85

It turns out that much of the configuration data for RDSH is stored in the Win32_TSGeneralSetting class in WMI in the root\cimv2\TerminalServices namespace. The configured certificate for a given connection is referenced by the Thumbprint value of that certificate on a property called SSLCertificateSHA1Hash. UPDATE: Here's a generalized Powershell solution ...


53

It's no longer possible to switch from Server Core to the full GUI or vice versa in Server 2016 - either through Server Manager, PowerShell, or DISM. You must make the choice initially at install time. From TechNet: Unlike some previous releases of Windows Server, you cannot convert between Server Core and Server with Desktop Experience after ...


32

If the name for a domain (or zone) is "example.com.", then an @ record indicates that the name for the DNS record is also "example.com." In the GUI for a Microsoft Windows Server DNS Service, this is (or at least has been for a long time) called "Same as parent folder". Normally the name used for a DNS record indicates everything before the name of the ...


20

For what I could find in the RFC, it stands for @ A free standing @ is used to denote the current origin. Source: https://tools.ietf.org/html/rfc1035 Hope it helps


19

The description of the setting, as seen in the very article that you linked to, says: Enabling NTFS long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 char limit per node. Enabling this setting will cause the long paths to be accessible within the process. This means that even after ...


18

Yes. This can be done using native Windows commands like diskpart, bootsect and copy (xcopy). Here are the guides that cover the topic exactly: https://www.starwindsoftware.com/blog/how-to-create-bootable-windows-server-2016-usb-thumb-drive-for-installing-os http://itproguru.com/expert/2016/05/create-bootable-windows-server-2016-usb-thumb-drive-for-...


18

I did find a way to do this. Hopefully this helps someone else looking for the same information. On the server, open a powershell then enter this command: Get-SmbSession | Select-Object -Property ClientComputerName,ClientUserName,Dialect For more verbose output: Get-SmbSession | Select-Object -Property *


16

The System Volume Information directory should be excluded using the /XD switch. Probably a good idea to exclude other hidden/system directories such as $RECYCLE.BIN.


14

That should be possible. Mount ISO image, say drive letter is x: Mount USB Drive, letter y: Run elevated cmd Run diskpart wipe the drive and create an active partition: Caution, this will wipe your disk! list disk, select disk <nr. of pendrive>, clean, select partition 1, active, exit Copy bootsector -> x:, cd boot, bootsect /nt60 y: Copy everything ...


13

Your scenario is fine if you are OK with paying loads of money for licensing. You will also need an interconnect fabrics and switch that supports PFC in order to use SMB Direct feature (I assume you would like to use it because of RDMA-capable Mellanox NICs which are awesome). Your drives allow you to create a parity-based capacity tier and add some SSD-...


13

Having 2-node cluster, it's beneficial to have at least 2 AD DC VM's each located on a separated host. In case of a host failure, you will ensure the AD is up and running. The AD running on a VM also allows you granularly maintain AD and Hyper-V host. Microsoft recommends to run AD either on a Hyper-V VM or/and on a dedicated physical host. It's not ...


12

Not yet, no - it's been announced as a feature of the next version of Windows Server (Windows Server 2016).


12

Yeah you are pretty much screwed, My advice, use windows backup on the server, take a full backup and save to a NAS of other external HDD, make sure to do both a file level and image level backup, install server 2016 setup the server get all the features and roles setup, and then transfer the files over. That should take care of the server, if you cannot ...


12

Use Sysinternals Autologon. It stores the credentials in the registry more securely than other methods. Autologon for Windows v3.10 https://technet.microsoft.com/en-us/sysinternals/autologon


11

Currently we suggest SCVMM to our customers only in cases of four and more nodes. I can’t tell for sure whether you need SCVMM in your case, but our last customer with four servers and over 100 VMs is almost not using SCVMM. For more information on configuration, these two topics were very helpful for us: https://technet.microsoft.com/en-us/system-center-...


11

Speaking shortly, the deployment sequence looks as following: Deploy necessary WS roles and features Validate the Failover Cluster Create the Failover Cluster Enable Storage Spaces Direct -EnableStorageS2D Create and configure storage pools Example input: New-StoragePool -StorageSubSystemName #CLUSTER_NAME# -FriendlyName #POOL_NAME# -...


11

After going for hours through the docs: https://docs.microsoft.com/en-us/powershell/module/defender/index?view=win10-ps Just decided to uninstall it. This works on WS 2016 with PS 5.1. Remove-WindowsFeature Windows-Defender, Windows-Defender-GUI The below didn't work for me (from a blog dated 2011-2012), but give it a try before you uninstall: Get-...


11

If an instance has a Public / Elastic IP I can directly target it with an attack. Maybe you left some unneeded ports open in the Security Group that I can exploit. If it doesn’t have a Public / Elastic IP it’s close to invisible to the Internet and I can’t directly target it from outside. Think of a house - if it’s got door directly on the street your ...


10

Yes, Net Framework 3.5 is working on Windows Server 2016, I have it installed on my Servers. So far, we haven't had any reported issues from our programmers. Remember, You need to install it as a server feature. (Make sure to Specify an alternate source path during the installation. You need to mount your Windows 2016 Disk and set the path to Drive:\sources\...


10

Are you talking about the AWS Certificate Manager? If so you can't use them like that. From the FAQ: Q: What can I do with AWS Certificate Manager? A: You can request and provision SSL/TLS certificates and deploy them for sites and applications that use Elastic Load Balancing, Amazon CloudFront, or Amazon API Gateway. Once you validate ownership of the ...


10

You have either enabled the Hyper-V Checkpoints that need to be merged or there is an additional snapshot managing software (backup or replication) that sends the command to Hyper-V for creating checkpoints/snapshots. I would start with investigating the systems/application logs at the mentioned time to find out the root cause of the issue.


10

That isn't an issue, it's just a random thing that can happen because IPv6. I'm not sure why the initial answers on this were given in the form of comments, but whatever. IPv6 addresses are 128 bits long. If they were given in the same format as an IPv4 address, that would come out to something like 254.128.0.0.0.0.0.0.14.217.71.16.16.247.42.219 To make ...


9

There's very little to zero sense building SoFS based on S2D. Here's why: 1) Datacenter edition everywhere. It's expensive ($6K+), and while for hyperconverged scenario you pay for licensed Windows Server VMs with SOFS you pay for... nothing! There are no VMs to run! 2) Dual-head configuration is possible since TP5 AFAIK, but there's no local ...


9

Right click the computer object in Active Directory Users and Computers... select Reset Account. This will break the trust between the computer account and the domain. You can use Powershell, netdom, or nltest to recreate/fix the trust.


9

Have you tried DCDIAG? It has lots of tests including Checks for timely replication and any replication errors between domain controllers Here is a link to Dcdiag information: https://technet.microsoft.com/en-us/library/cc731968(v=ws.11).aspx


9

To ensure two DCs replicate with each other, you can follow the guide Forcing Replication. You first want to ensure that both clean DCs replicate with each other. Open Active Directory Sites and Services, navigate to your first DC and open the NTDS Settings. You will probably see a connection to the old DC. Add a new connection for the new DC. Now force ...


8

I made the following changes in the IIS Application Pool for the WSUS Page: Queue Length: 25000 from 10000 Limit Interval (minutes): 15 from 5 "Service Unavailable" Response: TcpLevel from HttpLevel Private Memory Limit (KB): 0 from 18342456 This allowed for a longer amount of time needed for Windows 10 to connect and check for updates, Reset the ...


8

I also struggled to get this to work on a (non-Domain connected) Windows Server 2016. I noticed that there was CTRL-ALT-DELETE requirement on login so thought I would try to disable this...and suddenly auto-login began to work! Full steps I used: To set auto-login account Start > Run > netplwiz (as explained in other answers) Un-tick "Users must enter a ...


8

It's a bad idea to use consumer SSDs in your SDS deployments. VMware VSAN and Microsoft S2D both assume writes will be "atomic", so one ACK-ed by host is actually on persistent memory; consumer SSDs don't have any power outage protection so they MIGHT lose your data. Write endurance is also very different. https://blogs.technet.microsoft.com/filecab/2016/...


8

Ok, after spending 3 weeks with Microsoft's technical support department we have solved the problem. The problem is with Dual Scan trying to connect to Windows Update (online) and failing. When it fails the system just stops trying and refuses to connect to WSUS. The added problem is the server install media has a bug in it which prevents the Dual Scan ...


Only top voted, non community-wiki answers of a minimum length are eligible