69

This is not a dumb question, it's a great question and I'm glad that you're asking. Human processes Make sure that you've reviewed all documentation, talked to the greybeards, and have sign-off from someone from the business. Technical processes Get a complete backup; mark the media for long-term archival. Run a connection monitor or packet sniffer for a ...


45

You will need to modify the group policy that is applied to the servers. Open up the Group Policy Management Console and navigate to Computer Configuration >> Administrative Templates >> System and select "Display Shutdown Event Tracker." Disable that option.


32

Have you tried using the /R and /W switches? Something like: /R:2 /W:2 This means retry twice wait 2 secs to retry. If the file is still open after the two attempts, the file will be skipped. Depending on your needs you could lower it to /R:1 /W:1.


30

While Windows Server 2003 was a very good Operating System for quite some time, it will reach its End of Extended Support life on July 14th, 2015. While mainstream support gives you free security updates, service packs, non-security related hotfixes and a wealth of other stuff, the extended support phase reduces this to security update support and no new ...


24

I think this does what you are looking for PS C:\> gwmi win32_computersystem | select BootupState BootupState ----------- Normal boot http://msdn.microsoft.com/en-us/library/windows/desktop/aa394102%28v=vs.85%29.aspx Possible return values: Normal boot Fail-safe boot Fail-safe with network boot


21

It'll be fine. Here's a little blurb from Sean Ivey from Microsoft; a pretty smart guy: Ok, as long as we're talking about domain members, and not domain controllers then for all practical purposes they could be turned off indefinitely with no problem. When you finally turn them back on, the netlogon scavenger will run, contact a domain controller,...


21

Yes there is an impact. Yes it is recommended that you log off. If you don't log off, all of the resources (such as RAM) that it took to sustain your interactive user session stay in use. You keep one of two administrative connections in use so that others can't connect. What's actually recommended is to not RDP to your servers at all. This is what the ...


20

Power it off and see who screams, and about what. Seriously, it is the best way. Even checking logs will only get you so far, because you'll only see activities that are logged. EDIT: To head off any further comments, this advice assumes you've already done what you should have done in the first place, even before asking the question here - asked around ...


19

If you do not want to change via Polices you can always issue the shutdown command to avoid the question. shutdown /s /t 0 /s = shutdown /t = time till shutdown 0 = immediely


18

To give you some ideas on what can be tested, here are some of the automated checks we perform daily. Ping test LDAP/Port 389 authenticated bind GC/Port 3268 authenticated bind DNS/Port 53 test. This includes performing a lookup against the DC for the DC dns host name, to confirm that only one address is returned. For DC's that have multiple IP ...


18

This might be a problem with MySQL notifier config file. As described here, there is something wrong with your config file. You just have to remove it (or rename it to something else) and launch the MySQL notifier again - config file will be recreated automatically. In my case, the config file was in the C:\Users\YourUsername\AppData\Roaming\Oracle\MySQL ...


16

If you need to set the startup script programatically, you can use Scheduled Tasks: schtasks.exe /create /tn "Task Name" /ru SYSTEM /Sc ONSTART /tr "C:\command2run.cmd" To run the task with elevated permissions (Vista and later), add the parameter /RL HIGHEST


15

I totally don't want to discount the rest of your question, but the path of least resistance is to replace the failed disks. When dealing with legacy equipment, there may be a temptation to devise an esoteric or clever workaround, but your immediate goal is to keep this particular hardware running in the current and stable state until you can migrate ...


14

In AD Users and Computers, inspecting the Object tab of the user account, there is a Created field. You would need to select View menu > Advanced to be able to see the Object tab.


14

At a smaller company I worked for in the past we used this. It is a script that compares PASS/FAILS, certainly not a bad tool to try out. Interested to see what others have used.


14

It certainly can work, but this is one area where it's entirely dependent upon your code. It may work, or it may not. This is where doing a test upgrade would be a good thing to test out. Deploy the app in a new Server 2003 instance in a VM of some kind. Upgrade it directly to 2012. Figure out what needs to change to make it work. Repeat 1-3 until you ...


13

I asked this same question. Fortunately RyanRies was able to provide a correct answer. In Windows Server 2003 you cannot run a scheduled task as NT AUTHORITY\NetworkService (aka the Network Service account). That capability only was added with Task Scheduler 2.0, which only exists in Windows Vista/Windows Server 2008. Bonus Chatter LocalService Account ...


13

Security groups can be associated with ACLs, whereas distribution groups can't. Both security groups and distribution groups can be mail enabled. http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx


13

From the same link you've provided in your question: The formal string syntax is given in section 2.4.2.1. Alright, let's follow that link and read that page (emphasis, mine): The SID string format syntax, a format commonly used for a string representation of the SID type (as specified in section 2.4.2), is described by the following ABNF syntax, as ...


13

YOU CAN EITHER SET UP PXE OR GET AN INTERNAL DVD/CD DRIVE. THAT SERVER IS TOO OLD TO SUPPORT BOOT FROM USB, SO AN EXTERNAL DEVICE WILL NOT WORK. ALSO, YOU DO NOT HAVE A DELL PROLIANT, HP MAKES THE PROLIANT LINE. YOU HAVE A DELL POWEREDGE.


13

Running the following as an elevated admin: reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Reliability" /v ShutDownReasonOn /t REG_DWORD /d 0 /f and then logging off and on again should to the trick. This is quicker than using group policies which you should use when you are in a domain and want to apply this change to many servers.


12

The culprit wasn't found in http-ssl.conf, but in httpd.conf. I suspected that when I saw that the server status wasn't reporting the "SSL/TLS Session Cache Status" section at all, rather than an empty section. It happened that the Include directive in httpd.conf pointed to an old test .conf file instead of httpd-ssl.conf. Well, duh! This may help other ...


12

We get the message "The specified domain either does not exist or could not be contacted." Check DNS. Rule #1 for all AD problems is "Check DNS." Rule #2 is "If it's not DNS, you're in trouble." From the command prompt are you able to ping or do an nslookup of the FQDN of your AD domain? I'm betting you just have the 2012 server's DNS list misconfigured in ...


12

The basic difference between Security groups and distribution group is Security groups can be used to assign security rights on resources inside your Windows 2003 Active Directory network. By using a security group, we can collect a group of user accounts in a department and assign them access to a shared folder. We cannot use distribution groups for this ...


12

Maybe I'm missing something, but why wouldn't you just add the 2008 R2 server as a server in the domain and then promote it as a second DC? Then transfer the FSMO roles and either keep the first server online for redundancy or demote it and remove it. THAT is the most effective way to migrate a 2003 DC to 2008 R2 as it preserves Group Policies, User ...


12

You should set up a domain. Seriously. I wouldn't want to manage 3 Windows computers without a domain (Active Directory), let alone twelve. If the brass wants to limit the access levels on certain directories, the only way to do so in a manageable fashion is with Active Directory, even for "only 12" machines/users. Best option for you, personally, as ...


11

For some clarity (as it's not obvious where to find the list of shares in the GUI) As people mentioned, open a command prompt and type net share. This is probably the easiest way to see what shares are available. This will also show hidden shares (those with $ as the suffix) and where the share points to. Here's an example: C:\Users\tstmoss>net share ...


11

If copy paste is enabled both in the server and the remote desktop connection but still doesn't work, the following works for me (taken from here): Do the following on the remote machine: Load up task manager (right click taskbar and select Task Manager) Go to the Processes Tab Select rdpclip.exe Click End Process Go to the Application Tab Click New ...


11

No. According to the well hidden and difficult to follow documentation on MSDN (here) it requires Windows 2008 / Windows Vista or later.


10

I found an action in the WHS task scheduler to "export task". Select the task and on the lower right of the window the export task option shows up. It will save a files as .xml. You can copy that xml file to another machine and use the "action" menu to "import" task. I am about to test this process.


Only top voted, non community-wiki answers of a minimum length are eligible