instance with new keypair stopped it detached drive attached original drive started instance in the web console previous employees keypair gone, replaced with new keypair name. downside is that the new keypair will not allow me to get the windows admin password. moral of ...


0

I would suggest using Group Policy to accomplish this. User Configuration>Administrative Templates>System>Ctrl+Alt+Del Options Enable 'Remove Change Password' option in the right pane. Apply to appropriate OU if not already applied. When computers get this GPO applied, you'll get the desired result.


1

Steps to move Exchange 2010 servers to the new AD Site: Open the AD Sites & Services console and select the Subnets folder. Right click the Subnets folder and select New Subnet. Add the individual IP addresses of the Exchange 2010 servers with a /32 prefix. Assign the IP addresses to the RTL AD site. Add the individual IP addresses of the Exchange ...


0

I used option 2 from http://www.syswow64.co.uk/2012/09/windows-7-offline-files-will-not-go.html Locate and click the following registry subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\NetCache Click Edit, point to New, and then click DWORD Value. Type SilentForcedAutoReconnect, and then press ENTER to name the value. Double-click ...


1

From what you wrote, everything seems OK. nslookup is a "low level" program in a sense that it does not use the libraries that are used by other programs in the system in order to do DNS resolution. nslookup creates and sends raw DNS packets on its own and it also receives and analyzes raw DNS replies. If you want to check your settings, use ping command ...


0

I'll be short, "is using a switch for DNS/DHCP good or bad practice" is least of your problems you said nothing about router (at least your story is incomplete), however, this isn't that important now too. usually having 15+ Windows machines means you need to have an AD. in an AD environment you need to have at least one controller, thus a Windows server, ...


2

Found a solution! I went through the currently running services to see if I could find any that looked promising, and found DDService, which is the Drobo Dashboard. I added it as an additional dependency to the Server service by doing the following from an elevated command prompt: sc config LanmanServer depend= SamSS/Srv/DDServer (SamSS and Srv were ...


0

I was able to do something similar to what you're asking for in Windows XP, but pointing to network locations rather than an external drive, but you may still be able to get it to work. Basically if you go to My Network Places and click the "Add a network place" option and type the path into the wizard it will generate a shortcut that is treated like a ...


0

I am not in a position to fully search and point you to the right pages: so I am asking you to look for the details yourself... ( sorry ) In Fail over Cluster there are 4 settings which can be tweeked; and they will not affect buffers or paged or non-paged... It changes the way Fail over Cluster makes the decision to consider a node "removed". These ...


3

The servers DNS needs to point to itself, and the clients DNS needs to point to the server. Servers DNS should be 10.0.0.5 (or 127.0.0.1) Clients DNS should be 10.0.0.5


0

Why don't you try pre-installing the Azure SDK in the Vagrant base image (called 'box') https://www.vagrantup.com/docs/getting-started/boxes.html Vagrant uses a base image to quickly clone a virtual machine. These base images are known as "boxes" in Vagrant That way you have it installed and configured prior to provisioning.


0

When multiple VPNs connect in random order, their interface IDs change. Therefor the normal ROUTE -P ADD 10.0.0.0 MASK 255.255.0.0 10.0.0.1 IF 42 does not work. The next time the VPN connects it might have a different interface number. Powershell has a cmdlet available that adds routes on VPN connection and removes them again when the VPN is disconnected: ...


0

When multiple VPNs connect in random order, their interface IDs change. Therefor the normal ROUTE -P ADD 10.0.0.0 MASK 255.255.0.0 10.0.0.1 IF 42 does not work. The next time the VPN connects it might have a different interface number. Powershell has a cmdlet available that adds routes on VPN connection and removes them again when the VPN is disconnected: ...


1

Frankly, I'm a bit worried that someone managing 100+ computers would ask such a question here. Consider getting professional support. To answer your question: You can configure them anyway you like, it really depends what you are trying to achieve. For example, if you are running an Active Directory on your Windows Server, then the computers within the AD ...


2

if the thing you want to do doesn't require a restart, sure. Check this: https://technet.microsoft.com/en-us/library/dd851779.aspx It's an instruction how to set up an immedaite task via AD (only for windows server 2008 and newer, not server 2003 though - you'll need to update ;-) - many things that make your life a LOT easier you cannot get on Win Serv ...


0

If you need to see your own groups, there's whoami /groups: Displays the user groups to which the current user belongs. The advantage of this command over net user /domain username is that implicit group memberships are also displayed with whoami.


0

Generally group policy's and logon scripts are located in C:\Windows\Sysvol But why wouldn't you just delete the group policy in the Group Policy Editor?


1

Powershell. Get-NetAdapter | Format-List -Property PromiscuousMode That'll give you true or false.


0

There is no per-defined location, but as your admin does not want a created path on the c:, like c:\script I suggest using %programfiles%\UnivercityNAME, that way if someday you deploy new application or script, it's a location easy to give to your user to execute them. As talked I don't recommend in the user profile, as it's a policy to be run on as a ...


0

From xen-devel@lists.xen.org This could possibly be a side-effect of having no PVUSB backend; it could also be a straight-up bug in xend. If it's an issue with having no PVUSB backend, you could try to build a kernel with support; the SLES kernel is probably your best bet, as I think they officially support it. If you have PVUSB available, then it's ...


0

There is no standard or recommendation. Whatever you choose, you probably want to consider the following: easy to remember documented backed up possibly added to a PATH env var.


0

In practice make a hidden folder off of C:\ called C:\$admin.000 I am not aware of a way to restrict the access such that the user would be able to run the scripts located therein, but not be able to read them, or list the contents of the folder. Of course, in *nix, that is a non-issue.


1

If you really need to multihome your DC, please follow these step. I took them from there. The document link to old KB, but it's a updated document by a know blogger. The following are the manual steps to configure a Multihomed DC Insure that all the NICS only point to your internal DNS server(s) only and none others, such as your ISP’s DNS servers’ IP ...


0

As others have noted, if you were expecting a unix-y diff output, using the powershell diff alias would let you down hard. For one thing, you have to hold it's hand in actually reading files (with gc / get-content). For another, the difference indicator is on the right, far from the content -- it's a readability nightmare. The solution for anyone looking ...


0

Boiled it down to this: On the file server Give anonymouse Share and NTFS rights as needed (Read in my case) Create GPO and apply to file server Computer - Windows - Security - Local - Security Accounts:Guest account status - Enabled Accounts: Rename administrator account - SomeNameOfYourChoise Accounts: Rename Guest account - SomeNameOfYourChoise ...


0

I think I understand your problem, and based on the comments I presume that changing the said "software" is not an option for you. While ideally you need software for multiple users, the truth is sometimes we need to run with what we have. Without knowing the software it is hard for anyone to give a definite answer to your problem. However, with Windows ...


0

If you have two OpenVPN capable routers, set one of them to connect to the other to create a LAN-to-LAN VPN. In your case, there is no need to install OpenVPN software on the PCs UNLESS you don't want to do LAN-to-LAN. In that case, you'll only use the OpenVPN software on ONE of the routers, and use the OpenVPN client software on the remote PC. I'm not sure ...


1

You can add a AWS::CloudFormation::Init and reference it in your Windows instance. Inside this you should be able to call something like shutdown.exe /r /t 00 from it. The only access you have to the box within Cloud Formation is within this AWS::CloudFormation::Init step.


1

I could not solve the original problem with the CimInstance adding the value "". However, I did manage to get this to work by switching to an WmiObject: # Get Wmi object $smtpInstance = Get-WmiObject -Namespace root\MicrosoftIISv2 -ComputerName localhost -Query "Select * From IisSmtpServerSetting" # Set relay IP of 127.0.0.1 $relayIPs = @( 24, 0, 0, 128, ...


0

The way deregistering a service is handled with Apple's mDNS daemon is that upon registering a service the registering process is provided with a service descriptor, and that descriptor is needed to deregister the service. That means that typically only the process that registers a has the necessary info to deregister it. A process can't start up and ...


0

Make sure that they have access to the temp folder (I know, you said you tried the C drive, but please double check); this error message usually means that zip fails because they don't. Also, the temp folder in question might not be c:\temp. Check in Computer Properties/System Information -> Advanced System Settings -> Advanced -> Environment variables. ...


1

I would not agree that it is common to disable this. A better way to phrase it would be to ask why someone would disable it. And a better solution for your problem would be for the installer to check for the root/intermediate CA certificates and install them if not present. The Trusted Root CA program is essential. A TON of applications would just not ...


24

In late 2012 / early 2013 there was an issue with automatic root certificate updates. The interim fix was to disable the automatic updates, so partly this issue is historical. The other cause is the Trusted Root Certificate program and Root Certificate Distribution, which (to paraphrase Microsoft)... Root certificates are updated on Windows ...



Top 50 recent answers are included