Posts

Showing posts from February, 2013

Hyper-V Replica Trust Group...

hi all; as know, when configuring hyper-v replica on replica server, able use specify multiple primary servers. right? as can specify servers trusted replicate replica server, why bother me create trust group  , join primary servers it? primary purpose of creating trust group? thanks please vote helpful if post helps , remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. hi sir, >> what primary purpose of creating trust group? " how useful? hyper-v replica allows replication continue seamlessly when virtual machines migrated either on primary server/cluster or replica server/cluster. hence replication traffic given replica virtual machine cannot tied only to server enabled replication of virtual machine. " " tag group a set of such allowed primary servers trust zone ( security tag ). " http://blogs.technet.com/...

Push Wireless Settings via Group Policy to include WEP and/OR WPA2 Passwords

i trying push wireless settings windows 7 clients windows 2008 r2 using group policy. able push wireless access point name/info, cannot include wep and/or wpa2 passwords. hello, for group policy questions, consider asking them here:  http://social.technet.microsoft.com/forums/en-us/winservergp/threads   this posting provided "as is" no warranties or guarantees , , confers no rights. microsoft student partner 2010 / 2011 microsoft certified professional microsoft certified systems administrator: security microsoft certified systems engineer: security microsoft certified technology specialist: windows server 2008 active directory, configuration microsoft certified technology specialist: windows server 2008 network infrastructure, configuration microsoft certified technology specialist: windows server 2008 applications infrastructure, configuration microsoft certified technology specialist: windows 7, configuring microsoft...

directory rights disappear when accessed

i have server 2003 folder \data\cdvol1 \data shared data$ data$ published in dfs group policy mapping s: \\domain.com\data\cdvol1 on windows 7 desktop, can access cdvol1 no problems. if access notebook, following symptom. right after login, can see drive s, it's total space, , free space. if click on drive s, can see subfolders second, disappear , drive s disappears left hand pane in windows explorer.  if go level , refresh "my computer", drive s reappears, "not accessible". i can not figure out why notebook behaving differently desktop, or group policy setting may affecting this. any appreciated. have a try on configure slow-link mode policy disable , see if issue still exists. meanwhile, whether can still access mapped drive though shows not accessible? or can access \\domain.com\data ? technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com. ...

one CN for multiple servers in a certificate?

hi there, i got question whole certification thing. know, can build certificate 1 commonname , multiple subject alternate names (san). that's fine. have question following situation: i have 3 servers using dns roundrobin (rr). if connect name rdc.contoso.com, rr connected 1 of tree servers in background. that's okay. have generate, request , issue 3 certificates same common name. possible generate 1 certificate 1 common name (rdc.contoso.com) 3 servers (server1, server2 , server3)? we have issuing ca, think have generate certificate on server , deploy server1, 2 , 3, right? thanks helping me, ueruleuem yes, can generate certificate exportable private key , import certificate these servers. risk if certificate revoked, service unaccessible until replace certificate on nodes. 3 different certificates (with same subject) service unaccessible requests (that redirected host revoked certificate). my weblog: http://en-us.sysadmins.lv powershell pki module: http://psp...

Scheduled task not running on Windows Server 2008 but working on Windows XP

hi, i have created console application using .net 3.5 framework fetching data oracle database , sending attachment via email. using task scheduler have scheduled task run console application's .exe file @ 9 every day. the task scheduled , works fine on windows xp machine , doesn't work on windows 2008 server. when task run first time on xp , installation prompt displayed. once installation done next time onwards task getting executed scheduled without issues. in case of windows server 2008, did not installation prompt, went ahead , double clicked .exe file install on server , scheduled it. getting 'success' message every time executes, data not being sent mail means .exe program not executed. have used domain credentials machine's administrator credentials verify this. i have checked firewall settings , there no issue turned off. i have checked logs in event viewer, no error messages have been logged. please let me know if there solution issue. t...

Restoring a Hyper-V VM from a windows server backup from the host server.

i routinely removing snapshots vm after having shut down. when restarted host server, vm lost config, 1 of vhd somehow disappeared. have full windows server backup of vm decent time; how can remove badly configured vm , replace full of it, snapshots , all? would able venture guess? i have been stumped. , need help. thanks. russell mayo hi,   if hyper-v computer windows server backup, need backup vms, after that, must restore vms @ same time(you can’t backup/restore individual vm).   for more information, can refer to:   how hyper-v virtual machines parent partition on windows server 2008-based computer using windows server backup http://support.microsoft.com/kb/958662   by way, if want backup/restore individual vm in future, may consider using microsoft data protection manager.   http://www.microsoft.com/systemcenter/dataprotectionmanager/en/us/default.aspx     best regards, vincent hu   ...

2012 R2 msi deployment package error code 2755?

have 2012 r2 running in vmware workstation , have problem using gpo deployment , installing msi program. when try create new gpo software installation, returns this: "add operation failed. unable extract deployment information package. run validation on package ensure package correct." when try installing msi onto server gives me error: "the installer has encountered unexpected error installing package. may indicate problem package. error code 2755." hi, thanks post. it seems user not have enough permission open , add msi gpo. please ensure user has full rights on network share folder where msi package located. here similar thread, may refer to. https://social.technet.microsoft.com/forums/windowsserver/en-us/f4e8bde1-8da4-4dd6-93da-cb0476a67d5d/gpo-add-operation-failed-unable-to-extract-deployment-information best regards, mary dong please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscrib...

Upgrade from Windows 2003 Standard R2 to Enterprise R2

after upgrade windows 2003 standard r2 enterprise r2 seems running fine , says enterprise.  when log on though login box still says standard , not enterprise.  there way change this? thanks steve hi,   based on test, appearance of login box should change enterprise too. suspect there files not replaced correctly during upgrading. please check event viewer see if there errors.   please run start menu---all programs---accessories---system tools---system information see whether os name microsoft(r) windows(r) server 2003, enterprise edition or not.   logon user interface dll msgina.dll contain resource of login box, seems file not replaced correctly during upgrading. recommend use windows server 2003 enterprise installation disk have repair install of computer.     best regards, vincent hu Windows Server  >  ...

Restricted SIDs

Image
hello, i trying figure out restricted sids application. given scenario 2 users restricted access eg: notepad.exe ( u1, u2 ) on computer , tools find out restricted sids ? most scenarios, don't information users who are restricted specific app , tried using icacls doesn't display me sid of restricted accounts ( may interpreting wrong ) hello, you can using setacl.exe . free tool created helge klein , great german mvp. here easy example, used following command , list permissions user names , sids d:\test folder: setacl -on d:\test -ot file -actn list -lst s:b;f:tab -rec cont regards Windows Server  >  Directory Services

Enable Inheritance Security Setting wont stay applied on Domain User Accounts

Image
the weirdest thing happening on 2012 r2 dc, in order fix activesync error event id 1053 on exchange 2010, fix enable inheritance on advanced security settings of domain users using activesync...ok...but here weird thing...i set enable inheritance on users , apply them, when check after long...the setting has reverted disabled inheritance? happening on user accounts? this screen shot morning...last night changed setting , enabled inheritance...this morning reverted disabled inheritance? hi john, are sure it's quite literally users, or users in protected groups domain admins, enterprise admins , on? my guess - , it's @ stage, you're seeing affecting protected groups , members, in case expected behaviour based on how adminsdholder functionality works. you can read more adminsdholder mechanics here , here . cheers, lain Windows Server ...

WSUS database - local or remote SQL

we licensed run sql processor , can have unlimited connections/users. i can setup wsus server local install of sql in half day, however, management wants me use remote sql server instance, means lots of politics, red tape, , long wait. does know of document describes pros , cons of using wsus remote sql type configuration? i have read deploy, step step, operations, etc., guides, doesn't go detail this. also, no expert microsoft licesning, , verify detail. if install wsus local sql database in production, violating our microsoft licensing? thanks. does know of document describes pros , cons of using wsus remote sql type configuration? all biases acknowledged, invite review webcast did question 1 of topics explored. in fact, i've explored question in couple of webcasts: migrate wsus windows server 2008  (july 2010) improving wsus deployment  (august 2009) the short answers these: if have enterprise database server (cluster), there can significant ad...

Users and Computer In more than one OU ?

hello,   i'm wondering possible put user or computer in multiple ou's ? trying today in windows 2003, couldn't figure out.   -thanks in advance hello, one way exclude items gpos is working security filtering. see details in: http://technet.microsoft.com/en-us/library/cc781988(ws.10).aspx best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Directory Services

Attaching a windows 2003 lun to a windows 2008 server

hello.. we in process of upgrading our servers windows 2003 windows 2008 r2. regards san attached data residing on windows 2003 ntfs partition. can attach lun windows 2008 server.??? compatability issue ntfs versions.. thanks in advance hi, as far know, there no kind of compatibility issue. if errors occur during process, please let know detailed error message research. thanks. this posting provided "as is" no warranties, , confers no rights. Windows Server  >  File Services and Storage

Executing powershell scripts via Task Scheduler

hi, i have powershell script wrote when executed shell works fine when executed task scheduler not work. in script, email sent out based on results of execution.  when run shell, email goes out, when scheduled, no email , there no indication of errors having occurred anywhere in system. has run similar issue? i did change powershell execution policy unrestricted (both in x86 , x64 consoles).  i running windows 2008 r2. thanks - greg. found answer - enclosing entire arguments in double quotes , parameters in single quotes ensured correct values being passed parameters. http://www.techtalkz.com/microsoft-windows-powershell/146575-commandline-argument-parsing-spaces.html Windows Server  >  Windows PowerShell ...

not all domain controllers can communicate with machines in external trust domain

i want make sure ok do... i have domain (single domain forest). has several trusts domains in other forests: have one-way external outgoing trusts, two-way external trusts, forest trust. i want add more domain controllers domain a, because of packet routing issues, machines in other domains not able communicate added domain controllers. however, machines in campus domain still able communicate new domain controllers fine current domain controllers of domain a. is ok do? concerned machine in external domain lookup of domain controllers in dns, see new domain controller, try access it, fail , give error. as per understanding, domain joined client contacts dc in own domain & instead local dc gets information on behalf of domain joined clients request. so, find no reason why shouldn't work. also, make sure pdc's able communicate between pdc of each domain because trust password saved on dc holding pdc role. http://technet.microsoft.com/en-us/library/cc773178%28v=w...

Server 2012 R2 NIC Team - Physical Adapters Removed

this hypothetical question.... if windows server 2012 r2 configured native nic team consisting of ports , adapters either pcie cards in rack-mount server or mezzanine cards in blade , physical adapter fails, team dissolve because none of adapters available or remain configured , in failed state? i'm assessing recovery scenario physical adapter failure hence question. my assumption native nic team remain configured it's mac address , ip configuration unscathed, in failed state and install a replacement physical adapter , add new adapter ports team. richard green | mcsa 2012, mcse 2003, mcts desktop virtualization, vcp5-dv http://richardjgreen.net hi richard, the nic teaming feature, known load balancing , failover (lbfo), provides 2 basic sets of algorithms teaming. switch-dependent modes. requires switch participate in teaming process. typically requires network adapters in team connected same switch. switch-independent modes. not require switch participate...

DNS record keeps showing up

we have failed server has been removed ntdsutil utility.  removed dns entries on of dns servers in organization according article http://support.microsoft.com/default.aspx/kb/216498  problem server showing in dns after while on several of servers.  doing wrong?? thanks info.  'same parent folder' records added when dns client registers resource record same name zone in registering.  example, if our zone name mycompany.local, machine set register record mycompany.local ip address.  domain controllers configured register records zone name.  if record continuously showing because there client ip address configured register a record mycompany.local.  disabling dynamic updates prevent client updating record.  however, turn dynamic updates on, if client still online, , still configured register record (and domain member), record right again. turning off dynamic updates when aging / scavenging enabled can become problem because records in our...

Word 2010 Curser Flashing

when open document in word 2010 getting cursor flashing busy , slowing word operations.  it started other day , repaired office 2010 , seemed fix problem. when rebooted came repairing again did not work.  if have word 2010 running blank doc still blinks cursor busy icon. office 2010 professional plus, windows 7 ultimate   any ideas clive fixed it. the problem came today when opened document, 4 in total.  switchwd of pc while restarted still no joy.  rebooted xp pro, have dual boot system.  still flashing busy.  noticed when wanted print document printing options flashed, changed my deault printer , flashing stopped.  putting oprinal defalt printer , flashing returned.  removed printer , reinstalled no flashing deault again.  thefore printer driver corrupt.   the reason ok times think, must have printed somthing else , word remembered printer using.  when opened document bad printer assigned ...

DFS Replication - What and when?

hi all i have completed setting dfs replication range of folders. have range of source servers, replicating 1 destination server dr. dr server move our offsite data centre. my problem @ moment amount of data being replicated enormous... 10gb night, substantially more expected. cost pretty penny on our internet links. so far, not seem able find information shows me files being replicated. able see replicated, why, , when can determine if there out of ordinary happening. is there tool i'm missing? shane hello shane, if have scom in environment, can use dfsr management pack in monitoring well. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=4231   also if not have scom, check dfsrmon, th blog written in portuguesse tool english http://blogs.technet.com/b/suporte/archive/2010/09/17/dfsrmon-v1-1-0.aspx hope helps, isaac oben mcitp:ea, mcse,mcc view mcp certifications ...

Multiple Monitor support using RDP in Windows 10

does know if can use multiple monitors when connecting through rdp in windows 10? in windows 7, need using windows 7 ultimate in order rdp support more 1 monitor. for example, home setup has (2) 22" monitors , want rdp work pc has (2) 22" monitors. running windows 7 pro, 1 monitor display on home pc , couldn't view 2nd work monitor. thanks! michalsm2000, i can't test due shortage of resources. for rdp multiple monitor support, should supposed work on windows 10. regarding new in rdp, may check: what's new in remote desktop services in windows server technical preview regards please remember mark replies answers if help, , unmark answers if provide no help. if have feedback technet support, contact tnmff@microsoft.com. Windows 10 Insider Preview  >  ...

Lost data connection after going to 10051 on Lumia 1020

i installed 10051 on lumia 1020 yesterday. few annoying issues, wondering if there solutions or workarounds. after initial reboot, things fine, after did reboot, data cellular connection off , can't turn on. anybody? thank you. michael r. michael reinders, mcitp:enterprise administrator tushaus computer services on sat, 11 apr 2015 13:44:55 +0000, michael reinders wrote: i installed 10051 on lumia 1020 yesterday please post windows 10 phone questions to: https://social.technet.microsoft.com/forums/en-us/home?forum=winpreview2015phone paul adare - fim cm mvp dyslexia of borg. prepare have arse laminated. Windows 10 Insider Preview  >  Windows 10 Insider Preview Feedback

Problems while moving Exchange 2007 Server Public folders to Exchange 2010

hi ! i am currently migrating our server windows sbs 2008 to windows sbs 2011th i have come to the part where i'm going to move exchange server public folders from exchange 2007 to exchange 2010. i started to run command get- publicfolderscript statistics on the source server to get list to compare after transfer . then i ran the command moveallreplicas.ps1 - server " source server" newserver - "destination server" when after a while running get- publicfolderscript statistics on the destination server ist the same on source server. perfect ! then i incur default database and will then remove the public folder database on the source server , get error message that it not empty . i started trying to remove the content in database in every way . when come back next day   the database is the source server is empty. ( understand that you should not have such ...

клонирование\множественное бэкапирование серверов WSUS

Добрый день! Хотим размножить один сервер wsus, но пока не решили как. Есть два варианта: 1. путем восстановления из бэкапа базы этого сервера и копирования папки wsus с обновлениями этого сервера 2. развернув образ готовой системы сделанный сторонним ПО для бэкапирования (acronis, networker) Скажите не будут ли конфликтовать такие сервера между собой? Возможно у сервера wsus есть например какие-то сертификаты, которые не должны повторяться. Или ещё что-то? Нам необходимо создать много серверов реплик, которые уже полностью настроены, и закачали основные необходимые пакеты обновлений. hi, thank posting. unfortunately, forum geared answer questions via english , on english version of product. sorry couldn’t understand exact problem. efficiently troubleshoot problem, suggest contact local microsoft customer service , support (css) this. can speak directly microsoft support professional ana...

Windows Server 2008 R2 Certificate Authority Benefits (backup user certs)

i looking migrating ca 2003 2008 r2 , wondering if has found white papers on difference between two.  i've seen lot of articles on migrating 2008 r2 seem pretty straight forward.  one of main concerns , reasons switch users not backup users cert , key.  does 2008 r2 provide auto backup of each users individual cert , private key?  or still have done on each individual users pc?  can export , users certificate , key 2008 r2?  i know can't 2003 ca.  any great, thanks! hi, based on research, don’t have backup certificates , keys on client machines during migration process, , don’t think windows server 2008 r2 provides automatic backup each user’s individual certificate , private key. what need manually backing ca database , private key, registry settings , policy.inf information on ca server . actually, user certificates reside in: documents , settings\< username>\applicationdata\microsoft\systemcertificates\my\certificates ...

Need help creating old school file headers - plain text ASCII

i need figuring out how pass arguments function (yet written) place argument values @ specific locations in string. so, let's have line 5 pieces of information. #1 start @ column2 , ends @ column4. #2 starts @ column 6 , ends @ column 15. etc. first thought using -f format approach, but, need handle 2 things: 1) if string shorter "field" width, fills blanks, and, 2) if string longer "field" width, chops off irrelevant characters. being vague because have never approached problem , have ideas in head, but, not sure if apply. something this? $string1 = "teststring" $string2 = "newtest" $string3 = "alongstring" $string4 = "s" $string5 = "anotherlongstring" $pad = " " $newstring = $pad $newstring += $string1.substring(0,3) $newstring += $pad $newstring += $pad $newstring += $string2.substring(0,[system.math]::min(9, $string2.length)) $newstring += $pad $newstring += $string3.subst...

Unable to get a msi software package to push out via Group Policy on Windows 7

trying push out groupwise msi install computers. unable install. please!! hi, as martin binder says, please let know full information occurred when install software unsuccessfully? , how did assign software computers , install them? based on description, seems want assign software clients using gpo. if assign program computer using gpo, installed when computer starts, , available users log on computer. when user first runs program, installation completed. regarding how assign software distribution computers, can follow next operation: on domain controller, click start ->run , type gpmc.msc , load gpmc console. in group policy management console . right-click group policy object want edit , click edit . to assign software applications computers, in console tree expand computer configuration\policies . expand software settings , , click software installation . in computer configuration\policies choose, right-click software installation , point new ,...

security event logs missing for a period of time of 9 minutes

i have folder, 'test', includes folders 'test1', 'test2', 'test3' , 'test4'. somehow folders 'test3' , 'test4' moved 1 level up. there security log enabled , audit in windows level. action took place within period of 9 minutes did not last more 1 or 2 minutes due size of files included in them. need find event , figure out performed move in order prevent next time. generally, if move or delete folders events 560 , 560. these events not there period of time when incident occurred. thank you renold auditing tricky, may not have setup correctly.  few tests, verify these particular events are created appropriately. in general need following 1) enable object acces auditing in local audit policies 2) enable ntfs auditing on parent folders of objects audited.  best entire drive. 3) monitor appropriate activities (deletes , writes usually), reading files is not worth effort. recommended ntfs audit policy ht...

A question about ValidityPeriodUnits and ValidityPeriod

hello all can please me following question. i understand above can set in capolicy.inf file when building ca or post build using certutil e.g. certutil -setreg ca\validityperiodunits 5  certutil -setreg ca\validityperiod "years" so understand if in capolicy.inf file sets notafter date of ca certificate (e.g. ca cert last 5 years in above example). i assume when used via certutil (on built ca) can used further limit maximum notafter date of certs ca issues. for example if ca cert set 10 years (via above settings in capolicy.inf file), , want limit certs issued ca maximum of 5 years (rather 10 years) set registry value above. are assumptions above correct? if case limit maximum notafter date of certs issued via templates (e.g. enterprise joined ca) or non-enterprise (standalone) ca's. example if ca cert 10 years , create copy of webserver template , adjusted period 5 years, set above registry values 3 years (restarted services) maximum age of webserver ...

Can't see the (Routing and Remote Access) in the (Administrative Tools)

i can't see the (routing , remote access) in (administrative tools). might problem ??? luai hi,   it's services, , need install routing , remote access role in windows 2008 server find management console in administrative tools. go add role wizard, need add network policy , access services role   routing , remote access services role.   best regards cordialement, oussema fekih note : si ma réponse vous été utile, ou apporté une résolution; merci de voter ou de la marquer comme utile. Windows Server  >  Windows Server General Forum

How to Move DHCP Function to New Server

i shutting down windows server 2003 system has been our network's dchp server.  before shutting down, want switch dhcp role our new server.  procedure should use duplicate dhcp parameters old server new server before disabling dhcp on old server.  know ill-advised have dhcp running on 2 servers.  suspect might need short period transition.  appreciated.  thanks. doug pruiett news jail & prison ministry richmond, virginia www.goodnewsjail.org these ones may help. http://blogs.technet.com/b/networking/archive/2008/06/27/steps-to-move-a-dhcp-database-from-a-windows-server-2003-or-2008-to-another-windows-server-2008-machine.aspx   http://technet.microsoft.com/en-us/library/dd379535(v=ws.10).aspx         regards, dave patrick .... microsoft certified professional microsoft mvp [windows] Windows Server ...

Internet/File/Printer Sharing

i have current set-up - 2 laptops running windows 7 , desktop running windows server 2008. in house there wireless network (lets call wifi1), want able connect wifi1 server , allow laptops connect server through second wifi2 network sweex router connected desktop lan cable. i able use server printer , file server.  i've tried enabling ics doesn't seem work thinking maybe having fixing ip address i'm not sure if want on server's lan(wifi2) or wifi1 network. any appreciated. thank you why want work this? create 1 wifi network, suppose wifi router dhcp server? enable file sharing on server. install printers , turn on sharing. after can install network printer on clients and  can map shares. Windows Server  >  Windows Server General Forum ...

Migrating from SBS2011 STD to server 2012 R2 Essentials

hi, i following the  technet artical " migrate previous versions windows server 2012 r2 essentials or windows server essentials experience" http://technet.microsoft.com/en-us/library/dn408633.aspx i have got far step 2 "install windows server 2012 r2 essentials replica domain controller" , stuck here, think missing something. article isn't clear on next.<o:p></o:p> i have installed r2 essentials on new server, asking configure server , complains there domain controller (which there is).<o:p></o:p> the technet article seems suggest should run ds configuration wizard i can’t find how start this.<o:p></o:p> is there step missing here or overlooking obvious? any appreciated. thanks, dj the link posted summary. each step flicksble link , each step has own page more info. here step 2: http://technet.microsoft.com/en-us/library/dn408637.aspx one of things @ top of page says if configurati...

WSUS and Updates via VPN

hello, the way have wsus setup our desktop computers, never move office, receive updates wsus, , our laptops, moving, 10-15 total systems, receive updates automatically microsoft themselves. i wondering, since our laptops use vpn access our internal network, can somehow setup laptops automatically download , receive updates myself deploy our desktops if on vpn? same process doing desktop clients? i wondering, since our laptops use vpn access our internal network, can somehow setup laptops automatically download , receive updates myself deploy our desktops if on vpn? absolutely. will same process doing desktop clients? it can be, may not optimal solution require notebooks continually connected vpn until update files have downloaded, means update files being downloaded on vpn connection. the conventional way handled setting replica server without local content store. because it's replica without content 15 clients, can put on minimally configured virtual machi...

Event 1037 SpoolerSpoolss

i have ad ou blocking gpo.  i created policy deploy printers server.  the policy has been deleted.  the server showing application event id 1037.  group policy unable add per computer connection \\server\printer.  error code 0x80070709. i have performed rsop , policy had printers doesn't show in results. why still trying push printer? regards, mike i have ad ou blocking gpo.  i created policy deploy printers server.  the policy has been deleted.  the server showing application event id 1037.  group policy unable add per computer connection \\server\printer.  error code 0x80070709. i have performed rsop , policy had printers doesn't show in results. why still trying push printer? Windows Server  >  Group Policy ...

Is it safe to delete old edb.log files from certificate server?

in our certificate server windows 2003 enterprise edition sp2, have low disk space on c drive. when checked drive found that c:\windows\system32\certlog folder occupying 3.85 gb space. has many edb.log files starting 2008 year. is safe remove older log files in location free disk space? if can delete till date log files should keep in folder? hello, normally log files. that, deleting them not cause issue. to definitive answer, consider asking them here:  http://social.technet.microsoft.com/forums/en-us/winserversecurity/threads this posting provided "as is" no warranties or guarantees , , confers no rights. microsoft student partner 2010 / 2011 microsoft certified professional microsoft certified systems administrator: security microsoft certified systems engineer: security microsoft certified technology specialist: windows server 2008 active directory, configuration microsoft certified technology specialist: windows s...

Installing a Mix of Read only Domain controllers(RODC) and non RODC in a forest

hi, i have requirement of installing rodc child domains sites , non rodc other sites, child  sites sharing same parent domain controller in windows 2008 environment. can advise on whether possible , how can done? thanks. samson if have child domain has writable domain controller can deploy rodc. if have root domain , want deploy child domain rodc not possible.as read-only domain controller needs replicate changes read-write domain controller in same domain . refer below link rodc. http://awinish.wordpress.com/2011/10/04/rodc-read-only-domain-controller/ hope helps regards, sandesh dubey. ------------------------------- mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator blog: http://sandeshdubey.wordpress.com posting provided no warranties, , confers no rights. Windows Server  >  ...

Multi-level wildcard (catch-all) DNS setup *.*.domain.com => one IP/CNAME

it known possible configure dns server "catch-all" resolving on single subdomain level, like *.mydomain.com. in x.x.x.x that anything.mydomain.com maps single ip/cname however, need setup @ least "level-2" wildcard sub-subdomain catch-all wildcard system like: any.thing.mydomain.com or better, item.of.any.level.under.mydomain.com will resolved single ip, like: node1.site1.ourcdn.com node2.site1.ourcdn.com node1.site2.ourcdn.com node2.site2.ourcdn.com etc. => single ip/name has got working on windows dns server (2008 r2) thank tips. i ran through few tests , think found way this: first, add new domain domain name being * (just single asterisk). then, add new host record under * domain name of host record being being blank (thus defaulting (same parent folder) once created.  point record @ ip using. my tests successful spent few minutes. hope helps! brian   ...

how to give full permissions to Group Policy shortcut

hi, i have installed  2008r2 server 20 clients running on windows 7, i've created clean desktop policy,right click disable, local drives disable group policy now  i have created desktop short via group policy, its showing client machines, im not able give permissions particular folder users,can u hlep me. something ?  http://blogs.technet.com/b/askds/archive/2014/02/17/adding-shortcuts-on-desktop-using-group-policy-preferences-in-windows-8-and-windows-8-1.aspx arnav sharma | http://arnavsharma.net/ please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Group Policy ...

Windows Server 2012 - VM operations during host backup

Image
hello everybody, on windows server 2012 hyper-v, cannot add iso image vm or start stopped vm while performing backup windows server backup. i have never experienced on many 2008 r2 hyper-v servers manage. far happens on 2012 hyper-v machines have setup, doesn't matter version, have tried them all, hyper-v free, 2012 standard , datacenter... any ideas? hi, i searched ms knowledge base; don’t find article mentioned windows server backup feature change related hyper-v backup. can reproduce issue in windows server 2012 hyper-v host? also check below service status when perform windows server backup hyper-v: hyper-v virtual machine management service hyper-v image management service these 2 services control whether can operate vms, if these 2 services not running, can’t start or modify vm settings. check , give feedback further troubleshooting. for more information please refer following ms articles: hyper-v: hyper-v image management service must runnin...

Unable to promote a domain controller.

we have 4 domain controllers, 2 carry of important roles , other 2 storage @ moment. we're trying promote 2 being used storage decommission older ones. when trying promotion receive error "this computer has @ least 1 physical network adapter not have static ip address(es) assigned ip properties. if both ipv4 , ipv6 enabled network adapter, both ipv4 , ipv6 static ip addresses should assigned both ipv4 , ipv6 properties of physical network adapter. such static ip address(es) assignment should done physical network adapters reliable domain name system (dns) operation." how should go resolving issue? hi, i checking see if problem has been resolved. if there's you'd know, please feel free ask. best regards cartman please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com Windows Server ...