Lrl

someone in forum asked if there way have constant, fingertip, access control panel items rather category view.  thought share answer them w/ y'all out of general interest. have found way have control panel items permanently on start. rt clk on taskbar > toolbars > desktop toolbar ( don't have keep after exercise) desktop toolbar opens showing 2 control panel listings. 1 has expand arrow. go there & on resultant menu is, @ top of list "all control panel items". rt clk & select "pin start". done  have wanted. and, now, can drop desktop toolbar if want. put tile on start menu, no context listing. but, can, there, pinned taskbar. then, tile can removed... maybe, me & don't want or keep tiles on start menu. also, keep god mode pinned taskbar. can have instead or control panel items. cheers, drew drew ms partner / ms beta tester / pres. computer issues pres. computer issues www.drewsci.com   guess old fashion...

dears, i have question: ad objects have sid (security identifier)? thanks regards all objects in active directory have guid (the objectguid attribute), security principals have sid (the objectsid attribute). security principals objects can assigned permissions. includes the classes user, computer, group, , domain. not include objects of other classes, like contact, organizationalunit, container, , many others. these later objects cannot assigned permissions since there no sid add acl. note contacts can members of group, not give contacts permissions. richard mueller - mvp directory services Windows Server  >  Directory Services

i tried running bat file manually , works ok. bat file runs java class detects folder exists , write file mapped drive(z:/) , has permissions enabled full control authenticated users. however, when use task scheduler run bat file, seems not detect path. would know how can make task scheduler run bat file such can write files on mapped drive? does batch file reference drive letter or unc path?  user account configured run task doesn't have drive mapped.  utilise 'net use' command inside batch file map drive.  syntax of command is: net use [devicename | *] [\\computername\sharename[\volume] [password | *]]         [/user:[domainname\]username]         [/user:[dotted domain name\]username]         [/user:[username@dotted domain name]         [/smartcard]         [/savecred]   ...

hi, we have multiple wsus server config wsus server assigned @ each site. we centralizing approval process creating upstream server @ our ho. in process, planning distribute wsus config clients registry instead of gpo.  registry settings delievered based on ip segment of client via logon script, client connects ip segment specific wsus server. being done because of our users roaming 1 site another. please advice challanges in , type of config work?   thanks. mohammed siddiq panja hi, have looked @ http://technet.microsoft.com/en-us/library/dd939865(ws.10).aspx i think have difficulty using logon script approach, wu service on client may have read registry settings before logon script changes them, so, may need develop method restart wu service reads changed settings applied script. don Windows Server  >  ...

i have 1 user "store" tile not work, has word "error" inside tile.  any suggestions? hi, thank posting in windows server forum. please refer below articles might helpful case. 1.   help! live tiles aren’t working! 2.   windows 8 store tile not working  (2 &3 different threads) 3.   windows 8 store tile not working hope helps!  thanks, dharmesh Windows Server  >  Remote Desktop Services (Terminal Services)

hello all, this problem. active directory windows 2008, memer server in created (via remote desktop) the following batch run every morning @ 8:00 (it simple batch removes 2 folders). rmdir /s /q q:\hipath4000\h4k01grg01e\000\ rmdir /s /q q:\hipath4000\h4k01grg01e\001\ i created scheduled task (via remote deskop server in remote site matter of fact) run batch every morning 8:00 o'clock. user task run has log on batch priviledge (it administrator of ad). now  runs smoothly if logged on. doesn't if logged off (no error in task scheduler file) despite fact configured task run if logged off.   help please conundrum best regards beppe     the user task     giuseppe in general properties of task, have enabled these settings? -run whether user logged on or not -run highest priviledges visit: anitkb.com , knowledge base. Windows Server ...

operating system :- x64 standard server 2008 rc1 issue :- when attempt install sp 2 says sp 1 not installed ( though 2008 comes sp1 default ) to date :-   i have run the readiness check tool , has come this ==================================================================== checking system update readiness. binary version 6.0.6002.22574 package version 13.0 2012-01-28 22:41   checking windows servicing packages   checking package manifests , catalogs   checking package watchlist   checking component watchlist   checking packages (f) cbs mum missing 0x00000002 servicing\packages\wuclient-selfupdate-core-toplevel~31bf3856ad364e35~amd64~~7.1.6001.65.mum   checking component store   summary: seconds executed: 456  found 1 errors   cbs mum missing total count: 1   unavailable repair files: servicing\packages\wuclient-selfupdate-core-toplevel~31bf3856ad364e35~a...

so trying install windows server 2012 essentials on a dell poweredge 2900.  have created the system drive & installed os. i have configured router block of 5 static ip, static  dns, created web access rule opens port 80 & 443. have completed items in dashboard except anywhere access wizard. i created this: http://technet.microsoft.com/en-us/library/ee649160(v=ws.10).aspx location server i used configure direct access  http://technet.microsoft.com/en-us/library/jj204618 but not able past step 3 in wizard. error receive server cannot find , network adapter out domain name of direct access can someone please explain me need complete setup of direct access. thank you mark mark r bracking are still using 2 nics? robert pearman sbs mvp | www.titlerequired.com | www.itauthority.co.uk Windows Server ...

from server 2008 sp2 can successfully distribute printers vista clients, not xp.  both oss have clientside extentions installed.  reading i've done seems indicate users have used pushprinterconnections handle xp clients. i 'thought' use of clientside extensions 'solution' gpos xp couldn't understand , i assumed pushprinterconnections no longer needed.  do need one, or both xp clients? andrew hi,   thanks post.   please understand 2 different ways deploy printers.   if want use pushprinterconnections, please refer following article:   http://technet.microsoft.com/en-us/library/cc772505.aspx   if want use group policy preference, please refer following article:   http://www.msserveradmin.com/the-one-reason-you-should-use-group-policy-preferences/   hope helps. Windows Server ...

hello guys the wanted website here itfreetraining.com well learning more types of queries , don't understand our dns sent iterative querie root dns server .com dns server , .com dns didn't find website address had ip address authoritive dns servers of itfreetraining.com , happened our dns server requested answer authoritative servers , got . don't how possible .com server not have ip address of website directly instead authority dns servers of website ? .com servers authoritative administrator himself decided put dns servers address instead of website address , why not directly website ? thanks hi, according research, design behaviour , there no mircosoft offical documents explain it. based understanding, if records stored in .com or root hints' server, server overload. so .com had authoritive dns servers'  ip of second domain name reduce server load. more information about  iterative queries , please refer following article: https://techn...

hello all, i'm trying setup point point vpn using windows 2008 r2 routing , remote access.  able establish connection between 2 windows 2008 r2 servers client server loses local network connectivity.  goal replicate sql data accoss ipsec tunnel.  data center not allow hardware vpn such cisco.  setup routing , remote access , create vpn connection on client windows 2008 server.  how client pc stay connected vpn tunnel server can replicate sql traffic , still provide access client server access local lan users can connect it.   problem using client app in server. see preferred option client connecting server. can change behavior client. http://best-tech-articles.blogspot.com/2008/10/how-to-enable-split-tunneling-for-vpn.html   reluctant server (although work). think use server server vpn. might seem overkill job (you don't need ability route between sites) happier it.   there problems when 2008 came out. routing between sites work...

hello, can explain how i delete virtual machine forcefully. getting errors doing after turning off virtual machine ? thanks, jatin   engine guy.. forcefully? want use windows explorer delete virtual machine files? if so, can't done because hyper-v holding lock on or of files. under specific circumstances, can delete files breaking file locks. that's easy do. stop hyper-v services , file locks go away, makes possible delete files. Windows Server  >  Hyper-V

hi, have dell 2950 server windows 2008 os. have mapped 1 of drives of computer on client desktops xp sp2 operating system. when users connect shared drive, disconnects shared drive, after accessing shared drive, don't see folders in it. our network in domain of windows 2003. have joined windows 2008 computer windows 2003 domain. facing issue since many days. please us. regards sanjay sanju hi sanjay, can please provide following information a) when drive fails / when clients unable access drive , how restore ? b) provide event id when drive getting disconnected c) drive san / normal partition on windows 2008 ? d) when issue occurs , please try access share ( not share drive ) using \\windows2008server ipaddress , check if working e) netmon / ethereal trace when issue occur valuable. i dont want comment smb 2 version in initial phase without troubleshooting issue sainath windows driver development ...

nlb windows 2003 - can't time. i have used windows nlb on windows 2003 few different iis setups. i trying 1 smtp traffic , not having luck. i copied setup 1 of successful setups, no go.  this is what attempting: cluster virtual ip: 192.168.15.80 machine a, lan card: 192.168.15.81 machine b, lan card: 192.168.15.82 machine a, nlb card: 192.168.15.91 machine b, nlb card: 192.168.15.92 i have tried 3 operation modes: - unicast - multicast - multicast igmp (even bought new switch support it). all 3 modes perform same, works... half way. at first , second glance seems working fine.  however it takes 1 or 2 seconds receive email via smtp without the nlb active.  in fact works if there one active machine in cluster. there might 12 - 20 connections server when no nlb active. when enable second server traffic split 50/50 both servers.  however takes several minutes transfer...

i have added new 2008r2 dc existing 2003 dc , exchange 2007/2008server. i transferred fsmo new dc i added the server site in ad sites , services. but having problem 2003 dc, workstation service not start due dependency nsi. when try start error 1075. all services depending on workstation service aren't starting. in registry, 2 keys added don't have on 2003 dc (separate site) dependongroup (blank) dependonservice (bowser mrxsmb10 mrxsmb20 nsi) these dependencies not showing in properties of workstation service in services console. it's if windows 2008 dc has these dependencies replicated on 2003 dc , . is work of group policy? can remove these entries manually? am missing something? thank in advance johann hi, you said, transferred fsmo new dc 2008r2 dc pdc role owner. in windows domain structure, primary domain controller (pdc) selected domain master browser. pdc can domain master browser. if pdc not present, domain master browser not avail...

when tried join domain in window 8.1(not pro) it's not working, need know how join domain the versions of windows 8.1 can join domain professional or enterprise.  is enterprise edition? if under management see editions of windows 8.1 support domain join. http://www.microsoft.com/en-us/windows/enterprise/products-and-technologies/windows-8-1/compare/default.aspx Windows Server  >  Directory Services

hi all, i'm having problem certificate templates.  figured out it's because i'm using server 2008 standard can't duplicate existing template create v2 cert template won't work on standard server.  i'm trying figure out how use existing template perhaps...or i'm open other ideas. basically i'm trying implement nap.  i'm following article: http://www.windowsecurity.com/articles/deploying-ipsec-server-domain-isolation-windows-server-2008-group-policy-part1.html and few other ms articles.  wants me duplicate workstation authentication template because has client authentication.  has me add system health authentication.  i tried adding these extensions existing templates (ipsec) it's grayed out. any or suggestions appreciated!  thanks. hi, you can use isolation rule type implement domain isolation kerberos. creating connection security rules http://technet.microsoft.com/en-us/library/cc725940(ws.10).aspx for more information do...

hi new dfs , setting disaster recovery site domain based dfs. if have 8 shared folders , each of these shared folders have many sub folders need target each sub folder replication? i set dfs targets , 2 names space servers , can naviagate the shares and their sub folders. if not have to target sub folders how i figure out how large make our staging folders? many thanks bruce  hi bruce,   as far know, each shared replicated folder under dfs link need have replication method replicate content among shared folders.   you may consider establishing dfs replication groups each dfs link.   for regarding staging folders size, share following document , technet blog guidance.   staging folders , conflict , deleted folders http://technet.microsoft.com/en-us/library/cc782648(ws.10).aspx   staging folder guidelines dfs replication http://blogs.technet.com/filecab/archive/2006/03/20/422544.aspx   hope can helpful.   best regards, david shen this posting provided "as is"...

we having problem getting 2008 r2 server apply gpos, error is: event id:      1058 computer:      server1.mydomain.local description: processing of group policy failed. windows attempted read file \\mydomain.local\sysvol\mydomain.local\policies attempts connect \\mydomain.local\sysvol fail "you not have permission use network resource". solved: add server1 'domain controllers' group active directory users & computers, delegation: trust computer delegation service (kerberos only) adsiedit - server1 properties, useraccountcontrol = 532480 hopefully has cleared-up of important remaining event log errors. question did wrong cause many fixes necessary in first place, or 2008 r2 inherently more flaky 2003 working? Windows Server  >  ...

i believe our techs may have ghosted or otherwise reimaged machine, or may have been turned off extended period of time.  cannot find computer in ad users , computers, , tried ldp query for a service principal name, , got nothing.   machine did have entry in dns, deleted, errors still logged on multiple dcs , our pc manager sees machine (assuming via wins) in network neighborhood.  can't delete machine domain through ad users , computers, , can't remove machine domain going local machine because don't know is.  help!!! also- @ 2003 native functional level- added 2008 dc 6 months ago, if helps... thanks, sara hello, if machine same sid exists on domain can run trouble, yes. if install 10 computers same image without sysprep machines same. and yes, ad doesn't take care of computers sid, can join hundreds of machine same sid, ad don't take care about. but security related tasks , informations create problems, because each machine requesting machine account password, ...

hi i have linux based dhcp server , windows 2008 r2 based dns server; can dhcp server to dynamically update dns server if dns server in secure , unsecure updates mode cannot dhcp server update dns server if dns server in secure updates mode. can assist please? why not allow unsecure updates , call day ? it depends on dhcp server running under linux, , possibly linux distro/version.  may have better luck posting on linux boards, here post isc dhcpd doing secure updates... http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/  (it's in english not german) Windows Server  >  Network Infrastructure Servers

hi, for some time , a ghost ip  address established on main lan adapter (windows 2008 r2 server) . the server have 2 lan adapter. first is active , have ip v4 address, other 1 ist deactived (with no ip address). first ip adress 10.110.43.1 (server) - ghost ip private ip in rage of 169.254.*.* this address not added lan ip addresses - ip address changing every server startup. look this: we have uninstalled all lan adapters . cleanup hiden lan adapter in device manager. if no adapater installed no gohst ip established. but as as the first lan adapter is installed , this g host ip exists r ight away again . this ghost ip big problem same services use ip adress. of found server via ghost address , crashed. what can do? please us. thanks! danke und liebe grüße oliver richter hi, here solution problem. the reason "axis camera station" software (server serice). piece of software c...

hi, i need know entire thing fsmo roles, can body me proper scenorio? have vm machines. of ref can develop self. thanks, venkatesh. thanks, venkatesh. planning fsmo roles in active directory transferring fsmo roles seizing fsmo roles understanding active directory schema http://www.virmansec.com/blogs/skhairuddin Windows Server  >  Windows Server General Forum

i'm having problem applying advanced audit configuration settings via group policy windows server 2008 r2 core systems. i have created new policies, used existing policies, , result seems same, windows server 2008 r2 full instllations advanced audit configuration settings applied core systems not.  i've verified 2 ways, gpresult, core systems not have settings listed in results while full instllation servers , auditpol /get /category:*  core servers not have settings defined in group policy object while full instllation servers do.   you can see example of gpresult in screenshot below - fs01, left, core server no advanced audit configuration , fs02, right, full installation, advanced audit configuration, same policies apply.    is expected behavior or not working should?  there more need configure? thanks, joe joseph m. durnal mcm: exchange 2010 mcitp: enterprise messaging administrator, exchange 2010 mcitp: enterprise messaging administ...

hi, need trying understand couple of things concerning running own pki infrastructure. i have setup standalone rootca server , guide following suggests publish crlpublication urls , cacertpublicationurls virtual directory on server. they doing using certutil -setreg parameter. what purpose of this? is clients know files if browse url? for example, give them url www.mysite.com/pki , able copy of crl , rootcert? hi, i have setup standalone rootca server , guide following suggests publish crlpublication urls , cacertpublicationurls virtual directory on server. they doing using certutil -setreg parameter. what purpose of this? is clients know files if browse url? as know certificates need validated before being used, 1 of reasons why certificates need validated because revoked before they expire. certificate revocation list (crl) provides way check revocation status, , url location revocation information certificates can viewed. regarding cacertpublicati...

good day. i know windows server 2012 has active directory recycle bin feature, upon enabling feature doesn't display deleted user account have deleted prior enabling feature. normal? feature displays deleted ad objects after have enabled it? there other way display objects? in advance. you can restore objects deleted while the recycle bin feature enabled so seeing normal. way restore objects deleted before recycle bin feature enabled perform an authoritative restore backup.   enfo zipper christoffer andersson – principal advisor http://blogs.chrisse.se - directory services blog Windows Server  >  Directory Services

hi guys, can point me list of values , following registry key? [hkey_local_machine\software\microsoft\terminal server client\default\addins\rdpdr] "filterqueuetype"=dword:??????? many thanks,-t hi, based on filterqueuetype rd client attempt have server auto-create local client printers have port names.  on old rd/ts client versions default 0x00000007, whereas on newer rd client versions default value 0xffffffff.  have not tested if filterqueuetype applicable rd easy print, guess yes.  below definitions: 1 ports begin lpt 2 ports begin com 3 ports begin lpt or com 4 ports begin usb 5 ports begin lpt or usb 6 ports begin com or usb 7 ports begin lpt, com, or usb ffffffff ports for example, filterqueuetype set 0x00000007, rd client not map network printers, printers connected via local tcp/ip port, printers port names of dot4, etc. -tp Windows Ser...

i want create 1 ou. ou used move old machines into. please can policy applied ou, means machines moved ou automatically disabled. nirmal singh administrator hello, want disable computer account? not possible gpo (not directly). please setup scheduled task on dc run command: dsquery computer ou=ou1,dc=domain,dc=intern | dsmod computer -disabled yes mvp group policy - mythen, insiderinfos und troubleshooting zum thema gpos: http://matthiaswolf.blogspot.com/ Windows Server  >  Group Policy

hello support, below our ad environment: root domain has upgrade windows server 2012 second domain dc has upgrade windows server 2008 the third level dc still in windows server 2003. now need upgrade third level dc windows server 2012. there consider need know before upgrade process? hi, thanks post. in opinion, could first add windows server 2012 domain controller existing windows server 2003 domain, migrate active directory windows server 2003 windows server 2012 complete upgrade process. before begin, best check following prerequisites: 1. check if domain functional level setup @ least windows 2003 mode. lowest required domain functional level allow windows server 2012 domain controller installation. 2. run adprep /forestprep once on schema master prepare forest. perform procedure, must use account has membership in of following groups: schema admins, enterprise admins, , domain admins domain contains schema master. if procedure has completed in root d...

hi all, i new powershell , mysql , having trouble passing username, returned query mysql server, variable without meta data of field name being copied also. the query responds following: login ----- test1 i want "test1" pass variable $test. cannot work out correct way this. i importing module have created store mysql query can simple call connection , pass query in separate script, module call mysqlconnection.psm1 , contains following: function run-mysqlquery { param( [parameter( mandatory = $true, parametersetname = '', valuefrompipeline = $true)] [string]$query, [parameter( mandatory = $true, parametersetname = '', valuefrompipeline = $true)] [string]$connectionstring ) begin { write-verbose "starting begin section" } process { write-verbose "starting...

hello,  i trying find guidance , recommendations new domain in new forest have build. new domain created on new platform 1-way trust created between both domains. since current domain called mycompany.com , possible call new domain in new forest newdomain.mycompany.com ? what best practice ? in opinion, looks sub-domain name not case , don't want call new domain mycompany.local... how think should call new domain? - newdomain.mycompany.com : looks sub-domain imply 2-ways trust have 1-way trust - mycompany2.com : need buy public domain name - corp.mycompany2.com - mycompany.local : far know, .local not recommended practice taking time read (i hope it's clear) , answers. you can go in way. "looks like" sub-domain, complete new domain. there lots of articles relating best practices when naming active directory domain, here reference: http://social.technet.microsoft.com/wiki/contents/articles/17974.active-directory-domain-n...

i need creating script on powershell determines how long system has been online , if workstation has been online more 7 days, schedule system rebooted @ appropriate time. displaying a message user informing them machine scheduled reboot at 3:00 am. sorry - forgot paste link: https://gallery.technet.microsoft.com/scriptcenter/site/search?query=uptime&f%5b0%5d.value=uptime&f%5b0%5d.type=searchtext&ac=2 ¯\_(ツ)_/¯ Windows Server  >  Windows PowerShell

hi all we deploy windows 7 , ie9 microsoft mdt (deployment toolkit). how can disable ie9 first run how can find admx files ie9   chris the new admx automaticlly installed when install ie9 on computer has gpmc installed. have written blog post internet explorer 9 group policy settings that lists new administrative templates settings. internet explorer maintainence section update new options if have ie9 installed. hope helps   alan burchill (mvp) http://www.grouppolicy.biz follow me on twitter @alanburchill Windows Server  >  Group Policy

hi, we have strange problem task scheduler on windows server 2008. tasks triggered several times instead once. task setup: run whether user logged on or not, run highest privileges, triggers: start: 6:30 / weekdays, repeat task every hour - duration 15 hours / stop task if runs longer 30 minutes. when start task manually ok. task history: level    date , time    event id    task category    operational code    correlation id information    13. 7. 2011 13:33:28    201    action completed    (2)    4ce37395-35d1-4473-aff4-e4bd5aaa058a    "task scheduler completed task ""\backup_all_sql"" , instance ""{4ce37395-35d1-4473-aff4-e4bd5aaa058a}"" , action ""c:\windows\system32\cmd.exe"" return code 0." information    13. 7. 2011 13...

hello folks, i'm trying set tpm protected computer-certificates key attestation. i've set according wesh's guides ("setting tpm protected certificates using microsoft certificate authority"), however, "key attestation" enabled (be "forced" or "force if supported client"), issuing certificate fails following error: log name: application source: microsoft-windows-certificationauthority date: 01.02.2017 11:00:41 event id: 22 task category: none level: error keywords: user: system computer: issca.xxx description: active directory certificate services not process request 25 due error: the parameter incorrect. 0x80070057 (win32: 87 error_invalid_parameter). the request xxx\client1$. additional information: error cannot process tpm attestation "client1" in example above win10 v1607 vm virtual tpm (hyperv host win10 v1607), same error using physical machine ...

microsoft,   please note following updates kb3097996 , kb3098781 broke our company ecommerce web site on browsers firefox (could not add items cart longer), chrome (could add cart, not update item count on header) , internet explorer (nothing broke, getting 406 errors in f12 developer tools).  all ajax code asp.net   after applying updates started receiving networkerror: 406 not acceptable error(s) on .axd files.      typeerror: sys.webforms undefined sys.webforms.pagerequesmanager._initialize('scripmanager1, 'main_form', ['tpn...   typeerror: sys.webforms undefined var pgregmgr = syst.webforms.pagerequesmanager.getinstance()     i wanted let know because cannot apply these patches until know more them. moojjoo mcp, mcts http://moojjoo.blogspot.com Windows Server  >  ...

hi, is there way configure e-mail alerts on physical windows servers? specifying these servers physical because have had answers related virtual servers alert settings setting up. i need guidance how, if possible, setup e-mail alerts sent me , 2 other team members when server goes down , updates have failed, or installed successfully. i appreciate suggestions in matter. thanks in advance, -->configure e-mail alerts monitor server state? just thought...use schedule task , script. run scheduled task trigger script ran periodically. guess, has script can monitor state , send email... best, howtodo Windows Server  >  Management

hello i'm having trouble adding windows 2008 domain controller our 2003 domain. dcpromo does'nt allow me install dns server(grayed out) when try add sub domain. when try add server forest works fine. all domain controllers in forrest run dns forest wide replication  i message in dcpromoui log soa query returned 9501 domain not host dns dns_doesdomainhostdns returning false hresult = 0x00000000 the domain not host host dns. thomas the solution first run dcpromo ,restart ,then install dns. dns service will detect ad innstalled on server , zones in active directory. Windows Server  >  Directory Services

hi, has encounted issue windows 2008 sp2 crashing ie7? have tried reinstalling multiple times on machine , everytime open ie7 crashes program not responding message , there doesn't seem can fix. have tried upgrading ie8 downloads of technet sites , won't let me upgrade, gives me message not being valid operating system. have tried running without add-ons , sorts of things , nothing seems help. issue scratch install , have done nothing apart try run it. below message getting. faulting application iexplore.exe, version 7.0.6002.18005, time stamp 0x49e01e18, faulting module mshtml.dll, version 7.0.6002.18005, time stamp 0x49e02cf4, exception code 0x4000001f, fault offset 0x006fc966, process id 0x870, application start time 0x01ca97e156fe9a84. thanks, simon hi simon,   i suggest trying following steps troubleshoot issue:   step 1 reset ie ========== 1. click start, run, type: “inetcpl.cpl” (without quotation marks) , press enter. 2. switch advanced tab. 3...