Tech Notes

Domain Admins Group permissions

2011-12-09T13:32:00.001-05:00

I always puzzle why with Domain Admins account rights you have additional dialog box if you access files or directories which do not have explicit permissions for your login account. Finally, I spend some time to research the problem and it is UAC who does it. So if you annoyed by this you need to set UAC down low like in the picture.

Useful utility DFSR

2011-03-16T16:11:00.004-05:00

subinacl /subdirectories y:\ /grant=system=f , when seed a replication folder - if "SYSTEM" account was missing from permissions gives you ability to insert it.
dfsrdiag replicationstate /mem:colo-appsdata - check status of replication member
C:\>dfsrdiag backlog /rgname:appsdata /rfname:g /smem:colo-appsdata /rmem:appsda
ta - check backlog

DFSR and Windows 2008 R2 cluster problem

2011-02-18T15:54:00.003-05:00

The customer has the cluster with shared volume, but cannot make it DFSR source or target. Have DFSR error 9011 or 5012. The problem was:
dfsrclus.dll registration on the cluster (what should create DFSR cluster resource type), so to do it type the command in cmd (administrator) -
cluster.exe restype "DFS Replicated Folder" /create /dll:dfsrclus.dll
it should respond
Resource type 'DFS Replicated Folder' created

Physical server conversion to hyper-v (VHD)

2011-01-20T18:34:00.004-05:00

For conversion was used disk2vhd utility from SysInternals - http://technet.microsoft.com/en-us/sysinternals/default, but after conversion to VHD and starting on Hyper-V host has blue screen.
Used xenserver-linuxfixup-disk.iso to fix it.

Boot Time and FSMO info

2011-01-04T14:11:00.002-05:00

systeminfo| find "System Boot Time"
netdom query fsmo

Problem with CSV

2010-12-20T15:22:00.002-05:00

Have error on passive cluster node 5120:

Cluster Shared Volume 'Volume1' ('Cluster Disk 5') is no longer available on this node because of 'STATUS_BAD_NETWORK_PATH(c00000be)'. All I/O will temporarily be queued until a path to the volume is reestablished.

And 5142:

Cluster Shared Volume 'Volume1' ('Cluster Disk 5') is no longer accessible from this cluster node because of error 'ERROR_TIMEOUT(1460)'. Please troubleshoot this node's connectivity to the storage device and network connectivity.

Solution:

Client for Microsoft Networks and File and Printer Sharing for Microsoft Network should be enabled on all network adapters what participate in the cluster networks on all nodes.

ref: http://support.microsoft.com/kb/2008795

PowerShell SharePoint 2010 Backup

2010-07-12T08:59:00.005-05:00

I need to schedule SharePoint 2010 Backup (site):
First create a PowerShell script in Notepad:
Backup-SPSite -Identity http://wss-08r2 -Path "\\servername\sharepoint2010\one\wss-08r2.bak" -Force

name the file - backup.ps1

Second:
Under folder C:\Windows\System32\WindowsPowerShell\v1.0 create profile.ps1 file it will be default profile for all users on the SharePoint front end server, edit the file by adding -

Add-PSSnapin Microsoft.SharePoint.PowerShell

And save the file.

Third:

Create a scheduled job and in Action tab put:

Action: powershell.exe

Add arguments: -command "PATH\backup.ps1"

where is PATH - path to the script file.

Access 2010 Delete Query

2010-06-01T08:20:00.003-05:00

I try to create a query to delete unmatched records of two tables. SELECT query was OK, but then I convert it to DELETE and try to run, it give me the error: "Cannot delete from specified tables". So, I changed the property "Unique records" of the query to - 'Yes" and was able to run it. for reference my query was:
DELETE Invoice_detail.invoice, Invoice.*
FROM Invoice LEFT JOIN Invoice_detail ON Invoice.invoice = Invoice_detail.invoice
WHERE (((Invoice_detail.invoice) Is Null));

Hyper-v backup

2010-05-12T16:55:00.001-05:00

Cannot backup Hyper_v machines on Windows 2008 R2 cluster host.

Solution:

hklm\software\microsoft\windowsNT\currentversion\spp
created the reg_Multi_SZ DisabledWriters
value = {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
net stop wbengine && net start wbengine

Cannot install SQL2008

2010-02-05T15:07:00.004-05:00

Then I run install it give me in Setup Support Rules: "Restart Computer" - Status is not passed. Solution:

Clearing (but you can delete the key) the value in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations fixed the issue.

(no reboot)

Copy NTFS security info.

2010-01-21T14:38:00.003-05:00

To copy NTFS information from a volume on Windows 2008 sp2:

robocopy \\fs01\ustore c:\temp\ustoresec /secfix /copy:SOT /E

I will copy the directory structure with security information for folders - no individual files.

SharePoint alerts and timer problem

2010-01-08T14:36:00.002-05:00

The issue: MOSS2007 periodically stop run "Immediate Alerts" job - the job hangs in "Initializing" state and no alerts will be processed. The simple fix to stop and start "SharePoint Services Timer service" on the MOSS2007 server (if you cannot stop it - just end "OWSTIMER.EXE" process form "Task Manager". Additionally,that you might need to do is to clear SharePoint cache

Go to Services and stop Windows SharePoint Services Timer service
Go to C:\ProgramData\Microsoft\SharePoint\Config\GUID directory
Edit the cache.ini file and change the number to 1
Delete all the xml files
Start Windows SharePoint Services Timer service

Windows 7 God mode

2010-01-08T10:21:00.003-05:00

On Windows 7 computer create a new folder and name it as : GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} .

You will have all configuration and management tools of the OS.

Windows icons

2009-11-10T10:05:00.001-05:00

I always forgot:

The icons located in \system32\shell32.dll and imageres.dll

DCDiag results

2009-10-27T14:30:00.003-05:00

configuration: 3 DC - 2003, 2008, 2008

run dcdiag: test services did not pass on 2003 DC

message: it should be WIN32_SHARE_PROCESS not WIN32_OWN_PROCESS

found fix: http://social.technet.microsoft.com/Forums/en/winserverDS/thread/aaee7dec-d1a9-4f8a-a1c1-ee24ff08f074

Go to registry :- HKLM-system-CCS-Services-RpcSs . Select RPCSS .

look at the right side you will see a Binary value as "Type" its value is set to 10 . 10 is for WIN32_OWN_PROCESS

If you will change it to 20 in decimal it will be WIN32_SHARE_PROCESS .

Did it on 2003 DC.

GPO processing 1006 1030 errors on terminal server.

2009-10-27T14:05:00.003-05:00

issue: Some users accounts randomly stop process GPO.
solution:

Make the user account memeber of "domain admin" group.
Login to TS with the account.
From CMD run "rundll32.exe keymgr.dll,KRShowKeyMgr" command.
Delete everything from "Stored User Names and Passwordds" GUI.
Remove the user from "domain admin" group.

Backup VM on Hyper-V Cluster

2009-10-02T10:19:00.004-05:00

First: Backup Exec 12.5 agent for Hyper-V does not work for the cluster configuration! So, you will spend $1000 for nothing.

Here how you can backup VMs with Microsoft Windows Backup. I did configure it for Windows 2008 sp2 Hyper-V cluster.

Enable Windows backup on each cluster node.
Create a batch what will include backup of all VMs and Quorum in the cluster.
Using Windows Scheduler run the batch (with high privileges).

The script example:

echo off

wbadmin start backup -backupTarget:\\hvbackup\hvvms\dc01 -include:N: -vssFull -noVerify -quiet

if %errorlevel% equ -2 echo skipped dc01

if %errorlevel% equ -2 goto quorum

:quorum

wbadmin start backup -backupTarget:\\hvbackup\hvvms\quorum -include:Q: -vssFull -noVerify -quiet

if %errorlevel% equ -2 echo skipped quorum

if %errorlevel% equ -2 goto ts02

:ts02

wbadmin start backup -backupTarget:\\hvbackup\hvvms\ts02 -include:S: -vssFull -noVerify -quiet

if %errorlevel% equ -2 echo skipped ts02

if %errorlevel% equ -2 goto util01

:util01

wbadmin start backup -backupTarget:\\hvbackup\hvvms\util01 -include:P: -vssFull -noVerify -quiet

if %errorlevel% equ -2 echo skipped util01

if %errorlevel% equ -2 goto util02

:util02

wbadmin start backup -backupTarget:\\hvbackup\hvvms\util02 -include:O: -vssFull -noVerify -quiet

if %errorlevel% equ -2 echo skipped util02

exit

The script you will need to run on each node and it will skip VM currently on other node. In my configuration I have separate LUN for each VM it is not R2 yet.

Do not forget to apply Microsoft fix on each Hyper-V host: http://support.microsoft.com/kb/958662

Microsoft FTP 7.5

2009-09-24T11:31:00.004-05:00

The task was to create a FTP service for non-active directory users:

Users have rights for all directories from the root down.
Users have access only isolated directories under root.

Solution:

Use windows 2008 sp 2 VM on Hyper-V
IIS 7.0
FTP 7.5
IIS Manager Authentication
FTP Virtual Host Names
FTP User Isolation - "User Name directory (disable global virtual directories)

Notes:

Do not forget to change security for "Network services" account (ref.3)
Created 3 FTP sites - one for global access (ref.5) needed to enable IE connection, second for non separated FTP and third for isolated users.
In IE7 and 8 you can use "Open FTP site in Windows Explorer" option under "Page", but you will need authenticate second time.
To authenticate you need to type user name as pointed in (ref.4) - "ftpheader.yourdomain.com|username" or with (ref.4) "ftpheader.yourdomain.com\username". The authentiacation will take place after connection to the global FTP site (ref.5).
Regular FTP clients can connect directly using "Virtual host names".

FTP certificate should be chosen on IIS 7.0 server level:

references:

AD object restore utility

2009-08-19T13:45:00.002-05:00

It save my day and it is free:

ObjectRestoreforActiveDirectory_10

from Quest.

Terminal server - Symantec anti-virus and office

2009-08-18T15:03:00.003-05:00

You need to disable smc.exe process running by default for each user, the key is:

LaunchSmcGui dword should be 0

You need to prevent ctfmon.exe pro.cess to run too (reference to office installation on the terminal server).

Powershell Hyper-V

2009-07-20T15:17:00.002-05:00

This is from: http://pshyperv.codeplex.com/Thread/View.aspx?ThreadId=62355

"these 2 links should help.

http://blogs.technet.com/softienerd/default.aspx
http://pshyperv.codeplex.com/Thread/View.aspx?ThreadId=35417

you can set the reg to unrestricted but set it back later..

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\powershell\1\ShellIds\Microsoft.powershell]
"ExecutionPolicy"="Unrestricted"

unzip the file.. say to z:\
the open powershell command
cd z:\
PS Z:\>
type . .\hyperv.ps1

notice the dot+space+dot+slash.

snippets.. from the links..

try to call . .\hyperv.ps1 ftom the folder the zip was extraced to. notice the dot+space+dot+slash.

Powershell Tip #1

In Powershell, type $profile.

PS C:\Program Files\Microsoft\AxFuzzer> $profile
C:\Users\mengli\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1

That points to where your profile is stored at. This is a powershell script that executes upon the start up of any powershell prompt for the current user. Go ahead and make the file. In my case, I made a new file at the location by typing this:

new-item $profile -itemtype file -force

Now, open the file and you can put in things like this:
set-executionpolicy unrestricted
. \\meng\shared\powershell\hyperv.ps1
set-executionpolicy remotesigned

Every new powershell prompt that you"

DFSR on windows 2003 R2 servers.

2009-07-06T09:36:00.003-05:00

Start DFS management console on any Windows 2003 R2 server.
Configure Replication (membership, connections and replicated folders). If you already have a previously shared folder what you want to replicate on other server - do not copy files, just replicate.
After the replication is done configure a namespace.
Publish the replicated folders to the namespace, and configure login script to access the published share.
It is perfectly normal to have a staging file (..\..\DfsrPrivate\Staging) containing data "If the size of a staging folder is below 90 percent of configured capacity (the high watermark), then staged files are kept in the folder and can be used in case new members are added" - from http://technet.microsoft.com/en-us/library/cc782648(WS.10).aspx

Windows 2008 Terminal services

2009-06-29T15:53:00.002-05:00

To configure access:

Create AD group, for example: "TS Users"
Put the group in local "Remote Desktop Users" group on the terminal server.
Put the terminal server in local "Terminal Server Computers" group on the "TS licensing" server to enable to read licensing information.
Put the terminal server in separate OU and create a GPO. The GPO "Security Filtering" should include the terminal server itself and "TS Users" group. This will disable all limitation for administrators. Do not include administrators in "TS Users". Remove "All Authenticated" group from the GPO "Security Filtering"

Clustering Print services on Windows 2008.

2009-06-25T14:19:00.002-05:00

In case, if you need to install additional drivers on the shared printer:

1. On any one of the clients machine running 32-bit OS

2. Download the 32-bit driver for the printer. The driver name should be same as Windows 2008 driver, if it is not the case, the printer driver inf file should be edited under Vendor section, for example [HP] or [Brother] to name the printer exactly as Windows 2008 driver named.

3. Access the print server \\PrintserverName\Printers

4. Open the printer required to add the 32-bit driver

5. If needed, install the downloaded driver.

6. Go to properties

7. Sharing Tab

8. Additional drivers

9. Check the box for x86 for windows 2000,windows xp and windows 2003

10. Click OK.

NTP servers pool

2009-06-15T10:24:00.003-05:00

Very convinent way to configure NTP sources, servers:

0.pool.ntp.org

1.pool.ntp.org

2.pool.ntp.org

Command line: net time /setsntp:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org"

Do not forget to restart "windows time" service.

Novell SUSE - SLES registration

2009-06-11T17:46:00.002-05:00

To get Novell Updates on SLES server you will need to activate the server. It can be done during installation or after with command from terminal:
suse_register -a regcode-sles=NEWCODE

Hyper-V Config 4096 Error

2009-06-11T14:11:00.003-05:00

In my case it was old references to removed VMs on my Hyper-V host:

"The Virtual Machines configuration DC6D0B26-9438-4504-9500-73342A42EC0B at 'E:\UTIL02-VM' is no longer accessible: The system cannot find the path specified. (0x80070003)"

So, I just delete configuration reference XML file "DC6D0B26-9438-4504-9500-73342A42EC0B.xml" from:

"C:\ProgramData\Microsoft\Windows\Hyper-V\Virtual Machines"

But be careful, do not delete valid reference!

BB 8310 Status

2009-05-26T14:27:00.001-05:00

To find BB status including free memory do: alt+shift+H

SLMGR - license manager

2009-05-15T14:19:00.002-05:00

I took the reference from other blog - slmgr tool is "Software Licence Manager" :"SLMgr Commands and Options

I’ve been dealing a lot lately with activation of Server 2008. It’s not been as easy as I’d like. In searching for some help, I came across a great article on SLMgr: SLMgr Commands and Options with Windows Vista Product Key Activation. This article provides a good look at the options with this SLMgr.ext tool. "

VMM 2008 error 13805

2009-05-12T10:24:00.003-05:00

Then trying to add the cluster to VMM get error 13805 "Unable to contact cluster service on servername.domain" . VMM installed on one node in the cluster. Cluster Group located on same server.

Solution: move Cluster Group to different node. From elevated CMD type: cluster group "Cluster Group" /move

To see the help for cluster group command type: cluster group /?

Broken by updates.

2009-05-11T16:20:00.002-05:00

Symptoms:

You can not access IIS web sites locally, search indexing does not work, any service what should authenticate to IIS with NTLM does not work.

Solution:

From http://support.microsoft.com/kb/896861

I fixed it by this method on two MOSS 2007 servers -

"Method 2: Disable the loopback check

Follow these steps:

Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Right-click Lsa, point to New, and then click DWORD Value.
Type DisableLoopbackCheck, and then press ENTER.
Right-click DisableLoopbackCheck, and then click Modify.
In the Value data box, type 1, and then click OK.
Quit Registry Editor, and then restart your computer. "

Essential VI Commands

2009-04-08T14:36:00.003-05:00

Command Action:

vi Starts the Vi editor
vi <filename> Starts Vi and opens the given file for editing
:q! Exits the Vi editor without saving changes (quit!)
:wq! Exits the Vi editor and saves changes (write and quit!)
:set nu Turns on line numbering
esc Exits text insert mode
i Enters text insert mode
Arrow keys Navigates the cursor
Backspace key Deletes previous character
Delete Deletes selected character

Windows server 2008 printing

2009-02-13T15:34:00.003-05:00

When cionfiguring printers and tried to add x86 drivers got the message "The specified location does not contain the driver ...... for the requested processor architecture". After some research desided to delete the printer (the printer was installed with Windows 2008 default drivers) and download vendor drivers for 64-bit and 32-bit platform. Reinstalled the printer.
pushprinterconnection.exe for 32-bit platform you can take from w2k3 server R2.

Sonicwall SSL-VPN bookmarks

2009-02-02T12:02:00.002-05:00

I always forget where and how to setup Bookmarks for users in for Sonicwall SSL-VPN virtual office, so here the how to:

Login to the Management console as admin for "localdomain" not a AD user.
Go to users Tab
Go to "Local Users", if you want to change bookmarks for single user or to "Local Groups" for group's bookmark.
Click "Configure" and go to "Bookmark" Tab.

What's all

Can not browse to DELL IT Assistant

2009-01-21T12:15:00.003-05:00

After upgrading Java 6 to update 11, can not open the "IT Assistant" site. Uninstall update and everything will be fine. I checked with update 5 and 7. But you need to reinstall latest update what left, you can do it from "Add/remove programs".

Sysprep on Windows 2008

2009-01-20T16:40:00.002-05:00

Then use sysprep on Windows 2008, use Generalize option, if you want to change SID. Sysprep you can find under system32 directory.

Virtual servers drive size on ESX 3.5

2008-11-10T17:22:00.002-05:00

From http://techblog357.blogspot.com/2008/01/esx-server-35-general-system-error.html:

"The problem? A general system error occurred: The file is too big for the filesystemThis was the error I received when attempting to create a 600GB Virtual Disk on VMWare ESX Server 3.5.This was a problem. I learned the reason why though. Since I partitioned the storage volumes during installation the installer used block size 1 which only allows Virtual Disks of 256GB.The solution? Reformat the volume with larger block sizes.
Block size Max Virtual Disk size:
1 - 256 GB
2 - 512 GB
4 - 1024 GB
8 - 2048 GB"
I had same problem.

Windows 2008 Task Scheduler Problem

2008-11-07T11:02:00.004-05:00

Can not enter a Domain User Account in Task Scheduler on Windows 2008, it give me "account name is not valid" error message. I found a solution on Microsoft tech net forum:
"Workaround:
1. Start Task Scheduler
2. Create a new task without changing user and user group (anything else can be specified at this time).
3. Export this task to an xml file (the Scheduled Task configuration file)
4. Delete this task.
5. Open the exported task using a text editor.
6. Find the following section:
DomainName\UserName
Please note that there may be other elements within the Principle node.
7. Change DomainName\UserName (ex. Companyname\administrator) accordingly. Note: DomainName is the NetBIOS name of the domain.
8. Save the file.
9. Import the task into Task Scheduler."

It works.

VMware Consolidated Backup

2008-10-01T16:16:00.003-05:00

VMware Consolidated Backup Installation:
1. Downloaded VMware Consolidated Backup 1.1 Update 1 - VMware-vcb-118380.exe
2. Downloaded Integration Module Integration for Symantec Backup Exec for Windows Servers - Backup Exec for ESX 3.5 Update 2 - VMware-veritas-backupexec-integration-102898.zip
3. Downloaded Virtual Machine Backup Guide Update 2 Release for ESX Server 3.5, ESX Server 3i version 3.5, VirtualCenter 2.5 - http://www.vmware.com/pdf/vi3_35/esx_3/r35u2/vi3_35_25_u2_vm_backup.pdf
4. Install VMware-vcb-118380.exe on Backup Excec 12 server.5. Unzip VMware-veritas-backupexec-integration-102898.zip, open README-backupexec.html and follow instruction.

Some process description:
What actually VCB and Integration Module does - it temporary mount a VM(s) on BE media server drive (VCB proxy in VMware terminology). This mount point use very little space, so it is almost no consideration for the size of disk partition what you will use for mounting. After what BE backup VM(s) through the mount point, you do not need to have BE Agent on VM to backup it. Recent version of VMware tools (installed on a VM) gives VCB ability to backup using Windows VSS provider.

Troubleshooting:
1. Be sure you have environmental variable: VCBBASE=C:\Program Files\VMware\VMware Consolidated Backup Framework , if not you will need to run install.bat from C:\Program Files\VMware\VMware Consolidated Backup Framework\backupexec again - actually it is all what this batch does.
2. Play with selection list entries - they a little bit tricky, but follow the README-backupexec.html instruction and your judgement.

Setup secure TSL communication

2008-10-01T10:47:00.027-05:00

Setup secure (TSL) communication with an external company (Exchange 2003 server)

Task list:
Collect information about the external company
Acquire public certificate for the Exchange server (we can use same as we using for OWA access – but it should be public)
Setup firewall to permit SMTP access to the Exchange server.
Setup a dedicated Virtual SMTP server for communication with the external company.
Setup a SMTP connector to the external company
Test the communication.

Collect information about the external company

We need to collect next information for the task:
The company SMTP Domains (all info and IP addresses here and below will be bogus – only for example): Nobody.com
Inbound IP addresses: mail1.nobody.com – 148.168.1.2; mail2.nobody.com – 148.168.2.2

Setup firewall to permit SMTP access to the Exchange server

It is straight forward thing, for example for PIX:
Create NAT mapping:
static (inside,outside) 146.82.131.230 192.168.1.5 netmask 255.255.255.255
0 0
Create firewall rules:
access-list outside_access_in permit tcp host 148.168.1.2 host 134.82.131.230
eq smtp
access-list outside_access_in permit tcp host 148.168.2.2 host 134.82.131.230
eq smtp

Where 134.82.131.230 public address of your SMTP server (We will create it by Exchange System Manager), and 192.168.1.5 is LAN address.

Setup a dedicated Virtual SMTP server for communication with the external company.

We need to create just a standard SMTP server here on dedicated IP address (different for default SMTP).

Here you need to enter your public certificate in, use the “Certificate” Tab.

Here you can enter your exchange server public name (exactly like in your public certificate).

Setup a SMTP connector to the external company
If we did not have connectors before, we will need to create two connectors first will pointed to default SMTP Virtual Server and second to Virtual Server (NOBODY) which we created during the project.

Address space for MAIN connector should be “*” and cost should be higher then for NOBODY:

This connector will route all mail except for nobody.com domain.

Second connector will looks like this:

And address space (in my case it was 5 different domain names):

Here how to set TLS for sending e-mail to this external domain:

Test the communication

To test communication we need to be sure an e-mail message has TLS reference in the header, for example:

“Received: from source ([148.168.1.2]) (using TLSv1) by” – for mail from NOBODY company (inbound), and –
Received: from mail.mydomai.com ([146.82.131.230])
by gromsgia01i.nobody.com (8.13.8/8.13.8) with ESMTP id m3FG0WVe026377
(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT)

Ambiguous name detected

2008-09-29T13:50:00.003-05:00

Then a user try to open MS Word document from a SharePoint library, he has a message "Ambiguous name detected" TmpDDE. In this case you need or delete all macros from NORMAL.DOT or replace the NORMAL.DOT.

Usefull command line utilities

2008-09-25T09:03:00.006-05:00

I decided to put some command line utilities what I use and always forgot here. I will update the list:
Terminal services
works on Vista
qwinsta - query terminal services connection
rwinsta - logoff terminal services connection or any local session

General:
Works on Vista and Windows 2008
query { PROCESS SESSION TERMSERVER USER }

Network:
netstat - Displays protocol statistics and current TCP/IP network connections

* all utilities have help just add /? after the utility name or Google it.

Windows domain time synchronization

2008-09-18T09:09:00.004-05:00

I had a problem with a Windows 2003 DC (PDC role), it refused to provide NTP for the domain (despite I did all advised configuration in Registry), so solution was to change GPO for "Default Domain Controller Policy":

Computer Configuration\Administrative Templates\System\Windows Time Service\Time Providers\Enable Windows NTP Server to Enabled.

You need to use windows w32tm.exe utility with different option to diagnose NTP problems on the domain.

SSP issues on MOSS2007 - Windows 2008

2008-09-16T13:19:00.005-05:00

If you enable crawling for "Office SharePoint Server Search" on "Dedicated web front end ..." instead "Use all web front end..." it will be auto added lines in "HOSTS" file what will prevent MOSS2007 functioning properly, so do not do it. Blog about it: http://blogs.msdn.com/philirit/archive/2008/06/25/ssp-app-pool-failure-in-iis-7.aspx

Restore Exchange public folders from BackupExec backup.

2008-08-22T10:16:00.004-05:00

Exchange 2003 public folders Backup Exec 12 (disk backup). Then try to restore a single Public folder Backup exec restore can not open Public Folders selection with message "You must install additional languages on this computer to see selection". Public folders have a folder with Japanese language. Solution was to install East Asian languages from - Control Panel - Regional and Language Option. Below is the screen:

Forms authentication and Microsoft documents.

2008-08-22T06:53:00.010-05:00

The issue was - you can not open Microsoft document from MOSS2007 document library, then you use Forms authentication. You can save document on your local drive by clicking of right button on the link, but then you try to open it just by clicking the link it return you an error or blank document.
Solition was to go to the SharePoint "Central Administration > Application Management > Authentication Providers > Edit Authentication" for Zone with Forms Authentication and change "Enable Client Integration" to "No", after that a Microsoft Document can be open in Read Only mode just by clicking on the link. To edit the document you still need to save it outside of SharePoint and upload it back after. Here is good reference: http://msdn.microsoft.com/en-us/library/bb977430.aspx
Previous case was for HTTP access, but if you use HTTPS and try to open a Microsoft document - you have message "The website you want to view request identification. Please, choose a certificate." Solution was to use reverse proxy in my case ISA2006 and publish the SharePoint site. However, you will need to configure ISA rule properly. Below are some configuration screens:

What is very ipmportant here is ability ISA to translate HTTP links to HTTPS links back to user's browser, otherwise despite on initial HTTPS request SharePoint will answer with HTTP links (references) on it's pages.

Vista DNS problems

2008-08-21T11:36:00.004-05:00

I discovered DNS resolution problems on Vista Ultimate sp1. In my case it can not resolve DNS alieses from Active Directory DNS servers. The fix what I found - restart "DNS Client" service. Despite, I tried to set (DWORD)"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\NegativeCacheTime" to 0 it does not help.
P.S. After investigation it was DNS servers problem, DNS servers can not communicate with Internet (wrong gateway after firewall replacement) and Vista goes to External DNS for public names resolution. After what it tries to use external DNS for local names resolution and failed.

Add ESX server license to VMware Virtual Center

2008-08-05T10:53:00.004-05:00

1. Copy a generated license file to the VMware license server directory (default - C:\Program Files\VMware\VMware License Server\Licenses).
2. Run VMware License Server Tolls - goto "Start/Stop/Reread" Tab - Push "ReRead License File" Button.
3. After that you can connect with VMware Host.
4. If VMware Infrastructure Client connected to Virtual Center still show evaluation mode, you need to go to Administration - VirtualCenter Management Server Configuration - License Server and ucheck "Evaluate VirtualCenter Server" check box and choose "Use license services on this VirtualCenter Server" radio button (if the license server installed locally).

AutoEnrollment Event 13

2008-07-30T13:13:00.003-05:00

This is annoying error on a DC, I found a right fix for my case on eventid.net from anonymous:
"The event 13 from Autoenrollment message may be related to the new DCOM security enhancement of Windows Server 2003 SP1. Windows Server 2003 Certificate Services provides enrollment and administration services by using the DCOM protocol. Certificate Services provides several DCOM interfaces to make these services available. For correct access and usage of these services, Certificate Services assumes that its DCOM interfaces are set to allow remote activation and access permissions.However, Windows Server 2003 SP1 introduces enhanced default security settings for the DCOM protocol. Specifically, SP1 introduces more precise rights that give an administrator independent control over local and remote permissions for launching, activating, and accessing COM servers. Therefore, because of the enhanced default security settings for DCOM that are introduced by SP1, you may have to update these security settings to make sure of the continued availability of these services after you install SP1.Suggestions:
1. Please check to ensure that a new security group, CERTSVC_DCOM_ACCESS, has been created after applied the SP1.
2. Please add the "Domain Users", "Domain Computers", "Domain Controllers" groups to the new CERTSVC_DCOM_ACCESS security group.
3. Then, we can have Certificate Services update the DCOM security settings by running the following commands:

certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG
net stop certsvc
net start certsvc."

VMware Licensing for Foundation Edition ESX 3.5

2008-07-30T12:52:00.004-05:00

It is same for 3i.
Just a couple of points:

You must register your VMware software on www.vmware..com/lisensemgmt site
After registration you need to create and download both licenses: VI3 foundation edition and VI3 Consolidated Backup
Open foundation license and consolidated backup license file with NOTEPAD and merge them in one file.
From VMware Infrastructure Client - Configuration - Licensing Features: Point to the merged file as the Host License File.
Under Add-Ons (Edit) check the box against Vmware Consolidated Backup.

DCOM 10016 error

2008-06-10T14:30:00.004-05:00

It is annoying errors, related to permissions to start processes with different system accounts (system and most often network services). So do like this:

To assign permissions
Using Regedit, navigate to the following registry value HKCR\Clsid\clsid value\ The clsid value is the information displayed in the message. From here you can see application name which could not start.

From Administrative Tools, and then double-click Component Services.
In the Component Services snap-in, expand Computers, expand My Computer, and double-click DCOM Config.
In the right pane, locate the program by using its name.
Right-click the program name, and then select Properties.
On the Security tab, in the Launch and Activation Permissions group box, select Customize, and then click Edit.
Add the user (system account) to the permissions list, and give the account the appropriate permissions.

Change schema master role

2008-06-05T10:18:00.003-05:00

I had a problem to change schema master role DC with w2k3 Enterprise Edition through GUI interface (MMC). So it should be done through (somebody has same problem with server 2008) :

"There are a few ways to achieve this - I would use the NTDSUTIL tool.

From the 2008 DC, run ntdsutil from a command prompt
type ROLES and then enter
type CO and then enter
type CO TO SERVER and then enter
type Q and then enter
type TRANS SC MA and then enter
you will be prompted with a GUI box whether you want to transfer the schema FSMO to that DC, click Yes
Q and then enter
Q and then enter"

From Stuard Hudman response in a forum.

CRM 4.0 Email router

2008-05-16T16:44:00.002-05:00

On Exchange Server run the process "Microsoft CRM Email Router" under CRM administrator account.

CRM external connection configuration

2008-05-16T16:30:00.002-05:00

Basically, in my case it was upgrade form CRM3.0 to CRM 4.0. To configure external access (not from your local network) you need to use Microsoft tool - http://support.microsoft.com/kb/948779 - Microsoft article with description and links to download. One thing I want to clarify- if client IP address is not belongs to list of local networks what you specify in "IFD Internal Address and Subnet Mask" - the tool does redirection to form authentication dialog instead NTLM authentication if client IP address in IFD internal network subnets range.

Exchange Defragmentation

2008-04-12T09:42:00.004-05:00

I always forget the command:
For example, the following command runs the standard defragmentation utility on the pub1.edb (and stm) and saves the copy in the user-defined file in remote location:
eseutil /d "e:\program files\exchsrvr\mdbdata\pub1.edb" /t\\rcm-dc1\temp\temppub.edb /p

User Access Control (UAC) Vista - Server 2008

2008-04-11T10:48:00.005-05:00

You can change UAC (enable/disable) from 4 different places:

MSCONFIG - TOOLS - Disable/Enable UAC
Regedit - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System - (DWORD) EnableLUA: 1 - enable, 0 -disable (LUA is acronim for "Least User Access")
GPO - Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options : It is combination "User Account Control" options.
Control Panel - User Account - Turn User Account Control on or off.

It can vary a little bit between Vista and Server 2008, but on the server, which needs to run batch files you will certainly pay attention to those settings, because some batches will not run without privilege level elevation (compatibility mode).

Good link: http://www.petri.co.il/disable_uac_in_windows_vista.htm

Business Data Catalogs in MOSS 2007

2008-04-04T14:57:00.002-05:00

Basically, it is required 3 steps to create BDC in MOSS 2007:
1. Create an application metadata XML file
2. Import the file to SSP
3. I recomend to use the utility - BDC Meta Man the link: http://www.bdcmetaman.com/knowledge%20base/MOSS%20BDC%20-%20getting%20started.aspx
it is free (currently) for a limited edition.

Log parser for MOSS 2007

2008-03-31T16:30:00.000-05:00

The link is: http://blogs.msdn.com/leonidly/archive/2007/10/30/usage-analysis-processing-logs.aspx
It is a very good small parser, after converting MOSS 2007 logs to csv file, you can export it to excel with a macro and do what ever.

Audience targeting in SharePoint and Forms authentication

2008-03-21T15:15:00.002-05:00

I found good blog: http://www.thesug.org/blogs/benm/Lists/Posts/Post.aspx?List=6804dfd2%2D2949%2D4200%2Da2fa%2Dd9fa55bed583&ID=5&Source=http%3A%2F%2Fwww%2Ethesug%2Eorg%2Fblogs%2Fbenm%2FLists%2FPosts%2FPost%2Easpx%3FList%3D6804dfd2%252D2949%252D4200%252Da2fa%252Dd9fa55bed583%26ID%3D5
But in nutshell - what I already check by now, you can use FA users - if they explicitly in SharePoint Groups, but the user should have at least read rights to web page with web parts (lists) with audiences targeted content.

6482, 7076, 6398, 5401 errors in APPS log.

2008-03-07T14:32:00.002-05:00

To fix those errors change all SharePoint services "log on" from "Local System" to sharepoint AD administration account.

Mouse does not work after converting MS VM to VMware VM

2008-03-06T12:31:00.002-05:00

Before any conversion uninstall MS VM tools.
After conversion if mouse does not work in VMware infrastructure Client console session - in my case it just disappers from the console, try to do next from http://www.petri.co.il/forums/archive/index.php/t-19387.html
" go into the registry and navigate to the keyHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}
Remove the value msvmmouf from the UpperFilters Regvalue.Reboot....
tadaaa!!
If you wish you can take out the drivers completely by deleting these registry hives completely :
The driver:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\msvmmouf
The Service:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\VPCMapThe CopyHook Shell Extension: ( for folder access )HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30C14BA C-122C-42ED-B319-1139DBF48EB8}\InProcServer32HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandle rs\VPCCopyHook
After a reboot you can delete the "Virtual Machine Additions" folder from program files..."

Customise Citrix Client Installation.

2008-03-04T16:59:00.002-05:00

It is pretty simple, run:
msiexec /a c:\temp\ica32pkg.msi
it will create administrative installation point in a shared directory (you can copy all directory to any shared location after, if needed).
Chose your options including the server path, the path should include exact location of web site dedicated for PNAgent functions (in my case: http://rcm-ts01/citrix/pnagent/config.xml ) and whats all.

Manual P2V conversion using paragon image

2008-02-19T14:38:00.003-05:00

Recently I did conversion of windows 2000 sp4 server to the VM on Microsoft Virtual Server 2005 R2 sp1. Here are steps:

Create a blank VM with fixed disk. The disk size should be enough to accommodate all partitions of the physical server.

Create an image of system partition (c: -drive) of the physical server using an image software - I did use Paragon Drive backup 8.51 Server edition. Copy the image to a network share (do not use a domain controller share)

On virtual server host insert paragon recovery CD and restore the C: partition to the new VM created in step 1.

Now we need to replace HAL on VM, insert OS CD in my case windows 2000 sp2 and run repair (non-destructive) on windows installation.

After repair the VM OS should start (start it without network connection) - remove it from domain and change IP address. You need to apply all windows service packs and updates, which was on the physical server.

Now (if applicable) you need to create additional partitions with same drive letters as on old physical server (in my case e: and g:), the size of the partitions is not important as long it will be bigger as used space on the old server.

After that copy folders from the old server partitions to the VM partitions and it should restore all previous shares.

Basically we done, but remember until it is finished start up of VM might be painfully slow - sometimes 20-25 min. And it is recommended before doing image disable all unneeded services and remove unneeded applications, antivirus and network teaming.

EMC iSCSI FW Upgrade with MS iSCSI initiator

2008-02-05T16:41:00.000-05:00

Do not try it on a host with disabled iSCSI board
Upgrade all host based iSCSI componenets: MS iSCSI initiator, EMC PowerPath iSCSI, and Novisphere Express Utility (each upgrade will require reboot)
Disconnect iSCSI dedicated cables from the iSCSI dedicated switch (from Hosts site)
Use firefox to load Navispere Express (according EMC IE can be slower), enable pop-ups for iSCSI site.
Update the FW from downloaded zip file (do not extract). The upgrade can take long time in my case 20 min per SP.

Move SQL 2005 system databases

2008-02-05T11:55:00.000-05:00

Good article at http://www.sqlservercentral.com/articles/Administration/2605/# By Vince Iacoboni, 2006/09/26 with script. Just one problem you need to disconnect your SQL server from the newtwork and stop all additional SQL services as Reporting, Analysis, Search and so on, and stop WWW service. All of this should be done in order the script will be able to put SQL server in single user mode and move mssqlsystemresource database.

Change How to change the Application Pool Identity for SharePoint Central Administration (SCA)

2008-02-04T11:41:00.000-05:00

It is from http://weblogs.asp.net/erobillard/archive/2007/07/06/how-to-change-service-accounts-and-their-passwords-in-moss-and-wss-3-0.aspx blog:

"Repeat these steps on each server which hosts the SharePoint Central Administration web application. If the web front-end (WFE) and application (APP) server roles are served by separate machines, SCA should be enabled on one APP server (or more) and stopped and/or removed from the WFE servers. This allows control over access to the SCA. The SCA service account should not be the same as that used for the SharePoint application pool so even if one is compromised, the other remains secure.

Open a command prompt.
Run: stsadm -o updatefarmcredentials -userlogin domain\username -password password
Be patient. This may take a few minutes to run.
To restart the application pool, either open IIS and recycle the application pool, or open a command prompt and type iisreset -noforce
Open SharePoint Central Administration in a browser to confirm that the change was successful.

The above steps create an Administration Application Pool Credential Deployment timer job. You can see this in the Timer Job Definitions page. The job is complete when it no longer appears in the list of definitions (refresh the browser, this isn't automatic).

The blog contain information how to change over accounts.

Copy big files

2008-01-20T15:04:00.000-05:00

If you try to copy big files tens GB from server to server (Windows OS) , you can get insufficient resources error in the end of copying.
MS Article ID: 304101
does the fix, I did change both registry settings.

Netlogon event ID = 5720

2008-01-09T10:07:00.000-05:00

Local security database is corrupted.
Found reference as:
"[HKEY_LOCAL_MACHINE\SECURITY\Policy\Secrets\$MACHINE.ACC]
You might have to change permissions at the SECURITY level of the key."
Used regedt32 end go to the key, can not see anything under SECURITY hive, reseted permission on the key to give administrators full rights - still can not see keys under. Tried to create a key and all keys became visible. So deleted $MACINE.ACC key and was able to unjoin and rejoin the domain.

SQL 2005 Express backup

2008-01-02T15:40:00.003-05:00

I found good article about it (http://www.brianmadden.com/content/article/How-to-Automate-the-Backup-of-a-SQL-Server-2005-Express-Data-Store). Here some information from this blog:

"For further SQL Server Express management options download and install SQL Server Management Studio Express . This is a free tool from Microsoft and will be used to create a script to backup your data store.
Once the tool is installed, launch Microsoft SQL Server Management Studio Express and connect to the CITRIX_METAFRAME instance.
Expand Databases and you will see the MF20 database. (This is the default name of the database that was created when creating the Presentation Server farm.)
Right click the MF20 database and select “Tasks Backup”. A dialog box appears allowing you to define different options such as what type of backup (full or differential) you want to do, backup destination etc. Configure the available options as desired then click the “Options” page on the left-hand column. Continue configuring options accordingly. For example, you may want to select “overwrite all existing backup sets.”
Once all desired options are set, select “Script Actions to File” and enter a desired file name, for example, “DatastoreBackup,” and specify the location where to save the file.
This creates a .SQL file which scripts the options you defined in the prior step

BACKUP DATABASE [MF20] TO DISK = N'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\MF20.bak' WITH NOFORMAT, INIT, NAME = N'MF20-Full Database Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10 GO
To test your .SQL file run the following from a command prompt.
sqlcmd -S .\CITRIX_METAFRAME -i "C:\\DatastoreBackup.sql"
If the MF20.bak file was created with the correct data and time stamp then you know your script works. By default the MF20.bak is located in C:\Program Files\Microsoft SQL Server\MSSQL\MSSQL\Backup. (This folder might be “MSSQL.1” or “MSSQL.x” depending on what else is on your server.)
Automating the Database Backup
You can automate the backup process by creating two Scheduled Tasks.
SQLCMD Scheduled Task
First, create a Scheduled Task to automate the .SQL script created above. Use the Scheduled Task Wizard and when asked to select a program browse to use browse to C:\Program Files\Microsoft SQL Server\90\Tools\binn\ SQLCMD.exe. Define the Schedule Task parameters accordingly and click “Finish”.
Go the properties of the newly created Scheduled Task and edit the Run command as such.
"C:\Program Files\Microsoft SQL Server\90\Tools\Binn\SQLCMD.EXE" -S .\CITRIX_METAFRAME -i "C:\Program Files\Microsoft SQL Server\DatastoreBackup.sql" "

Actually you can backup in such way any sql 2005 express database, but after creating the script you need to create a batch file and put it on schedule. It is good practice point the backup on network share with enabled shadow option (it give you opportunity to restore from different backup sets without creating additional scripts).
It is good practise to check SQL servers names with command:
sqlcmd -L
If the server does not have sqlcmd.exe utility it can be downloaded from http://www.microsoft.com/downloads/details.aspx?FamilyID=d09c1d60-a13c-4479-9b91-9e8b9d835cdc&displaylang=en as a part of Feature Pack for Microsoft SQL Server 2005, but you should download the native client too. Same way you can backup SQL 2000 databases.

Cisco VPN3000 webVPN configuration

2007-12-26T16:42:00.000-05:00

The problem with CIFS access to share on a domain controller can be fixed by:
"It is also worth noting that it might be necessary to modify local policies on a Windows 2003 domain controller when configuring file access. Specifically, it might be necessary to open the Domain Controller Security Policy (found under Administrative Tools) and under Local Policies > Security Options disable the Microsoft network server: Digitally sign communication (always) policy (right-click and choose Properties)" - it should be disabled on a domain controller with shares.
additional link: http://www.networkworld.com/subnets/cisco/072507-ch10-deploying-vpns.html?page=4

Adobe Flash player and Citrix (WTS)

2007-12-11T10:48:00.000-05:00

Install Flash Player as ActiveX with "change user /install" mode, edit permissions on the keys (below) and deleted IE application and published it again:

HKEY_CLASSES_ROOT\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}

HKEY_CLASSES_ROOT\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}

Right-click the key, select "Permissions"
In the Permissions Dialog click the "Advanced" button
Click "Add"
Enter "Everyone" and click "OK" to accept
Select "Allow" for the "Query Value", "Enumerate Subkeys", "Notify" and "Read Control" permissions.

WVS from VS 2005 conversion

2007-12-10T16:05:00.000-05:00

from http://faq.windowsvirtualization.com/
"Currently, there is no direct import capability, so it’s largely a manual exercise. A Virtual Server VM consists of a configuration file (.vmc) and one or more data files such as Virtual Hard Disks (VHDs) and other media such as .ISO and .VFD. For the purposes of migration, it’s the VHDs which are the most important ones as these obviously hold the important data.

If your VM is using a shared SCSI bus as part of a test/dev cluster, stop now. You will have to break your cluster, migrate one node and move to an alternate form of shared storage such as iSCSI for migration. That’s a blog post for another day and I won’t be covering that in this post.

…

The first real consideration is the Virtual Machine additions which will likely be installed in your VM. If they are, it’s may be easier to remove them before bringing the VM into WSv. If you know you have the latest version of the VM additions from VS 2005 R2 SP1 (v13.813), you can uninstall the additions when the VM is booted under WSv, but earlier versions of the additions may fail to uninstall when booted under WSv. If you’re unsure of which version you have installed, it’s best to uninstall while you have a working VM under Virtual Server. Once the additions are uninstalled, make sure the VM is shut down, not saved. Saved states are not compatible between Virtual Server and WSv.

Now copy all the VHDs configured in your VM across to your server running WSv. Let’s assume for the time being that this is the simplest case where there is a single VHD for the VM. Simply walk through the new virtual machine wizard and attached the existing VHD. Easy, yes?

If you have more VHDs to add, at the end of the wizard, choose to not start the VM. Instead, open the settings for the newly created VM and add each VHD in turn to the configuration. If you need more than four VHDs (or three plus a CD/DVD), attach a SCSI controller and attach the remaining VHDs to the SCSI controller instead.

You may now have some questions. The one I’m particularly thinking you’ll ask is what if my VM under Virtual Server was booting from an emulated SCSI controller, not from IDE. The answer is relatively long winded and I’ll explain another day, but if that is the case, attach the boot VHD to the IDE controller 0 at location 0. It should still boot. The less obvious one question was what if my boot VHD was on SCSI and is > 127GB in size? Again, the answer is for another day. Just use IDE and trust me!

If the VM is not yet running, start it, connect to it and login. You will probably be presented with the new hardware wizard. Cancel it by pressing escape for now. As an interesting experiment, especially if you ended up adding drives to a SCSI controller, you’ll notice that they won’t show up yet in Disk Management or Explorer. That’s because you don’t yet have the drivers installed for the “synthetic” SCSI controller. They will be installed with the Integration Components.

Insert the Integration Components CD from the Action menu option in the Virtual Machine Connection application. It should auto-play, but if not, run setup.exe from the \support\x86 directory. Follow the prompts and reboot as requested. On completion, your VM should be good to go.

One other point for Windows Server 2003 VMs, I would strongly recommend you upgrade to SP2 if you haven’t already to gain the maximum benefits of running under Windows Server virtualization. Otherwise, go have fun!"

WTS registry adjustments

2007-12-05T14:43:00.000-05:00

1. Configure the Server Service’s Memory Management. This setting will benefit the server to maximize memory for Network services and can be found :

Local Area Network properties > File and printer sharing > server optimization > than check “maximize data throughput for network applications”

these settings can be modified with registry key

HKLM\CurrentControlSet\Control\Session manager\memory management > “LargeSystemCache” = “0”

HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters > “Size” = “3”

2. Disable Dr. Watson popup

HKLM\CurrentControlSet\Controls\Windows> “ErrorMode” = “2”

3. Disable paging of the Windows NT executive.

Microsoft Article Q184419, Q323608

4. Disable print events from the Event log.

HKLM\System\CurrentControlSet\Control\Print\Providers >

For no printer logging set “EventLog” = dword:00000000

To log errors only, set “EventLog” = dword:00000001 (I usually do errors only)

5. Disable roaming Profile Cache

HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon >

“DeleteRoamingCache” = dword:00000001

6. Disable the printer beep to reduce bandwidth and increase performance.

HKLM\System\CurrentControlSet\Control\print >

“beepEnabled” = dword:00000000

Office 2003 installation on WTS

2007-11-14T10:44:00.001-05:00

1. Create administrative installation
2. Use office 2003 resource kit - Custom Installation Wizard to create MST file, outlook profile setting in the end - exchange server name and %username%
3. Install on WTS with transform
4. Use Custom maintanance Wizard to create CMW file with same settings as MST before.
5. Apply this by MaintWiz.exe to the WTS.

Office 2003 sp3 slipstreaming installation

2007-11-13T14:57:00.000-05:00

Extract the service pack with:
c:\temp\Office2003Sp3-kb923618-fullfile-enu.exe /t:c:\temp\OfficeXpSp3 /c
Slipstrem it to administrative installation:
C:\>msiexec /p c:\temp\OfficeXpSp3\mainsp3.msp /a \\rcm-ts01\office2003\pro11.msi SHORTFILENAMES=TRUE /qb
C:\>msiexec /p c:\temp\OfficeXpSp3\owc11sp3.msp /a \\rcm-ts01\office2003\owc11.msi SHORTFILENAMES=TRUE /qb

HP Proliant i8042 error

2007-11-12T12:50:00.000-05:00

This a found on HP site:
HP ProLiant Servers - "i8042prt" Error in Eventlog
ISSUE:
One of the following error messages appears in the event log:
Type: Warning Source: i8042prt Event: 32 Description: The keyboard device does not exist or was not detected.
Type: Error Source: i8042prt Event: 26 Description: Exceeded the allowable number of retries (configurable via the registry) on device.
SOLUTION:
When you hot plug a PS/2-style keyboard (or use a switch box) or detach a USB keyboard, in Microsoft Windows 2000, you recieve one of the error messages listed in the Issue section.
Backup your Registry
Open the key [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt\Parameters]
Change the value Headless data to 0x1
Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt\Parameters]
Value: Headless
Type: REG_DWORD
Data: 0x1 (Allow Hotplugging) | 0x0 (Hotplugging not allowed)

SharePoint "calculated" field "TODAY"

2007-09-27T09:46:00.000-05:00

Very usefull I test it (from somebodyes post):
It is possible to use "Today" in a function as a reference to today’s date
(despite what SharePoint tells you). There is a very simple work around that
doesn't involve very much effort or complexity.

First, create a new column in your list with the Column Name of "Today".
Click "OK". (It doesn't matter what type of column or data it is, this is
just a place holder).

Next, create a column with the data where you would like to use "Today" as a
reference to today’s date. The column type should be "Calculated". In the
formula field, create your formula using "Today" as if it held the current
date/time.

SharePoint will calculate the formula based on the assumption that you will
be using "Today" as a reference to the new column you just created.

Next, edit the new column named "Today" that you created in the first step.
On the very bottom of the page, click "Delete", to delete the column. In
your formula, SharePoint will keep the reference to "Today" but it will
change from referencing your column, to a reference to the current date.

This can be used in any of the Date and Time functions, but I haven't tested
it beyond that.

href="http://www.brianrudloff.com/post/Sharepoint-Services-2003---Workaround-for-filtering-on-today's-date.aspx">
Notes:
If you want to edit the formula containing "Today" SharePoint will not let
you, and will give you the same error about not using Today or Me in a
function. To get passed this problem you have to temporarily create another
Today column.

SharePoint Services 2003 does not initially come with a column for Today's Date. However, there is a workaround. Chris Johnson @ msdn wrote a great article on exactly how this works. But basically, you can trick SharePoint into using Today in a function and create whatever calculated field you need.

I recently had to use this technique to filter a SharePoint Calendar. I wanted it to display only upcoming events and out of the box, the calendar displays everything. Here's what I found:

How to Filter a SharePoint Services 2003 Web Part Calendar to Only Show Upcoming Events
1. Create a new column with the Column Name: Today (It doesn't matter what the type is, so leave it default)

2. Next, create a column with the Column Name: Begins. In the formula section, enter: =[Start Time]. The data type should be: Date and Time. The Date and Time format should be: Date Only.

3. Create a new column with the Column Name: Date_Range. (or something). In the formula section, enter: =Today-Begins. The data type should be: Number(1, 1.0, 100). Set the Number of decimal places to: 0.

4. Here's the weird part. Go back and delete the original Today column created in Step 1. I know what you're thinking...but trust me... If you had read the article I mentioned earlier, you'd understand where this is going.

5. Now Create the Calendar Web Part by Clicking on Edit Page > Add a Web Part > Check Calendar > Click Add.

6. Create the customer view by Clicking on the Calendar Hyperlink > Settings > Create View. Under "Start From an Existing View", Click Calendar. Give the Calendar View a Name and then scroll to the bottom of the page and Select "Show items only when the following is true:" In the first Dropdown box, Select: Date_Range. In the second Dropdown box, Select "is less than". Finally, enter a zero (0) into the textbox.

That's it! When you view your page, you should now have a Calendar Web Part that displays only upcoming events. If by any chance it’s still showing all events, you may have to play with the view setting for the calendar.

How to change license type on Windows 2003 server

2007-09-26T13:49:00.000-05:00

It is from the blog: http://msmvps.com/blogs/clustering/archive/2006/09/18/How-to-change-your-Volume-License-_2800_VL_2900_-key-with-Windows-Server-2003-or-R2.aspx
How to change your Volume License (VL) key with Windows Server 2003 or R2
Recently I wanted to install R2 on a Volume License copy of Windows Server 2003. When I tried our R2 key the system denied that the key was valid and would not install. Darn it, what key did they use to install? How can I tell? Q article 889713 gave me the clue (though this is not for R2, I will explain in a minute) http://support.microsoft.com/kb/889713/en-us

To find your current PID:
1. Right-click My Computer, and then click Properties.
2. On the General tab, the PID appears in the Registered to box.
Standard Edition 32 bit retail
69712-000
Standard Edition 32 bit volume licensing
69712-640
Standard Edition R2, 32 bit volume licensing
69712-650
Standard Edition 32 bit OEM
69712-OEM
Enterprise Edition 32 bit retail
69713-000
Enterprise Edition 32 bit volume licensing
69713-640
Enterprise Edition R2, 32 bit volume licensing
69713-650
Enterprise Edition 32 bit OEM
69713-OEM

Now that you know what you currently have, let’s change it to the correct VL Key. Q article 328874 explains how to do it for XP, but the same holds true for any version of 2003 - http://support.microsoft.com/kb/328874

To change you’re current PID:
1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. In the left pane, locate and then click the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\Current Version\WPAEvents.
4. In the right pane, right-click OOBETimer, and then click Modify.
5. Change at least one digit of this value to deactivate Windows. This is key, modify the first one to AA, make sure you know what it was originally – you will need it in for step 12. Leave regedit open.
6. Click Start, and then click Run.
7. In the Open box, type the following command, and then click OK. %systemroot%\system32\oobe\msoobe.exe /a
8. Click Yes, I want to telephone a customer service representative to activate Windows, and then click Next.
9. Click Change Product key.
10. Type the new product key (I would use the new R2 key) in the New key boxes, and then click Update. When you get to the previous window, close product activation.
11. Return to regedit. In the left pane, locate and then click the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\Current Version\WPAEvents. If not currently open.
12. Change the first digits back to what you noted in step 5.
13. Close regedit.
14. Click Start, and then click Run.
15. In the Open box, type the following command, and then click OK. %systemroot%\system32\oobe\msoobe.exe /a
16. This time it should say you are already activated, click OK.

You can now install R2 without having to type in a new key and it will work nicely.
re: How to change OEM/Retail version key with Windows Server 2003 or R2
Forget that script and regedit stuff for retail and OEM. Simply search system32 for wpa.* rename both files, then run the %systemroot%\system32\oobe\msoobe.exe /a
Bam, you're done.
I just did it 20 minutes ago.
Server 2003 or R2
For OEM and Retail, just search for wpa.* and rename these files.
Then run %systemroot%\system32\oobe\msoobe.exe /a to change your product key and yes it works,
I just did it 30 minutes ago to change my msdn-provided key to a customer purchased (retail) key. No, the software I wrote was not in production until this key was changed :)
I couldn't get this to work with 2003 SP2. It worked fine on a 2003 SP1 machine.
Wednesday, May 02, 2007 7:51 AM by pji
Does anyone know how to tell what SBS 2003 key version your have? (IE. retail or volume)?
Friday, May 11, 2007 3:38 PM by sbs
Sorry I installed WINDOWS 2003 Ent. R2 on server two node cluster.
When i Installed i used a cd ( I don't rembere if MSD or other cd - retail or OEM), because i HAVE Volume Licence Key on paper but not original CD with this license Key.
I make this installation and only now I have original CD for these license Key. Now i want to activate product, but prod ID was not accepted e the change product key was not accepted.So i don't want reinstalling cluster, Active directory, DHCP, DNS, WINS ecc.Can i change produc key or activate the actual product key, without problem at start up??
thanks
Andrea

GW 7.0 webaccess installation on IIS 6.0

2007-08-16T13:18:00.000-05:00

When I install it on IIS it did not create virtual directories under Default Web Site, so we did create those directories manually:
1. Directory name is "jacarta" and local path is - .\Novell\connector\bin
2. Directory name is "webaccess" and path is - .\Novell\tomcat5.5\webapps\gw

So there are a couple other tricks - recopy images and templates after applying of service packs, but I will documented it at my next installation.

Rename SharePoint server (MOSS 2007)

2007-08-13T13:59:00.000-05:00

You can follow Mirjam's blog:
http://www.sharepointblogs.com/mirjam/archive/2007/08/06/renaming-a-moss-server.aspx
Renaming a MOSS Server
Renaming a MOSS server is meticulous job. If anything goes wrong along the way chances are that you need to reconfigure your whole MOSS environment.
Here are the steps to take, and the order in which to take them if you want to rename a server that has MOSS already installed and configured on it:
*** NOTE: Use only letters, digits and minus for the machine name (so no underscores), max 15 characters.
Change each alternate access mapping for your MOSS/WSS deployment in Central Administration:
Open Central Administration, "Operations" Tab, "Alternate access mappings" link
Modify each mapping item to reflect your newly chosen server name
Use stsadm.exe to invoke the "renameserver" command option:
Open a command prompt window
cd "C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\BIN"
stsadm -o renameserver -newservername -oldservername
Rename your Server via Change Name Operation in Windows Server 2003:
Start Menu Control Panel System, "Computer Name" tab, "Change" button.
Input your new server name
Reboot the server NOW.
After reboot, open command prompt
cd C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\BIN
stsadm -o updatefarmcredentials -userlogin -password
iisreset /noforce
Check all application pool identities in IIS, update where the old machine name is still there.
If you already have a search index drop this, and rebuild it
Your server is now renamed.

But if you already rename the server before doing first step from the blog, you will not be able to access SP server administrator site and SSP sites configuration. So you will need to put old name in the HOST file and after that change alternative mapping according the blog. You can do second step from the blog, you do not need to do 4 and 5 steps (it is already done). And I did not do 6 step.
You need to enter index server name for SSP again.

Windows Firewall GPO for Symantec Antivirus Corporate Edition 10.2

2007-08-08T11:18:00.000-05:00

Setting
State
SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\Enabled
1
SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List\1024-5000:TCP:*:enabled:Symantec Antivirus
1024-5000:TCP:*:enabled:Symantec Antivirus
SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List\2967:TCP:*:enabled:Symantec Antivirus
2967:TCP:*:enabled:Symantec Antivirus

IIS 5.0 to IIS 6.0 migration

2007-08-02T14:08:00.000-05:00

Used iismt.msi version 1.1 tool. After migration check:

ASP.NET 2.0 version is still where in Web Servers Extensions
regsvr32 jscript.dll and vbscript.dll
created a new virtual server and pointed to migrated directory
On the new web edit document setting for the default page
Fixed possible script errors.

Publishing style navigation in WSS v3

2007-05-05T12:46:00.000-05:00

Tuesday, February 27, 2007, 12:02:43 AM E. Shupps
While working with some custom site definitions based on the built-in STS (Team Site) definition I came across an annoying navigation issue that derailed me for a couple of hours. It turns out the the drop-down functionality in the top navigation bar, which works perfectly well in the Publishing and Collaboration Portal definitions, is disabled in the Team Site definition. After digging around in the object model for a while and trying a few different combinations, I found the solution in the menu settings contained within the default master page.
To enable drop-down menu functionality, locate the following block of code in the Default.Master page (/_catalog/masterpage/default.master in the site collection or \12\Template\Global\default.master on the file system):
< asp:SiteMapDataSource
ShowStartingNode="False"
SiteMapProvider="SPNavigationProvider"
id="topSiteMap"
runat="server"
StartingNodeUrl="sid:1002" / >
This sets the data source for the menu control and its associated parameters. Each Site Map Provider is defined in the <> section of web.config. The SPNavigationProvider entry looks like this:
< name="SPNavigationProvider" type="Microsoft.SharePoint.Navigation.SPNavigationProvider, Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c">
If you locate this entry in web.config you will notice another entry for "SPSiteMapProvider" immediately below it. After much trial and error I discovered that this is the data source that is required for the drop-down menus. To enable it, change the SiteMapDataSource settings in default.master (or your custom master page) to the following:
ShowStartingNode="True"
SiteMapProvider="SPSiteMapProvider"
id="topSiteMap"
runat="server" />
The navigation menu will now use the SPSiteMapProvider data source which contains all the nodes in the current site collection. Depending upon your requirements, you may also wish to modify the settings for the default number of static and dynamic levels (flyouts) the navigation control displays. To do that, adjust the following settings within the <> control:
StaticDisplayLevels="2"MaximumDynamicDisplayLevels="1"
Adjusting these values up or down will increase or decrease the number of levels. Be advised that setting the levels to a higher value may impact performance, as the control will need to fetch the relevant information from the database and build the complete menu structure before the page can finish loading.

Change between Kerberous an NTLM authentication

2007-03-23T12:40:00.000-05:00

Check Web Sites: Identifier in our case it is 421949310,
Get settings for NTAutheticationProviders property:
Change the property to Kerberous:
C:\Inetpub\AdminScripts>cscript adsutil.vbs get w3svc/421949310/root/NTAuthentiationProviders "Negotiate,NTLM"
Change the property to NTLM:
C:\Inetpub\AdminScripts>cscript adsutil.vbs get w3svc/421949310/root/NTAuthentiationProviders "NTLM"
You can check all properties for AD object by ENUM command, for example to see all objects and settings under the virtual server root:
C:\Inetpub\AdminScripts>cscript adsutil.vbs enum w3svc/421949310/root

SharePoint 2003 server upgrade to MOSS2007

2007-03-14T10:56:00.000-05:00

This Upgrade approach can be used in multiple cases as: test upgrade, moving to new hardware upgrade and basically in any other case. To use the approach you need to have virtual server with Sharepoint 2003 installation.
Conditions:

VS SPS 2003 should be exactly patched as production one.
Same SQL database server can be used, but if database server is different - it should be patched as production one.

Steps:

Backup production SPS 2003
Restore backuped databases to a SQL server under different name - if you will use same SQL server for the process.
On VS SPS 2003 install post sp2 hotfix http://support.microsoft.com/?id=897722 to get databaserepair option for stsadm.
Run stsadm -o databserepair on all virtual servers content databases, command line will be like "stsam -o databaserepair -url http://sps.company.com -databasename sps_site". http://support.microsoft.com/kb/918744 . In my cases I did not have any orphane objects, I beliave if you do - you need to fix the database.
Do not use full-text index on any database, if an index exists - delete the index file and disable the indexing on the database (database properties - files option).
Run prescan.exe tool from MOSS2007 installation CD, run as: "prescan.exe /all" any other option so far gave me an error like something wrong with uri.
Fix any error, if you run prescan - failed, but if you will run MOSS2007 installation without fixing errors it can give you more specific error log.
After main upgrade finished you need to check sharepoint timer service - it should be running, and if you have WSS V2 sites very possble you will need to run "psconfig -cmd upgrade -inplace b2b -wait -force" from "\...\12\bin" to finish provisioning SSP(s)

How to switch clients to different Symantec Anti-virus server

2007-02-21T16:49:00.000-05:00

You need to copy grc.dat file from appropriate group on the server to client:
copy grc.dat "c:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5"
It can be done through a login script.

VBScript for SharePoint 2007 backup

2007-02-02T15:22:00.000-05:00

Rem The VBScript was created by Boris Sirotin All Covered 02/02/2007
Rem Copy stsadm.exe to same folder with the script
Rem The script should be scheduled as a task
Rem It will backup sharepoint to folder, by Friday it will run full backup and delete all backups
Rem older then 2 weeks. All other days it will run differential

Dim weekdate, weekdate1, command1, command2, oFSO, backpath1,backpath2,myFolder, f
Set Sh = Wscript.CreateObject("Wscript.Shell")
Set oFSO = CreateObject("Scripting.FileSystemObject")
weekdate=datepart("w",date)
backpath="file://vega/sharepoint/weekly"
Set myFolder=oFSO.GetFolder(backpath)
command1="stsadm -o backup -directory " +backpath + " -backupmethod full"
command2="stsadm -o backup -directory " +backpath + " -backupmethod differential"
if weekdate=6 Then
CleanUp(myFolder)
Sh.run command1, 1
else
Sh.run command2, 1
end if
Function CleanUp (Folder)
For Each f In Folder.SubFolders
If DateDiff("d",Now,f.DateCreated,vbMonday)>2 then
f.Delete
End if
next
End function

OWA - can not be accessed

2007-01-24T21:45:00.000-05:00

When try to access OWA (server OS 2000 sp4, Exchange 2003 sp2) have blank white screen. Rebuild all IIS Exchange directories:

Deleted all Exchange directories under Default web site.
Stop the web site
Restart Exchange Attendant service or just reboot the server.

How to remove orthaned DC

2007-01-24T21:43:00.000-05:00

KB 555846

Saleslogix Mailmerge Word problems

2007-01-23T16:49:00.001-05:00

This is the error we are getting on SLX 6.1 with no SP with Word 2003. -The Mail Merge Engine encountered an error and cannot continue. Word was unable to open the data source.- For now I want to be able to stop the errors and will upgrade to an SP as soon as possible.I saw this from an earlier post but was unsure on how to apply this fix does any one have an idea on how to do this:* Create the file meaning to copy the text?* And how do you run it?I experienced the same issue in the past. After a couple of calls tosupport I was able to get this registry edit file from them called Word2003 Mail Merge DataSource SQL Statement.reg.Here is what it does:Windows Registry Editor Version 5.00[HKEY_CURRENT_USER\Software\SalesLogix\MailMerge]"DataSourceSQLStatement"="SELECT * FROM [SLXMAILMERGE] WHERE ([SKIP] 'F') ORDER BY [POSITION]"

My Site move MOSS 2007

2007-01-05T16:43:00.000-05:00

It was a problem after upgrade from 2003 to MOSS, MySite link go nowhere, but I can still access my site s under /personal/username. So I install new SSP with web application for mysites and move the personal sites where.
My site move from one web application to another, batch for moving:
stsadm -o backup -url http://sps.arcweb.com/personal/%1 -filename c:\temp\%1
stsadm -o restore -url http://arcmysites.arcweb.com/personal/%1 -filename c:\temp\%1
stsadm -o deletesite -url http://sps.arcweb.com/personal/%1

there is %1 a user name.

After that deleted old portal (I did not have anything imortant on the portal) and creted a new portal. MySites link became OK.

SharePoint and Data View

2006-12-26T16:31:00.000-05:00

To create data source to Backup exec database (MSDE format)

Use SA and password for SA can be changed with Enterprise Manager
Use table "JobHistorySummary"

For ePO database (SQL 2000) - McAfee ProtectionPilot use "AVIView_LeafNode" view, but again I was not sucsessful with Windows Integrated Authentication, so used SA

Connection to Access databases is still not clear for me, despite the article with the connection description, I tried with Office Designer 2007:

For this demo I download a sample Access database from Office Online
http://office.microsoft.com/en-us/templates/TC010185481033.aspx
and placed it in a directory on my WSS server. The MDB can't be on a network share.Enable the Data Retrieval Services from the WSS Central Adminstration.
run the following stsadm command to check the OLEDB providers that are enabled

stsadm -o getproperty -propertyname data-retrieval-services-oledb-providers

If you don't see Microsoft.Jet.OLEDB.4.0 in the list, append it to the existing list of providers and set the new list of providers similar to this:

stsadm -o setproperty -propertyname data-retrieval-services-oledb-providers -propertyvalue DB2OLEDB;IBMDADB2;MSDAORA;OraOLEDB.Oracle;SQLOLEDB;Microsoft.Jet.OLEDB.4.0

In FrontPage, add a Data Source under Database Connection. You will have to select a Custom Connection string which should look like this

Provider=Microsoft.Jet.OLEDB.4.0;Data Source=C:\Inetpub\wwwroot\Drop\sample.mdb

Upgrade SharePoint services version 2 to version 3

2006-11-29T15:32:00.000-05:00

stsadm.exe -o setproperty -pn V2UsedHostHeaderMode -pv true
http://www.sharepointconversion.com/
prescan /all

"Unable to get global configuration data" message after upgrade when you try to connect wss site:
psconfig -cmd upgrade -inplace b2b -wait -force
this command fixed it for me

CRM 3.0 Undeliverable mail

2006-11-21T17:22:00.000-05:00

Description: In crmmail mail box on exchange server thousands mails in undeliverable folder and tens mail in inbox. In application event log on exchange server multiple error messages from MSCRMExRouterService the error begins like this:
Microsoft.Crm.Tools.ExchangeConnectorService.ExchangeSinkServiceException: Verifying before delivery message: CRM - Account Hierarchies in mailbox: CRMmail failed (System.Net.WebException: The request failed with HTTP status 401: Unauthorized.
.......................
Fix: change logon account for CRM router service from system local to account for CRMMAIL mail box, enter CRMMAIL account as member of PrivUserGroup.
According to Microsoft CRMMAIL mail box should be empty at all time. The messages should be evaluated and deleted immediately upon receiving.

Internet Explorer setttings in profile

2006-11-21T14:31:00.000-05:00

A terminal server user gets old proxy settings in Internet Explorer. Solution is to delete "\\%termserver%\c$\Documents and Settings\%username%\Application Data\Microsoft\Internet Explorer\Custom Settings" or/and "\\%termserver%\c$\Documents and Settings\%username%\Local Settings\Application Data\Microsoft\Internet Explorer\Custom Settings" directories. If it is not help delete user.dat file and after profile will be recreated copy all directories from the old profile, outlook settings you will need to recreate manually.

Sharepoint 2007 update

2006-11-20T17:09:00.000-05:00

Usefull link: http://support.microsoft.com/?kbid=926718 - How to attach a content database backup during a gradual upgrade of a Windows SharePoint Services 2.0 farm to Windows SharePoint Services 3.0
Tool to move SPS 2003 site between content databases: http://blogs.msdn.com/krichie/archive/2006/04/07/570739.aspx

Check software

2006-10-09T18:58:00.000-05:00

Free download remote control software.
Free inventory software PlateSpin

ISA 2006

2006-10-06T14:36:00.000-05:00

Secure Application Publishing
http://www.microsoft.com/technet/isa/2006/secure_web_publishing.mspx#Network Authentication in ISA Server 2006 (kerberos) Link to the document: http://www.microsoft.com/technet/isa/2006/authentication.mspx

MOSS 2007 referenses

2006-10-04T14:26:00.000-05:00

Planning Guide
http://technet2.microsoft.com/Office/en-us/library/9994b57f-fef8-44e7-9bf9-ca620ce207341033.mspx?mfr=true

MOSS 2007 vs. WSS v3.0

2006-10-01T19:32:00.000-05:00

WSS v3.0 does not have Content Management, Search and Business Information feature, so it is not possible to use InfoPath Forms Services and browser-enabled forms.